CVE-2026-98940

A flaw was found in the Linux kernel's Qualcomm audio driver LPASS CPU. When configuring digital audio interfaces on certain platforms, the driver uses a hardware port identifier instead of the table index to update playback constraints. This issue causes an out-of-bounds memory write, which can...

CVE-2026-98939

A flaw was found in the Linux kernel's x86 memory management subsystem. Under memory pressure on systems with discrete graphics processing units GPUs, a circular locking dependency can occur between memory reclamation and page table freeing routines. A local user could exploit this flaw to cause ...

CVE-2026-98936

A flaw was found in the Linux kernel's ath11k wireless driver. During hardware restart events, the driver fails to properly reset its connected station counter. Consequently, the driver falsely reports that the connection capacity has been exceeded, resulting in a Denial of Service DoS where new...

CVE-2026-98925

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter sockmap subsystem. This flaw allows a local attacker to cause a Denial of Service DoS when redirecting network traffic back to the originating socket. The kernel improperly double-counts sequence numbers for received TCP Transmissi...

CVE-2026-98917

A flaw was found in the Linux kernel's PA-RISC architecture support. This vulnerability can lead to a Denial of Service DoS when deep call chains cause a kernel stack overflow on 64-bit systems. A local user executing complex or resource-intensive workloads can trigger this condition, causing the...

CVE-2026-98985

A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability by invoking the pivotroot system call with a file descriptor referencing an unmounted filesystem whose parent mount has already been freed. This flaw allows the kernel to access previously released memor...

CVE-2026-98986

A flaw was found in the Linux kernel's mount namespace subsystem. When cleaning up a mount namespace associated with filesystem notification marks, the kernel improperly attempts to acquire a sleeping lock within an invalid interrupt context. A local user with privileges to manage mount namespace...

CVE-2026-98930

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. A local user with access to the KVM interface can trigger a Denial of Service DoS by injecting a stop and store status signal into an already stopped virtual CPU vCPU. In this scenario, th...

CVE-2026-98934

A flaw was found in the Linux kernel's IPv6 Segment Routing SRv6 subsystem. This vulnerability can lead to a Denial of Service DoS when the kernel processes certain encapsulated packets—such as discovery traffic lacking socket or device associations—while segment routing flow labeling is enabled...

CVE-2026-98923

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by triggering an unexpected kernel warning on ARM64 systems. By establishing a restricted memory mapping and reading process details through the /proc interface, the kernel incorrectly flags valid user protection...

CVE-2026-98926

A flaw was found in the Linux kernel's AMD display driver. During Display Power Management Signaling DPMS sequences, the driver attempts to access a display sink pointer without verifying whether it is null. A local user could exploit this flaw during display power state transitions, triggering a...

CVE-2026-98931

A flaw was found in the Linux kernel's Memory Technology Device MTD SPI-NAND driver. When probing a flash memory device configured without an Error Correction Code ECC engine, the driver attempts to access an uninitialized pointer. A local user could exploit this flaw to crash the system, resulti...

CVE-2026-98921

A flaw was found in the Linux kernel's OverlayFS subsystem. When debug logging is enabled, a directory creation operation can trigger a use-after-free condition by referencing a directory entry that has already been released by the virtual file system. A local user could exploit this flaw to cras...

CVE-2026-98942

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. Due to a race condition, internal core-ID mapping tables were exposed before being fully initialized and were modified without adequate synchronization. A local attacker could exploit this timing issue during schedule...

cve-2014-4699-ptrace

writeup https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

kernel: mac802154: llsec: add skb_cow_data() before in-place crypto

A flaw was found in the Linux kernel's mac802154 IEEE 802.15.4 MAC security component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploi...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

kernel: ALSA: usx2y: bound the hwdep mmap fault offset

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...