CVE-2026-81018

A flaw was found in the Linux kernel's think-lmi driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial of service over time due to resource exhaustion...

CVE-2026-89715

A flaw was found in the Linux kernel's NFS/localio component. A race condition during file handling can lead to a reference leak, where system resources are not properly released. This continuous accumulation of unreleased references can exhaust available resources, preventing network namespace...

CVE-2026-89707

A flaw was found in the Linux kernel's nfsd component. An authenticated Network File System NFS client can exploit this vulnerability by triggering a failed cross-mount operation through nfsdlookupdentry or the NFSv4 READDIR encode path. This leads to a reference count leak, which inflates mntcou...

CVE-2026-89491

A flaw was found in the Linux kernel's ocfs2 cluster module. This vulnerability allows a local attacker to trigger a denial of service. The issue arises when a sleeping function is called while a spinlock is held within the o2hbregionpin function, which can lead to a system crash or deadlock. Thi...

CVE-2026-89588

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI APEI Generic Hardware Error Source GHES component. Incorrect length accounting in the gheshandlearmhwerror function can lead to the parser reading beyond the allocated memory section. This out-of-bounds read...

CVE-2026-89767

A flaw was found in the Linux kernel's overlay file system overlayfs. An unprivileged local user can trigger a specific error condition during the creation of a new directory. This error causes the system to incorrectly release a lock on the parent directory and a reference to the new directory...

CVE-2026-89762

A flaw was found in the Linux kernel's AppArmor security module. The begincurrentlabelcritsection function, used in various Linux Security Module LSM hooks, attempts to replace user credentials when a security label becomes stale. This process can lead to a Use-After-Free UAF vulnerability if the...

CVE-2026-89740

A flaw was found in the Linux kernel's serial: imx component. The imxuartprobe function publishes a device-managed allocated port in the imxuartports array before it is fully added. If the port addition fails or the port is removed, the entry in the array is not properly cleared, resulting in a...

CVE-2026-89724

A flaw was found in the Linux kernel's media: vicodec component. An out-of-bounds write vulnerability exists in the FWHT encoder due to incorrect buffer sizing during video output format handling. This issue allows an attacker to cause corruption of adjacent kernel heap memory, which could lead t...

CVE-2026-89632

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious server could exploit this vulnerability by sending specially crafted data, leading to an out-of-bounds read. This occurs because the reparsebufptr function reads data before properly validating the buffer size,...

CVE-2026-89621

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. A malicious USB device can exploit this vulnerability by sending a specially crafted, short HID report with an invalid size. This can cause the system to read past valid memory, leading to the disclosure of sensitiv...

CVE-2026-89613

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability occurs when the driver processes an attribute with empty mapping pairs that have inconsistent highest Virtual Cluster Number VCN and size. A local attacker could potentially craft a malicious NTFS filesystem that,...

CVE-2026-89589

A flaw was found in the ACPI/APEI/GHES component of the Linux kernel. Incorrect usage of spinlocks in the CXL CPER work registration and unregistration helpers can lead to a deadlock. If a CPU holds a lock while a GHES interrupt arrives on the same CPU, the interrupt handler will spin on the held...

CVE-2026-89586

A flaw was found in the Linux kernel's libata-scsi component. This vulnerability occurs when the system attempts to perform Data Set Management DSM TRIM operations on storage devices with logical sector sizes exceeding 2048 bytes. Due to an incorrect handling of the TRIM descriptor generation,...

CVE-2026-89514

A flaw was found in the Linux kernel's Fibre Channel over Ethernet Network Interface Card fnic driver. The fnicfcoeprocessvlanresp function attempts to allocate memory in a way that can cause the system to sleep while holding a spinlock. This incorrect memory allocation in an atomic context can...

CVE-2026-89549

A flaw was found in the sunrpc component of the Linux kernel. When the nfsd service runs with fewer threads than available pools, a transport can be routed to a pool with no active threads. This prevents the connection from being processed, causing it to hang indefinitely. This can lead to a Deni...

CVE-2026-89535

A flaw was found in the svcrdma module of the Linux kernel. A use-after-free vulnerability can occur due to an incorrect order of operations during the teardown of an RDMA Remote Direct Memory Access transport. If a device unregistration process happens concurrently, it can attempt to access a...

CVE-2026-80991

A flaw was found in the Linux kernel's net: ravb module. A race condition exists during the Precision Time Protocol PTP clock teardown. This allows the ravbptpinterrupt function to attempt to use a PTP clock after it has been freed by ptpclockunregister, leading to a use-after-free vulnerability...

CVE-2026-80938

A flaw was found in the Linux kernel, specifically within the mt7615 Wi-Fi driver. A deadlock can occur during system suspend operations when the suspend process attempts to acquire a mutex a locking mechanism while simultaneously waiting for a work item macwork that also requires the same mutex...

CVE-2026-89465

A flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task can attempt to access memory that has already been...