CVE-2026-99198

A flaw was found in the Linux kernel's Actions Semi Owl Ethernet driver. When initializing or probing the network device with network traffic shaping enabled, the driver attempts to access network device operations before they are assigned. A local user capable of attaching or probing the device...

CVE-2026-99044

A flaw was found in the Linux kernel's ice network driver. During dynamic port cleanup, the driver prematurely frees internal interface memory before removing the port entry, resulting in a use-after-free condition. A local user could exploit this flaw to cause a Denial of Service DoS through a...

CVE-2026-99203

A flaw was found in the Linux kernel's pipe subsystem. Improper error handling during asynchronous input/output I/O notification setup can leave freed file structures referenced after an allocation failure. A local, unprivileged attacker could exploit this condition under memory pressure to trigg...

CVE-2026-99174

A flaw was found in the Linux kernel's ext4 file system. A local user could exploit a race condition during concurrent file path lookup and filesystem unmount operations. When resolving a symbolic link as the filesystem's last mount reference is released, the kernel may dereference a null pointer...

CVE-2026-99182

A flaw was found in the Linux kernel's Sound Open Firmware SOF audio subsystem. When handling aggregated audio capture configurations where the channel count is smaller than the number of aggregated devices, an integer underflow occurs in the IPC4 topology driver. A local user could trigger this...

CVE-2026-99200

A flaw was found in the Linux kernel's HiSilicon Fast Ethernet MAC hisifemac network driver. This flaw can result in a Denial of Service DoS due to a system crash during device probing. When initializing the network interface, the driver attempts to access network device operations before they ar...

CVE-2026-99206

A flaw was found in the Linux kernel's iSCSI target subsystem. A race condition occurs when concurrent processes update discovery authentication parameters through the configuration filesystem configfs without proper locking. A local user could exploit this vulnerability to trigger a double-free...

CVE-2026-99210

A flaw was found in the Linux kernel's accel/rocket driver. This flaw can lead to a Denial of Service DoS through a system crash under specific hardware initialization failure conditions. If initial device setup fails, the driver does not properly clear an internal reference pointer, leaving an...

CVE-2026-99207

A flaw was found in the Linux kernel's SCSI target subsystem. This issue allows a storage initiator or virtual machine guest to cause a Denial of Service DoS through a system deadlock. The vulnerability occurs because the subsystem fails to disable interrupts while holding an internal lock during...

CVE-2026-99176

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested virtualization component. When loading nested virtual machine state fails during certain non-standard entry operations, KVM fails to reset the memory management unit MMU pointer back to the root context. A local user...

CVE-2026-99048

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When disabling network buffer pools XSK pools, the driver attempts to re-acquire a network device lock that is already held. A local user with administrative privileges could trigger this flaw during queue management...

CVE-2026-99179

A flaw was found in the Linux kernel's watch queue subsystem, which can lead to a Denial of Service DoS. A race condition exists between queue resizing and notification delivery due to improper memory access ordering. A local, unprivileged user could exploit this flaw by concurrently resizing a...

CVE-2026-99000

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user can trigger a Denial of Service DoS by pinning and unpinning shared buffer objects repeatedly. Improper tracking of nested pin operations causes memory accounting counters to underflow, misleading the system into reportin...

CVE-2026-99043

A flaw was found in the Linux kernel's Intel Ethernet ice driver. This vulnerability can lead to a denial of service DoS caused by a use-after-free condition when network routing metadata is freed prematurely during representor interface teardown while packets remain queued for transmission. A...

CVE-2026-99002

A flaw was found in the Linux kernel's VMware Virtual GPU vmwgfx driver. A local user could exploit this flaw to cause a Denial of Service DoS or disclose sensitive memory contents through an out-of-bounds read. The vulnerability occurs because the driver fails to validate the pitch value provide...

CVE-2026-99208

A flaw was found in the Linux kernel's Intel Xe graphics driver. It allows information disclosure because memory buffers allocated for observation architecture OA streams are not cleared before being made accessible to user space. A local user can exploit this vulnerability by memory-mapping the...

CVE-2026-99005

A flaw was found in the Linux kernel's Intel i915 graphics driver. A race condition during power management state transitions allows background tasks to access hardware registers without holding the required power management locks after the graphics device has entered a parked state. A local user...

2006

2006 Linux Kernel Exploits - CVE-2006-2451 + CVE-2006-3626...

CVE-2026-98998

A flaw was found in the Linux kernel's TH1520 HDMI bridge driver. During device removal, the driver's teardown callback retrieves driver private data using an incorrect data structure type and passes an invalid pointer to the cleanup routine. A local privileged user could trigger this issue when...

CVE-2026-98997

A flaw was found in the Linux kernel's AMDGPU graphics driver. In the user queue implementation, the driver fails to verify whether a buffer object was designated for queue doorbells before placing it in the doorbell domain. A local user can exploit this vulnerability by submitting a shared memor...