CVE-2026-89589

A flaw was found in the ACPI/APEI/GHES component of the Linux kernel. Incorrect usage of spinlocks in the CXL CPER work registration and unregistration helpers can lead to a deadlock. If a CPU holds a lock while a GHES interrupt arrives on the same CPU, the interrupt handler will spin on the held...

CVE-2026-89535

A flaw was found in the svcrdma module of the Linux kernel. A use-after-free vulnerability can occur due to an incorrect order of operations during the teardown of an RDMA Remote Direct Memory Access transport. If a device unregistration process happens concurrently, it can attempt to access a...

CVE-2026-80991

A flaw was found in the Linux kernel's net: ravb module. A race condition exists during the Precision Time Protocol PTP clock teardown. This allows the ravbptpinterrupt function to attempt to use a PTP clock after it has been freed by ptpclockunregister, leading to a use-after-free vulnerability...

CVE-2026-80938

A flaw was found in the Linux kernel, specifically within the mt7615 Wi-Fi driver. A deadlock can occur during system suspend operations when the suspend process attempts to acquire a mutex a locking mechanism while simultaneously waiting for a work item macwork that also requires the same mutex...

CVE-2026-89488

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

CVE-2026-89465

A flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task can attempt to access memory that has already been...

CVE-2026-89443

A flaw was found in the Linux kernel's platform/x86 ISST module. The isstifgetperflevelmask and isstifgetbasefreqmask functions fail to validate a user-provided 'level' parameter. A local attacker could exploit this by providing an invalid 'level' value, leading to an out-of-bounds read from the...

CVE-2026-80984

A flaw was found in the net/smc component of the Linux kernel. When a link group terminates while a socket is waiting in smcclosestreamwait, a NULL pointer dereference can occur during the SMC-D teardown path. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-89696

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote client can exploit this by sending a specially crafted NFS COMPOUND request. This request, when processed, can lead to a NULL pointer dereference in the nfsd kthread, causing the system to crash and resulting in ...

CVE-2026-89677

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When creating files, the dentrycreate function could return an unexpected directory entry dentry. This could lead to a previously stored dentry being prematurely freed and then used again, potentially causing memory corruptio...

CVE-2026-80942

A flaw was found in the Linux kernel's rtlwifi driver for rtl8192du. Specifically, a memory allocation made during the initialization of shared data was not consistently freed in error handling paths. This could result in a memory leak, potentially leading to system instability or a Denial of...

CVE-2026-89478

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An authenticated attacker could exploit a timing window during the removal of an SCTP transport. This could lead to the system attempting to read from freed memory, potentially causing a denial of...

CVE-2026-80949

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. The memory allocated for a buffer is not properly released in certain error handling paths within the brcmfsdioreadcontrol function. This improper memory management can lead to a memory leak, potentially causing system instability or a...

CVE-2026-89602

A flaw was found in the erofs Enhanced Read-Only File System component of the Linux kernel. This vulnerability occurs when resizing global buffers, specifically if a resize operation fails after some buffers have already been enlarged. A subsequent retry can lead to memory corruption by attemptin...

CVE-2026-89735

A flaw was found in the Linux kernel's USB gadget MIDI2 driver. The driver fails to properly remove default configuration file system configfs groups during teardown, leading to a resource leak. A local attacker could exploit this vulnerability to cause memory exhaustion, potentially resulting in...

CVE-2026-89619

A flaw was found in the Linux kernel, specifically within the intel-quickspi driver. This vulnerability allows a malicious Human Interface Device HID to send an oversized report, which is then copied into a buffer without proper size validation. This leads to a buffer overflow, a type of memory...

CVE-2026-89653

A flaw was found in the Linux kernel's Ceph filesystem. This vulnerability occurs when a malicious or malformed MDSMap exporttargets entry, controlled by a monitor, contains a rank value that exceeds the maximum allowed CEPHMAXMDS during the decoding process. This can lead to an out-of-bounds...

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-80956

A flaw was found in the Linux kernel's dm-pcache component. A crafted image can cause the getcachesegment function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used by cacheksetclose without a proper null check. This can lead to a...

CVE-2026-89741

A flaw was found in the Linux kernel's media subsystem, specifically within the v4l2-dev component. This vulnerability arises from incorrect error handling in the videoregisterdevice function. If a device registration fails, the system attempts to free the same memory region twice, leading to a...