CVE-2026-93817

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

CVE-2026-93814

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. When a system suspend is initiated while an SPI controller operating in target mode has an active data transfer, the ongoing transfer is not cleanly aborted. This issue allows a local user to cause a Denial of Servi...

CVE-2026-93280

A flaw was found in the Linux kernel's Greybus audio subsystem. An attacker connecting a malicious Greybus device can trigger a Denial of Service DoS or unauthorized information disclosure by providing a crafted audio topology descriptor. Because the driver fails to verify that internal section...

kernel: perf/core: Detach event groups during remove_on_exec

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

CVE-2026-98117

A flaw was found in the Linux kernel's cachefiles subsystem. When processing cache coherency trace events, the system reads fixed-size data from a buffer that may be empty or shorter than expected. A local user could exploit this flaw to trigger an out-of-bounds memory read, resulting in a system...

CVE-2026-93806

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. An attacker within Wi-Fi range could cause a Denial of Service DoS by sending a truncated association response frame. The wireless component accesses status and information fields before verifying that the received management fra...

CVE-2026-93272

A flaw was found in the Linux kernel's Qualcomm Wireless Connectivity Subsystem WCNSS remoteproc driver. When initializing hardware configurations that lack power domain regulators, an incorrect pointer calculation shifts past the bounds of the regulator array. A local privileged user could trigg...

CVE-2026-98109

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs during device registration when background initialization tasks execute before internal structures and locks are fully prepared. A local user can trigger this issue during device setup, causing the system to attem...

CVE-2026-98108

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing Bluetooth Low Energy connection requests in the Logical Link Control and Adaptation Protocol L2CAP layer, channel modes are incorrectly assigned during deferred connection handling. A nearby attacker within Bluetooth rang...

CVE-2026-98107

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user can trigger an out-of-bounds memory write by establishing multiple concurrent Logical Link Control and Adaptation Protocol L2CAP connections. Due to improper channel limit verification, this flaw allows memory corruption tha...

CVE-2026-98103

A flaw was found in the Linux kernel's Internet Group Management Protocol IGMP subsystem. A recursive locking condition can occur when transmitting IGMPv3 reports over network routes configured with IPsec Internet Protocol Security policies, as the kernel attempts to acquire a spinlock that is...

CVE-2026-93267

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. During object deallocation, internal resources associated with a Direct Memory Access Handle DMAH may be freed before the handle is removed from resource tracking. A local attacker can exploit this race condition...

CVE-2026-93264

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver within the Remote Direct Memory Access RDMA subsystem. This vulnerability allows a local user to cause a denial of service DoS or memory corruption by registering a memory region with a specific page count. Due to an incorre...

CVE-2026-4480-POC

CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...

PT-2026-102372

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the process management subsystem to fail to properly release allocated kernel memory before the calling application is terminated. Recommendation...

PT-2026-102336

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can lead to memory corruption within the memory management subsystem. Recommendations Update to version 26.09...

CVE-2026-102004: Out-of-bounds Write

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

ROS-20260928-73-0080

The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ROS-20260928-73-0094

The vulnerability of the scosockkill function in the net/bluetooth/sco.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-102326

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and system file descriptors before the calling application is terminated...