CVE-2026-99128

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. A remote attacker can exploit this vulnerability to cause a Denial of Service DoS by sending specially crafted network packets with invalid chunk lengths. Because the packet parser fails to properly valida...

CVE-2026-93006

A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...

CVE-2026-93007

A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open idle TCP connections to port 53 and occupy the entire pool, preventing new TCP DNS connections and DNSSEC validation tha...

CVE-2026-93011

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DNSSEC response may overwrite a small...

CVE-2026-93008

A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...

CVE-2026-99194

A flaw was found in the Linux kernel's Aeroflex Ethernet driver. During device probing, the driver attempts to attach the physical network interface before its network device operations are assigned. A local user can exploit this condition on systems with network traffic shaping enabled to trigge...

CVE-2026-99126

A flaw was found in the Linux kernel's s390 CTCM Channel-to-Channel driver. A denial of service DoS can occur when the driver processes invalid Exchange Station Identification XID data during channel negotiation. If a peer XID is missing or a channel pairing mismatch occurs, the driver attempts t...

CVE-2026-99127

A flaw was found in the Linux kernel's page pool memory allocator. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering network traffic that requests odd-sized memory fragments. Because the allocator does not properly align fragment offsets for odd-sized requests o...

CVE-2026-99125

A flaw was found in the Linux kernel's s390 Processor Activity Instrumentation PAI performance monitoring subsystem. A local user can trigger a Denial of Service DoS by generating heavy sampling workloads or manipulating event controls, causing the kernel to improperly handle consecutive stop...

CVE-2026-99124

A flaw was found in the Linux kernel's s390 PCI subsystem. A local user can trigger an out-of-bounds read and potential information disclosure by submitting an error report with a claimed length greater than the actual payload provided. This flaw causes uninitialized kernel memory past the...

CVE-2026-99121

A flaw was found in the Linux kernel's IPv4 networking component. A race condition in the fibrebalance function can cause a division-by-zero error when routing configurations change concurrently during route rebalancing. A local user or concurrent network event can trigger this flaw, causing the...

CVE-2026-99204

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 Distributed Lock Manager DLM subsystem. A synchronization issue allows a local user to trigger a use-after-free condition by reading debugfs files while recovery data is concurrently being destroyed and released. This flaw...

CVE-2026-99122

A flaw was found in the Linux kernel. This flaw allows a Denial of Service DoS due to missing source validation in the Virtual Machine Communication Interface VMCI socket implementation. When handling incoming stream packets, the kernel can assign traffic to a connected socket without verifying...

CVE-2026-114820

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

CVE-2026-93810

A flaw was found in the Linux kernel's CacheFiles module. An error-handling defect in the cachefilescreatetmpfile function causes a file reference to be released twice double fput during failure scenarios. A local user could exploit this vulnerability to trigger memory corruption, resulting in a...

CVE-2026-99190

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output subsystem. When an operation setting multiple GPIO values encounters an error, the function exits early without releasing previously allocated memory buffers. A local user could trigger this error condition to cause a memory...

CVE-2026-98960

A flaw was found in the Linux kernel's Btrfs file system. When handling asynchronous input/output I/O requests through the iouring subsystem, allocated memory is not properly released if an operation encounters a retry condition and is canceled before completion. A local user could exploit this...

CVE-2026-99111

A flaw was found in the Linux kernel's Server Message Block SMB client. Inadequate locking during file truncation allows a local user to perform concurrent write operations while a file is being truncated. This race condition causes newly written data to be discarded silently, resulting in data...

CVE-2026-99102

A flaw was found in the Linux kernel's NTFS file system. The file resize operation fails to acquire the proper synchronization lock while updating on-disk file attributes and sizes. A local user can exploit this race condition by accessing memory-mapped files during a resize operation, causing...

CVE-2026-98947

A flaw was found in the Linux kernel's Virtual Sockets vsock subsystem during Virtual Machine Communication Interface VMCI datagram socket closure. When closing a datagram socket, incoming packets added to the socket's backlog can be moved back to the receive queue without proper cleanup. A local...

CVE-2026-98949

A flaw was found in the Linux kernel's Imagination PowerVR graphics driver. When splitting overlapping virtual memory mappings, the driver fails to release memory references and improperly links buffer objects. A local user can exploit this vulnerability by submitting crafted memory mapping...

CVE-2026-98948

A flaw was found in the Linux kernel's Mellanox Spectrum switch mlxsw driver. This flaw allows a local privileged user to cause a Denial of Service DoS by creating network flow classification templates that match port ranges. Because the driver fails to release port range registers allocated duri...

CVE-2026-99172

A flaw was found in the Linux kernel's inter-process communication IPC subsystem. When initialization of an IPC namespace fails during setup, internal message queue mounts are not properly released, causing kernel memory and resources to leak. A local user could exploit this flaw by repeatedly...

CVE-2026-99105

A flaw was found in the Linux kernel's schedext scheduler component. When a task is placed back onto a CPU's local dispatch queue under specific scheduler configurations, the kernel fails to reschedule the CPU, causing it to idle while tasks wait to execute. A local user can trigger this conditio...

CVE-2026-99106

A flaw was found in the Linux kernel's AMDGPU driver. This vulnerability allows a local attacker to cause a Denial of Service DoS through kernel memory exhaustion. When command submission operations fail during certain error-handling paths, allocated memory ranges and buffer object references are...

CVE-2026-99019

A flaw was found in the Linux kernel's SCSI changer driver, which can lead to a Denial of Service DoS. The driver retains unreleased device references after reading changer configuration data, preventing removed devices from being properly cleaned up. An attacker or local user interacting with SC...

CVE-2026-99049

A flaw was found in the Linux kernel's Xilinx General Purpose Input/Output GPIO driver. When a pin request fails, the driver does not properly decrement the runtime power management reference counter. A local user could trigger this failure to cause a resource leak, preventing the hardware...

CVE-2026-99214

A flaw was found in the Linux kernel's VideoCore IV VC4 HDMI driver. When audio playback initializes before video output is restored, the driver attempts to write audio configuration data to packet memory while it is still powered off. A local user initiating audio operations during display...

CVE-2026-99047

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When stopping network queues and resetting the ring state, the driver fails to release eXpress Data Path socket XSK buffers posted to the network interface. A local user with network administrative privileges can...

CVE-2026-99211

A flaw was found in the Linux kernel's netlink subsystem. This vulnerability allows an unprivileged local attacker to read uninitialized kernel memory, resulting in information disclosure. The issue occurs because socket buffer headers are not properly reset before applying socket filters during...

CVE-2026-99040

A flaw was found in the Linux kernel's key management facility. This vulnerability allows a local user with write access to bypass security controls and add unauthorized keys to a restricted keyring. The issue occurs due to a race condition between key creation and the enforcement of keyring...

CVE-2026-99046

A flaw was found in the Linux kernel's Google Virtual Ethernet gve driver. A remote attacker could cause a Denial of Service DoS by generating network traffic that triggers receive errors on interfaces configured with zero-copy packet buffers. Because the driver fails to release the associated...

CVE-2026-99188

A flaw was found in the Linux kernel's stmmac Ethernet driver. Network link changes prior to a system resume can leave hardware status interrupts uncleared. When the system resumes from sleep, these pending interrupts trigger an interrupt storm that overwhelms the processor, resulting in a system...

CVE-2026-116696

A flaw was found in russh. This vulnerability can lead to a Denial of Service DoS due to unbounded memory consumption in the SSH agent service. A local process or a remote user with access to a forwarded agent socket can repeatedly submit keys containing an excessive number of confirmation...

CVE-2026-116673

A flaw was found in systeminformation. The library fails to properly validate user-supplied network interface names when querying network statistics on Linux systems. A local attacker who can control this parameter and create symbolic links on the local filesystem can exploit this path traversal...

CVE-2026-116631

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call...

CVE-2026-114723

A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...

CVE-2026-114721

A flaw was found in Roundcube Webmail. This vulnerability allows a remote authenticated attacker to bypass restrictions configured to disable specific actions. Because the application evaluates the requested action name directly without checking alternative names, an attacker can access prohibite...

CVE-2026-110910

A flaw was found in qs. When the library is configured to allow empty arrays during query string serialization, it fails to encode object keys that contain empty array values. A remote attacker who can provide untrusted input key names can exploit this flaw by supplying keys containing query...

CVE-2026-98996

A flaw was found in the Linux kernel's mount propagation subsystem. The kernel fails to properly verify whether certain propagated mount copies are still actively in use before completing an unmount operation. A local user could exploit this flaw by configuring specific nested mount hierarchies...

CVE-2026-99184

A flaw was found in the Linux kernel's accel/rocket driver. When device cores are removed, the driver prematurely decrements the active core count during lookup, leaving the final core unreleased and retaining stale state information. A privileged local attacker could exploit this issue by...

CVE-2026-99171

A flaw was found in the Linux kernel's NTFS3 file system driver. When an NTFS file system is mounted with case-insensitive naming, internal file system structures can be released prematurely while a lookup operation is still active. A local attacker can exploit this race condition to cause a...

CVE-2026-99104

A flaw was found in the Linux kernel's extensible scheduler schedext subsystem. This vulnerability allows a local user to cause a denial of service DoS or system instability during power management operations. Due to improper tracking of bypass dispatch states across hierarchical schedulers durin...

CVE-2026-99170

A flaw was found in the Linux kernel. A local user with the ability to create user namespaces can bypass locked mount protections when transferring locks beneath existing mounts. By binding a mount namespace file beneath a locked cover and creating a new mount namespace, the covering mount is...

CVE-2026-99169

A flaw was found in the Linux kernel's futex fast userspace mutex subsystem. A local user can cause a Denial of Service DoS by exploiting improper handling of shared waiters when memory is reused. By requeuing synchronization waiters across different memory contexts, a waiter tied to freed memory...

CVE-2026-99168

A flaw was found in the Linux kernel's Microsoft Hyper-V Virtual Trust Level mshvvtl driver. When setting up per-processor register pages, an allocation failure on one CPU leaves its page pointer uninitialized while a global flag is set by another CPU. A local user can exploit this issue by...

CVE-2026-99103

A flaw was found in the Linux kernel's workqueue subsystem. A use-after-free vulnerability can occur when canceling inactive work items, as an internal worker pool structure is freed while still referenced on a pending queue. A local user could trigger this condition during workqueue operations,...

CVE-2026-99115

A flaw was found in the Linux kernel's ksmbd Server Message Block server. This flaw allows a remote attacker to cause an information disclosure by sending crafted compound requests. Because the server fails to properly initialize all response fields during filesystem information queries, unassign...

CVE-2026-99014

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition between concurrent worker threads during Periodic Advertising PA sync scan setup can cause a command buffer to be freed while still in use. A local attacker could exploit this use-after-free flaw to cause a Denial of...

CVE-2026-99116

A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability in the networking subsystem, leading to a Denial of Service DoS or potential privilege escalation. When network sockets are cloned, the Packet Security Protocol PSP association is copied from the paren...