CVE-2026-71391

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An off-by-one error can occur when a specially crafted font file is processed due to an improper bounds check. This can cause a heap-based buffer over-read, exposing heap memory contents. Mitigation Do not load untrusted font...

CVE-2026-68134

A flaw was found in the ptps390 module of the Linux kernel. This vulnerability allows the physical clock to be registered even when the necessary facility 28 is not installed or PTFF QPT is unavailable. This improper registration could lead to unexpected system behavior or a denial of service DoS...

CVE-2026-68142

A flaw was found in the geneve component of the Linux kernel. A local attacker, with CAPNETADMIN privileges in a specific network namespace, could bypass intended permission checks. This allows them to modify the configuration of a geneve network device in a different network namespace, potential...

CVE-2026-71474

A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...

CVE-2026-68119

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When the kernel constructs standalone TCP responses with TCP-AO options, padding bytes in the TCP header may be left uninitialized. If the Message Authentication Code MAC length is not four-byte aligned, these...

CVE-2026-68129

A flaw was found in the Linux kernel's gve driver. Under extreme memory pressure, the driver's receive Rx buffer refill process can fail, causing the number of buffers available to hardware to drop below a critical threshold. This can lead to a permanent network queue stall, where the device drop...

CVE-2026-71393

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an improper overflow checking. This can cause an undersized heap allocation and subsequently a heap-based buffer overflow,...

CVE-2026-68140

A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...

CVE-2026-68113

A flaw was found in the Linux kernel's drm/amdgpu/gfx12 component. This vulnerability allowed a local attacker to trigger a kernel crash due to an improper use of the BUGON macro, which is designed to halt the system on critical errors. By replacing BUGON with WARNON, the kernel no longer crashes...

CVE-2026-68118

A flaw was found in the Linux kernel's handling of TCP Transmission Control Protocol connections. A remote attacker could send a specially crafted TCP Reset RST packet during the SYN-RECEIVED state. This could cause the system to prematurely remove connection requests instead of issuing a challen...

CVE-2026-68105

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When the Multimedia Engine Scheduler MES fails to initialize during driver loading, the Kernel Input Queue KIQ ring is incorrectly marked as ready. This can lead to a kernel panic, resulting in a Denial of Service DoS to the system...

CVE-2026-68112

A flaw was found in the drm/amdgpu/gfx9.4.3 component of the Linux kernel. This vulnerability is due to the use of BUGON macros in error handling, which, when triggered by specific error conditions, could cause the kernel to crash. This could result in a Denial of Service DoS for the system...

CVE-2026-68115

A flaw was found in the Linux kernel's drm/amdgpu/gfx10 component. Under certain unexpected conditions, the kernel could crash, leading to a system-wide Denial of Service DoS. This issue has been resolved by preventing the kernel from crashing in these scenarios...

CVE-2026-68116

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module, specifically within its Multicast Database MDB functionality. When an operation to replace the source list of an MDB remote entry fails, the system incorrectly deletes existing sources. This can lead to a situation where...

CVE-2026-68111

A flaw was found in the Linux kernel's amdgpu graphics driver. This vulnerability could lead to a system crash due to an unhandled error condition. By replacing a critical error mechanism with a warning, the kernel is now more resilient, preventing potential Denial of Service DoS situations...

CVE-2026-68104

A flaw was found in the drm/amdgpu component of the Linux kernel. This vulnerability arises from improper memory handling where the pmgenpdremove function is not invoked before freeing acpgenpd memory. A local attacker could exploit this flaw, potentially leading to memory corruption, which may...

CVE-2026-68145

A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...

CVE-2026-68136

A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. An attacker could exploit this by sending specially crafted network packets that cause a double aggregation of flush-marked socket buffers skbs. This issue arises from a missing flush check, which allows...

CVE-2026-71468

A flaw was found in acm-search-v2-api-rhel9. When the getFederationConfig function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub...

CVE-2026-68141

A flaw was found in the afiucv component of the Linux kernel. This vulnerability occurs when the afiucvhscallbacksyn function fails to allocate a child socket, leading to a NULL pointer being passed to iucvsockkill. An attacker could potentially trigger this condition, causing a NULL pointer...

CVE-2026-71475

A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the ClusterID, which is controlled by the spoke, is used directly in the request path without proper validation or URL...

CVE-2026-68110

A flaw was found in the Linux kernel's amdgpu graphics driver, specifically within the sdma4.4.2 component. This vulnerability could allow a local attacker to trigger a system crash by exploiting certain unhandled error conditions. The issue stems from the use of a BUGON macro, which forces a...

CVE-2026-68114

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/gfx12.1 component. Under certain error conditions, the system could encounter a critical error that would cause the kernel to crash. This issue could lead to a Denial of Service DoS, making the system unavailable. The...

CVE-2026-68130

A flaw was found in ksmbd, a kernel module for SMB3 protocol server in the Linux kernel. An authenticated attacker can exploit a vulnerability in the NTLM NT LAN Manager authentication process. By manipulating specific fields in the NTLM authentication blob, an attacker can cause a victim's sessi...

CVE-2026-68131

A flaw was found in the Linux kernel's rbd component. A corrupted reply to an object map update can cause the rbdobjectmapcallback function to process a positive result code, which is not allowed for write operations. This incorrect handling triggers an assertion in rbdobjhandlerequest, leading t...

CVE-2026-68137

A flaw was found in the Linux kernel's X.25 networking component. This vulnerability, a use-after-free, occurs in the x25killbyneigh function when a network socket is prematurely released while still being referenced. A local attacker could exploit this to cause system instability, leading to a...

CVE-2026-68117

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipcskcreate function to leave a dangling pointer to a freed socket object. This...

CVE-2026-68106

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when processing video frames with invalid dimensions, specifically if the width or height is less than 16. Such malformed input can lead to a division by zero error during video decoding operations. A local...

CVE-2026-68146

A flaw was found in the Linux kernel's ftrace tracing subsystem. When a userspace program opens a trace file descriptor and shares it across multiple threads, concurrent write operations can lead to a race condition in the traceparser structure. This can result in corrupted input or undefined...

CVE-2026-68107

A flaw was found in the Linux kernel. Specifically, within the drm/amdgpu/vcn4 component, a time-of-check to time-of-use TOCTOU vulnerability exists. This occurs because the system re-reads the IB parameter length instead of reusing an already obtained value. This could allow a local attacker to...

CVE-2026-68102

A flaw was found in the Linux kernel's drm/amdgpu component, which manages AMD graphics hardware. When the graphics driver is unloaded, it may fail to properly release a memory resource. This oversight can lead to system instability if the driver attempts to reload, causing an error that prevents...

CVE-2026-68108

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

CVE-2026-68125

A flaw was found in the Linux kernel's mac802154 component. A remote attacker, within radio range, could send a specially crafted IEEE 802.15.4 frame with a payload shorter than its authentication tag. This incorrect frame processing can lead to an out-of-bounds read during cryptographic...

CVE-2026-71845

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

CVE-2026-68126

A flaw was found in the Linux kernel's mac802154 component, which handles wireless communication. A local attacker with network administration privileges could exploit a timing vulnerability. By rapidly initiating and terminating network interface operations, the attacker could trigger a...

CVE-2026-68121

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

CVE-2026-71467

A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an Upgrade: websocket header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the /federated...

CVE-2026-68135

A flaw was found in the Linux kernel's hip04 network driver. This vulnerability occurs when the buildskb function fails during the hip04rxpoll operation. The driver incorrectly proceeds without releasing the network receive RX buffer and its associated Direct Memory Access DMA mapping. This leads...

CVE-2026-68128

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

CVE-2026-68144

A flaw was found in the Linux kernel's Phonet subsystem. When processing Phonet packets, a use-after-free vulnerability exists in the pepgetsb function. This occurs because the function does not correctly handle situations where packet data might be relocated in memory, leading to the use of an...

CVE-2026-68100

A flaw was found in ksmbd in the Linux kernel. An authenticated client can provide a crafted security descriptor that is not properly validated when copying Access Control Entries ACEs in the setntacldacl function. This improper validation leads to an out-of-bounds heap read, allowing the client ...

CVE-2026-68122

A flaw was found in the Linux kernel's ovpn module. A race condition in the TCP error handling paths can lead to a reference count leak. This occurs when an internal object's reference count is incremented twice but decremented only once, preventing the object from being properly released. Over...

CVE-2026-68147

A flaw was found in the Linux kernel's fscrypt component. When a cryptographic key blkcryptokey is being evicted, the system attempts to dynamically allocate memory. If this allocation fails, the key may be freed prematurely without proper eviction, leading to a use-after-free vulnerability. This...

CVE-2026-68138

A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...

CVE-2026-68143

A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol network component. A race condition exists during an MTU Maximum Transmission Unit change when the system reallocates receive buffers. This can allow a remote attacker to trigger an out-of-bounds write or write to a freed...

CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

CVE-2026-71392

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an unguarded addition during memory allocation. This can cause an undersized heap allocation and subsequently a heap-based...

CVE-2026-71394

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. The parser can return a structure with uninitialized heap memory when a specially crafted font file is processed due to an improper validation. This can lead to the use of uninitialized heap data, potentially resulting in...

CVE-2026-68148

A flaw was found in the Linux kernel's fscrypt component. A missing superblock check in the findorinsertdirectkey function could allow inodes from different filesystems to incorrectly share encryption keys. This can lead to a use-after-free vulnerability, potentially allowing an attacker to cause...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...