CVE-2026-74373

A flaw was found in the Linux kernel's md/raid1 and raid10 components. This flaw involves incorrect accounting of block I/O bio operations for split cloned bios. When a failed bio is split and resubmitted, the system may either double count or miss accounting for these bios. This can lead to...

CVE-2026-74309

A flaw was found in the Linux kernel's vdpa/octeonep component. This vulnerability involves an incorrect mapping of Interrupt Request IRQ numbers to processing rings within the interrupt handler. The system incorrectly calculates the IRQ index, which can lead to misdirected or mishandled...

CVE-2026-74358

A flaw was found in the ext4 filesystem component of the Linux kernel. On 64-bit systems, an incorrect mapping of wait/wake bits during fast commits could lead to unexpected behavior. This issue, if triggered, may result in system instability or data integrity problems...

CVE-2026-72152

A flaw was found in the Linux kernel's Trusted Platform Module TPM TIS SPI driver. The waiteventinterruptibletimeout function incorrectly evaluates its condition after setting the task state, which can trigger a warning when debugging atomic sleeps and using the Interrupt Request IRQ wait path...

CVE-2026-72009

A flaw was found in the Linux kernel. The MIPI DSI Display Serial Interface and CSI Camera Serial Interface power domains share control bits for clock and reset. This improper resource management allows one domain to disable shared resources while the other is still active, leading to incorrect...

CVE-2026-72201

A flaw was found in the Linux kernel's New Technology File System NTFS implementation. This vulnerability arises from insufficient validation of index entries when reading index roots or blocks from disk. An attacker could potentially craft a malicious NTFS filesystem, which, when processed by th...

CVE-2026-72244

A flaw was found in the Linux kernel's gpu/buddy subsystem. The tryharder memory allocation fallback mechanism could return a memory range whose starting offset did not match the required minimum block size. This incorrect memory alignment could lead to improper memory handling within the kernel,...

kernel: netfilter: flowtable: strictly check for maximum number of actions

A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system...

CVE-2026-68466

A flaw was found in the Linux kernel's lpc32xxslc driver, which manages NAND flash memory. This vulnerability occurs because the driver fails to properly handle Direct Memory Access DMA transfer timeouts. When a DMA transfer times out, the driver incorrectly reports it as successful and unmaps th...

CVE-2026-68351

A flaw was found in the carl9170 Wi-Fi driver in the Linux kernel. When the firmware sends a command response with a length mismatch, the carl9170cmdcallback function performs an out-of-bounds read. This occurs because the memcpy operation copies more data than the allocated buffer, potentially...

CVE-2026-68417

A flaw was found in the Linux kernel's RDMA/siw component. The siwcreateqp function prematurely publishes a Queue Pair QP before its complete initialization. This allows a Queue Pair Number QPN lookup to access a QP that is still under construction, potentially leading to unexpected behavior or...

CVE-2026-68229

A flaw was found in the Linux kernel's Cedrus media driver. This vulnerability allows an attacker to cause an out-of-bounds read by providing specially crafted H.264 video streams with invalid reference list entries. This could lead to system instability or potentially information disclosure...

CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170txprocessstatus function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing...

CVE-2026-68168

A flaw was found in the Linux kernel's Andrew File System AFS component. The system's directory removal function, afseditdirremove, incorrectly manages memory blocks, specifically block 0. This improper handling could lead to an unstable system state or data integrity issues during directory...

CVE-2026-68091

A flaw was found in the Linux kernel's HID Wacom driver. When the wacomparseandregister function encounters failures after starting the Human Interface Device HID hardware, its error handling path releases Wacom resources without properly stopping the HID hardware. This improper resource manageme...

CVE-2026-68181

A flaw was found in the Linux kernel's mei bus component. A use-after-free vulnerability exists in the meiclbusdevrelease function. This flaw, caused by improper synchronization during cleanup, could lead to memory corruption and system instability...

gawk: gawk: Memory corruption via integer overflow

A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk's internal memory, potentially leading to system instability...

CVE-2026-64444

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted association response frame. This could lead to an out-of-bounds read vulnerability, potentially causing information disclosure or system...

CVE-2026-64358

A flaw was found in the Linux kernel's media component, specifically within the mtk-jpeg driver. An internal function attempts to cancel a background task even when that task is not active on certain system configurations. This can lead to the system logging warning messages, potentially causing...

CVE-2026-64340

A flaw was found in the Linux kernel's legousbtower USB driver. This vulnerability is a use-after-free, which means the system attempts to use memory after it has been released. It occurs due to a timing issue race condition when a USB device is disconnected, potentially leading to system...