CVE-2026-93758

A flaw was found in Mongoid. An authenticated remote attacker with basic application privileges could exploit an insecure direct object reference in the nested attributes handling. This vulnerability allows the attacker to reference and manipulate record identifiers belonging to other users,...

CVE-2026-97557

A flaw was found in the Linux kernel's Server Message Block SMB client. This flaw allows a remote or slow-responding SMB server to cause a Denial of Service DoS through a kernel crash. When handling opportunistic lock oplock break requests, the client can leak file reference counters if a new...

CVE-2026-97556

A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to a denial of service DoS on systems using multi-user CIFS mount configurations. When processing an opportunistic lock oplock break, an error during tree link lookup prevents the client from releasing an acquired file...

CVE-2026-97555

A flaw was found in the Linux kernel's SMB client. When rewriting a Discretionary Access Control List DACL during file ownership updates, the kernel allocates memory based on the original identifier lengths rather than accounting for larger replacement Security Identifiers SIDs. A local user can...

CVE-2026-97554

A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...

CVE-2026-97512

A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...

CVE-2026-98075

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...

CVE-2026-98074

A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...

CVE-2026-98073

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by assigning conflicting alternative interface names to network devices across different network namespaces. When a non-root network namespace is deleted, the unresolved name conflict prevents the device from...

CVE-2026-98072

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering connection resets or teardowns. Due to a missing memory barrier during transmission release, a race condition can cause the system t...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

CVE-2026-98070

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. Due to improper synchronization during TCP connection path resets, transmit operations can run concurrently while connection state is being modified. An attacker could exploit this timing window during connection...

CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service DoS via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a...

CVE-2026-98068

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition during connection shutdown can lead to a Denial of Service DoS. When connection teardown coincides with a concurrent connection drop or incoming connection, the kernel may fail to complete socket...

CVE-2026-98067

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System. The rolling decompression mechanism used for LZ4-compressed files assumes that data is always copied forward in memory. On certain system architectures, the underlying memory copy operation can copy backward, invalidatin...

CVE-2026-98066

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering an initialization failure. The issue stems from improper resource management in t...

CVE-2026-98065

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user can cause a Denial of Service DoS by creating a hash map lacking key type information and reading it through the BPF file system. Due to missing validation of BPF Type Format BTF metadata, the kernel attempt...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...

CVE-2026-98063

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...

CVE-2026-98062

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel incorrectly treats certain signal tracepoint arguments as trusted memory pointers, even when special non-pointer indicator values are passed during signal delivery. A local user with privileges to attach BPF...

CVE-2026-98061

A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. A privileged local user with the CAPBPF capability can exploit this vulnerability by loading a crafted program that makes a tail call directly from within a callback function. This triggers an inconsistent...

CVE-2026-98059

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This issue allows a local attacker to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the BPF verifier fails to recognize that process-wait tracepoint arguments can be null,...

CVE-2026-98058

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain internal helper functions that pause execution to perform blocking operations were not properly marked as sleepable. A local user with permissions to load BPF programs can invoke these functions within...

CVE-2026-98060

A flaw was found in the Linux kernel. A local user with permissions to load Berkeley Packet Filter BPF programs can cause a Denial of Service DoS or potentially achieve privilege escalation. The BPF verifier fails to prevent resilient lock operations within red-black tree comparison callbacks,...

CVE-2026-98057

A flaw was found in the Linux kernel's tracing ring buffer. The persistent ring buffer validation logic fails to verify that the recorded sub-buffer count matches the expected page count in the metadata. A local attacker capable of manipulating persistent memory metadata could exploit this issue ...

CVE-2026-98056

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver, which can lead to a Denial of Service DoS. When scanning for storage namespaces, the driver iterates through gaps between namespace identifiers individually instead of processing only registered devices. A malicious o...

CVE-2026-98055

A flaw was found in the Linux kernel's Intel Audio Voice Studio AVS driver. This flaw can lead to a Denial of Service DoS due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not releas...

CVE-2026-98054

A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS sound driver. When an error occurs while opening the driver's debugfs trace interface, the kernel fails to release a previously acquired module reference count. A local user with access to the interface can exploit this issue by...

CVE-2026-98053

A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS driver. This flaw may allow a local attacker to cause a Denial of Service DoS or expose sensitive kernel memory by triggering an out-of-bounds read. The issue occurs when the driver processes audio topology settings without...

CVE-2026-98052

A flaw was found in the Linux kernel's Broadcom ASP2.0 Ethernet driver. This vulnerability can result in a Denial of Service DoS or system instability due to premature memory deallocation. When handling fragmented network packets, the driver fails to properly clear state flags before reusing...

CVE-2026-97553

A flaw was found in the Linux kernel's XFS file system. When unmounting a file system, the health monitoring subsystem fails to acquire the necessary lock before inserting an unmount event into the event list. A local user with permissions to unmount file systems could trigger this race condition...

CVE-2026-98051

A flaw was found in the Linux kernel's Broadcom ASP 2.0 Ethernet driver. When evaluating whether sufficient transmit buffer space is available for outgoing packets, the driver fails to properly verify all required consecutive descriptor slots. A local user could exploit this flaw by generating...

CVE-2026-98049

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When executing a 32-bit atomic compare-and-exchange operation on arena memory, the kernel fails to properly clear zero-extend the upper half of the target register as required by BPF specifications. A local attacker with...

CVE-2026-97552

A flaw was found in the Linux kernel's XFS file system. An uninitialized variable in the deferred operation handling routine can cause the kernel to return an indeterminate value when processing empty work items during online repair. A local user initiating or interacting with file system repair...

CVE-2026-98050

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a race condition in the Mellanox switch mlxsw driver. When handling Precision Time Protocol PTP traffic, the garbage-collection workqueue and the network polling thread may concurrently modify shar...

CVE-2026-98048

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability may allow a local user to achieve privilege escalation or cause a Denial of Service DoS through memory corruption. During helper call optimizations, the verifier improperly rewrites instruction sequence...

CVE-2026-97551

A flaw was found in the Linux kernel's XFS file system. A local user can trigger a Denial of Service DoS by forcing an unexpected filesystem shutdown. When updating parent pointer attributes, the kernel fails to properly initialize the block reservation counter, causing an integer underflow durin...

CVE-2026-87482

A cleartext transmission of sensitive data flaw was found in the HttpsUpgrades component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503736006...

CVE-2026-87517

A race condition flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517581661...

CVE-2026-98047

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier, which may allow a local attacker to cause a denial of service DoS or potentially escalate privileges. When verifying red-black tree rbtree callbacks, the verifier fails to enforce callback restrictions across nested...

CVE-2026-98045

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain stack retrieval helper functions can perform blocking filesystem operations, but were not properly marked as sleepable. A local user with permission to load BPF programs could exploit this flaw by invoking these...

CVE-2026-98046

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfbtffindbynamekind helper function was not properly marked as sleepable capable of pausing execution while waiting for resources, allowing it to be executed in non-sleepable contexts such as timer callbacks. A loca...

CVE-2026-98044

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...

CVE-2026-97549

A flaw was found in the Linux kernel's XFS file system. An incorrect block calculation during the online repair of shortform directories and extended attributes causes transaction space to be under-reserved. A local user capable of triggering metadata repair operations can exploit this flaw to...

CVE-2026-98043

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly assumes that certain pointer types are non-null without accounting for unbounded offsets that can wrap around to zero at runtime. A local user with permissions to load BPF programs can exploit thi...

CVE-2026-98042

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local user with permissions to load BPF programs could exploit this vulnerability to achieve privilege escalation or cause a denial of service DoS. The issue stems from improper handling of register states during...

CVE-2026-97548

A flaw was found in the Linux kernel's XFS file system. A local user can cause a Denial of Service DoS or system crash through an out-of-bounds memory access when processing large real-time reverse-mapping or reference count data structures. The issue occurs because the size calculation for...

CVE-2026-65412

A flaw was found in webkitgtk. Improper input validation can lead to a null pointer dereference, an error that occurs when software attempts to access an invalid memory location. By convincing a user to process specially crafted web content, a remote attacker could trigger an application crash,...

CVE-2026-98041

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly predicts that 32-bit conditional branch comparisons between a pointer and zero are always taken, failing to account for valid pointer values whose lower 32 bits can be zero. A local attacker could...

CVE-2026-98040

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. When validating conditional jump operations using register comparisons against null values, the verifier fails to properly track register precision across different execution paths. A local user capable of loading BPF...