CVE-2026-93185

A flaw was found in the Linux kernel's audio subsystem, specifically within the SoundWire SDW driver for the rt700 codec. This vulnerability arises when a SoundWire device is removed, as the system may fail to properly cancel all pending tasks associated with the device. Consequently, an active...

CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

CVE-2026-100831

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: UI Events & Focus Handling component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-104030

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash a...

CVE-2026-100815

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securi...

CVE-2026-71299

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

CVE-2026-71298

A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database. Mitigation To mitigate this...

CVE-2026-102282

A flaw was found in adm-zip. This vulnerability allows privilege escalation when untrusted archives are extracted with original file permissions enabled. The library fails to filter out special Unix execution flags, such as setuid or setgid, from extracted files. If an administrative process...

CVE-2026-19445

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

CVE-2026-90077

A flaw was found in the Linux kernel's network net subsystem. An issue in the copynetns error handling path allows for resources allocated during network namespace creation to leak. This occurs because the preinitnet function returns prematurely, preventing proper resource deallocation. A local...

CVE-2026-90390

A flaw was found in the Linux kernel's md/bitmap component. When the backlogstore function is called, it suspends the array before verifying the existence of a write-mostly device. If such a device is not found, the error handling path fails to resume the array, leaving it in a suspended state...

CVE-2026-90126

A flaw was found in the Linux kernel's Real-Time Clock RTC pcf8563 driver. The pcf8563clkoutregisterclk function registers a clock provider without properly unregistering it when the device is unbound or the module is reloaded. This oversight causes a continuous leak of memory and object...

CVE-2026-90194

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI scan module. When a device fails to add, the system's rollback process does not properly clean up allocated bus IDs and instance numbers. This oversight can lead to a resource leak, potentially causing a Denial...

CVE-2026-90283

A flaw was found in the Linux kernel's hugetlbfs huge page file system component. When mounting hugetlbfs with specific size options, an error during root directory entry creation could lead to a subpool of huge pages not being properly released. This resource leak could allow a local attacker to...

CVE-2026-90213

A flaw was found in the FireWire core component of the Linux kernel. In the buildtree function's error path, node instances can remain in a local linked list when the function returns after detecting an invalid value in the self ID sequence. This memory leak could allow a local attacker to consum...

CVE-2026-90411

A flaw was found in the nvme-fc component of the Linux kernel. When the rspiu mapping fails during the nvmefcinitrequest function, the cmdiu DMA mapping is not properly unmapped. This oversight leads to a memory leak, which could potentially be exploited by a local attacker to cause a denial of...

CVE-2026-93145

A flaw was found in the Linux kernel's Qualcomm QCOM Generic Power Domain Controller GDSC driver. When a GDSC provider is unregistered, the driver fails to properly remove generic power domain entries from a global list. This oversight can lead to dangling entries, causing subsequent attempts to...

CVE-2026-90138

A flaw was found in the Linux kernel's vsock implementation. A local attacker can trigger a failed self-connect on a vsock socket, which leaves a stale error state. Subsequent legitimate connection attempts to the same socket are then incorrectly rejected, leading to a Denial of Service DoS. This...

CVE-2026-90182

A flaw was found in the Linux kernel's blk-iocost component. When policy data is freed, the system may fail to clear a delay state, causing the block cgroup a mechanism for resource management to remain marked as congested. This persistent congestion can lead to a significant reduction in...

CVE-2026-90415

A flaw was found in the Linux kernel's RDMA/cxgb4 driver. This vulnerability occurs when the system fails to properly free a Steering Tag STAG index after an unsuccessful attempt to write to adapter memory. This leads to a resource leak, which could be exploited by a local attacker to cause a...

CVE-2026-90402

A flaw was found in the Linux kernel's Mobile Host Interface MHI bus driver. When a controller device fails to create its associated system file sysfs during registration, the device is not properly unregistered. This improper cleanup can lead to a resource leak, potentially causing system...

CVE-2026-90346

A flaw was found in the Linux kernel's nl80211 Wi-Fi subsystem. This vulnerability allows for a memory leak during the processing of color-change beacon data. Specifically, a parsing failure can occur without proper cleanup of allocated memory. This can lead to resource exhaustion, potentially...

CVE-2026-90330

A flaw was found in the Linux kernel's logitech-hidpp driver. During the initialization of a force-feedback device, if certain memory allocations fail, the driver does not properly clean up previously allocated resources. This improper resource management could lead to a resource leak, potentiall...

CVE-2026-90267

A flaw was found in the Linux kernel's SCSI subsystem. When handling UNMAP and WRITE SAME commands, a memory leak can occur if the scsiallocsgtables function fails after a special payload page has been allocated. This oversight prevents the proper deallocation of the page, leading to a memory lea...

CVE-2026-90253

A flaw was found in the Linux kernel's Bluetooth Management MGMT component. This vulnerability occurs when a mesh send cancel command is cancelled, but the associated memory and socket reference are not properly released. This oversight can lead to a resource leak, potentially allowing a local...

CVE-2026-90252

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. When a Host Controller Interface HCI command is cancelled, the associated memory is not properly freed, leading to a memory leak. This issue can also prevent the management socket from being released, potentially...

CVE-2026-90239

A flaw was found in the Linux kernel's AMD ISP4 driver. When allocating GPU memory, the isp4ifallocfwgpumem function fails to release partially allocated memory pools if an error occurs during the process. This memory leak could lead to system instability or a Denial of Service DoS over time, as...

CVE-2026-90233

A flaw was found in the Linux kernel's nvme-pci driver. This vulnerability occurs when descriptor Direct Memory Access DMA pools are created during device probing but are not properly released if the probe operation fails. This oversight leads to a memory leak, where dmapool objects are not freed...

CVE-2026-90215

A flaw was found in the Linux kernel's Unsorted Block Images UBI subsystem. When a UBI device is busy and ubidetachmtddev is called, a device reference is not properly released. This oversight prevents the device object from being freed later, potentially leading to a resource leak. An attacker...

CVE-2026-90183

A flaw was found in the Linux kernel's blk-iolatency controller. This vulnerability occurs when the I/O latency controller incorrectly handles the clearing of delay states for I/O groups, particularly when a group without a specific latency target is throttled. This oversight can lead to a...

CVE-2026-90065

A flaw was found in the Linux kernel's net/smc component. A local unprivileged user can exploit this vulnerability by repeatedly attempting to create IPPROTOSMC sockets while a BPF Berkeley Packet Filter program denies the creation. This leads to a memory leak, allowing the user to consume...

CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

CVE-2026-93082

A flaw was found in the Linux kernel's armscmi firmware. When the mailboxchansetup function attempts to acquire an additional P2A receiver channel after successfully acquiring the primary channel, a failure in the subsequent request can leave the primary channel allocated. This resource managemen...

CVE-2026-98101

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition in the ip6mcsource function allows concurrent packet processing routines to observe inconsistent multicast source filter lists when entries are modified in place. A local user could exploit this flaw by changing...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-93322

A flaw was found in BuildKit. This vulnerability can lead to a Denial of Service DoS when a malicious build frontend submits a specially crafted low-level builder LLB definition. Processing this definition causes the build daemon to panic and terminate unexpectedly, interrupting all active build...

CVE-2026-93319

A flaw was found in BuildKit. An attacker using a malicious external build frontend can trigger a Denial of Service DoS by sending requests through the internal API. This request sequence induces a data race condition, causing the BuildKit daemon to crash unexpectedly and interrupt build processe...

CVE-2026-93317

A flaw was found in BuildKit. An unauthenticated remote attacker controlling a container registry or Open Container Initiative OCI blob source can provide data that does not match its claimed cryptographic digest. Because BuildKit caches the resulting snapshot under the claimed digest, subsequent...

CVE-2026-93316

A flaw was found in BuildKit. This vulnerability allows an authenticated user to cause a Denial of Service DoS by crashing the daemon. When the BuildKit daemon is started with Container Device Interface CDI support disabled, submitting a build that attempts to use CDI devices triggers an unhandle...

CVE-2026-93320

A flaw was found in BuildKit. This vulnerability allows an attacker to trick the build engine into performing file operations on special file inodes where regular files are expected. By providing a crafted build context, an attacker can block build operations leading to a Denial of Service DoS or...

CVE-2026-63268

A flaw was found in LibreOffice Calc. An attacker could craft a spreadsheet document with an external database link that points to local text files. If a user opens the malicious document, the application automatically reads the local file contents into the sheet, leading to unauthorized...

CVE-2026-105517

A use-after-free vulnerability was found in the 9P protocol implementation of NFS-Ganesha. The server does not protect the lifetime of file identifier FID objects when processing concurrent requests. An attacker can race a write operation against a close operation on the same FID, causing one...

CVE-2026-105516

A stack buffer overflow vulnerability was found in the 9P protocol implementation of NFS-Ganesha. The server does not validate the number of path components in a TWALK request against the protocol-defined limit of 16. An attacker can send a specially crafted TWALK message with thousands of path...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

CVE-2026-100805

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Audio/Video component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securi...

CVE-2026-100804

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Preferences: Backend component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2026-71891

A flaw was found in Bouncy Castle. When validating Boneh-Lynn-Shacham BLS signature public keys, the library does not verify that a key is constructed on the canonical elliptic curve. An attacker can exploit this issue by supplying a specially crafted public key defined on an alternate curve. Thi...

CVE-2026-102576

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

CVE-2026-102295

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...