CVE-2026-99122

A flaw was found in the Linux kernel. This flaw allows a Denial of Service DoS due to missing source validation in the Virtual Machine Communication Interface VMCI socket implementation. When handling incoming stream packets, the kernel can assign traffic to a connected socket without verifying...

CVE-2026-114820

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

CVE-2026-93810

A flaw was found in the Linux kernel's CacheFiles module. An error-handling defect in the cachefilescreatetmpfile function causes a file reference to be released twice double fput during failure scenarios. A local user could exploit this vulnerability to trigger memory corruption, resulting in a...

CVE-2026-99190

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output subsystem. When an operation setting multiple GPIO values encounters an error, the function exits early without releasing previously allocated memory buffers. A local user could trigger this error condition to cause a memory...

CVE-2026-98960

A flaw was found in the Linux kernel's Btrfs file system. When handling asynchronous input/output I/O requests through the iouring subsystem, allocated memory is not properly released if an operation encounters a retry condition and is canceled before completion. A local user could exploit this...

CVE-2026-99111

A flaw was found in the Linux kernel's Server Message Block SMB client. Inadequate locking during file truncation allows a local user to perform concurrent write operations while a file is being truncated. This race condition causes newly written data to be discarded silently, resulting in data...

CVE-2026-99102

A flaw was found in the Linux kernel's NTFS file system. The file resize operation fails to acquire the proper synchronization lock while updating on-disk file attributes and sizes. A local user can exploit this race condition by accessing memory-mapped files during a resize operation, causing...

CVE-2026-98947

A flaw was found in the Linux kernel's Virtual Sockets vsock subsystem during Virtual Machine Communication Interface VMCI datagram socket closure. When closing a datagram socket, incoming packets added to the socket's backlog can be moved back to the receive queue without proper cleanup. A local...

CVE-2026-98949

A flaw was found in the Linux kernel's Imagination PowerVR graphics driver. When splitting overlapping virtual memory mappings, the driver fails to release memory references and improperly links buffer objects. A local user can exploit this vulnerability by submitting crafted memory mapping...

CVE-2026-98948

A flaw was found in the Linux kernel's Mellanox Spectrum switch mlxsw driver. This flaw allows a local privileged user to cause a Denial of Service DoS by creating network flow classification templates that match port ranges. Because the driver fails to release port range registers allocated duri...

CVE-2026-99172

A flaw was found in the Linux kernel's inter-process communication IPC subsystem. When initialization of an IPC namespace fails during setup, internal message queue mounts are not properly released, causing kernel memory and resources to leak. A local user could exploit this flaw by repeatedly...

CVE-2026-99105

A flaw was found in the Linux kernel's schedext scheduler component. When a task is placed back onto a CPU's local dispatch queue under specific scheduler configurations, the kernel fails to reschedule the CPU, causing it to idle while tasks wait to execute. A local user can trigger this conditio...

CVE-2026-99106

A flaw was found in the Linux kernel's AMDGPU driver. This vulnerability allows a local attacker to cause a Denial of Service DoS through kernel memory exhaustion. When command submission operations fail during certain error-handling paths, allocated memory ranges and buffer object references are...

CVE-2026-99019

A flaw was found in the Linux kernel's SCSI changer driver, which can lead to a Denial of Service DoS. The driver retains unreleased device references after reading changer configuration data, preventing removed devices from being properly cleaned up. An attacker or local user interacting with SC...

CVE-2026-99049

A flaw was found in the Linux kernel's Xilinx General Purpose Input/Output GPIO driver. When a pin request fails, the driver does not properly decrement the runtime power management reference counter. A local user could trigger this failure to cause a resource leak, preventing the hardware...

CVE-2026-99214

A flaw was found in the Linux kernel's VideoCore IV VC4 HDMI driver. When audio playback initializes before video output is restored, the driver attempts to write audio configuration data to packet memory while it is still powered off. A local user initiating audio operations during display...

CVE-2026-99047

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When stopping network queues and resetting the ring state, the driver fails to release eXpress Data Path socket XSK buffers posted to the network interface. A local user with network administrative privileges can...

CVE-2026-99211

A flaw was found in the Linux kernel's netlink subsystem. This vulnerability allows an unprivileged local attacker to read uninitialized kernel memory, resulting in information disclosure. The issue occurs because socket buffer headers are not properly reset before applying socket filters during...

CVE-2026-99040

A flaw was found in the Linux kernel's key management facility. This vulnerability allows a local user with write access to bypass security controls and add unauthorized keys to a restricted keyring. The issue occurs due to a race condition between key creation and the enforcement of keyring...

CVE-2026-99046

A flaw was found in the Linux kernel's Google Virtual Ethernet gve driver. A remote attacker could cause a Denial of Service DoS by generating network traffic that triggers receive errors on interfaces configured with zero-copy packet buffers. Because the driver fails to release the associated...

CVE-2026-99188

A flaw was found in the Linux kernel's stmmac Ethernet driver. Network link changes prior to a system resume can leave hardware status interrupts uncleared. When the system resumes from sleep, these pending interrupts trigger an interrupt storm that overwhelms the processor, resulting in a system...

CVE-2026-116696

A flaw was found in russh. This vulnerability can lead to a Denial of Service DoS due to unbounded memory consumption in the SSH agent service. A local process or a remote user with access to a forwarded agent socket can repeatedly submit keys containing an excessive number of confirmation...

CVE-2026-116673

A flaw was found in systeminformation. The library fails to properly validate user-supplied network interface names when querying network statistics on Linux systems. A local attacker who can control this parameter and create symbolic links on the local filesystem can exploit this path traversal...

CVE-2026-116631

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call...

CVE-2026-114723

A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...

CVE-2026-114721

A flaw was found in Roundcube Webmail. This vulnerability allows a remote authenticated attacker to bypass restrictions configured to disable specific actions. Because the application evaluates the requested action name directly without checking alternative names, an attacker can access prohibite...

CVE-2026-110910

A flaw was found in qs. When the library is configured to allow empty arrays during query string serialization, it fails to encode object keys that contain empty array values. A remote attacker who can provide untrusted input key names can exploit this flaw by supplying keys containing query...

CVE-2026-98996

A flaw was found in the Linux kernel's mount propagation subsystem. The kernel fails to properly verify whether certain propagated mount copies are still actively in use before completing an unmount operation. A local user could exploit this flaw by configuring specific nested mount hierarchies...

CVE-2026-99184

A flaw was found in the Linux kernel's accel/rocket driver. When device cores are removed, the driver prematurely decrements the active core count during lookup, leaving the final core unreleased and retaining stale state information. A privileged local attacker could exploit this issue by...

CVE-2026-99171

A flaw was found in the Linux kernel's NTFS3 file system driver. When an NTFS file system is mounted with case-insensitive naming, internal file system structures can be released prematurely while a lookup operation is still active. A local attacker can exploit this race condition to cause a...

CVE-2026-99104

A flaw was found in the Linux kernel's extensible scheduler schedext subsystem. This vulnerability allows a local user to cause a denial of service DoS or system instability during power management operations. Due to improper tracking of bypass dispatch states across hierarchical schedulers durin...

CVE-2026-99170

A flaw was found in the Linux kernel. A local user with the ability to create user namespaces can bypass locked mount protections when transferring locks beneath existing mounts. By binding a mount namespace file beneath a locked cover and creating a new mount namespace, the covering mount is...

CVE-2026-99169

A flaw was found in the Linux kernel's futex fast userspace mutex subsystem. A local user can cause a Denial of Service DoS by exploiting improper handling of shared waiters when memory is reused. By requeuing synchronization waiters across different memory contexts, a waiter tied to freed memory...

CVE-2026-99168

A flaw was found in the Linux kernel's Microsoft Hyper-V Virtual Trust Level mshvvtl driver. When setting up per-processor register pages, an allocation failure on one CPU leaves its page pointer uninitialized while a global flag is set by another CPU. A local user can exploit this issue by...

CVE-2026-99103

A flaw was found in the Linux kernel's workqueue subsystem. A use-after-free vulnerability can occur when canceling inactive work items, as an internal worker pool structure is freed while still referenced on a pending queue. A local user could trigger this condition during workqueue operations,...

CVE-2026-99115

A flaw was found in the Linux kernel's ksmbd Server Message Block server. This flaw allows a remote attacker to cause an information disclosure by sending crafted compound requests. Because the server fails to properly initialize all response fields during filesystem information queries, unassign...

CVE-2026-99014

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition between concurrent worker threads during Periodic Advertising PA sync scan setup can cause a command buffer to be freed while still in use. A local attacker could exploit this use-after-free flaw to cause a Denial of...

CVE-2026-99116

A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability in the networking subsystem, leading to a Denial of Service DoS or potential privilege escalation. When network sockets are cloned, the Packet Security Protocol PSP association is copied from the paren...

CVE-2026-99112

A flaw was found in the Linux kernel's Flower classifier clsflower. When iterating through nested tunnel option attributes, the kernel fails to properly validate the mask pointer after advancing it to the next attribute. A local attacker with network configuration privileges can exploit this...

CVE-2026-99108

A flaw was found in the Linux kernel's NTFS file system implementation. This flaw may lead to data corruption or data loss when performing file system trim operations FITRIM to reclaim unused storage blocks. Due to an improper range alignment calculation when processing unaligned free space...

CVE-2026-99117

A flaw was found in the Linux kernel's network bridge multicast subsystem. During network bridge port removal, the cleanup process can terminate prematurely, leaving behind orphaned records pointing to deallocated memory. A local attacker with network administration privileges can trigger this fl...

CVE-2026-99107

A flaw was found in the Linux kernel's NTFS file system driver. When resizing file attributes, the driver incorrectly passes a base Master File Table MFT record pointer instead of an extent record pointer, leading to improper buffer size calculations during memory operations. A local attacker cou...

CVE-2026-99119

A flaw was found in the Linux kernel's AMDGPU driver. A local user could exploit this flaw by creating and evicting graphics buffer objects before initializing a user queue, which improperly validates evicted buffers and omits required reference counts. This issue can lead to memory corruption or...

CVE-2026-99173

A flaw was found in the Linux kernel's eventfs subsystem. An improper synchronization issue allows an internal directory structure eventfsinode to be freed while still being accessed during file path validation, leading to a use-after-free condition. A local user could exploit this vulnerability...

CVE-2026-99120

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. Improper validation of error codes generated during nested virtualization memory faults leads to an out-of-bounds read vulnerability. An attacker within a guest virtual machine can exploit this issue by triggering...

CVE-2026-99015

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can exploit this flaw to cause a Denial of Service DoS by crashing the system. Due to missing lock synchronization when rebinding a Host Controller Interface HCI socket after a controller is unregistered, a race conditio...

CVE-2026-99118

A flaw was found in the Linux kernel's i915 graphics driver. When parsing Display Microcontroller DMC firmware images, the driver does not properly validate payload sizes or check for integer multiplication overflow during size calculations. A local user with the ability to supply a malformed...

CVE-2026-99114

A flaw was found in the Linux kernel's ksmbd, an in-kernel Server Message Block SMB file server. This vulnerability allows an information disclosure where residual data from previous responses can be leaked to a client. A remote client can exploit this flaw by sending crafted compound requests,...

CVE-2026-99101

A flaw was found in the Linux kernel's NTFS file system driver. When clearing compression or sparse file flags, the driver shrinks an internal attribute record before shifting its contents, which overwrites part of the record with adjacent data. A local user could exploit this behavior by changin...

CVE-2026-99113

A flaw was found in the Linux kernel's ksmbd Server Message Block SMB file server. When handling compound file system query requests, the server fails to clear the response buffer before populating it. A remote client can exploit this vulnerability by sending specially crafted compound requests t...