CVE-2026-80758

A flaw was found in the Linux kernel's futex subsystem. A race condition in the futexprivatehashput function allows a local attacker to trigger a use-after-free vulnerability. This occurs when a reference to a private hash is dropped prematurely, enabling another process to free the memory while...

CVE-2026-80762

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the system suspend process, a timing issue can occur where the hciupdateeventfiltersync function attempts to access memory that has already been released. This Use-After-Free UAF vulnerability could allow a local attacker to...

CVE-2026-80830

A flaw was found in the Linux kernel's USB subsystem. A race condition in the usbwakeupnotification function could allow a local attacker or a malicious USB device to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service by causing the system to...

CVE-2026-89983

A flaw was found in the Linux kernel's I2C subsystem. A race condition during adapter removal allows a local user to cause a Denial of Service DoS by crashing or hanging the system. When an I2C adapter is being deleted while a user concurrently creates a device through the sysfs interface, the...

CVE-2026-89995

A flaw was found in the Linux kernel's Direct Memory Access DMA subsystem. A local user can cause a Denial of Service DoS or potential memory corruption by interacting with affected device drivers. This issue occurs because an internal allocation helper function returns a virtual memory address...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-98862

A flaw was found in the Linux kernel's audit subsystem. A race condition can occur when an audit directory tree is removed while another process evaluates executable audit rules, causing the kernel to access memory after it has been released a use-after-free condition. A local user with audit...

CVE-2026-98860

A flaw was found in the Linux kernel's Human Interface Device HID subsystem. This flaw can lead to information disclosure when hardware communication errors occur. Due to an improper integer comparison in the Berkeley Packet Filter BPF handler, negative error return codes are mistakenly treated a...

CVE-2026-89897

A flaw was found in the Linux kernel's media subsystem, specifically within the Consumer Electronics Control CEC framework. The cecreceivenotify function reads the exclusive follower pointer without proper locking, creating a race condition. This lack of serialization during exclusive follower...

CVE-2026-89899

A flaw was found in the Linux kernel's Consumer Electronics Control CEC subsystem. This vulnerability occurs when a transmit operation is interrupted, leading to a delayed work item remaining active after its associated data has been freed. A local attacker could potentially exploit this...

CVE-2026-98845

A flaw was found in the Linux kernel's Trusted Platform Module TPM subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and...

CVE-2026-98842

A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...

CVE-2026-98838

A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A local attacker can exploit this issue by altering font setting...

CVE-2026-98834

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service DoS via a kernel crash. During the setup of One-Time Programmable OTP non-volatile memory devices, an initialization failure...

CVE-2026-98833

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A local user could exploit this flaw during device access...

CVE-2026-98831

A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service DoS through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fails to release previously acquired fragment references durin...

CVE-2026-98824

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission TX status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata can trigger an out-of-bounds memory access, potentially...

CVE-2026-98823

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service DoS by crashing the system. During a channel switch, the kernel improperly manages memory ownership when merging wireless scan entries that...

CVE-2026-98822

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point AP virtual local area networks VLANs. Due to improper station lookup logic, the kernel matches recipient devices...