CVE-2026-98997

A flaw was found in the Linux kernel's AMDGPU graphics driver. In the user queue implementation, the driver fails to verify whether a buffer object was designated for queue doorbells before placing it in the doorbell domain. A local user can exploit this vulnerability by submitting a shared memor...

CVE-2026-98994

A flaw was found in the Linux kernel. A local user could exploit a race condition in the statmount facility to cause a use-after-free condition, resulting in a kernel crash and Denial of Service DoS. When querying an unmounted filesystem mount via an open file descriptor, the kernel fails to...

CVE-2026-98995

A flaw was found in the Linux kernel. A local user can cause a denial of service DoS or potentially escalate privileges by triggering a use-after-free condition in the mount namespace subsystem. When moving file system mount points, the kernel fails to clear a reference pointer on the former pare...

CVE-2026-98992

A flaw was found in the Linux kernel. When performing a recursive bind mount on a lazily unmounted namespace or process file held open by a file descriptor, the kernel fails to verify that the mount tree is still active. A local user could exploit this vulnerability to duplicate and access...

CVE-2026-98993

A flaw was found in the Linux kernel's mount namespace subsystem. A local attacker can trigger an unmount flag inheritance issue when cloning a lazily unmounted mount that is kept open by a file descriptor. This improper flag inheritance leads to incorrect reference counting and a use-after-free...

CVE-2026-98991

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service DoS by triggering a use-after-free flaw, which occurs when the system accesses memory after it has been released. During certain unmount operations, the kernel fails to verify whether a filesystem mount is alread...

CVE-2026-93236

A flaw was found in the Linux kernel's Meson video decoder driver. When processing video format negotiation requests with an unsupported format on the output queue, the driver improperly falls back to a format that may not be supported by the platform format table. This issue leads to a NULL...

CVE-2026-93224

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to improper error handling during connection cleanup in the Remote Direct Memory Access RDMA server subsystem. When a connection accept operation fails before registration completes, the kernel...

CVE-2026-93223

A flaw was found in the Linux kernel's Tegra video driver, which can lead to a Denial of Service DoS. When parsing video input channels, the driver improperly drops an object reference during error handling without having previously acquired it. A local user could exploit this vulnerability by...

CVE-2026-93221

A flaw was found in the Linux kernel's NFS daemon nfsd. A race condition occurs when multiple internal processes concurrently access the graceended flag without proper synchronization. This can lead to memory corruption, including double-free vulnerabilities and attempts to read from freed memory...

CVE-2026-90028

A flaw was found in the Linux kernel's usb: typec: hd3ss3220 driver. This vulnerability occurs because the regulatorisenabled function reports the overall power regulator state rather than the state specific to a particular consumer. If another component enables the VBUS Voltage Bus first, the...

CVE-2026-89976

A flaw was found in the Linux kernel's accel/ethosu component. This vulnerability occurs due to improper handling of job completion fences, where an uninitialized fence can be leaked or a zeroed reference count is passed to the dmafenceput function. A local attacker could potentially exploit this...

CVE-2026-89939

A flaw was found in the Linux kernel's iio: chemical: atlas-sensor driver. This vulnerability occurs when the atlasbufferpostenable function acquires a Power Management PM reference but fails to release it if an interrupt setup operation atlassetinterrupt does not complete successfully. This...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

CVE-2026-89935

A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306readdata function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from enteri...

CVE-2026-89934

A flaw was found in the Linux kernel's ltrf216a driver, which manages light sensors. When the system attempts to read data from the sensor, a power management PM reference is acquired. If the data reading operation fails, this reference is not properly released. This oversight leads to an...

CVE-2026-89830

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. When the system attempts to allocate new data blocks, it may incorrectly increment the count of valid blocks without properly reversing this action if the allocation process fails. This oversight leads to a...

CVE-2026-98965

A flaw was found in the Linux kernel's Intel Ethernet ice driver. The packet transmission path uses relaxed memory-mapped I/O MMIO write ordering when updating hardware doorbells on certain processor architectures. This flaw introduces a race condition where the network interface card processes...

CVE-2026-98975

A flaw was found in the Linux kernel's XFS file system. A local user could exploit this flaw to cause data corruption across shared files during file exchange operations. When exchanging file storage mappings, the kernel may improperly clear the reference link reflink flag that marks blocks as...

CVE-2026-99033

A flaw was found in the Linux kernel. A local user with network privileges can trigger a Denial of Service DoS by causing a complete system crash. This issue occurs when a packet socket receives traffic on a network interface that lacks a link-layer header, such as a Controller Area Network CAN...