CVE-2026-89602

A flaw was found in the erofs Enhanced Read-Only File System component of the Linux kernel. This vulnerability occurs when resizing global buffers, specifically if a resize operation fails after some buffers have already been enlarged. A subsequent retry can lead to memory corruption by attemptin...

CVE-2026-89735

A flaw was found in the Linux kernel's USB gadget MIDI2 driver. The driver fails to properly remove default configuration file system configfs groups during teardown, leading to a resource leak. A local attacker could exploit this vulnerability to cause memory exhaustion, potentially resulting in...

CVE-2026-89619

A flaw was found in the Linux kernel, specifically within the intel-quickspi driver. This vulnerability allows a malicious Human Interface Device HID to send an oversized report, which is then copied into a buffer without proper size validation. This leads to a buffer overflow, a type of memory...

CVE-2026-89653

A flaw was found in the Linux kernel's Ceph filesystem. This vulnerability occurs when a malicious or malformed MDSMap exporttargets entry, controlled by a monitor, contains a rank value that exceeds the maximum allowed CEPHMAXMDS during the decoding process. This can lead to an out-of-bounds...

CVE-2026-80956

A flaw was found in the Linux kernel's dm-pcache component. A crafted image can cause the getcachesegment function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used by cacheksetclose without a proper null check. This can lead to a...

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-89741

A flaw was found in the Linux kernel's media subsystem, specifically within the v4l2-dev component. This vulnerability arises from incorrect error handling in the videoregisterdevice function. If a device registration fails, the system attempts to free the same memory region twice, leading to a...

CVE-2026-89674

A flaw was found in the nfsd component of the Linux kernel. Incorrect calculations in the XDR External Data Representation buffer size within the nfsd4ffencodelayoutget function can lead to two critical issues. An attacker could potentially exploit this to write data beyond the intended memory...

CVE-2026-89718

A flaw was found in the zram component of the Linux kernel. This vulnerability occurs because the writebackstore function calculates table scan bounds before acquiring a necessary lock. If the zram device is reinitialized with a smaller disk size during this window, the function may attempt to...

CVE-2026-89437

A flaw was found in the Linux kernel. The sarprobe function, specifically in its error handling paths, fails to free memory allocated for devicemodeinfo by the parsepackage function, which is called by sargetdata. This oversight leads to a memory leak. Repeated occurrences of this flaw could...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset 스택 버퍼 오버플로 PoC Hunt-Benito 기사의 동반 PoC "GO Without Bounds: CVE-2026-67822 — Tenda W6-S의wifiSSIDset 폼 핸들러의 스택 오버플로". CVE-2026-67822 CVSS 9.8 Critical, CWE-121은 Tenda W6-S 무선 액세스 포인트의 /bin/httpdGoAhead 기반 웹 서버에 있는 /goform/wifiSSIDset 엔드포인트를 구현하는 C 함수...

CVE-2026-89730

A flaw was found in the altera-cvp FPGA driver within the Linux kernel. The alteracvpsendblock function can perform an out-of-bounds read when processing the trailing bytes of an input buffer. This occurs if the buffer ends at a page or scatterlist boundary, causing the function to read past vali...

CVE-2026-89523

A flaw was found in the Linux kernel's MediaTek mt7925 Wi-Fi driver. When the device is reset, suspended, or unregistered, a pending work item mlopmwork can continue to execute. This can lead to the work item accessing memory that has already been freed a use-after-free vulnerability or sending...

CVE-2026-89474

A flaw was found in the Linux kernel's power supply subsystem, specifically within the bq256xx driver. This vulnerability occurs when a USB work item attempts to access a charger object after it has been freed. This timing issue can lead to a use-after-free condition, potentially causing system...

CVE-2026-89463

A flaw was found in the Linux kernel's ucs1002 power supply driver. The driver does not properly cancel a delayed work item during device removal, leading to a use-after-free vulnerability. This issue allows the system to attempt to access memory that has already been freed, which can result in...

CVE-2026-80940

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI Networked Attached Peripheral Interface setup fails, allocated PCI resources are not properly released. This resource leak could potentially lead to a Denial of Service DoS due to resource exhaustion,...

CVE-2026-89656

A flaw was found in libceph within the Linux kernel. This vulnerability allows a local attacker to craft a malformed CRUSH map, which is used for data placement. By doing so, one data bucket can be made to reuse another bucket's memory workspace, leading to an out-of-bounds write. This memory...

CVE-2026-80982

A flaw was found in the Linux kernel's Shared Memory Communications SMC network protocol. A race condition occurs when a network connection is closed while the system is still processing its receive buffer pages. This can lead to a use-after-free vulnerability, where the system attempts to access...

CVE-2026-89747

A flaw was found in the Linux kernel's tracing component. A local attacker could exploit a use-after-free vulnerability, a type of memory corruption, by manipulating the tracepipe functionality. This occurs when the system attempts to read from memory that has already been released, leading to...

CVE-2026-89604

A flaw was found in the Linux kernel's efivarfs component. An unprivileged local user can exploit this by repeatedly calling the statfs handler on the efivarfs mount point. This action triggers a flood of calls to the QueryVariableInfo runtime service, which is particularly costly on x86 systems...