CVE-2026-63798

A flaw was found in the Linux kernel's irqchip/imgpdc driver. This vulnerability occurs because the driver fails to properly free allocated resources and remove interrupt handlers when the driver is removed. This oversight can lead to a use-after-free condition, where the system attempts to acces...

CVE-2026-64164

A flaw was found in the Linux kernel's btrfs filesystem tracepoints. The btrfssyncfile trace event, when called in an atomic context, attempts to perform an operation that can cause the system to sleep. This can lead to a kernel crash, resulting in a Denial of Service DoS for the affected system....

CVE-2026-64082

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's handling of process tracing and signal restoration. When functions like compatriscvgprset or compatrestoresigcontext are invoked, they may process uninitialized stack data if a preceding user data copy operation...

CVE-2026-53403

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. When a new modelist is set from userspace, the fbnewmodelist function fails to ensure that the current framebuffer mode remains valid within the updated list. This can lead to a null-pointer dereference if a console attemp...

CVE-2026-63793

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability, a use-after-free, arises from insufficient protection during concurrent operations on the volume label. A local attacker could exploit this by simultaneously setting and getting the file system label, which may le...

CVE-2026-53401

A flaw was found in the Linux kernel's omapfb display driver. A race condition in the omapfbmmap function, which manages memory mapping, allows for concurrent operations that can lead to a use-after-free vulnerability. This could enable a local attacker to access freed physical memory, potentiall...

CVE-2026-16211

A flaw was found in the Hostname Allocation Handler component of ralph. A remote attacker with low privileges could exploit a race condition by manipulating an internal counter. This could lead to incorrect hostname assignments, impacting the integrity of system resource allocation...

CVE-2026-64171

A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...

CVE-2026-64151

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit page table driver. This vulnerability involves a missing check for the system's fundamental memory page size PAGESIZE within the pgsizebitmap data structure. While an IOMMU configuration with this missing check would...

CVE-2026-15690

A flaw was found in open62541, a widely used open-source OPC UA Open Platform Communications Unified Architecture toolkit. A remote attacker could trigger a denial of service by sending a specially crafted request that manipulates a specific argument within the Shared Client Library. This...

CVE-2026-64186

A flaw was found in the Linux kernel's AMD IOMMU debugfs. Improper handling of user-provided input in the iommummiowrite and iommucapabilitywrite functions can lead to an out-of-bounds memory access. This vulnerability could allow a local attacker to potentially cause a denial of service or...

CVE-2026-64087

A flaw was found in the Linux kernel's pmbus/adm1266 driver. A malformed response from a hardware monitoring device could cause the driver to read beyond the allocated memory buffer. This out-of-bounds read can lead to system instability or denial of service...

CVE-2026-53389

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a TCP-AO key is deleted asynchronously, the system fails to clear pointers to the freed memory. This can allow an attacker to access previously freed memory, potentially leading to information disclosure ...

CVE-2026-53390

A flaw was found in the Linux kernel's ksmbd component. An authenticated client can exploit an out-of-bounds read vulnerability in the smbcheckpermdacl function by providing a specially crafted Access Control Entry ACE. This crafted ACE, when processed during an access check on a share that uses...

CVE-2026-53385

A flaw was found in the Linux kernel's vcscreen module. A race condition in the vcswrite function can lead to a null pointer dereference. This occurs when the vcdata pointer becomes stale during concurrent write operations, and a subsequent call attempts to use the now-invalid pointer. A local...

CVE-2026-53386

A flaw was found in the Linux kernel's ti-ads1298 Analog-to-Digital Converter ADC driver. This vulnerability arises from an incorrect bounds check when accessing the pgasettings array. An attacker could potentially provide a crafted input that leads to an out-of-bounds array access. This could...

CVE-2026-53382

A flaw was found in the Linux kernel's vidtv media driver. This vulnerability occurs because the vidtvmuxpushsi function does not properly handle a NULL return value from vidtvmuxgetpidctx, which can happen if a PID context fails to allocate during initialization. An attacker could potentially...

CVE-2026-53383

A flaw was found in the Linux kernel's ksmbd component. A remote attacker can trigger a NULL pointer dereference by sending a specially crafted compound SMB2 request. This occurs because the session validation logic for non-first operations in a compound request does not properly check the sessio...

CVE-2026-53377

A flaw was found in the Linux kernel's Direct Rendering Manager DRM driver for Qualcomm Snapdragon Mobile MSM graphics processing units GPUs. The GPU recovery mechanism, intended to reset the GPU after a hang, did not always activate when no new tasks were submitted. This oversight could allow th...

CVE-2026-53380

A flaw was found in the Linux kernel's rzv2h-ivc media driver. The driver's buffer list, which is protected by a spinlock, can be concurrently modified because a buffer removal operation listdel is performed outside of the protected section. This concurrent access to the buffer list without prope...

CVE-2026-53379

A flaw was found in the Linux kernel's ov8856 media driver. This vulnerability occurs due to improper error handling where a control handler is not correctly released if an error occurs during its initialization. This oversight could potentially lead to resource exhaustion, which may result in a...

CVE-2026-16207

A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized...

CVE-2026-53375

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/vce component responsible for video encoding. This vulnerability arises when the system attempts to update a memory address using incomplete information, where only a portion of the address is valid. This can result in data...

CVE-2026-53376

A flaw was found in the AMD Kernel Fusion Driver AMDKFD in the Linux kernel. This vulnerability exists in the kfdioctlgetprocessaperturesnew function, where a missing upper bound check for the numofnodes argument could allow a local attacker to provide an excessively large value. This could lead ...

CVE-2026-64182

A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...

CVE-2026-53374

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-64162

A flaw was found in the Linux kernel's Intel Ethernet controller driver idpf. This vulnerability occurs because a critical synchronization mechanism, known as a spinlock, is accessed before it has been properly initialized. An attacker could potentially exploit this timing issue to cause the syst...

CVE-2026-53369

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could craft a malicious UDF image with an oversized Cyclic Redundancy Check CRC length. This could allow the attacker to bypass the integrity validation of UDF descriptors, leading to the acceptance of...

CVE-2026-53370

A flaw was found in the Linux kernel's performance monitoring unit perf/x86/intel related to the validation and configuration of Auto Counter Reload ACR masks. Incomplete validation of user-space ACR masks could lead to incorrect configurations. This issue could result in inaccurate performance...

CVE-2026-53368

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. A race condition exists where the f2fsneeddentrymark function incorrectly reads natentry flags without proper synchronization during checkpoint operations. This can lead to an inconsistent inode block marking state,...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64078

A flaw was found in the Linux kernel's netfilter xtables component. This vulnerability occurs when a userspace process attempts to re-instantiate a netfilter table after the module has been removed. Due to an incomplete unregistration process, the table cannot be properly re-established,...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

CVE-2026-64105

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the virtual Generic Interrupt Controller vgic component. When a virtual CPU vCPU fails to initialize, the private Interrupt ReQuests IRQs allocated for it are not properly released...

CVE-2026-64163

A flaw was found in the Linux kernel's kprobes test module. Improper cleanup of kprobes and kretprobes kernel probes used for debugging and tracing between test runs can lead to registration failures. Repeated execution of the kprobes sanity tests can cause the kernel to crash, resulting in a...

CVE-2026-64100

A flaw was found in the Linux kernel's Direct Rendering Manager drm/msm component. A local attacker could trigger a deadlock vulnerability due to a circular locking dependency when the kswapd0 process attempts to reclaim memory. This can lead to a Denial of Service DoS, causing the system to beco...

CVE-2026-64166

A flaw was found in the Linux kernel's ARM FF-A Firmware Framework for Arm firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this...

CVE-2026-64083

A flaw was found in the Linux kernel's pmbus/adm1266 driver within the hwmon subsystem. The adm1266gpioget and adm1266gpiogetmultiple functions fail to validate the length of responses from I2C block-read operations. A local user or a malicious I2C Inter-Integrated Circuit slave device can exploi...

CVE-2026-64086

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the pmbus/adm1266 driver. The adm1266pmbusblockxfer function attempts to read one byte more than the allocated buffer size during a block transfer read operation. This out-of-bounds write can lead to memor...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

CVE-2026-64108

A flaw was found in the Linux kernel's Common Internet File System CIFS component. This vulnerability occurs when a CIFS file's close operation is executed after the filesystem has been unmounted, leading to a directory entry dentry remaining in use. This improper resource management can trigger ...

CVE-2026-64095

A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.numrequests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local...

CVE-2026-64134

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Pulse Code Modulation PCM subsystem. During PCM data transfer, an incorrect setup of the ioviter for silencing when data is null could lead to a NULL pointer dereference. This vulnerability can be triggered by a local...

CVE-2026-64139

A flaw was found in the ksmbd kernel SMB daemon component of the Linux kernel. A malicious or specially crafted file with a large number of POSIX Access Control List ACL entries can trigger a memory leak in the setposixaclentriesdacl function. This occurs when the accumulated DACL size overflows,...

CVE-2026-64140

A flaw was found in the Linux kernel's ksmbd module. A local user, or a remote authenticated user, could trigger a null pointer dereference by reading the /proc/fs/ksmbd/files entry after an SMB2 client with a durable handle logs off. This vulnerability can lead to a kernel panic, resulting in a...

CVE-2026-64165

A flaw was found in the Linux kernel, specifically within the ARM Integrator/CP architecture. During early system initialization, a memory allocation function is called before the memory management system is fully ready. This can lead to a kernel crash, resulting in a Denial of Service DoS for th...

CVE-2026-64044

A flaw was found in the Linux kernel's OpenVPN ovpn module. An error in the ovpnnlpeernewdoit function's error handling for TCP connections can lead to a use-after-free vulnerability. This occurs because the peer's memory is prematurely released while userspace processes may still hold active...

CVE-2026-64091

A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced component. A time-of-check to time-of-use TOCTOU race condition exists when processing reported VLANs. This occurs because the buffer size for VLAN entries is calculated before the entries are...

CVE-2026-64161

A flaw was found in the Linux kernel's icssm-prueth driver. This vulnerability occurs in the icssmpruethprobe function. When an error occurs during the ofpropertyreadu32 operation, a previously acquired ethportsnode is not properly released. This oversight leads to a memory leak, which can impact...

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...