CVE-2026-90417

A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...

CVE-2026-93038

A flaw was found in the Linux kernel's AD5686 digital-to-analog converter DAC driver. A local user can exploit this vulnerability by attempting to bind the driver to an unrecognized device name through the system file interface sysfs. This trigger leads to an invalid null pointer access due to...

CVE-2026-93182

A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...

CVE-2026-93183

A flaw was found in the Linux kernel's drm/lima component. The limavmcreate function is called prematurely, before virtual address VA start and end ranges are properly initialized. This can lead to the drmmminit function receiving invalid memory allocation ranges, which, if debug options are...

CVE-2026-93184

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Freescale Audio Mixer fslaudmix driver in the Linux kernel. During the driver's initialization probe phase, the audio mixer hardware is powered off after runtime power management is enabled. Subsequent attempts to...

CVE-2026-93180

A flaw was found in the panthor component of the Linux kernel. A local attacker could exploit this vulnerability by performing a partial unmap of an evicted Buffer Object BO when the Graphics Processing Unit GPU mapping is split. This occurs because the logic for handling partial unmap of huge...

CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS Video Basic Input/Output System provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds OOB read in the system's memory. This could...

CVE-2026-93178

A flaw was found in the Linux kernel's drm/amdgpu/pm/powerplay component. This vulnerability arises because the vddInd and vddcInd fields, derived from VBIOS-parsed tables, are used to index into voltage lookup tables without proper boundary checks. A local attacker could exploit this by providin...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93176

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. Specifically, the amdgpudmplanedrmplanereset function attempts to free memory before successfully allocating a new state. Should the new memory allocation fail, a dangling pointer to the previously freed memory remains. Th...

CVE-2026-93175

A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpudmcrtcresetstate function when it attempts to reset the display state. If a memory allocation fails during this process, the system can...

CVE-2026-93174

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When handling per-CPU map elements, the copymapvaluelong function incorrectly copies only the map-valuesize instead of the full allocated size, which includes padding. This oversight can lead to user-space applications,...

CVE-2026-93171

A flaw was found in the Linux kernel's leds: lp5860 component. This vulnerability occurs when the lp5860deviceinit function attempts to unlock a mutex that has already been released, specifically if the lp5860initdt function fails. Such a double-unlock operation can lead to unexpected system...

CVE-2026-93170

A flaw was found in the Linux kernel's Xilinx DMA Direct Memory Access engine. A race condition in the AXIDMA and MCDMA interrupt handlers can cause the DMA channel to be incorrectly marked as idle while data transfer descriptors are still being processed. This premature idle state can lead to...

CVE-2026-93169

A flaw was found in the Linux kernel's dmaengine: zynqmpdma component. A race condition exists during device removal, specifically in the zynqmpdmaremove function, where runtime power management PM is disabled after checking the device state and performing a manual suspend. This timing issue can...

CVE-2026-93168

A flaw was found in the Linux kernel's dmaengine: xilinxdma component. When the xilinxdmapolltimeout function is called with a zero-value delay and an unfulfilled condition, the CPU can enter a prolonged busy-wait state. This occurs due to an underestimation of wall clock time, causing the system...

CVE-2026-93167

A flaw was found in the Linux kernel. When tracing system calls on C-SKY ABIv2, an issue in restoring register values a4/a5 can lead to incorrect arguments being passed to certain system calls. This can cause traced applications to fail or behave unexpectedly, potentially resulting in a denial of...

CVE-2026-93166

A flaw was found in the wifi: rtw89 driver of the Linux kernel. An off-by-one error in the rtw89ppdustr function, due to an incorrect comparison, can lead to an out-of-bounds access. This vulnerability could potentially result in a denial of service or information disclosure...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...