EUVD-2026-93198

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

CVE-2026-98268

The Linux kernel contains a vulnerability where a null pointer dereference occurs within the perf subsystem. Specifically, a module unload event with an active perf connection causes __pmu_detach_event() to set event->pmu to null. When the connection is subsequently closed, _free_event() calls...

EUVD-2026-93196

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmudetachevent...

CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: f...

EUVD-2026-93171

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: Fix potential NULL pointer dereference" changed the check to test for the ops pointer instead of the signaled bit to avo...

CVE-2026-98243

The Linux kernel contains a vulnerability in the dma-buf/dma-fence component. Specifically, a previous fix intended to prevent a NULL pointer dereference by checking the ops pointer instead of the signaled bit inadvertently caused many dma_fence implementations to lose RCU protection after signal...

CVE-2026-98220

The Linux kernel contains a vulnerability in the sched_ext framework where the COMPAT kfunc wrappers scx_bpf_select_cpu_and() and scx_bpf_dsq_insert_vtime() cause a NULL pointer dereference when processing tasks with no scheduler. Specifically, these wrappers attempt to report errors to a non-exi...

CVE-2026-98220

In the Linux kernel, the following vulnerability has been resolved: s...

EUVD-2026-93148

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

CVE-2026-98202

The Linux kernel contains a vulnerability where transport drivers (rmi_i2c and rmi_spi ) trigger a General Protection Fault (GPF) during system power management events. The issue occurs when rmi_driver_suspend() or rmi_driver_resume() is called on an unbound rmi_dev device. Because the transport ...

EUVD-2026-93131

In the Linux kernel, the following vulnerability has been resolved: Input: socbuttonarray - check btnsdesc-package.count Check that btnsdesc-package.count is not 0 before accessing btnsdesc-package.elements0...

EUVD-2026-93130

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers such as rmii2c and rmispi invoke rmidriversuspend and rmidriverresume on their child rmidev device during system power management events. Howeve...

EUVD-2026-93110

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later. Setting the flag on a down interface is still allowed, so the driver i...

CVE-2026-98182

The Linux kernel contains a vulnerability in the mac80211 wifi stack where setting a monitor interface to active on a down interface results in a kernel NULL pointer dereference . The issue occurs because a monitor interface only receives a TXQ if created active; however, the system still allows ...

CVE-2026-98178

The Linux kernel contains a vulnerability in the drm/amdgpu driver where the function amdgpu_amdkfd_clear_kfd_mapping() incorrectly assumes a non-NULL kfd_dev has a fully populated node array. This issue occurs when KFD device initialization fails after the probe phase, specifically on Polaris sy...

EUVD-2026-93106

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-57545

A memory corruption vulnerability exists in the graphics component due to an untrusted pointer dereference . The flaw occurs during the execution of graphics command lists when the system processes draw objects of an incorrect type . This issue allows for high impact consequences regarding confid...

CVE-2026-57545 Untrusted Pointer Dereference in Graphics

Memory corruption when processing draw objects of incorrect type during graphics command list execution...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V：vmswitch 中的多个漏洞 在处理 set OID 请求时，WPP 代码中存在多个 bug，其中一个允许解引用（读访问）攻击者控制的指针，其余的导致越界读访问。此仓库包含用于触发已识别问题的概念验证代码。 可在 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2021-001/ 找到问题的完整技术描述。...

CVE-2024-26475

CVE-2024-26475 Autores Sherlock Fang, Vlad Tronciu, Ayam Babu Descripción Un problema en radareorg radare2 v.0.9.7 a v.5.8.6 y corregido en v.5.8.8 permite a un atacante local causar una denegación de servicio a través de la función grubsfsreadextent. Vectores de ataque Crear un payload para que...