CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

CVE-2026-97566

A flaw was found in the Linux kernel. When removing an initial endpoint in the Multipath TCP MPTCP path manager, the system fails to clear pending address announcements, leaving stale entries in memory. A local user can exploit this vulnerability by manipulating MPTCP endpoint configurations, whi...

CVE-2026-97564

A flaw was found in the Linux kernel's SMB Server Message Block client. This vulnerability allows a local user to achieve privilege escalation due to missing validation on identity mapping key descriptions. Because the kernel does not verify that identity mapping requests originate internally, a...

CVE-2026-97512

A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...

CVE-2026-98074

A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...

CVE-2026-98075

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service DoS via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a...

CVE-2026-98067

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System. The rolling decompression mechanism used for LZ4-compressed files assumes that data is always copied forward in memory. On certain system architectures, the underlying memory copy operation can copy backward, invalidatin...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...

CVE-2026-98063

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...

CVE-2026-98062

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel incorrectly treats certain signal tracepoint arguments as trusted memory pointers, even when special non-pointer indicator values are passed during signal delivery. A local user with privileges to attach BPF...

CVE-2026-98060

A flaw was found in the Linux kernel. A local user with permissions to load Berkeley Packet Filter BPF programs can cause a Denial of Service DoS or potentially achieve privilege escalation. The BPF verifier fails to prevent resilient lock operations within red-black tree comparison callbacks,...

CVE-2026-98057

A flaw was found in the Linux kernel's tracing ring buffer. The persistent ring buffer validation logic fails to verify that the recorded sub-buffer count matches the expected page count in the metadata. A local attacker capable of manipulating persistent memory metadata could exploit this issue ...

CVE-2026-79403

Versions of Kilo Code prior to v7.4.1 are vulnerable to an issue that allows a local attacker to achieve arbitrary code execution . The vulnerability is accessible via the permission/allow-everything endpoint. While the technical root cause is not explicitly detailed in the provided documents, th...

PT-2026-102626

Name of the Vulnerable Software and Affected Versions Pardus Parental Control versions prior to 0.7.0 Description An incorrect authorization issue exists in the polkit policy. This allows unprivileged local users to disable parental controls with root privileges. An attacker can execute the...

CVE-2026-76736: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95358): chromium -- security fixes

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...