CVE-2026-93168

A flaw was found in the Linux kernel's dmaengine: xilinxdma component. When the xilinxdmapolltimeout function is called with a zero-value delay and an unfulfilled condition, the CPU can enter a prolonged busy-wait state. This occurs due to an underestimation of wall clock time, causing the system...

CVE-2026-93167

A flaw was found in the Linux kernel. When tracing system calls on C-SKY ABIv2, an issue in restoring register values a4/a5 can lead to incorrect arguments being passed to certain system calls. This can cause traced applications to fail or behave unexpectedly, potentially resulting in a denial of...

CVE-2026-93166

A flaw was found in the wifi: rtw89 driver of the Linux kernel. An off-by-one error in the rtw89ppdustr function, due to an incorrect comparison, can lead to an out-of-bounds access. This vulnerability could potentially result in a denial of service or information disclosure...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...

CVE-2026-93163

A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...

CVE-2026-93162

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. When re-enabling SR-IOV Single Root I/O Virtualization, the QAT reset worker queues a work item using data allocated on the stack. If a timeout occurs during this process, the reset worker can return while the work item,...

CVE-2026-93157

A flaw was found in the xilinx-trng hardware random number generator HWRNG driver in the Linux kernel. The xtrngreadblock32 function can incorrectly indicate a successful read even when a timeout occurs and no random data has been produced. This can result in the kernel processing incomplete or...

CVE-2026-93160

A flaw was found in the Linux kernel's atmel-ecc cryptographic driver. The hardware Elliptic Curve Diffie-Hellman ECDH computation could use a private key that was not generated for the current cryptographic operation. This issue arises because the public key is only cached after a private key is...

CVE-2026-93156

A flaw was found in the Linux kernel's rk3288 crypto driver. The rkhashrun function fails to properly handle a HASH idle timeout, ignoring the poll result. This can lead to the driver finalizing a cryptographic request with a previous success value, even if the hash engine is not idle...

CVE-2026-93155

A flaw was found in the Linux kernel's cryptographic module, specifically within the keembay driver. When certain cryptographic algorithms fail to register, the system attempts to unregister previously registered algorithms using an incorrect count. This error in the unregistration process could...

CVE-2026-93154

A flaw was found in the Linux kernel's RDMA/irdma component. This vulnerability allows a local user to deregister Memory Regions MRs that are actively backing Queue Pair QP, Completion Queue CQ, and Shared Receive Queue SRQ rings. By doing so, a malicious user could potentially disrupt network...

CVE-2026-93153

A flaw was found in the Linux kernel's RDMA/bngre component. This vulnerability occurs when the waitforresp function fails to properly handle firmware responses that stall, causing it to ignore timeout expiry. A local attacker could exploit this by triggering a stalled firmware response, leading ...

CVE-2026-93152

A flaw was found in the Linux kernel's nvme-apple driver. The driver incorrectly handled memory synchronization when initializing and enabling a queue. This could lead to the queue's state not being properly updated before it is accessed by other parts of the system, potentially causing unexpecte...

CVE-2026-93150

A flaw was found in the Linux kernel's cgroup/cpuset component. A race condition exists where concurrent modifications to the nrdeadlinetasks variable can lead to its corruption. This corruption can result in incorrect system operations, potentially impacting system stability or availability...

CVE-2026-93149

A flaw was found in the Linux kernel's mac80211hwsim component. A race condition exists in the mac80211hwsimstop function. This condition occurs when a network packet skb is removed from a queue after it has been checked for emptiness but before it is actually dequeued. This can lead to a null...

CVE-2026-93148

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability arises from incorrect boundary checks during BPF Type Format BTF struct walks for memory-allocated objects. Specifically, the system fails to reject accesses that extend beyond the allocated object's...

CVE-2026-93143

A flaw was found in the ipu7 driver within the Linux kernel. When the ipu7resume function is called, if the runtime power management PM resume operation fails, a reference count is incremented but not properly decremented. This resource leak could lead to system instability or a Denial of Service...

CVE-2026-93142

A flaw was found in the Linux kernel's thermal management driver for Renesas R-Car systems. This vulnerability stems from incorrect error handling during the driver's initialization process. Specifically, a function was called before properly checking if a previous operation had failed, which cou...

CVE-2026-93141

A flaw was found in the r8a66597 USB gadget driver in the Linux kernel. This vulnerability occurs in the r8a66597probe function during an error handling path, where the ep0req object is erroneously freed twice if usbaddgadgetudc fails. This double free can lead to memory corruption, potentially...