CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-89822

A flaw was found in the Linux kernel's drm/i915 module. A local user could exploit a null pointer dereference in the i915pciprobe function. This occurs when a device is force-bound via sysfs driveroverride, causing driverdata to be NULL and subsequently dereferenced. Successful exploitation could...

CVE-2026-89813

A flaw was found in the Linux kernel's amdgpu graphics driver. When a MODE1 reset occurs, the Kernel Interface Queue KIQ ring fences are not properly completed. This can cause the system to continuously poll for a fence value that is never written back, leading to a denial of service where the...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

CVE-2026-89800

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When an OPUNMAPSPARSE operation is performed, a dirty flag is set for the affected memory region. If a subsequent operation within the same job fails, this dirty flag is not properly cleared during the error handling process. This...

CVE-2026-89796

A flaw was found in the Linux kernel's DAMON Data Access MONitor core component. An integer overflow vulnerability in the kdamondmergeregions function, specifically during the calculation of a merge threshold, can lead to an infinite loop. This issue occurs under an unreasonable user setup...

CVE-2026-89795

A flaw was found in the Linux kernel's s390 PCI Peripheral Component Interconnect hotplug driver. On s390 systems, an incorrect assignment of PCI slot objects to multifunction devices can lead to the wrong PCI function being reset when a reset operation is initiated through the hotplug driver. Th...

CVE-2026-90355

A flaw was found in the Wi-Fi driver mt76: mt7996 of the Linux kernel. After a full chip reset, the driver fails to properly clear stale link state information, causing the device to become inoperative. This issue arises because the system attempts to re-create device and station records while ol...

CVE-2026-90169

A flaw was found in ksmbd within the Linux kernel. A remote attacker could exploit this vulnerability by initiating an SMB3.1.1 multichannel binding connection and then disconnecting after the NTLM negotiate request but before the authenticate request. This failure to properly free...

CVE-2026-90156

A flaw was found in ksmbd, a component of the Linux kernel. When handling deferred locks, a failure in setting up asynchronous work can lead to a null pointer dereference and the continued linking of a freed file lock. This memory corruption issue can cause a system crash, resulting in a denial o...

CVE-2026-98492

A flaw was found in the Linux kernel's Cadence MACB network driver. During network buffer allocation, the driver's error-handling routines fail to properly release allocated Direct Memory Access DMA memory buffers when a failure occurs. A local user could trigger these error conditions during...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...

CVE-2026-98604

A flaw was found in the Linux kernel's OpenVPN ovpn subsystem. A race condition exists where local network endpoint updates modify binding data without proper synchronization while outbound network traffic reads the address concurrently. A remote peer or concurrent network activity could trigger...

CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service DoS through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventin...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-98500

A flaw was found in the Linux kernel's OneXPlayer Human Interface Device HID driver. A local user could cause a Denial of Service DoS through a race condition during device removal. Because delayed background tasks are canceled without waiting for active callbacks to finish, in-progress tasks...

CVE-2026-98494

A flaw was found in the Linux kernel's atl1 network driver. During a PCIe link or hardware reset, the network adapter can return an out-of-range status value that the driver fails to validate properly. This condition can trap the driver in an infinite loop, resulting in a kernel soft lockup and...

CVE-2026-98602

A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol BNEP implementation. Insufficient length validation when processing network frames allows out-of-bounds memory read operations. An attacker can exploit this vulnerability by transmitting malformed or truncated network...