CVE-2026-74450

A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash denial of service...

CVE-2026-72407

A flaw was found in the Geneve module of the Linux kernel. This vulnerability arises from an incorrect validation of the inner network offset within the genevegrocomplete function. A discrepancy between how genevegrocomplete and genevegroreceive process packet information can lead to an...

CVE-2026-74505

A flaw was found in the ALSA 6fire driver within the Linux kernel. During error handling in the probe phase, the driver failed to properly manage a pending USB Request Block URB before freeing associated resources. This oversight could lead to a Use-After-Free UAF vulnerability. A local attacker...

CVE-2026-72363

A flaw was found in the netfs component of the Linux kernel. This vulnerability occurs when the system runs out of memory during a data write operation, leading to an incorrect state for the affected memory pages folios. An attacker could potentially trigger this condition, which may cause the...

CVE-2026-74472

A flaw was found in the Linux kernel's ublk driver. This vulnerability arises from improper initialization of kernel-owned device information fields when a new ublk device is added. A local attacker could exploit this by providing malformed device information, which may lead to a kernel panic,...

CVE-2026-74498

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. When a USB audio endpoint requests full packet transfers using the fillmax descriptor flag, the system allocates an undersized Direct Memory Access DMA buffer. This allows a malicious USB device to...

CVE-2026-72405

A flaw was found in the Linux kernel's UDP tunnel networking component. A race condition in the udptunnelnicdevicesync function allows a work item to be double-queued. This can lead to a use-after-free vulnerability, where memory is prematurely freed while still active. A local attacker could...

CVE-2026-72443

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA USB audio driver. During the handling of MIDI 2.0 input Universal Serial Bus USB Request Blocks URBs, a setup failure can lead to a use-after-free vulnerability. This allows a local attacker, or a malicious USB device, ...

CVE-2026-72413

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this vulnerability by sending specially crafted SCTP initialization parameters. This can lead to memory leaks within the kernel, potentially causing a denial of service...

CVE-2026-72414

A flaw was found in the Linux kernel's net: dsa: sja1105 component. This vulnerability occurs when processing specific timing parameters, where very small user-provided values are converted to zero. This incorrect conversion can lead to a division-by-zero error in the futurebasetime function, whi...

CVE-2026-72417

A flaw was found in the Linux kernel's netfilter flowtable component. Insufficient validation of the iph-ihl field in the nfflowip4tunnelproto function, when processing malformed IP Internet Protocol headers, could lead to an out-of-bounds access. This vulnerability could allow a remote attacker ...

CVE-2026-72431

A flaw was found in the Linux kernel. A vulnerability exists in the /proc/allocinfo feature where the system may attempt to access memory after it has been freed, known as a use-after-free. This can happen when a kernel module is unloaded while the system is still processing information from...

CVE-2026-72406

A flaw was found in the Linux kernel's sungem network driver. During device initialization, if registernetdev fails, the geminitone function incorrectly calls gemremoveone, which frees allocated resources. Subsequently, geminitone proceeds to its own cleanup routine, attempting to free the same...

CVE-2026-72415

A flaw was found in the Linux kernel. In the Advanced Linux Sound Architecture System on Chip ASoC Sound Driver Component Architecture SDCA component, the geputenumdouble function fails to validate a user-supplied enumeration index. This oversight allows a local attacker to provide an out-of-rang...

CVE-2026-72393

A flaw was found in the Linux kernel's fbnic Ethernet driver. When the fbnictxlso function reallocates a socket buffer skb, it fails to update a cached pointer to shared information. This can lead to a use-after-free vulnerability, where the driver attempts to access memory that has already been...

CVE-2026-72475

A flaw was found in the Linux kernel's dma-axi-dmac component. This vulnerability arises from the improper freeing of a data structure within the axidmacprepperipheraldmavec function. This oversight could lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-72362

A flaw was found in the Linux kernel's drm/xe/pt module. This vulnerability arises when the page-table walk framework provides a null pointer for unpopulated entries, and the xeptzapptesentry function attempts to access this null pointer without prior validation. This improper handling can lead t...

CVE-2026-72358

A flaw was found in the Linux kernel's drm/xe/pt component. During page table walks for binding, specific functions xepthugeptepossible and xeptscan64K do not properly check if a Buffer Object BO has been purged. This oversight can lead to invalid access of an uninitialized cursor, potentially...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfsattrfallocate function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system...