CVE-2026-89451

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit SVA Shared Virtual Addressing component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not properly initialized. A local attacker could exploit this flaw by...

CVE-2026-80974

A flaw was found in the mfd: sm501 component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for struct sm501devdata during the device removal process. A local attacker could potentially exploit this memory leak, which may lead to a denial of servic...

CVE-2026-89689

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. A remote attacker could exploit a use-after-free vulnerability in the nfsd4sequence function. This occurs when the system attempts to reduce the number of active session slots while a client is still using one of the slo...

CVE-2026-89665

A flaw was found in the Linux kernel's nfsd component. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv2 SETATTR or CREATE request with an out-of-range 'useconds' value. This could lead to incorrect timestamps being written to the filesystem, resulting in dat...

CVE-2026-89662

A flaw was found in the Linux kernel's Network File System Daemon NFSD. During client teardown, a race condition can occur where a lock owner is freed while still being referenced, leading to a use-after-free vulnerability. This can result in a NULL dereference, potentially causing a system crash...

CVE-2026-80976

A flaw was found in the Linux kernel's IPv6 Segment Routing seg6 implementation. An unprivileged user can exploit this vulnerability by injecting a specially crafted IPv6 packet. This can lead to an out-of-bounds read, potentially causing a system crash and resulting in a Denial of Service DoS...

CVE-2026-90461

A flaw was found in OpenStack Ironic. When the Image Service is configured for HTTPS Basic Authentication, Ironic may inadvertently transmit a username and password to an unintended remote host. This could lead to the disclosure of sensitive authentication credentials to an attacker who controls...

CVE-2026-89764

A flaw was found in the Linux kernel's rust: devres component. A race condition exists when two processes attempt to revoke a Devres resource concurrently. This can lead to a use-after-free vulnerability, where one process might free resources that another process is still actively using. Such an...

CVE-2026-89716

A flaw was found in the zram component of the Linux kernel. This vulnerability occurs because the system does not properly validate user-supplied deflate parameters, specifically winbits values. An attacker could exploit this by providing malformed input, which would trigger an internal error BUG...

CVE-2026-89561

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL implementation. A remote attacker could send specially crafted IPv6 packets to a vulnerable system while manipulating the network interface's Maximum Transmission Unit MTU, which defines the largest...

CVE-2026-89462

A flaw was found in the Linux kernel's power supply subsystem, specifically within the max17040 driver. This vulnerability occurs when the max17040getvcell and max17040getsoc functions fail to properly handle errors returned by regmapread during an I2C transfer. As a result, uninitialized registe...

CVE-2026-81008

A flaw was found in the Linux kernel's interconnect subsystem. When a dynamic memory allocation fails during path initialization, an object is prematurely freed while still being referenced in internal lists. This creates dangling pointers, which can be later accessed or modified. This...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

CVE-2026-89703

A flaw was found in the nfsd component of the Linux kernel. The nfsd4droprevokedstid function, which handles admin-revoked delegations, fails to correctly set a status flag before releasing a lock. This oversight can lead to a use-after-free condition when a freed delegation is incorrectly added ...

CVE-2026-89702

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When processing NFSv2/v3-over-UDP requests, the nfsdfhverify and nfsdfhverifyerr tracepoints incorrectly size a memory buffer. This can lead to an out-of-bounds write, potentially allowing a remote attacker to cause a denial ...

CVE-2026-89708

A flaw was found in the Linux kernel's NFS daemon nfsd. During the teardown of an NFSv4 session, a race condition can occur where the session's memory is freed while an active callback task still holds a reference to it. This can lead to a use-after-free vulnerability, potentially causing system...

CVE-2026-89700

A flaw was found in the Linux kernel's nfsd component. A local user with CAPNETADMIN capabilities can exploit this by sending a specially crafted network attribute with an incorrect address family length. This can lead to an out-of-bounds read, potentially disclosing sensitive information or...

CVE-2026-89548

A flaw was found in the Linux kernel's SUNRPC component. When sunrpcdestroycachedetail is called, it may not properly drain the cachecleaner before freeing a cachedetail object. This oversight can lead to a use-after-free vulnerability, where the system attempts to access or use memory that has...

CVE-2026-81018

A flaw was found in the Linux kernel's think-lmi driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial of service over time due to resource exhaustion...

CVE-2026-89715

A flaw was found in the Linux kernel's NFS/localio component. A race condition during file handling can lead to a reference leak, where system resources are not properly released. This continuous accumulation of unreleased references can exhaust available resources, preventing network namespace...

CVE-2026-89707

A flaw was found in the Linux kernel's nfsd component. An authenticated Network File System NFS client can exploit this vulnerability by triggering a failed cross-mount operation through nfsdlookupdentry or the NFSv4 READDIR encode path. This leads to a reference count leak, which inflates mntcou...

CVE-2026-89491

A flaw was found in the Linux kernel's ocfs2 cluster module. This vulnerability allows a local attacker to trigger a denial of service. The issue arises when a sleeping function is called while a spinlock is held within the o2hbregionpin function, which can lead to a system crash or deadlock. Thi...

CVE-2026-89588

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI APEI Generic Hardware Error Source GHES component. Incorrect length accounting in the gheshandlearmhwerror function can lead to the parser reading beyond the allocated memory section. This out-of-bounds read...

CVE-2026-89767

A flaw was found in the Linux kernel's overlay file system overlayfs. An unprivileged local user can trigger a specific error condition during the creation of a new directory. This error causes the system to incorrectly release a lock on the parent directory and a reference to the new directory...

CVE-2026-89762

A flaw was found in the Linux kernel's AppArmor security module. The begincurrentlabelcritsection function, used in various Linux Security Module LSM hooks, attempts to replace user credentials when a security label becomes stale. This process can lead to a Use-After-Free UAF vulnerability if the...

CVE-2026-89740

A flaw was found in the Linux kernel's serial: imx component. The imxuartprobe function publishes a device-managed allocated port in the imxuartports array before it is fully added. If the port addition fails or the port is removed, the entry in the array is not properly cleared, resulting in a...

CVE-2026-89724

A flaw was found in the Linux kernel's media: vicodec component. An out-of-bounds write vulnerability exists in the FWHT encoder due to incorrect buffer sizing during video output format handling. This issue allows an attacker to cause corruption of adjacent kernel heap memory, which could lead t...

CVE-2026-89632

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious server could exploit this vulnerability by sending specially crafted data, leading to an out-of-bounds read. This occurs because the reparsebufptr function reads data before properly validating the buffer size,...

CVE-2026-89621

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. A malicious USB device can exploit this vulnerability by sending a specially crafted, short HID report with an invalid size. This can cause the system to read past valid memory, leading to the disclosure of sensitiv...

CVE-2026-89613

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability occurs when the driver processes an attribute with empty mapping pairs that have inconsistent highest Virtual Cluster Number VCN and size. A local attacker could potentially craft a malicious NTFS filesystem that,...

CVE-2026-89589

A flaw was found in the ACPI/APEI/GHES component of the Linux kernel. Incorrect usage of spinlocks in the CXL CPER work registration and unregistration helpers can lead to a deadlock. If a CPU holds a lock while a GHES interrupt arrives on the same CPU, the interrupt handler will spin on the held...

CVE-2026-89586

A flaw was found in the Linux kernel's libata-scsi component. This vulnerability occurs when the system attempts to perform Data Set Management DSM TRIM operations on storage devices with logical sector sizes exceeding 2048 bytes. Due to an incorrect handling of the TRIM descriptor generation,...

CVE-2026-89514

A flaw was found in the Linux kernel's Fibre Channel over Ethernet Network Interface Card fnic driver. The fnicfcoeprocessvlanresp function attempts to allocate memory in a way that can cause the system to sleep while holding a spinlock. This incorrect memory allocation in an atomic context can...

CVE-2026-89549

A flaw was found in the sunrpc component of the Linux kernel. When the nfsd service runs with fewer threads than available pools, a transport can be routed to a pool with no active threads. This prevents the connection from being processed, causing it to hang indefinitely. This can lead to a Deni...

CVE-2026-89535

A flaw was found in the svcrdma module of the Linux kernel. A use-after-free vulnerability can occur due to an incorrect order of operations during the teardown of an RDMA Remote Direct Memory Access transport. If a device unregistration process happens concurrently, it can attempt to access a...

CVE-2026-80991

A flaw was found in the Linux kernel's net: ravb module. A race condition exists during the Precision Time Protocol PTP clock teardown. This allows the ravbptpinterrupt function to attempt to use a PTP clock after it has been freed by ptpclockunregister, leading to a use-after-free vulnerability...

CVE-2026-80938

A flaw was found in the Linux kernel, specifically within the mt7615 Wi-Fi driver. A deadlock can occur during system suspend operations when the suspend process attempts to acquire a mutex a locking mechanism while simultaneously waiting for a work item macwork that also requires the same mutex...

CVE-2026-89488

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

CVE-2026-89465

A flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task can attempt to access memory that has already been...

CVE-2026-89443

A flaw was found in the Linux kernel's platform/x86 ISST module. The isstifgetperflevelmask and isstifgetbasefreqmask functions fail to validate a user-provided 'level' parameter. A local attacker could exploit this by providing an invalid 'level' value, leading to an out-of-bounds read from the...

CVE-2026-81017

A flaw was found in the Linux kernel's sensorhub component. A local attacker could provide a maliciously crafted sensor number in an EC FIFO event. This unchecked sensor number could lead to an out-of-bounds read and write in the batchstate array, potentially causing memory corruption or system...

CVE-2026-80984

A flaw was found in the net/smc component of the Linux kernel. When a link group terminates while a socket is waiting in smcclosestreamwait, a NULL pointer dereference can occur during the SMC-D teardown path. This can lead to a system crash, resulting in a Denial of Service DoS. Mitigation...

CVE-2026-80939

A flaw was found in the Linux kernel's rtw89 PCI driver. During a warm reboot on ARM64 platforms, the driver's missing shutdown callback fails to stop radio frequency kill rfkill polling. This leads to attempts to read from a non-responding device, causing a fatal asynchronous SError and resultin...

CVE-2026-89696

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote client can exploit this by sending a specially crafted NFS COMPOUND request. This request, when processed, can lead to a NULL pointer dereference in the nfsd kthread, causing the system to crash and resulting in ...

CVE-2026-89677

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When creating files, the dentrycreate function could return an unexpected directory entry dentry. This could lead to a previously stored dentry being prematurely freed and then used again, potentially causing memory corruptio...

CVE-2026-89637

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing a malformed secondary TRANSACT2 response, a use-after-free UAF vulnerability and a buffer leak can occur in the cifschecktrans2 function. This can lead to a dangling buffer being reused by the demux thread,...

CVE-2026-89610

A flaw was found in the Linux kernel's NTFS component. The mapping pairs decoder fails to verify if a run length extends beyond the volume boundary. A local attacker could exploit this by providing a malformed NTFS image with a crafted mapping pairs array. This could lead to memory corruption and...

CVE-2026-80942

A flaw was found in the Linux kernel's rtlwifi driver for rtl8192du. Specifically, a memory allocation made during the initialization of shared data was not consistently freed in error handling paths. This could result in a memory leak, potentially leading to system instability or a Denial of...

CVE-2026-89478

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An authenticated attacker could exploit a timing window during the removal of an SCTP transport. This could lead to the system attempting to read from freed memory, potentially causing a denial of...