CVE-2026-64444

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted association response frame. This could lead to an out-of-bounds read vulnerability, potentially causing information disclosure or system...

CVE-2026-64358

A flaw was found in the Linux kernel's media component, specifically within the mtk-jpeg driver. An internal function attempts to cancel a background task even when that task is not active on certain system configurations. This can lead to the system logging warning messages, potentially causing...

CVE-2026-64340

A flaw was found in the Linux kernel's legousbtower USB driver. This vulnerability is a use-after-free, which means the system attempts to use memory after it has been released. It occurs due to a timing issue race condition when a USB device is disconnected, potentially leading to system...

CVE-2026-64472

A flaw was found in the Linux kernel's vfio/mlx5 subsystem. This vulnerability arises from non-atomic bitfield operations, where multiple updates to shared data structures can occur concurrently. This race condition may lead to unexpected behavior or data corruption due to inconsistent state,...

CVE-2026-64464

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface sideband functionality. A memory leak occurs in the xhciringtosgtable function because a temporary memory array is not properly released after use. This continuous leakage of memory can lead to system instability and...

kernel: blk-mq: pop cached request if it is usable

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-64342

A flaw was found in the Linux kernel's USB iowarrior driver. This vulnerability, a use-after-free, occurs because write operations are not properly halted when a device disconnects. An attacker could potentially exploit this to cause system instability or execute arbitrary code...

CVE-2026-64485

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA compress module. The sndcomprtasknew function, responsible for creating driver tasks, does not properly handle errors during the validation of Direct Memory Access DMA buffers or file descriptor reservation. This...

CVE-2026-63959

A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...

CVE-2026-63926

A flaw was found in the Linux kernel's sockmap feature. When the bpfmsgpushdata function processes data, it incorrectly calculates the offset for data fragments, leading to an inconsistent memory arrangement. This issue could potentially allow a local attacker to cause data corruption or system...

CVE-2026-63911

A flaw was found in the Linux kernel's xfrm: iptfs component. This vulnerability arises from incorrect handling of runtime data when cloning Security Associations SAs. If a state migration fails, the cloned state can improperly share memory with the original, leading to use-after-free and...

CVE-2026-63870

A flaw was found in the Linux kernel's 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks module. When a non-IPv6 packet is transmitted over a 6LoWPAN interface, the system attempts to process uninitialized data. This can lead to system instability or a denial of service, making the syst...

CVE-2026-63863

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Processing Unit Shared Virtual Memory gpusvm component. This vulnerability is caused by an unbalanced lock and unlock operation, which can lead to system instability. An attacker could potentially exploit this to trigger...

CVE-2026-64017

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-64066

A flaw was found in the Linux kernel's netfs component. The netfsreadtopagecache function does not properly pause the generation of new subrequests when a previously issued subrequest has failed. This oversight can lead to continued resource consumption or incorrect system state, potentially...

CVE-2026-64185

A flaw was found in the Linux kernel's sysfs component. When an attempt to update a sysfs group fails, the system can incorrectly remove an already existing sysfs directory. This unintended removal can lead to a denial of service or system instability by silently destroying critical system...

CVE-2026-64087

A flaw was found in the Linux kernel's pmbus/adm1266 driver. A malformed response from a hardware monitoring device could cause the driver to read beyond the allocated memory buffer. This out-of-bounds read can lead to system instability or denial of service...

CVE-2026-64097

A flaw was found in the Linux kernel's AMD display drm/amd/display component. This vulnerability is caused by improper validation of the GPIO General Purpose Input/Output pin table size. An attacker could exploit this by providing a malformed Video BIOS VBIOS that leads to reading data beyond its...

CVE-2026-63832

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs due to improper handling of Wi-Fi station additions, where the driver fails to adequately verify existing client connections. A remote attacker could exploit this by manipulating Wi-Fi authentication processes,...

CVE-2026-63822

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash,...