CVE-2026-68461

A flaw was found in the Linux kernel. When a firmware node is allocated and initialized using fwnodeinit, a pointer within the fwnodehandle structure may contain uninitialized memory. This can occur if a non-zeroing allocation function is used. If this uninitialized pointer is subsequently...

CVE-2026-68460

A flaw was found in the Linux kernel's f2fs filesystem. When the filesystem space is nearly exhausted, a local attacker could trigger a deadlock within the f2fsbalancefs function. This can cause system tasks to become unresponsive, leading to a Denial of Service DoS condition...

CVE-2026-68459

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. When a device is mounted with the gcmerge option, a specific interaction between kernel worker threads, the garbage collection thread, and the truncator can lead to a deadlock in the f2fsbalancefs function. This...

CVE-2026-74570

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient size calculations during runlist memory reallocation, which could lead to an integer overflow. An attacker could potentially exploit this to cause memory corruption, leading to system...

CVE-2026-74565

A flaw was found in the Linux kernel's netfilter subsystem. The global nature of the nftobject rhltable allows a local attacker to access objects that are being deallocated by other network namespaces. This can lead to a use-after-free vulnerability, potentially resulting in memory corruption or...

CVE-2026-74538

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A missing lock when accessing socket connection information within the isoconnectind function could lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-74529

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI synchronization component. This vulnerability, a Use-After-Free UAF, occurs when a connection object is prematurely released while the hcisync task is still active. A local attacker could potentially exploit this to...

CVE-2026-74508

A flaw was found in the Linux kernel's Bluetooth Human Interface Device Protocol HIDP implementation. A connected HIDP peer can send specially crafted Bluetooth packets that cause the system to read uninitialized memory. This can lead to a denial of service by terminating the HIDP session...

CVE-2026-74475

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. An issue exists where the neighbor hardware address MAC address could be read incorrectly due to a lack of proper synchronization. This could lead to the system using a partially updated or corrupted MAC address,...

CVE-2026-74470

A flaw was found in the scsidebug module of the Linux kernel. This vulnerability occurs in the respreportzones function when handling specific allocation lengths, leading to an integer underflow. On 32-bit systems, this can cause an out-of-bounds write, which results in a kernel panic. A local...

CVE-2026-74464

A flaw was found in the Open vSwitch OVS component of the Linux kernel. This vulnerability occurs when a packet becomes unparseable during a flow key update operation. This can lead to a memory leak, potentially allowing a remote attacker to cause a denial of service by exhausting system resource...

CVE-2026-74440

A flaw was found in the Linux kernel's drm/xe driver. The xeexecioctl function did not properly wait on kernel fences for external Buffer Objects BOs. This oversight allows a local attacker to initiate a user job that races with ongoing kernel memory management operations on external BOs. A...

CVE-2026-72287

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A consistency check failure in the nested virtualization nVMX feature, specifically when Extended Page Tables EPT are disabled, allows a malicious first-level L1 guest to operate with its own controlled CR3 Control...

CVE-2026-72248

A flaw was found in the Linux kernel's netfilter flowtable component. When an Internet Protocol over Internet Protocol IPIP tunnel is used with direct transmit xmit, such as with a bridge device, the system fails to properly handle network packet destination entries. This improper handling can le...

CVE-2026-72019

A flaw was found in the macsec component of the Linux kernel. When processing packets on the AFPACKET SOCKRAW + PACKETQDISCBYPASS transmit path, the macsecencrypt function attempts to read an unset Media Access Control MAC header. This leads to a 12-byte heap over-read, where sensitive data from...

CVE-2026-68466

A flaw was found in the Linux kernel's lpc32xxslc driver, which manages NAND flash memory. This vulnerability occurs because the driver fails to properly handle Direct Memory Access DMA transfer timeouts. When a DMA transfer times out, the driver incorrectly reports it as successful and unmaps th...

CVE-2026-68458

A flaw was found in the Linux kernel's binder component. An error in calculating buffer boundaries during transaction processing causes a security context's length to be prematurely cleared, leading to an inflated buffer size. This allows data to be written into an unintended memory region, which...

CVE-2026-68456

A flaw was found in the Linux kernel's ueagle-atm USB driver. This driver uses an asynchronous mechanism for loading firmware but does not wait for its completion when a device is disconnected. This creates a race condition where the device's teardown can run concurrently with firmware loading. I...

CVE-2026-68455

A flaw was found in the Linux kernel's liveupdate component. This vulnerability arises from insufficient validation of session types during ioctl operations. A local user can exploit this by attempting an ioctl operation intended for an incoming session on an outgoing session. This improper...

CVE-2026-68470

A flaw was found in the Linux kernel's mac80211 wifi driver. Improper validation of extension-frame layouts before processing received frames could allow a remote attacker to send specially crafted S1G beacon extension frames. This could lead to incorrect memory access when reading network header...