CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

CVE-2026-93131

A flaw was found in the Linux kernel's dell-privacy driver. A race condition occurs when the priv-featurespresent data structure is accessed without holding the necessary list mutex. This allows the priv object to be freed prematurely, which could lead to system instability or a denial of service...

CVE-2026-93128

A flaw was found in the Linux kernel's lg-laptop driver. This issue occurs due to improper handling of LED Light Emitting Diode resources, where the system attempts to access an LED device that has not been properly registered or has already been unregistered. This improper resource management...

CVE-2026-93127

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Incorrect handling of scalar identifiers during sign-extending and zero-extending stack operations can lead to a discrepancy between the BPF verifier's understanding of a register's value and its actual runtime value. Th...

CVE-2026-93124

A flaw was found in the Linux kernel's asus-wireless driver. When the driver is force-bound to a device lacking an ACPI Advanced Configuration and Power Interface companion object, it can lead to a NULL pointer dereference. This occurs because the asuswirelessprobe function incorrectly stores a...

CVE-2026-93121

A flaw was found in the Linux kernel's USB gadget function filesystem ffs component. Specifically, an issue in the ffsdmabuftransfer function's error handling can lead to undefined behavior. This occurs when a fence object is prematurely deallocated without proper initialization, potentially...

CVE-2026-93120

A flaw was found in the Linux kernel's USB gadget configfs component. This out-of-bounds read vulnerability occurs when the osdescqwsignshow function incorrectly handles string length during conversion. A local attacker could potentially exploit this to read sensitive information from memory,...

CVE-2026-93039

A flaw was found in the Linux kernel's ASoC Audio System on Chip meson driver. This vulnerability occurs in the mesoncardreallocatelinks function when memory reallocation krealloc fails after successfully moving data for the DAI link array. This can result in a use-after-free and double free...

CVE-2026-90417

A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...

CVE-2026-93038

A flaw was found in the Linux kernel's AD5686 digital-to-analog converter DAC driver. A local user can exploit this vulnerability by attempting to bind the driver to an unrecognized device name through the system file interface sysfs. This trigger leads to an invalid null pointer access due to...

CVE-2026-93182

A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...

CVE-2026-93183

A flaw was found in the Linux kernel's drm/lima component. The limavmcreate function is called prematurely, before virtual address VA start and end ranges are properly initialized. This can lead to the drmmminit function receiving invalid memory allocation ranges, which, if debug options are...

CVE-2026-93184

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Freescale Audio Mixer fslaudmix driver in the Linux kernel. During the driver's initialization probe phase, the audio mixer hardware is powered off after runtime power management is enabled. Subsequent attempts to...

CVE-2026-93180

A flaw was found in the panthor component of the Linux kernel. A local attacker could exploit this vulnerability by performing a partial unmap of an evicted Buffer Object BO when the Graphics Processing Unit GPU mapping is split. This occurs because the logic for handling partial unmap of huge...

CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS Video Basic Input/Output System provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds OOB read in the system's memory. This could...

CVE-2026-93178

A flaw was found in the Linux kernel's drm/amdgpu/pm/powerplay component. This vulnerability arises because the vddInd and vddcInd fields, derived from VBIOS-parsed tables, are used to index into voltage lookup tables without proper boundary checks. A local attacker could exploit this by providin...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93176

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. Specifically, the amdgpudmplanedrmplanereset function attempts to free memory before successfully allocating a new state. Should the new memory allocation fail, a dangling pointer to the previously freed memory remains. Th...

CVE-2026-93175

A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpudmcrtcresetstate function when it attempts to reset the display state. If a memory allocation fails during this process, the system can...

CVE-2026-93174

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When handling per-CPU map elements, the copymapvaluelong function incorrectly copies only the map-valuesize instead of the full allocated size, which includes padding. This oversight can lead to user-space applications,...