CVE-2026-89711

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An invalid assumption in the nfsdmodecheck function regarding directory lookup capabilities during NFS reexport could lead to a null pointer dereference. A remote attacker could exploit this by performing a LOOKUP operation o...

CVE-2026-89770

A flaw was found in the iomap component of the Linux kernel. This vulnerability occurs when Protection Information PI verification is disabled on a block device, causing fsbiointegrityalloc to not allocate a bio integrity payload. Subsequently, the iomapbioreadfoliorangesync function attempts to...

CVE-2026-89734

A flaw was found in the Linux kernel's USB Video Class UVC gadget driver. This vulnerability occurs in the uvcgvideoinit function when the kthreadrunworker function fails. In such a scenario, an error logging mechanism attempts to access an uninitialized pointer, leading to a null pointer...

CVE-2026-89451

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit SVA Shared Virtual Addressing component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not properly initialized. A local attacker could exploit this flaw by...

CVE-2026-89561

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL implementation. A remote attacker could send specially crafted IPv6 packets to a vulnerable system while manipulating the network interface's Maximum Transmission Unit MTU, which defines the largest...

CVE-2026-80984

A flaw was found in the net/smc component of the Linux kernel. When a link group terminates while a socket is waiting in smcclosestreamwait, a NULL pointer dereference can occur during the SMC-D teardown path. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-89696

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote client can exploit this by sending a specially crafted NFS COMPOUND request. This request, when processed, can lead to a NULL pointer dereference in the nfsd kthread, causing the system to crash and resulting in ...

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-80956

A flaw was found in the Linux kernel's dm-pcache component. A crafted image can cause the getcachesegment function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used by cacheksetclose without a proper null check. This can lead to a...

CVE-2026-89460

A flaw was found in the Linux kernel. A local user can trigger a kernel panic by running the perf stat command while CPUs are being hotplugged. This occurs because the system fails to properly allocate CPU event structures for newly online CPUs, leading to a null pointer dereference. Successful...

CVE-2026-89442

A flaw was found in the Linux kernel. The isstifclosassoc ioctl function in the platform/x86: ISST module contains an improper validation of the socketid. This allows a local attacker to cause an out-of-bounds access or a NULL pointer dereference. This could lead to a system crash, resulting in a...

CVE-2026-80993

A flaw was found in the Linux kernel's net: phylink component. The phylinkinbandcaps function does not correctly validate the return value from macselectpcs, which can return an error pointer instead of a valid Physical Coding Sublayer PCS object. This oversight can lead to dereferencing an inval...

CVE-2026-89717

A flaw was found in the zram component of the Linux kernel. When zramdestroycomps is called, it incorrectly resets the primary compressor to a NULL state. This invalid state can lead to a NULL pointer dereference when compalgorithmshow attempts to access the compressor, potentially causing system...

CVE-2026-89552

A flaw was found in the Linux kernel. When updating charp parameters, an allocation failure can cause the parameter to be set to NULL before the new value is successfully allocated. This can lead to a kernel NULL pointer dereference, which may result in a system crash and a denial of service...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

CVE-2026-89591

A flaw was found in the Linux kernel's accel/rocket module. During error handling in the rocketioctlsubmitjob function, a cleanup routine may attempt to free a job-domain pointer that has not yet been initialized, leading to a NULL pointer dereference. A local attacker could exploit this...

CVE-2026-89477

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This vulnerability occurs when the kernel attempts to complete a stream reconfiguration request that has not been fully transmitted, leading to a null pointer dereference. An unprivileged loc...

CVE-2026-89509

A flaw was found in the Linux kernel's RDMA/ionic driver. This vulnerability arises from the driver's incorrect handling of rdmacounter allocations, specifically by not embedding counter driver data as required. This oversight can lead to a NULL pointer dereference when the allocandbind function ...

CVE-2026-89709

A flaw was found in the Linux kernel's lockd and nfsd components. An unguarded dereference of nlmsvcops after the nfsd module is removed can lead to a NULL pointer dereference or a use-after-free condition. This vulnerability could allow a local attacker to cause a denial of service...

CVE-2026-89528

A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send specially crafted Read lists that exceed the page budget. This can lead to a NULL pointer dereference during Direct Memory Access DMA mapping, potentially causing a system crash and a denial of service...