CVE-2026-68333

A flaw was found in the dpaa2-switch component of the Linux kernel. When a MAC Media Access Control object is disconnected, the system fails to release a reference to the associated MAC endpoint device. This oversight causes a device reference to leak with every successful connection and subseque...

CVE-2026-68175

A flaw was found in the Linux kernel's mmiotrace tracer. A local user could repeatedly read from the tracepipe file without fully completing the read operation. This improper handling of resource cleanup leads to a significant memory leak and leaves stale references. The continuous accumulation o...

CVE-2026-68407

A flaw was found in the Linux kernel's Wi-Fi subsystem nl80211. When processing beacon frames, the nl80211parsebeacon function may fail to properly free allocated RNR Reduced Neighbor Report data if there is a mismatch in the number of RNR and MBSSID Multiple Basic Service Set Identifier entries...

CVE-2026-68238

A flaw was found in the drm/amdgpu component of the Linux kernel. The amdgpuacpivfctbios function fails to release a reference to the VFCT ACPI table after fetching it. This oversight leads to a resource leak, where memory allocated for the table mapping is not properly freed, potentially impacti...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

CVE-2026-68285

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the LoongArch architecture. When JIT compilation fails for a subprogram, the bpfjitfree function does not properly release the memory allocated for the JIT context offsets array. This oversight leads t...

CVE-2026-68301

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking module. When an HSR slave device is unregistered, the system fails to properly remove synced Virtual Local Area Networks VLANs. This oversight causes the slave device to retain a reference count on these...

CVE-2026-68203

A flaw was found in the Linux kernel's vivid media driver. This vulnerability involves two cleanup bugs within the vividinit function. Firstly, a reference leak occurs if platformdeviceregister fails, preventing the proper release of device resources. Secondly, an incorrect function call during...

CVE-2026-68386

A flaw was found in the Linux kernel. A local attacker with BPF program capabilities could exploit a vulnerability in the BPF sockmap feature. This occurs when a BPF program increments the reference count of an unbound UDP socket, and the socket is subsequently bound. This sequence of events caus...

CVE-2026-68227

A flaw was found in the cx231xx media driver within the Linux kernel. This vulnerability arises from incorrect management of device-managed resources, where their lifetime is tied to the parent Universal Serial Bus USB device instead of the USB interface. This can lead to memory leaks when driver...

CVE-2026-68220

A flaw was found in the Linux kernel's NXP i.MX8 Image Sensor Interface ISI component. This flaw occurs because the system fails to properly free allocated memory when certain subdevice modules are removed. This oversight can lead to a memory leak, potentially impacting system stability and...

CVE-2026-68314

A flaw was found in the Linux kernel's MCTP I3C network module. When the i3cdriverregister function fails during module initialization, the system does not properly unregister notifiers and deallocate bus objects. This oversight leads to a memory leak, which could be exploited by a local attacker...

CVE-2026-68234

A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...

CVE-2026-68379

A flaw was found in the Linux kernel's TCP implementation. A reference leak in TIMEWAIT sockets can occur upon a PSP Policy Security Policy failure in both IPv4 and IPv6 receive paths. This vulnerability can lead to a memory leak of tcptwbucket structures, potentially resulting in a Denial of...

CVE-2026-68212

A flaw was found in the Linux kernel's saa7134 media driver. During device probing, the saa7134videoinit1 function does not properly check return values from memory allocation, leading to unreleased memory and invalid page tables. This can result in memory leaks and the potential use of...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

CVE-2026-73142

A flaw was found in svxlink's remotetrx NetUplink component. When a server initiates a disconnect, the associated connection object is not properly freed, causing a memory leak. A remote attacker can repeatedly trigger disconnects to cause unbounded memory growth, leading to a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-68298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882 drm/xe/userptr: replace xehmm with gpusvm made xesvminit unconditional in...