CVE-2026-64440

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, can send a specially crafted 802.11 AssocResponse frame. This can trigger an out-of-bounds write vulnerability in the HTcapshandler function, leading to memory corruption...

CVE-2026-64534

A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. When a data digest mismatch occurs, a reference count underflow can happen due to an unconditional cleanup call. This issue can lead to a use-after-free condition and ultimately result in a permanent workqueue deadlock...

CVE-2026-64550

A flaw was found in the Linux kernel's Qualcomm rmnet component. This vulnerability occurs because the system does not properly check the size of incoming network packets, specifically MAP frames, when a certain network feature ingress deaggregation is turned off. A remote attacker could exploit...

CVE-2026-64543

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. A use-after-free vulnerability exists in the tipcdiscrcv function, where the discoverer object can be prematurely freed while still being referenced. An unprivileged local user can exploit this flaw by...

CVE-2026-64545

A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...

CVE-2026-64553

A flaw was found in the Linux kernel's packet sampling psample network module. This vulnerability, specifically within the PSAMPLEATTRDATA attribute handling, occurs because the nlaput function does not properly clear padding bytes. When the data length is not a multiple of four bytes,...

CVE-2026-64552

A flaw was found in the Linux kernel's virtio-net component. A malicious virtio backend can exploit an insufficient length check in the receivebig function, leading to an out-of-bounds write. This vulnerability can result in a denial of service DoS due to system instability or crashes...

CVE-2026-64547

A flaw was found in the Linux kernel's net1080 USB network adapter driver. A malicious NetChip 1080 device could send a specially crafted network frame with an invalid packet length. This could lead to an out-of-bounds read when processing the packet, causing a system crash and resulting in a...

CVE-2026-64555

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architecture, specifically affecting nested virtualization. The kvmhyphandlemops function, responsible for handling certain virtualization operations, incorrectly restored the SPSREL2 register. This occurred because...

CVE-2026-64540

A flaw was found in the Linux kernel's GeneLink GL620A USB network driver. A malicious GeneLink device can send specially crafted Universal Serial Bus USB packets that cause an out-of-bounds read vulnerability. This can lead to the disclosure of sensitive kernel memory, potentially revealing...

CVE-2026-64551

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. This vulnerability allows a remote attacker or a local unprivileged user to potentially access and disclose sensitive information. By sending a malformed error message, the system can be tricked into reading and the...

CVE-2026-64542

A flaw was found in the Linux kernel's IPv6 Neighbor Discovery NDISC component. An unprivileged user, operating within a network namespace, can trigger a null pointer dereference in the acceptuntrackedna function. This occurs due to a race condition where the inet6dev structure is re-fetched...

CVE-2026-64546

A flaw was found in the Linux kernel. A specially crafted Extended Display Identification Data EDID, which describes display capabilities, can cause a heap out-of-bounds read in the drmparsetiledblock function within the drm/edid component. This vulnerability could lead to system instability or t...

The vulnerability of the inet_diag_msg_sctpladdrs_fill() function in the net/sctp/diag.c module of the Linux operating system’s kernel implementation of the SCTP protocol allows a attacker to cause a service failure.

The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...

PT-2026-65849

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY VERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

PT-2026-65848

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey pckmo handler implementation Explicitly check the length of the target buffer in the pkey pckmo implementation of the key to protkey handler function. The handler function fails, if the generated...

The vulnerability of the usb_stor_Bulk_transport() function in the drivers/usb/storage/transport.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __folio_split() function in the mm/huge_memory.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.

The vulnerability of the foliosplit function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the bm_register_write() function in the fs/binfmt_misc.c module of the Linux file system allows a attacker to cause a service failure.

The vulnerability of the bmregisterwrite function in the fs/binfmtmisc.c file of the Linux kernel file system allows for the exploitation of resources after their valid duration has ended. Exploiting this vulnerability can enable a hacker to cause service failures...

NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2026-0063)

The remote NewStart CGSL host, running version MAIN 6.06, has kernel packages installed that are affected by multiple vulnerabilities: - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra...