CVE-2026-89436

A flaw was found in the Linux kernel's panasonic-laptop driver. This vulnerability involves an out-of-bounds write when processing ACPI SINF packages, where a small amount of data is written beyond the intended memory buffer. This can lead to a heap overflow, which might cause system instability ...

CVE-2026-89678

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd component. The nfsddirectwrite function, responsible for handling direct writes, incorrectly detects partial writes. This issue occurs because the logic for detecting short writes compares the actual bytes written against ...

CVE-2026-89528

A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send specially crafted Read lists that exceed the page budget. This can lead to a NULL pointer dereference during Direct Memory Access DMA mapping, potentially causing a system crash and a denial of service...

CVE-2026-89513

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for RISC-V architectures. A malicious guest operating system could exploit an integer overflow vulnerability by providing a crafted number of Performance Monitoring Unit PMU events during the SBI PMU EVENTGETINFO...

CVE-2026-89506

A flaw was found in the Linux kernel's RDMA/uverbs component. A missing update to the UVERBSMETHODREGMR ioctl allows a malicious userspace program to trigger a null pointer dereference in specific RDMA drivers mthca, irdma, siw. This can lead to a system crash, resulting in a Denial of Service Do...

CVE-2026-80979

A flaw was found in the Linux kernel's Shared Memory Communications SMC component. During connection termination, the SMC component may fail to properly unregister a connection before draining its receive tasklet. This can lead to a use-after-free vulnerability, where a freed memory buffer is...

CVE-2026-89768

A flaw was found in the Linux kernel's filesystem fs component. When using nested overlay filesystems overlayfs, a local user could exploit an issue where the backingfileopen function incorrectly derives the path for mapped files. This vulnerability leads to information disclosure, as files mappe...

CVE-2026-45763

A flaw was found in Suricata. When Lua rule execution is enabled, a remote attacker could exploit certain Lua allocation patterns to bypass the intended memory limits. This could lead to the Suricata engine consuming excessive memory, resulting in a Denial of Service DoS condition...

CVE-2026-89769

A flaw was found in the Linux kernel's NXP PIT Programmable Interrupt Timer clocksource driver. When the CPU hotplug setup fails after an interrupt request IRQ has been successfully registered, the error handling does not properly free the IRQ. This oversight results in a leaked IRQ line and a...

CVE-2026-89699

A flaw was found in the Linux kernel's Network File System Daemon nfsd when handling NFSv4 CREATE operations. A remote attacker can exploit this by sending a crafted request with an oversized symbolic link symlink target length. This unbounded length can force the kernel to allocate a large amoun...

CVE-2026-89763

A flaw was found in the Linux kernel's Trusted Platform Module TPM trusted keys subsystem. An incorrect teardown ordering during the exit process of trusted TPM keys can lead to a race condition. This allows a local attacker to potentially dereference a freed memory region, resulting in a...

CVE-2026-89719

A flaw was found in the Linux kernel's zram module. This vulnerability occurs when the readblockstate function calculates the number of pages before acquiring a device lock. If the zram device is reset and reinitialized with a smaller disk size, the function can attempt to access memory beyond th...

CVE-2026-89611

A flaw was found in the Linux kernel. The NTFS file system driver does not properly validate non-resident attribute offsets when converting between sparse and non-sparse attributes. A local attacker could craft a malicious Master File Table MFT record, which could lead to writing data beyond...

CVE-2026-89592

A flaw was found in the accel/rocket component of the Linux kernel. This vulnerability arises from two issues: a missing null check after a memory allocation failure and an integer overflow when calculating memory requirements based on user-supplied values. An attacker could exploit these flaws t...

CVE-2026-89546

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call Network File System NFS callback service. A race condition during the service teardown can lead to system resources not being properly released, causing a resource leak. This issue could also result in a use-after-free...

CVE-2026-89469

A flaw was found in the Linux kernel's lp8727 power supply driver. A race condition can occur during the release of an interrupt request IRQ, where a delayed work item might be re-armed after the associated memory has been freed. This can lead to a use-after-free vulnerability, potentially causin...

CVE-2026-89521

A flaw was found in the Linux kernel's core scheduling component. This issue occurs when the picktask function releases the run queue rq lock, allowing an interleaving selection to invalidate the scheduler's internal state. This inconsistency can lead to incorrect task selection and skewed resour...

CVE-2026-80996

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification errors. This can lead to calling applications retrying...

CVE-2026-89545

A flaw was found in the Linux kernel. This vulnerability exists within the sunrpc component, where memory associated with rqargp and rqresp is freed prematurely. Specifically, the svcrqstfree function frees these structures synchronously, while the main request structure rqstp is freed later via...

CVE-2026-81000

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

CVE-2026-80944

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. When a synchronous command's wait operation is interrupted, the driver can attempt to write data to a memory location that has already been released. This memory corruption can lead to a system crash kernel panic, resulting in a Denial ...

CVE-2026-80934

A flaw was found in the Linux kernel's mt76: mt7996 Wi-Fi driver. The driver incorrectly manages Direct Memory Access DMA mappings when processing AddBA request frames, causing a continuous leak of these mappings. Over time, this resource exhaustion can lead to a Denial of Service DoS for the Wi-...

CVE-2026-89772

A flaw was found in the Btrfs filesystem of the Linux kernel. This vulnerability allows a local attacker with write access to a memory-mapped file to modify data while it is being written to disk. This can lead to data corruption, where the integrity of the stored information is compromised, or...

CVE-2026-89758

A flaw was found in the Linux kernel's memory management subsystem. When an HMM-based Graphics Processing Unit GPU driver migrates a Transparent Huge Page THP to device memory, it can leave a device-private Page Middle Directory PMD entry. If a user-space application then attempts to manage this...

CVE-2026-89756

A flaw was found in the Linux kernel. When performing memory migration on KVM Kernel-based Virtual Machine hosts, the migratepagesbatch function fails to report RCU Read-Copy Update tasks quiescent states during large batch unmapping operations. This oversight causes the migrating task to become ...

CVE-2026-89751

A flaw was found in the Linux kernel's x86/tdx component. An off-by-one error in the handlein and handleout functions, specifically in the GENMASK calculation for port I/O operations, causes the mask to be one bit too wide. This incorrect handling of I/O sizes could potentially lead to unintended...

CVE-2026-89742

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability in the dmareqfree function within the RapidIO mport character device interface. This flaw occurs when the dmareqfree function attempts to dereference a freed object after dropping the last reference to...

CVE-2026-89701

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The TIMEDELEGACCESS and TIMEDELEGMODIFY decode paths do not properly validate the nanosecond nseconds value in timestamps. This allows a remote attacker to provide a malformed timestamp, which can then be written to disk,...

CVE-2026-89771

A flaw was found in the Linux kernel. A race condition exists in the ring buffer resizing mechanism, where tracebuffer subbufsize can be read without proper locking while it is being simultaneously resized. This could allow a local attacker to trigger unpredictable behavior or a denial of service...

CVE-2026-89760

A flaw was found in the Linux kernel's memory management mm and swap subsystem. This vulnerability occurs when the swapfreehibernationslot function incorrectly frees a hibernation slot while a memory page folio is still present in the swap cache. This can lead to silent memory corruption, process...

CVE-2026-89757

A flaw was found in the Linux kernel's memory management unit MMU, specifically within the multi-generational Least Recently Used mglru mechanism. A bug in how the kernel handles unevictable memory pages can lead to these pages remaining locked in memory even after they should be released. This c...

CVE-2026-89753

A flaw was found in the Linux kernel's memory management subsystem. The shrinklruvec function, responsible for memory reclaim, fails to properly report Read-Copy-Update RCU task quiescent states on systems with preemption enabled. This can lead to RCU task stalls, causing system unresponsiveness ...

CVE-2026-89720

A flaw was found in the Linux kernel's Unsorted Block Image File System UBIFS. An incorrect bounds check in the ubifssbverifysignature function allows a crafted signed UBIFS image to declare a signature length larger than its actual size. This can lead to an out-of-bounds read when processing the...

CVE-2026-89722

A flaw was found in the Linux kernel's PCI/sysfs component. A local user with root privileges could trigger an out-of-bounds read in the pciwritelegacyio function by writing to the legacyio sysfs file with a size less than four bytes. This improper handling of the write buffer can lead to memory...

CVE-2026-89710

A flaw was found in the Linux kernel's NFSv4.1 implementation. When a server returns a new layout state identifier while an existing one is still active, the pnfslayoutprocess function fails to properly release memory associated with layout segments. This oversight leads to a memory leak, which...

CVE-2026-80930

A flaw was found in the Linux kernel's TPM I2C Nuvoton driver. The i2cnuvotonwaitforstat function enables an interrupt IRQ but fails to disable it if the wait operation times out or is interrupted. This oversight can lead to an unbalanced IRQ state, potentially causing system instability or...

CVE-2026-89655

A flaw was found in the Linux kernel's Ceph file system component. A race condition exists in the kickflushingcaps function during the handling of capability messages. This allows a separate process to free a data structure cf entry while kickflushingcaps is still iterating over it. This...

CVE-2026-89638

A flaw was found in the Linux kernel's Server Message Block SMB client. When a file with the setuid or setgid bit is written to on certain Common Internet File System CIFS mounts specifically those using 'cifsacl', 'modefromsid' options, or SMB3.1.1 POSIX extensions, the kernel fails to properly...

CVE-2026-89623

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. This vulnerability occurs when the device's input/output IO operations are not properly stopped before hardware teardown during device removal or probe failure. This timing issue can lead to a use-after-free...

CVE-2026-89612

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could provide a specially crafted NTFS boot sector containing an invalid Master File Table MFT Logical Cluster Number LCN. Due to an integer overflow during parsing, this could lead to an out-of-bounds memory access...

CVE-2026-89574

A flaw was found in the Linux kernel's device mapper dm array component. Insufficient validation of array block headers during read operations allows a local attacker to craft a malicious on-disk nrentries value. This can lead to an out-of-bounds read from the dm-bufio buffer, potentially resulti...

CVE-2026-89567

A flaw was found in the Linux kernel's jbd2 shrinker. This component, which manages journal buffers, does not correctly account for busy checkpoint buffers. This oversight can cause the shrinker to hold a critical system lock for an extended period when processing many busy buffers. The prolonged...

CVE-2026-89559

A flaw was found in the Linux kernel's libnvdimm/labels component. An integer overflow vulnerability exists in the ndlabelvalidate function, where a 32-bit calculation of a namespace index field nslot can wrap around. This allows a local attacker, or an attacker with control over the storage...

CVE-2026-89557

A flaw was found in the Linux kernel's Multiple Device md driver. A local attacker with control over a malicious disk image could provide a specially crafted on-disk superblock with an invalid 'bblogshift' value. This invalid value can lead to an integer overflow when processing bad block...

CVE-2026-89540

A flaw was found in the Linux kernel's sunrpc component. A race condition exists where the gssplock mutex is not initialized before its associated /proc/net/rpc/use-gss-proxy entry is published. This allows a local attacker to trigger a scenario where multiple writers can concurrently access the...

CVE-2026-89484

A flaw was found in the Linux kernel's lockd component. This vulnerability occurs when the Network Lock Manager NLM client attempts to initialize file lock operations without successfully allocating a lockowner. This can lead to a NULL pointer dereference during the release of the file lock,...

CVE-2026-89445

A flaw was found in the Linux kernel's iommufd selftest component. This Use-After-Free UAF vulnerability occurs when the TRIGGERIOPF function borrows an attach handle without proper synchronization during a PASID detach operation. A concurrent device fault report can then access memory that has...

CVE-2026-89440

A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the mmcaddhost function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can lead to memory corruption, potentially allowing a local attacke...

CVE-2026-81012

A flaw was found in the Linux kernel's hp-bioscfg component. The hpgetstringfrombuffer function contains an off-by-one write vulnerability. This occurs because the NUL terminator can be written one byte beyond the allocated buffer, leading to a buffer overflow. An attacker could potentially explo...

CVE-2026-80998

A flaw was found in the Linux kernel's bnxt network driver. When processing a burst of packets, the driver may fail to notify the network device ring the doorbell if the Software UDP Segmentation Offload SW USO path exits prematurely. This oversight can lead to a transmit TX queue stall, renderin...