CVE-2026-89958

A flaw was found in the Linux kernel's s390/vfio-ap component. Within the call stack of specific callback functions, a mutex is acquired without properly checking if a critical pointer matrixmdev-kvm is initialized. If this pointer is NULL, attempting to access it will trigger a NULL pointer...

CVE-2026-89926

A flaw was found in the Linux kernel's KVM s390 component. A local user can exploit this vulnerability by providing a specially crafted length value to the hardware breakpoint kvmhwbreakpoint mechanism. This integer truncation can lead to an attempted allocation of over 4GB of memory, causing the...

CVE-2026-89876

A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 exp - 1 which can result in unexpected system behavior...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...

CVE-2026-89828

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue with the initialization order in the amdgpuvrammgrinit function can lead to a kernel panic. If a specific registration function fails during module loading, critical data structures are not properly initialized. This can resul...

CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-89822

A flaw was found in the Linux kernel's drm/i915 module. A local user could exploit a null pointer dereference in the i915pciprobe function. This occurs when a device is force-bound via sysfs driveroverride, causing driverdata to be NULL and subsequently dereferenced. Successful exploitation could...

CVE-2026-89813

A flaw was found in the Linux kernel's amdgpu graphics driver. When a MODE1 reset occurs, the Kernel Interface Queue KIQ ring fences are not properly completed. This can cause the system to continuously poll for a fence value that is never written back, leading to a denial of service where the...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89800

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When an OPUNMAPSPARSE operation is performed, a dirty flag is set for the affected memory region. If a subsequent operation within the same job fails, this dirty flag is not properly cleared during the error handling process. This...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

CVE-2026-89796

A flaw was found in the Linux kernel's DAMON Data Access MONitor core component. An integer overflow vulnerability in the kdamondmergeregions function, specifically during the calculation of a merge threshold, can lead to an infinite loop. This issue occurs under an unreasonable user setup...

CVE-2026-89795

A flaw was found in the Linux kernel's s390 PCI Peripheral Component Interconnect hotplug driver. On s390 systems, an incorrect assignment of PCI slot objects to multifunction devices can lead to the wrong PCI function being reset when a reset operation is initiated through the hotplug driver. Th...

CVE-2026-90355

A flaw was found in the Wi-Fi driver mt76: mt7996 of the Linux kernel. After a full chip reset, the driver fails to properly clear stale link state information, causing the device to become inoperative. This issue arises because the system attempts to re-create device and station records while ol...

CVE-2026-90169

A flaw was found in ksmbd within the Linux kernel. A remote attacker could exploit this vulnerability by initiating an SMB3.1.1 multichannel binding connection and then disconnecting after the NTLM negotiate request but before the authenticate request. This failure to properly free...

CVE-2026-90156

A flaw was found in ksmbd, a component of the Linux kernel. When handling deferred locks, a failure in setting up asynchronous work can lead to a null pointer dereference and the continued linking of a freed file lock. This memory corruption issue can cause a system crash, resulting in a denial o...

CVE-2026-98492

A flaw was found in the Linux kernel's Cadence MACB network driver. During network buffer allocation, the driver's error-handling routines fail to properly release allocated Direct Memory Access DMA memory buffers when a failure occurs. A local user could trigger these error conditions during...

CVE-2026-98604

A flaw was found in the Linux kernel's OpenVPN ovpn subsystem. A race condition exists where local network endpoint updates modify binding data without proper synchronization while outbound network traffic reads the address concurrently. A remote peer or concurrent network activity could trigger...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...