CVE-2026-72018

A flaw was found in the Linux kernel's dibs: loopback functionality. A missing bounds check in the movedata function allows an attacker to provide an out-of-bounds offset or an oversized write. This can lead to an out-of-bounds write past an allocated kernel buffer, potentially causing memory...

CVE-2026-72017

A flaw was found in the Linux kernel's MACB network driver. This driver fails to properly release outgoing Socket Kernel Buffers SKBs when the driver is closed. This continuous leakage of resources can lead to resource exhaustion over time, potentially resulting in a Denial of Service DoS conditi...

CVE-2026-72016

A flaw was found in the Linux kernel's CPU hotplug mechanism on arm64 systems. When a system is booted with more maximum CPUs configured than are physically present, some CPUs are incorrectly marked as present but are not fully registered. This can lead to a kernel warning due to a null kobject...

CVE-2026-72015

A flaw was found in the Linux kernel's fs/resctrl component. A double-free vulnerability occurs when a pseudo-locked group's Resource Monitoring ID RMID is freed upon creation and then again during unmount operations by the rmdirallsub function. This double-free can lead to memory corruption,...

CVE-2026-72014

A flaw was found in DRBD, a component of the Linux kernel. A malicious or man-in-the-middle DRBD peer can send a specially crafted data reply with an out-of-range payload size. This incorrect size calculation can lead to an out-of-bounds write, allowing the attacker to copy arbitrary data past a...

CVE-2026-72013

A flaw was found in the Linux kernel. Specifically, within the riscv architecture's machinekexecprepare function, a NULL pointer dereference can occur. This vulnerability arises when a NULL buffer is copied without proper validation during the kexec preparation process. An attacker could...

CVE-2026-72012

A flaw was found in the Linux kernel's tracing/osnoise component. When unregistering a tracer instance, the system failed to call synchronizercu, a mechanism for synchronizing read-copy-update RCU operations. This oversight could allow RCU readers to access memory that has already been freed,...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...

CVE-2026-72006

A flaw was found in the Linux kernel's mlx5 driver. Repeated allocation and release of mkeys with TPH steering-tag hints can cause a memory leak of struct mlx5stidxdata. This unreferenced memory accumulates over time, potentially leading to resource exhaustion and a Denial of Service DoS for...

CVE-2026-68479

A flaw was found in the Linux kernel's Bluetooth btrtl module. This vulnerability allows a local attacker to provide a specially crafted firmware patch during Bluetooth setup. This can cause an integer underflow, leading to an oversized read and write operation. Such an operation can result in...

CVE-2026-68478

A flaw was found in the Linux kernel's Memory Stick block driver memstick: msblock. A malicious Memory Stick card, crafted to report an excessive number of blocks, can cause the driver to write beyond the bounds of an allocated memory structure. This out-of-bounds write can lead to memory...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

kernel: netfilter: flowtable: strictly check for maximum number of actions

A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

CVE-2026-68477

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability arises from incorrect IPv6 transport offsets, where TCP application code might incorrectly assume an IPv4 network header when processing IPv6 packets. Additionally, the ICMPv6 header offset in ipvsouticmpv...

CVE-2026-68475

A flaw was found in the Linux kernel. In the sunxiresetinit function, a memory region obtained during initialization is not properly released if the ioremap operation fails. This oversight can lead to a resource leak within the system...

CVE-2026-72183

A flaw was found in the Linux kernel's Landlock security module. A sandboxed process can bypass the intended signal isolation provided by LANDLOCKSCOPESIGNAL. By manipulating file descriptors with specific fcntl calls and asynchronous I/O SIGIO delivery, a local attacker can send signals, such as...

CVE-2026-72003

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...