CVE-2026-89520

A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system instability, potentially causing a denial of service. Mitigatio...

CVE-2026-89454

A flaw was found in the Linux kernel's PCI PLDA driver. This vulnerability occurs in the pldainitinterrupts function, where Interrupt Request IRQ domains are not properly deinitialized if certain initialization steps fail. A local attacker could potentially exploit this resource leak, leading to...

CVE-2026-89582

A flaw was found in the bnx2x component of the Linux kernel. This flaw occurs due to a double free vulnerability within the bnx2xinitfirmware function's error handling path. Memory pointers are freed without being set to NULL, allowing the bnx2xreleasefirmware cleanup function to attempt freeing...

CVE-2026-89670

A flaw was found in the Linux kernel's Network File System Daemon nfsd component. A race condition exists in the nfsdopenlocalfh function where an nfsdfile object can be freed and its memory recycled while another process attempts to access it. This can lead to a use-after-free vulnerability,...

CVE-2026-89754

A flaw was found in the Linux kernel's memory management mm/pagewalk component. An issue in the walkpmdrange function, where a stale walk-action state is not properly reset, can lead to duplicate walk callbacks. A local attacker could exploit this to trigger an out-of-bounds write, potentially...

CVE-2026-89651

A flaw was found in the Linux kernel's Ceph client. An out-of-bounds read vulnerability exists in the handlesession function when decoding MDSCapAuth records. A malicious or compromised Metadata Server MDS can trigger this during session setup without client-side user interaction. This can force...

CVE-2026-80929

A flaw was found in the Linux kernel. A non-root user can exploit a vulnerability in the sysctl mechanism, specifically related to the cadpid entry. By unsharing process ID PID and user namespaces, a local attacker can modify this global system control from a child namespace. This allows a user...

CVE-2026-89645

A flaw was found in the btrfs file system in the Linux kernel. During relocation recovery, if an error occurs, such as a memory allocation failure, the system may not properly drop references to relocation roots. This oversight can lead to resource exhaustion, potentially allowing a local attacke...

CVE-2026-89726

A flaw was found in the Linux kernel's ucs2strnlen function. This vulnerability occurs because the function checks the current character before verifying if the maximum allowed length has been reached. If the input string is not properly terminated within the specified bounds, an attacker could...

CVE-2026-89584

A flaw was found in the Linux kernel's block layer. This vulnerability arises from insufficient validation of user-space data structures vectors against the device's Direct Memory Access DMA alignment requirements. A local attacker could exploit this by providing misaligned data, causing the syst...

CVE-2026-89575

A flaw was found in the Linux kernel's device mapper dm-raid1 component. This vulnerability occurs in the buildconstructorstring function, where insufficient space is reserved for a NUL-terminator when formatting a string with sprintf. This oversight can lead to a buffer overflow, potentially...

CVE-2026-89449

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU subsystem. When a device addition fails during the iommumockdeviceadd operation, the allocated device IOMMU structure is not properly deallocated. This oversight leads to a memory leak, which over time could be...

CVE-2026-89552

A flaw was found in the Linux kernel. When updating charp parameters, an allocation failure can cause the parameter to be set to NULL before the new value is successfully allocated. This can lead to a kernel NULL pointer dereference, which may result in a system crash and a denial of service...

CVE-2026-89455

A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request IRQ domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the domain's internal data is released before all associated IRQs a...

CVE-2026-80965

A flaw was found in the Linux kernel's ALSA serial-u16550 driver. This vulnerability occurs because the driver does not properly validate the card index when a device is manually bound via the sysfs interface. A local user could exploit this by providing an invalid card index, leading to an...

CVE-2026-89750

A flaw was found in the Linux kernel's tracing/userevents component. This vulnerability arises when a child process, created via fork, exits and frees memory that the parent process still references. This creates a Use-After-Free UAF condition, where the parent process attempts to access freed...

CVE-2026-89752

A flaw was found in the Linux kernel's memory cgroup memcg component. When multiple file operations concurrently update memory.high or memory.max files in kernfs, a writer can continue reclaiming memory towards an outdated target. This can lead to an indefinite loop, causing a denial of service D...

CVE-2026-89647

A flaw was found in the Linux kernel's Ceph file system. The cephtrimdentries function, when invoked by cephcapreclaimwork, can enter an infinite loop under specific conditions where no leases need to be reclaimed. This busy loop causes excessive CPU utilization, potentially leading to a Denial o...

CVE-2026-89599

A flaw was found in the Linux kernel's fbdev: omapfb: panel-dsi-cm component. The dsicmprobe function registers a display before its associated lock mutex is properly initialized. This timing issue allows another process to attempt to acquire the uninitialized mutex, which could lead to system...

CVE-2026-89501

A flaw was found in the Linux kernel's ring-buffer component. A race condition occurs when resizing a sub-buffer without properly holding the cpubuffer::lock. This oversight can lead to concurrency issues with memory allocation and deallocation operations, potentially resulting in system...

CVE-2026-89473

A flaw was found in the Linux kernel's bq25890 power supply driver. The bq25890fwprobe function acquires a reference to a secondary charger but fails to release it on subsequent probe failures or driver detach. This reference leak can lead to resource exhaustion over time, potentially allowing a...

CVE-2026-89755

A flaw was found in the Linux kernel's device migration mechanism. When a memory page is freed from the swap cache, a stale mapping of that page might still be used. This incorrect memory accounting can lead to a system crash or instability. Mitigation Mitigation for this issue is either not...

CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

CVE-2026-89737

A flaw was found in the Linux kernel's USB Type-C Thunderbolt driver. The tbtaltmoderemove function fails to properly disable and drain work items before freeing associated plug and cable references. This oversight can lead to a use-after-free vulnerability, where the system attempts to access...

CVE-2026-89456

A flaw was found in the Linux kernel. Specifically, within the s390/dasd component, an issue exists during error recovery for disk read operations. When a request is partially completed and then recovered, the system fails to correctly propagate the length of the processed data. This can lead to...

CVE-2026-89608

A flaw was found in the ecryptfs component of the Linux kernel. The ecryptfsparsepacketset function incorrectly calculates the available buffer size when processing version 1 headers, leading to an overstatement of the buffer's actual capacity. This miscalculation could allow an attacker to cause...

CVE-2026-89438

A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology ISST component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing...

CVE-2026-80948

A flaw was found in the Linux kernel's iwlwifi driver. An error handling issue within the iwlopmodedvmstart function can cause a memory leak. This occurs when certain error paths bypass a memory deallocation step, leading to unreleased memory. This vulnerability could potentially lead to system...

CVE-2026-89748

A flaw was found in the Linux kernel's tracing subsystem. An issue in the simpleringbufferswapreaderpage function, related to retry exhaustion during ring buffer reader page swaps, can lead to incorrect handling of successful or failed operations. This can result in corruption of the ring buffer,...

CVE-2026-89738

A flaw was found in the Linux kernel's at91udc USB gadget driver. In polled-VBUS mode, a timing issue during driver unbinding or probe failure can lead to a use-after-free vulnerability. A local attacker could exploit this by triggering a normal driver unbind operation, which may interleave with ...

CVE-2026-80950

A flaw was found in the Linux kernel's Renesas I3C driver. This driver uses an asynchronous model for data transfers. When a transfer times out, the associated memory is freed. However, if an interrupt occurs after the memory is freed but before the interrupt handler is aware, it can attempt to...

CVE-2026-80975

A flaw was found in the Linux kernel's qnap-mcu driver. This vulnerability occurs when the driver processes commands and a reply from the Microcontroller Unit MCU arrives after a command has timed out or failed. The driver may write this late or unsolicited message into a memory area that is no...

CVE-2026-80932

A flaw was found in the Linux kernel, specifically within the vsock/virtio component. An incorrect order of flushing work items during the removal of a virtiovsock object can lead to a use-after-free condition. This vulnerability allows a race condition where memory can be freed while still in us...

CVE-2026-89676

A flaw was found in the Linux kernel's Network File System Daemon nfsd component. When performing an asynchronous async copy operation, a programming error causes a stale identifier IDR entry to point to memory that has already been reused. This can lead to memory corruption, where the system...

CVE-2026-89558

A flaw was found in the Linux kernel's md/raid10 RAID10 driver. This vulnerability occurs when a RAID10 array is in a degraded state and a device is being recovered while another mirror is still missing. Due to an inverted boolean value, the system incorrectly clears necessary bitmap bits, causin...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

CVE-2026-81015

A flaw was found in the Linux kernel's AMD PMC Power Management Controller driver. When the amdstbs2dinit function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt...

CVE-2026-80968

A flaw was found in the ALSA mts64 driver within the Linux kernel. This driver does not properly validate the card index, specifically failing to check for negative ID values when bound via sysfs. A local attacker could exploit this vulnerability to cause an out-of-bounds access, potentially...

CVE-2026-80987

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When processing oversized transmit TX buffers, the system fails to properly free the allocated memory, leading to a memory leak. This continuous leakage of memory could eventually exhaust system resources, resulti...

CVE-2026-80945

A flaw was found in the Linux kernel's cryptography module, specifically within the Intel Analytics Accelerator IAA driver. When a hardware error occurs during data decompression, the system attempts to use a software-based fallback. However, due to improper handling of memory buffers during this...

CVE-2026-89675

A flaw was found in the Linux kernel's nfsd component. A race condition exists during asynchronous copy cancellation and shutdown operations, which can lead to a Use-After-Free UAF vulnerability. This allows an async copy object to be freed or used after being freed, potentially causing memory...

CVE-2026-80990

A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the tbnetconnectedwork function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly released, causing it to remain active without a reference. This...

CVE-2026-89746

A flaw was found in the Linux kernel's tracing component. A local user can exploit a use-after-free vulnerability by registering multiple histogram triggers with the same name. This action causes the kernel to attempt to access freed memory, leading to a system crash and a Denial of Service DoS...

CVE-2026-89743

A flaw was found in the Linux kernel's Network Shared Memory NSM component. A malicious or buggy backend can report a response length larger than the allocated buffer. This can lead to an out-of-bounds read, disclosing adjacent kernel memory to user space. This vulnerability results in informatio...

CVE-2026-89733

A flaw was found in the Linux kernel's USB Video Class UVC gadget driver. This vulnerability occurs in the uvcfunctionbind and uvcfunctionunbind functions, where pointers to freed memory are not properly cleared. This can lead to a use-after-free UAF condition, potentially allowing an attacker to...

CVE-2026-89685

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A clock domain mismatch in the clientsstillreclaiming function allows a remote attacker to indefinitely hold the server in a grace period. By sending specific CLAIMPREVIOUS OPEN requests, an attacker can block all...

CVE-2026-89642

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When a client extends a file, the cifssetsize function fails to properly zero out the newly extended portion of the page cache. This oversight can lead to stale data from the client's memory being written back...

CVE-2026-89591

A flaw was found in the Linux kernel's accel/rocket module. During error handling in the rocketioctlsubmitjob function, a cleanup routine may attempt to free a job-domain pointer that has not yet been initialized, leading to a NULL pointer dereference. A local attacker could exploit this...

CVE-2026-89587

A flaw was found in the Linux kernel's ACPI Platform Firmware Runtime Update pfrupdate component. The querycapability function, responsible for handling ACPI buffer objects from firmware, performs an unchecked memory copy operation. If the firmware provides an oversized buffer, a stack buffer...

CVE-2026-89578

A flaw was found in the Linux kernel's device mapper I/O dm-io component. When handling DMIOBIO requests, incorrect sector-based accounting for misaligned direct I/O buffers could lead to an infinite loop. This issue can cause I/O operations to hang indefinitely, resulting in a denial of service...