CVE-2026-74481

A flaw was found in the Linux kernel's memory management, specifically within the page reporting mechanism. During system suspend or hibernation, the page reporting process could attempt to access memory that had already been freed by device drivers. This Use-After-Free vulnerability can lead to ...

CVE-2026-74480

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2026-74473

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An incorrect buffer length check in the routeshortcircuit function, specifically when using pskbmaypull, can lead to reading beyond the allocated buffer length. This occurs when processing IP headers in non-linear...

CVE-2026-74458

A flaw was found in the Kvaser USB CAN driver kvaserusbleaf in the Linux kernel. This vulnerability occurs due to insufficient validation of received command lengths from a USB buffer. A malicious or malformed command shorter than the expected header length, or one that exceeds the destination...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

CVE-2026-72464

A flaw was found in the kernel's xprtrdma module. A remote attacker can exploit this by sending a sustained stream of malformed Remote Procedure Call over Remote Direct Memory Access RPC/RDMA replies. These malformed replies, which are either too short or carry an unrecognized RPC/RDMA version, c...

CVE-2026-72452

A flaw was found in the drm/i915 component of the Linux kernel. The intelcrtcputcolorblobs function drops references to CRTC color blobs but does not clear the corresponding pointers. This can lead to a double-free vulnerability if the intelcrtcfreehwstate function is called multiple times for th...

CVE-2026-55648

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdpimagecopyfromicondata in libfreerdp/codec/color.c calculates nWidth multiplied by nHeight multiplied by FreeRDPGetBytesPerPixelformat in 32-bit arithmetic. A malicious RDP server can send a RAIL TSICONINFO...

CVE-2026-72463

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework for IPsec subsystem. This vulnerability occurs during asynchronous resumption where the xfrmrcvcb function can modify a network device without properly managing its reference count. This improper handling leads to a use-after-fre...

CVE-2026-74482

A flaw was found in the Linux kernel's huge memory management mm/hugememory. A race condition exists in the foliosplit function where the immaprwsem lock is released prematurely before all after-split folios are fully processed. This allows a concurrent operation to free the inode while subsequen...

CVE-2026-72450

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability, a shift-out-of-bounds error, occurs when an unspecified address family AFUNSPEC selector with a large prefix length is incorrectly matched against an IPv4 flow. An attacker could potentially exploit this by sending special...

CVE-2026-55564

CVE-2026-55564 is an out-of-bounds heap read in FreeRDP (a free RDP client implementation) affecting versions prior to 3.27.0 . The root cause is in glyph_cache_get() in libfreerdp/cache/glyph.c, which uses > instead of >= when bounds-checking the index against cache->number. A malicious...

CVE-2026-55564 FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

CVE-2026-19653

A local attacker on IBM AIX 7.2/7.3 or PowerVM VIOS 4.1 can trigger a denial of service by exploiting improper handling of memory page table configurations. CVSS 3.1 scores 6.5 (Medium) with HIGH availability impact; no exploitation evidence is provided. Monitor IBM support for patches.

CVE-2026-19653 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

EUVD-2026-62661

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

CVE-2026-72392

A flaw was found in the Linux kernel's IPv6 networking component. A vulnerability exists where a NULL pointer dereference can occur in the fib6walkcontinue function during a multi-batch dump operation. This issue arises when a concurrent table insertion shifts existing entries, causing an incorre...

CVE-2026-72384

A flaw was found in the Linux kernel's irqchip/ts4800 driver. The driver fails to properly clear a chained interrupt handler when it is removed. This oversight leaves a dangling handler that could be invoked if the parent interrupt fires after the driver has been unloaded. Such an event could lea...

CVE-2026-72388

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability arises from the incorrect acquisition of fence locks, where an IRQ-safe variant was not consistently used for dmafence objects. Since these objects can be accessed from hard interrupt hardirq context by other drivers...