CVE-2026-39879

A flaw was found in syslog-ng. An attacker on an adjacent network can exploit a missing sanitization call in the afsqlddrunquery function, leading to a SQL injection vulnerability. This vulnerability, when the SQL driver is manually configured, can result in a denial of service and allow for...

CVE-2026-64053

A flaw was found in the Linux kernel's block integrity subsystem. Incorrect handling of bio integrity vector counts in the biointegritycopyuser function can lead to an out-of-bounds read during write operations. This vulnerability may allow a local attacker to cause a denial of service or...

CVE-2026-64064

A flaw was found in the Linux kernel's netfs component. When a streaming write operation is performed, a memory page folio can remain marked as 'dirty' even after the associated data is removed by a file truncation. If this dirty page is subsequently accessed through a memory-mapped file mmap, th...

CVE-2026-64066

A flaw was found in the Linux kernel's netfs component. The netfsreadtopagecache function does not properly pause the generation of new subrequests when a previously issued subrequest has failed. This oversight can lead to continued resource consumption or incorrect system state, potentially...

CVE-2026-64040

A flaw was found in the Linux kernel's cachefiles subsystem. When the vfsmkdir function fails, the system does not correctly extract the error code from the returned error pointer. This improper handling can lead to a null pointer being returned instead of a valid error, potentially causing a...

CVE-2026-64110

A flaw was found in the Linux kernel's igc driver, which handles Intel Gigabit Ethernet devices. When the igcfpeinittxdescriptor function fails to initialize a transmit descriptor, an allocated socket buffer skb is not properly released. This oversight leads to a memory leak within the kernel. Ov...

CVE-2026-64039

A flaw was found in the Linux kernel's display snapshotting component. The system's snapshotting code incorrectly handles memory alignment for display data, leading to a significant memory overallocation. This vulnerability could allow a local attacker to cause a denial of service DoS by consumin...

CVE-2026-64079

A flaw was found in the Linux kernel's netfilter xtables component. A race condition occurs when a network namespace netns table is registered, making it visible with a null operations ops pointer. If a pernet exit operation runs concurrently, it can attempt to unregister the table using this nul...

CVE-2026-26199

A flaw was found in HDF5, a library used for managing large datasets. This vulnerability occurs when a specific function, H5Igetname, is called with an invalid size parameter, leading to a buffer underflow. An attacker could exploit this by providing specially crafted input, potentially causing t...

CVE-2026-64143

A flaw was found in the Linux kernel's Uniwill laptop driver. This vulnerability allows a local user to potentially cause permanent damage to the battery on certain older Uniwill laptop models. The issue arises when the battery charging limit feature is enabled through a 'force' module parameter,...

CVE-2026-64131

A flaw was found in the Linux kernel's memory management subsystem. The unmapping process for device-private and exclusive memory pages incorrectly checks if a virtual memory area VMA is anonymous. This can lead to spurious warnings during process teardown when a folio is part of a private...

CVE-2026-64188

A flaw was found in the Qualcomm rmnet driver within the Linux kernel. The rmnetdellink function improperly frees an endpoint while Read-Copy-Update RCU readers may still hold a reference to it. This use-after-free vulnerability allows a local attacker to trigger a system crash, resulting in a...

CVE-2026-64088

A flaw was found in the Linux kernel's batman-adv component. An integer overflow vulnerability exists where the 'ttbufflen' variable, intended to be a positive length, can become a negative value. This occurs when a large value is assigned, causing it to wrap around. This incorrect negative value...

CVE-2026-64103

A flaw was found in the Linux kernel's ISCI IntelR C600 Series Chipset Storage Control Unit SCSI driver. This vulnerability occurs during device removal, where a timing issue can allow the system to attempt to use memory that has already been released. This 'use-after-free' condition could be...

CVE-2026-64093

A flaw was found in the batman-adv component of the Linux kernel. A race condition exists where a timer can be re-armed after its associated reference has been removed during cleanup. This can occur when batadvtpsendercleanup attempts to shut down a timer, but a separate execution context re-arms...

CVE-2026-26197

A flaw was found in HDF5, a high-performance library and file format specification. A remote attacker can exploit this vulnerability by providing a maliciously altered HDF5 file. If the file's array datatype has inconsistent size, element count, or element size, it can trigger an out-of-bounds...

CVE-2026-64036

A flaw was found in the Linux kernel. A local attacker with specific system privileges could exploit a vulnerability in the cgroup/rstat component. By manipulating a function that processes CPU Central Processing Unit statistics, an attacker could cause an out-of-bounds write. This could lead to ...

CVE-2026-64185

A flaw was found in the Linux kernel's sysfs component. When an attempt to update a sysfs group fails, the system can incorrectly remove an already existing sysfs directory. This unintended removal can lead to a denial of service or system instability by silently destroying critical system...

CVE-2026-64130

A flaw was found in the Linux kernel's memory management subsystem. When the initonfree feature is enabled, the system may fail to properly initialize memory tags for 'huge zero folios' large blocks of memory filled with zeros before they are mapped to user space. This oversight can lead to the...

CVE-2026-64114

A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAPNETRAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length IHL. This can lead to an out-of-bounds memory access when the packet is processed by certai...

CVE-2026-64177

A flaw was found in the Linux kernel's Phonet Pipe End Point PEP protocol. This vulnerability arises from an inconsistent lock state when the pepdorcv function forwards a packet to a child socket. Specifically, the child socket's lock can be acquired with Bottom Halves BH enabled in one execution...

CVE-2026-64191

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

CVE-2026-64081

A flaw was found in the Linux kernel's ARM Firmware Framework for Arm armffa component. This vulnerability arises from insufficient validation of framework notification message layouts. A local attacker, by providing specially crafted firmware data in the shared RX buffer, could trigger an...

CVE-2026-64190

A flaw was found in the Linux kernel's team driver. A local attacker with CAPNETADMIN capabilities could exploit a race condition during a team device mode change. This occurs when the teamchangemode function clears internal operation pointers before safely restoring them, while the teamxmit...

CVE-2026-64206

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP subsystem. A local attacker could trigger a deadlock during connection teardown due to a circular locking dependency between l2capconndel and processpendingrx functions. This vulnerability can lead...

CVE-2026-64135

A flaw was found in the Linux kernel's pmbus/adm1266 driver. This vulnerability occurs because the adm1266nvmemreadblackbox function uses a small, fixed-size buffer to read data from an I2C Inter-Integrated Circuit device. If the device sends more data than the buffer can hold, it causes a buffer...

CVE-2026-64149

A flaw was found in the Linux kernel's Direct Memory Access DMA mapping subsystem. On ARM64 systems configured with SPARSEMEM a memory management model, the dmamapresource function could incorrectly identify valid memory-mapped input/output MMIO addresses as random access memory RAM. This false...

CVE-2026-64207

A flaw was found in the Linux kernel's DualPI2 Dual-rate PI2 queue discipline. This vulnerability arises from incorrect accounting of Generic Segmentation Offload GSO backlog, where the parent queue such as QFQ - Hierarchical Fair Queueing miscalculates the number of queued packets. This...

CVE-2026-64184

A flaw was found in the Linux kernel's Data Access MONitor DAMON sysfs schemes. The damonsysfsmemcgpathtoid function does not correctly release a cgroup reference, leading to a resource leak. This vulnerability could allow a local attacker to exhaust system resources, potentially causing a denial...

CVE-2026-64187

A flaw was found in the Linux kernel's XFS filesystem log recovery component. A local attacker could exploit this vulnerability by crafting a malicious XFS log. When the system attempts to recover from this log, it triggers a null-pointer dereference, which can lead to a system crash. This result...

CVE-2026-63854

A flaw was found in the Linux kernel's AMDGPU driver, specifically within the Video Core Next VCN version 3.0 encoder and decoder rings. These rings do not support 64-bit user fence writes. A local user could trigger this by attempting to submit commands with 64-bit user fences, which would resul...

CVE-2026-63855

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN driver. The VCN encoder and decoder rings do not support 64-bit user fence writes. A local attacker could exploit this by submitting commands with unsupported 64-bit user fences, which could lead to system instability or a denial o...

CVE-2026-63853

A flaw was found in the Linux kernel's AMD GPU Video Core Next VCN driver. This vulnerability arises because the VCN encoder and decoder rings, responsible for video processing, do not support 64-bit user fence writes. An attacker could exploit this by submitting command requests that include the...

CVE-2026-63848

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability occurs because the JPEG rings do not support 64-bit user fence writes. An attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of command submissions and potentially a...

CVE-2026-63846

A flaw was found in the Linux kernel's drm/amdgpu/jpeg component, specifically within the JPEG v3.0 ring. This component does not support 64-bit user fence writes. Consequently, any command submissions CS that attempt to use 64-bit user fences will be rejected, leading to a functional limitation ...

CVE-2026-63847

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This issue occurs because the JPEG hardware component does not properly handle certain types of graphics commands, specifically 64-bit user fence writes. An attacker could craft and submit malicious commands, causing the system to reject...

CVE-2026-63844

A flaw was found in the drm/amdgpu/jpeg module of the Linux kernel. A local user could trigger a Denial of Service DoS by submitting commands with 64-bit user fences to the JPEG rings, which do not support such operations. This could lead to system instability or a crash. The vulnerability has be...

CVE-2026-63843

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit JPEG Joint Photographic Experts Group component. This vulnerability arises because the JPEG v4.0.5 ring does not correctly support 64-bit user fence writes. A local attacker could exploit this by submitting commands with 64-b...

CVE-2026-63840

A flaw was found in the Linux kernel's drm/amdgpu/jpeg driver. The JPEG v5.3.0 ring within this driver does not support 64-bit user fence writes. A local user or application attempting to submit commands with 64-bit user fences to the amdgpu JPEG v5.3.0 ring will have these submissions rejected...

CVE-2026-63839

A flaw was found in the Linux kernel's Lenovo WMI Windows Management Instrumentation helpers. The lwmidevevaluateint function was identified to have a memory leak, where allocated memory was not properly released under certain conditions. This could lead to a gradual consumption of system memory,...

CVE-2026-63836

A flaw was found in the Linux kernel. Specifically, within the batman-adv throughput meter, an arithmetic overflow in the batadvtpupdatecwnd function can cause a division by zero. This issue can lead to a kernel panic, resulting in a Denial of Service DoS for the affected system...

CVE-2026-63835

A flaw was found in the Linux kernel's Better Approach To Mobile Ad-hoc Networking batman-adv module. When a batman-adv interface is disabled, the system can still queue network packets skbs for aggregation. These packets are not properly freed, leading to a memory leak. This can result in resour...

CVE-2026-63833

A flaw was found in the Linux kernel's ntfs3 filesystem driver. An unprivileged local user with write access to an ntfs3 mounted filesystem can exploit a vulnerability by directly modifying internal Windows Subsystem for Linux WSL permission metadata. This manipulation allows the user to gain roo...

CVE-2026-63828

A flaw was found in the Linux kernel's AppArmor security module. A local user, confined by an AppArmor profile that grants send permission but denies connect permission, can bypass the intended security mediation. This bypass occurs when using sendmsg or sendto with the MSGFASTOPEN flag, allowing...

CVE-2026-63827

A flaw was found in the Linux kernel's AppArmor security module. A use-after-free vulnerability exists in the aareplaceprofiles function due to an issue with reference counting during policy data deduplication. This flaw occurs when the system attempts to access memory that has already been freed...

CVE-2026-63825

A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...

CVE-2026-63821

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver for USB. When the rtwusbwriteport function fails to submit a USB Request Block URB, such as during a device disconnect or out of memory conditions, the system does not properly free allocated memory. This oversight leads to memory leaks of...

CVE-2026-63819

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...

CVE-2026-63820

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. This vulnerability occurs when the f2fsreaddatalargefolio function fails to submit a read block I/O bio request if an error is encountered on a subsequent memory page folio. This can cause earlier folios to remain...

CVE-2026-63818

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could...