CVE-2026-90187

A flaw was found in the nullblk module of the Linux kernel. When a zoned nullblk device is powered off and then on again, the memory allocated for device zones is not properly freed. This oversight causes a memory leak with each power cycle, which could lead to resource exhaustion over time...

CVE-2026-89982

A flaw was found in the Linux kernel's I2C Inter-Integrated Circuit multiplexer mux subsystem. This vulnerability can lead to a resource leak if an adapter fails to register, as a system resource is not properly released. Over time, this could result in resource exhaustion, potentially causing...

CVE-2026-89975

A flaw was found in the Linux kernel's nvme-fabrics module. A local attacker could repeatedly provide malformed DHCHAP Diffie-Hellman Challenge-Handshake Authentication Protocol secrets, leading to a memory leak. This vulnerability occurs during the parsing of these secrets, where temporary strin...

CVE-2026-89953

A flaw was found in the Linux kernel's mtdoops module. When a Memory Technology Device MTD is removed and then re-registered, the mtdoops module fails to properly free a previously allocated memory bitmap. This oversight leads to a memory leak, where memory is continuously consumed without being...

CVE-2026-89924

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for s390 architecture. When handling guest debug requests, a memory leak occurs if a watchpoint import fails. A local guest user could repeatedly trigger this flaw, leading to a continuous leak of memory buffers. Th...

CVE-2026-89877

A flaw was found in the saa7164 media driver in the Linux kernel. When the saa7164devsetup function fails to allocate PCI BAR memory regions, it incorrectly leaves a dangling entry on the global device list. This improper cleanup of resources can lead to a resource leak, potentially allowing a...

CVE-2026-89815

A flaw was found in the Linux kernel's Direct Rendering Manager DRM TTM memory manager. During a memory restore operation, the tt-restore object is not properly released after a successful restore. This oversight can lead to shared memory shmem handles remaining active, causing subsequent backup...

CVE-2026-93089

A flaw was found in the armscmi firmware component of the Linux kernel. This vulnerability occurs when a transport channel setup succeeds but the subsequent IDR ID allocator insertion fails. In such a scenario, the error handling path incorrectly destroys the transport device and frees channel...

CVE-2026-90434

A flaw was found in the Linux kernel's isofs filesystem driver. When processing compressed block pointer tables via the zisofsfillpages function, a memory resource is not properly released upon successful operation. A local attacker could potentially exploit this resource mismanagement, possibly ...

CVE-2026-90422

A flaw was found in the Linux kernel. When the mtkclkregisterpllfhs function, part of the MediaTek Phase-Locked Loop PLL clock driver, fails to register a PLL, it does not properly free the input/output IO memory mapped on the fhctl node. This oversight leads to a memory leak. Over time, repeated...

CVE-2026-90340

A flaw was found in the Linux kernel. When the pinctrlgenerictomap function encounters an error during device tree configuration parsing, it fails to properly free partially allocated memory. This oversight leads to memory leaks, which could potentially result in system instability or a denial of...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-90087

A flaw was found in the Linux kernel's Bluetooth Low Energy LE subsystem. When multiple LE connection attempts are made concurrently, and one connection fails, the system may not properly release the failed connection's resources. This resource leak can prevent all subsequent outgoing LE connecti...

CVE-2026-90007

A flaw was found in the Linux kernel's pm8001 SCSI driver. When pm8001requestmsix attempts to free Message Signaled Interrupts MSI-X vectors, it uses an incorrect index during the rollback process. This error prevents previously registered interrupt handlers from being properly deallocated, leadi...

CVE-2026-90005

A flaw was found in the Linux kernel's Data Access MONitor DAMON sample modules, specifically in how they handle failures during the damonstart operation. An authenticated local attacker with administrative privileges could exploit this by triggering a damonstart failure, leading to a memory leak...

CVE-2026-89909

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for LoongArch architecture. During initialization, if a specific setup function fails, critical resources are not properly released. This can lead to a resource leak, potentially allowing a local attacker to cause a denial of...

CVE-2026-89896

A flaw was found in the Linux kernel's Cedrus media driver. The cedrusinitctrls function, responsible for initializing V4L2 Video for Linux Two control handlers, does not properly free allocated resources if a subsequent memory allocation fails. This oversight can lead to a memory leak, potential...

CVE-2026-89889

A flaw was found in the Linux kernel's i2c imx415 media driver. When programming VMAX fails, the VBLANK path returns immediately without releasing a previously acquired runtime power management PM reference. This oversight can lead to a resource leak, potentially allowing a local attacker to caus...

CVE-2026-89881

A flaw was found in the rtl2832sdr driver within the Linux kernel. When a USB device using this driver is disconnected, the driver prematurely clears a critical device pointer. This prevents the proper release of Direct Memory Access DMA stream buffers and USB Request Blocks URBs when the user...

CVE-2026-89867

A flaw was found in the Linux kernel's media subsystem, specifically within the chips-media wave5 driver. This vulnerability occurs when multiple video decoder instances share a video processing unit VPU and a job slot is not properly released during the draining process, particularly if a decode...