CVE-2026-53374

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-64162

A flaw was found in the Linux kernel's Intel Ethernet controller driver idpf. This vulnerability occurs because a critical synchronization mechanism, known as a spinlock, is accessed before it has been properly initialized. An attacker could potentially exploit this timing issue to cause the syst...

CVE-2026-53369

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could craft a malicious UDF image with an oversized Cyclic Redundancy Check CRC length. This could allow the attacker to bypass the integrity validation of UDF descriptors, leading to the acceptance of...

CVE-2026-53370

A flaw was found in the Linux kernel's performance monitoring unit perf/x86/intel related to the validation and configuration of Auto Counter Reload ACR masks. Incomplete validation of user-space ACR masks could lead to incorrect configurations. This issue could result in inaccurate performance...

CVE-2026-53368

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. A race condition exists where the f2fsneeddentrymark function incorrectly reads natentry flags without proper synchronization during checkpoint operations. This can lead to an inconsistent inode block marking state,...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64078

A flaw was found in the Linux kernel's netfilter xtables component. This vulnerability occurs when a userspace process attempts to re-instantiate a netfilter table after the module has been removed. Due to an incomplete unregistration process, the table cannot be properly re-established,...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

CVE-2026-64105

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the virtual Generic Interrupt Controller vgic component. When a virtual CPU vCPU fails to initialize, the private Interrupt ReQuests IRQs allocated for it are not properly released...

CVE-2026-64163

A flaw was found in the Linux kernel's kprobes test module. Improper cleanup of kprobes and kretprobes kernel probes used for debugging and tracing between test runs can lead to registration failures. Repeated execution of the kprobes sanity tests can cause the kernel to crash, resulting in a...

CVE-2026-64100

A flaw was found in the Linux kernel's Direct Rendering Manager drm/msm component. A local attacker could trigger a deadlock vulnerability due to a circular locking dependency when the kswapd0 process attempts to reclaim memory. This can lead to a Denial of Service DoS, causing the system to beco...

CVE-2026-64166

A flaw was found in the Linux kernel's ARM FF-A Firmware Framework for Arm firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this...

CVE-2026-64083

A flaw was found in the Linux kernel's pmbus/adm1266 driver within the hwmon subsystem. The adm1266gpioget and adm1266gpiogetmultiple functions fail to validate the length of responses from I2C block-read operations. A local user or a malicious I2C Inter-Integrated Circuit slave device can exploi...

CVE-2026-64086

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the pmbus/adm1266 driver. The adm1266pmbusblockxfer function attempts to read one byte more than the allocated buffer size during a block transfer read operation. This out-of-bounds write can lead to memor...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

CVE-2026-64108

A flaw was found in the Linux kernel's Common Internet File System CIFS component. This vulnerability occurs when a CIFS file's close operation is executed after the filesystem has been unmounted, leading to a directory entry dentry remaining in use. This improper resource management can trigger ...

CVE-2026-64095

A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.numrequests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local...

CVE-2026-64134

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Pulse Code Modulation PCM subsystem. During PCM data transfer, an incorrect setup of the ioviter for silencing when data is null could lead to a NULL pointer dereference. This vulnerability can be triggered by a local...

CVE-2026-64139

A flaw was found in the ksmbd kernel SMB daemon component of the Linux kernel. A malicious or specially crafted file with a large number of POSIX Access Control List ACL entries can trigger a memory leak in the setposixaclentriesdacl function. This occurs when the accumulated DACL size overflows,...

CVE-2026-64140

A flaw was found in the Linux kernel's ksmbd module. A local user, or a remote authenticated user, could trigger a null pointer dereference by reading the /proc/fs/ksmbd/files entry after an SMB2 client with a durable handle logs off. This vulnerability can lead to a kernel panic, resulting in a...

CVE-2026-64165

A flaw was found in the Linux kernel, specifically within the ARM Integrator/CP architecture. During early system initialization, a memory allocation function is called before the memory management system is fully ready. This can lead to a kernel crash, resulting in a Denial of Service DoS for th...

CVE-2026-64044

A flaw was found in the Linux kernel's OpenVPN ovpn module. An error in the ovpnnlpeernewdoit function's error handling for TCP connections can lead to a use-after-free vulnerability. This occurs because the peer's memory is prematurely released while userspace processes may still hold active...

CVE-2026-64091

A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced component. A time-of-check to time-of-use TOCTOU race condition exists when processing reported VLANs. This occurs because the buffer size for VLAN entries is calculated before the entries are...

CVE-2026-64161

A flaw was found in the Linux kernel's icssm-prueth driver. This vulnerability occurs in the icssmpruethprobe function. When an error occurs during the ofpropertyreadu32 operation, a previously acquired ethportsnode is not properly released. This oversight leads to a memory leak, which can impact...

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...

CVE-2026-64129

A flaw was found in the Linux kernel's memory management component. This vulnerability, located in the migratevmainserthugepmdpage function, can lead to a spinlock being permanently held if a specific address space check fails. This unreleased spinlock can cause a system deadlock, resulting in a...

CVE-2026-64104

A flaw was found in the Linux kernel's SEV-ES Secure Encrypted Virtualization-Encrypted State guest module. When memory encryption or decryption operations fail, the affected memory pages can be left in an unknown or unencrypted state. This could lead to information disclosure, as these pages are...

CVE-2026-64124

A flaw was found in the Linux kernel's network device memory net: devmem component. This vulnerability allows an attacker to trigger an out-of-bounds read by providing specially crafted Direct Memory Access DMA buffers with non-page-aligned sizes or Scatter-Gather SG list lengths. This could lead...

CVE-2026-64155

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability is caused by improper error handling in certain Wireless Management Interface WMI Wake-on-Wireless WOW calls. Specifically, the ath11kwmicmdsend function did not properly free socket buffers skb in error paths, leading...

CVE-2026-64147

A flaw was found in the Linux kernel's pdscore module. This vulnerability can lead to a resource leak due to unreleased dentry references during firmware reset recovery. Furthermore, improper error handling when the debug file system debugfs is disabled could cause the system to crash, resulting ...

CVE-2026-28378

A flaw in Grafana's public dashboard deletion endpoint lacks organization isolation, allowing an Organization Administrator to delete public dashboards in other organizations using the target dashboard's ID. Mitigation Since this vulnerability only affects the Public Dashboards feature,...

CVE-2026-64176

A flaw was found in the Linux kernel's iwlwifi driver, affecting older Intel wireless devices. This vulnerability arises from incorrect handling of transmit TX rates, specifically when the driver attempts to set these rates. An attacker could potentially trigger a firmware assert or crash, leadin...

CVE-2026-64089

A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the lastchangesetlen field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this t...

CVE-2026-64097

A flaw was found in the Linux kernel's AMD display drm/amd/display component. This vulnerability is caused by improper validation of the GPIO General Purpose Input/Output pin table size. An attacker could exploit this by providing a malformed Video BIOS VBIOS that leads to reading data beyond its...

CVE-2026-64152

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem when iommudebug is enabled. This issue occurs because an error handling path attempts to unmap memory without a proper initial mapping, leading to an inconsistent state within the IOMMU's debugging and...

CVE-2026-64172

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem, specifically affecting Hygon Family 18h processors. Due to an erratum, the hardware may incorrectly read a stale status bit during interrupt processing, preventing the virtual machine from exiting as expected. This...

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

CVE-2026-64070

A flaw was found in the Linux kernel's powerpc/hv-gpci component. This vulnerability allows a local attacker to cause a denial of service DoS by repeatedly reading from specific sysfs files. The flaw is due to a preemption count leak, where successful reads from sysfs show functions fail to...

CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

CVE-2026-64085

A flaw was found in the Linux kernel's pmbus/adm1266 driver, which is responsible for hardware monitoring. This vulnerability occurs because the driver does not properly handle data sizes when reading blackbox records from a device. A malicious or malformed device could send more data than...

CVE-2026-64096

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking multicast mcast module of the Linux kernel. The batadvmcastpurgeorig function removes entries from RCU Read-Copy-Update-protected lists without ensuring that all active readers have finished accessing those entries. Th...

CVE-2026-64094

A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced component, specifically within its Bridge Loop Avoidance BLA feature. This vulnerability occurs when a network interface is unexpectedly removed while the system attempts to send an Address...

CVE-2026-64101

A flaw was found in the Linux kernel's fwctl component. Insufficient validation of the Remote Procedure Call RPC input buffer size in the pdsfcfwrpc function can lead to an out-of-bounds read. A local attacker could exploit this vulnerability by providing a specially crafted RPC input, potentiall...

CVE-2026-64179

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN Inter-Integrated Circuit I2C Over Shared Memory IOSM subsystem. This vulnerability occurs because memory allocated during the initialization of the inter-process communication IPC protocol is not properly released when certain...

CVE-2026-64144

A flaw was found in the Linux kernel's Bluetooth MediaTek btmtk driver. This vulnerability allows a local attacker to cause a memory leak by triggering specific error paths during Universal Serial Bus USB Bluetooth operations. The setuppacket of a control urb USB Request Block is not properly fre...

CVE-2026-64045

A flaw was found in the Linux kernel's OpenVPN ovpn TCP module. A race condition in the ovpntcpclose function allows it to access memory after it has been freed. This vulnerability arises when the function attempts to use a socket peer pointer after its associated socket object has been...

CVE-2026-64055

A flaw was found in the Linux kernel's Cortina ethernet driver. When the network interface processes incoming packets, a counter used for reassembling fragmented packets can be prematurely reset. This can lead to incomplete packet reassembly, potentially causing network communication issues or...

CVE-2026-64180

A flaw was found in the Linux kernel's memory hotplug component. When memory blocks are removed, the removememoryblocksandaltmaps function fails to release a previously acquired reference to the memory block device. This oversight results in a memory leak, which could lead to system instability o...

CVE-2026-64183

A flaw was found in the Linux kernel's EFI Extensible Firmware Interface runtime services. This vulnerability occurs due to a NULL pointer dereference when ACPI Advanced Configuration and Power Interface PRM Platform Runtime Mechanism calls are made before the necessary workqueue is allocated. Th...

CVE-2026-64169

A flaw was found in the Linux kernel's spi: ep93xx driver. This vulnerability occurs when the driver fails to properly clear Direct Memory Access DMA channel pointers after a DMA setup failure during probe. An attacker could potentially trigger a system crash, leading to a Denial of Service DoS...