CVE-2026-72265

A flaw was found in the Linux kernel's NVIDIA framebuffer driver. During the initialization process within the nvidiafbprobe function, if certain error conditions occur, memory allocated for internal data structures is not properly released. This can lead to a memory leak, potentially affecting...

CVE-2026-72276

A flaw was found in the metronomefb framebuffer driver within the Linux kernel. This vulnerability occurs because memory allocated for page references is not properly released when an error occurs during initialization. A local attacker could potentially exploit this to cause a denial of service...

CVE-2026-72401

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. This vulnerability occurs when the bpfcheck function fails to allocate certain resources, leading to a memory leak of insnauxdata. An attacker could potentially exploit this by repeatedly triggering the flaw, which may...

CVE-2026-72087

A flaw was found in the Linux kernel's scsi: lpfc driver. The memory allocated for mboxq using mempoolalloc is not properly freed in certain early exit error paths within the lpfcsli4driverresourcesetup function. This memory leak can lead to resource exhaustion, potentially resulting in a denial ...

CVE-2026-72050

A flaw was found in the octeontx2-af component of the Linux kernel. During the setup of BPID Back Pressure ID mapping arrays, if memory allocation fails, the BPID bitmap is not properly freed. This can lead to a memory leak, potentially impacting system stability or performance...

CVE-2026-72039

A flaw was found in the Linux kernel's bnx2x driver. A potential memory leak can occur in the bnx2xallocmembp function. If an allocation within this function fails, a previously allocated memory structure is not correctly released, leading to a memory leak. Repeated occurrences of this issue coul...

CVE-2026-72032

A flaw was found in the Linux kernel's net/mlx5 HWS Hardware Steering component. This vulnerability occurs when the hwsbwcmatchermove function attempts to resize a matcher, and the mlx5hwsmatcherresizesettarget operation fails. In such a scenario, a replacement matcher is allocated but not proper...

CVE-2026-72026

A flaw was found in the Linux kernel's RISC-V Interrupt Controller IMSIC early initialization. The imsicearlyacpiinit function allocates a firmware node but fails to free it if the IMSIC state setup encounters an error. This oversight leads to a memory leak, which could potentially result in...

CVE-2026-72023

A flaw was found in the Linux kernel's octeontx2-pf driver. During the initialization of hardware resources, a memory leak occurs where certain pointer arrays are not properly freed upon failure. This issue could lead to resource exhaustion, potentially resulting in a Denial of Service DoS for th...

CVE-2026-72004

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This issue occurs when the system attempts to copy Wi-Fi band structures, and an error during this process causes a memory resource to not be properly released. This oversight leads to a memory leak within the kernel, which could...

CVE-2026-72396

A flaw was found in the Linux kernel's hwmon subsystem, specifically in the adm1275 driver. This vulnerability allows a local attacker or a specially crafted device to trigger an out-of-bounds read during device name comparison. By providing a device name shorter than expected, uninitialized stac...

Linux Distros Unpatched Vulnerability : CVE-2026-76235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie,...

CVE-2026-72334

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream handling. A remote attacker, by sending specially crafted malformed Bluetooth ISO packets, could trigger a kernel panic, leading to a denial of service. Additionally, this vulnerability could result in a memory leak within th...

CVE-2026-72311

A flaw was found in the Linux kernel's drm/xe driver. A local user could trigger a memory leak by repeatedly making ioctl calls that fail the L2 flush validation. This improper memory management can lead to a Denial of Service DoS due to resource exhaustion...

CVE-2026-52734

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

CVE-2026-52734

In Downloads::poll_next() (downloads.rs:215-228), the timeout error path (Err(elapsed)) skips cancel_handles.remove() because tokio::time::error::Elapsed carries no transaction ID, so each timed-out entry retains up to ~9 MB of transaction data. With no GC or cap, an unauthenticated peer causes m...

CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

CVE-2026-72274

A flaw was found in the Linux kernel's fbdev hecubafb module. A local attacker could exploit this by triggering an error path during the initialization of the hecubafb module. This could lead to a memory leak, potentially causing a denial of service due to resource exhaustion...

CVE-2026-72270

A flaw was found in the Linux kernel's s3fb driver, which handles S3 graphics cards. This vulnerability involves a memory leak within the s3pciprobe function. When certain error conditions occur, memory allocated for display mode lists is not properly freed. This oversight could allow an attacker...