CVE-2026-93206

A flaw was found in the Linux kernel. This vulnerability allows an unprivileged local attacker to bypass security restrictions. By obtaining a file descriptor from a privileged process, the attacker can read the entire Peripheral Component Interconnect PCI configuration space, which could lead to...

CVE-2026-90035

A flaw was found in the drm/amd/display component of the Linux kernel. A local attacker, by connecting a specially crafted USB4/DPIA tunneling device, could trigger a division-by-zero error within the getestimatedbw function. This occurs when the device reports an estimated-bandwidth change befor...

CVE-2026-90034

A flaw was found in the Linux kernel's USB MDC800 driver. The driver uses kmalloc instead of kzalloc for buffer allocation, which can leave portions of the allocated memory uninitialized. If a shorter message is received, an attacker could potentially read sensitive information from the kernel...

CVE-2026-90031

A flaw was found in the Linux kernel's usb-storage component, specifically within the eneub6250 driver. A race condition exists between the delayed scan work and the enegetcardtype probe function. This occurs because both operations attempt to use the same Universal Serial Bus USB Request Block U...

CVE-2026-90019

A flaw was found in the Linux kernel. A null pointer dereference can occur in the usbputfunctioninstance function within the USB gadget subsystem. This issue arises because a file descriptor fd is not allocated before being dereferenced in an error path, which can lead to a system crash. A local...

CVE-2026-89979

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Pulse Code Modulation PCM subsystem. A race condition exists where a thread can initiate a PCM start operation while another thread is performing non-atomic PCM operations, such as hardware parameter setup or preparatio...

CVE-2026-89986

A flaw was found in the Linux kernel. An improper memory allocation, referred to as a sleeping allocation, occurs within the allocpagesbulkweightedinterleave function when a task has an MPOLWEIGHTEDINTERLEAVE memory policy. This can lead to a kernel crash, resulting in a Denial of Service DoS for...

CVE-2026-89955

A flaw was found in the s390/vfio-ap component of the Linux kernel. A local attacker could exploit a race condition during the queue probing process. This occurs when a concurrent read of the 'status' attribute happens before the necessary driver data is initialized, leading to a NULL pointer...

CVE-2026-89958

A flaw was found in the Linux kernel's s390/vfio-ap component. Within the call stack of specific callback functions, a mutex is acquired without properly checking if a critical pointer matrixmdev-kvm is initialized. If this pointer is NULL, attempting to access it will trigger a NULL pointer...

CVE-2026-89926

A flaw was found in the Linux kernel's KVM s390 component. A local user can exploit this vulnerability by providing a specially crafted length value to the hardware breakpoint kvmhwbreakpoint mechanism. This integer truncation can lead to an attempted allocation of over 4GB of memory, causing the...

CVE-2026-89876

A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 exp - 1 which can result in unexpected system behavior...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...

CVE-2026-89828

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue with the initialization order in the amdgpuvrammgrinit function can lead to a kernel panic. If a specific registration function fails during module loading, critical data structures are not properly initialized. This can resul...

CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-89822

A flaw was found in the Linux kernel's drm/i915 module. A local user could exploit a null pointer dereference in the i915pciprobe function. This occurs when a device is force-bound via sysfs driveroverride, causing driverdata to be NULL and subsequently dereferenced. Successful exploitation could...

CVE-2026-89813

A flaw was found in the Linux kernel's amdgpu graphics driver. When a MODE1 reset occurs, the Kernel Interface Queue KIQ ring fences are not properly completed. This can cause the system to continuously poll for a fence value that is never written back, leading to a denial of service where the...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89800

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When an OPUNMAPSPARSE operation is performed, a dirty flag is set for the affected memory region. If a subsequent operation within the same job fails, this dirty flag is not properly cleared during the error handling process. This...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...