CVE-2026-99100

A flaw was found in the Linux kernel's p54 wireless driver. This vulnerability can lead to a denial of service DoS or kernel information disclosure. The issue occurs because the firmware parser does not properly validate record lengths before reading component data. A local user capable of loadin...

CVE-2026-99016

A flaw was found in the Linux kernel's RISC-V architecture implementation. When the tagged address Application Binary Interface ABI is enabled, the kernel's fast user-space locking mechanism futex verifies an address after stripping its tag, but executes atomic memory operations using the origina...

CVE-2026-99167

A flaw was found in the Linux kernel's traffic control net/sched subsystem. Due to improper synchronization in the tcfactionput function, reference and binding counts are updated out of sequence during action cleanup, allowing memory to be released while still being accessed. A local attacker cou...

CVE-2026-99110

A flaw was found in the Linux kernel's Common Internet File System CIFS client. When converting a POSIX Access Control List ACL to the network wire format, the kernel verifies the ACL against an extended attribute size calculation instead of the larger network format size, leading to a heap-based...

CVE-2026-99109

A flaw was found in the Linux kernel's SMB client. This flaw allows a local, unprivileged user to cause a Denial of Service DoS or potentially escalate privileges. The CIFSSMBSetEA function fails to verify that an extended attribute value fits within the allocated request buffer before copying th...

CVE-2026-99094

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An off-by-one bounds check fails to properly validate the transmission descriptor index against the queue limit during packet preparation. A local attacker could exploit this issue to trigger an out-of-bounds memory access, leadi...

CVE-2026-99095

A flaw was found in the Linux kernel's VideoCore IV vc4 graphics driver. This vulnerability can result in a Denial of Service DoS due to improper cleanup during device teardown. Active timers and queued background tasks are not stopped before device memory structures are released. A local user...

CVE-2026-99093

A flaw was found in the Linux kernel. A privileged user capable of modifying boot parameters can cause a Denial of Service DoS by enabling early boot function tracing. Under this configuration, the kernel attempts to schedule deferred page table memory cleanup before necessary internal work...

CVE-2026-93250

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN networking module. This flaw allows a local user with network administration privileges to cause a Denial of Service DoS or potentially execute arbitrary code. The issue arises from a use-after-free condition during multicast...

CVE-2026-98935

A flaw was found in the Linux kernel's Real-Time Clock RTC driver. This information disclosure vulnerability occurs because the driver fails to initialize memory padding within an internal data structure before copying alarm details to user space. A local user can exploit this flaw by querying th...

CVE-2026-98987

A flaw was found in the Linux kernel's mount namespace subsystem. A local user with mount privileges can trigger this issue during recursive mount operations when the topmost mount in a chain is a mount namespace file. Because the kernel fails to inspect the topmost mount in the chain, propagated...

CVE-2026-98913

A flaw was found in the Linux kernel's Cavium ThunderX network driver. When initializing a network interface, an error occurring after acquiring a reference to the Precision Time Protocol PTP device fails to properly release that reference. A privileged local attacker could exploit this issue by...

CVE-2026-98937

A flaw was found in the Linux kernel's Performance Events perf subsystem. The kernel failed to enforce proper privilege checks when capturing kernel callchains call stack traces. A local unprivileged user could exploit this vulnerability to bypass profiling restrictions and collect kernel call...

CVE-2026-98929

A flaw was found in the Linux kernel's Media Access Control Security MACsec subsystem. When creating a MACsec network interface configured with hardware offload over a device supporting Large Receive Offload LRO, the kernel registers the interface before its internal security entity SecY is...

CVE-2026-98950

A flaw was found in the Linux kernel. A remote attacker could trigger a Denial of Service DoS or improper packet routing due to an integer truncation vulnerability within the Berkeley Packet Filter BPF flow dissector. When handling packets with header lengths exceeding 16-bit limits 65,535 bytes,...

CVE-2026-98953

A flaw was found in the Linux kernel's devlink subsystem. An improper reference count management issue occurs when scheduling notification work for nested devlink instances that are already pending. A local user could exploit this flaw by repeatedly registering and unregistering nested devlink...

CVE-2026-98984

A flaw was found in the Linux kernel's Virtual File System VFS directory cache component. A local user could exploit a race condition between moving a mount and concurrently removing a directory, causing a mountpoint to attach to a directory entry being deleted. Because the kernel cannot detach...

CVE-2026-98951

A flaw was found in the Linux kernel's RISC-V architecture. When handling process tracing ptrace register set requests with shorter-than-expected data lengths, the kernel fails to initialize temporary stack buffers before copying user input. A local attacker with process tracing privileges can...

CVE-2026-99029

A flaw was found in the Linux kernel's Sparx5 network driver. When removing offloaded matchall traffic control filters, the driver unlinks filter entries without freeing the allocated memory. A local user with network administration privileges can exploit this flaw by repeatedly adding and deleti...

CVE-2026-98969

A flaw was found in the Linux kernel's packet scheduling subsystem. A local attacker with network administration privileges can trigger this flaw by submitting a text-matching filter configuration with a non-null-terminated algorithm name. When attempting to automatically load the corresponding...

CVE-2026-98956

A flaw was found in the Linux kernel's ADAU1372 audio codec driver. The driver improperly utilizes non-sleepable operations to toggle power-down General Purpose Input/Output GPIO pins that can sleep, such as those connected through external bus controllers. A local user triggering audio power-sta...

CVE-2026-99026

A flaw was found in the Linux kernel's team network driver. When a team interface is configured in broadcast mode and lacks transmittable ports, the driver fails to properly free packet buffers during transmission. A local user can exploit this vulnerability by sending network traffic through the...

CVE-2026-99023

A flaw was found in the Linux kernel's PCIe M.2 power sequencing driver. The driver fails to release memory allocated for regulator consumer arrays during error handling and device removal. A local attacker could exploit this issue by triggering repeated device probe failures or removal operation...

CVE-2026-99030

A flaw was found in the Linux kernel. An information disclosure vulnerability exists where the network subsystem fails to properly clear packet buffers when handling unreadable fragments. When copying packet data, the kernel can leave stale memory in buffers that are subsequently transmitted over...

CVE-2026-98962

A flaw was found in the Linux kernel's Btrfs file system. When an encoded read operation initiated through iouring fails, the kernel fails to release the allocated memory buffer. A local user could exploit this flaw by repeatedly submitting failing read requests, causing a memory leak that can le...

CVE-2026-98970

A flaw was found in the Linux kernel's VideoCore IV vc4 graphics driver. When the driver is unbound during device teardown, cached buffer objects are purged but the associated size list is not released. A local user capable of triggering repeated unbind operations could exploit this memory leak t...

CVE-2026-99034

A flaw was found in the Linux kernel's Spreadtrum SDHCI Secure Digital Host Controller Interface driver. This flaw allows a local privileged user to cause a Denial of Service DoS by triggering improper power management cleanup during device removal. Because the driver fails to disable runtime pow...

CVE-2026-99088

A flaw was found in the Linux kernel's Open vSwitch component. When performing address rewriting actions on non-first IPv6 packet fragments, the system attempts to calculate checksums using an uninitialized transport header offset. An attacker sending specially crafted IPv6 network traffic could...

CVE-2026-98966

A flaw was found in the Linux kernel's network bonding driver. This vulnerability can lead to a Denial of Service DoS caused by kernel memory exhaustion when updating network filters. Because the driver fails to release the reference to an existing eXpress Data Path XDP program when a new program...

CVE-2026-98981

A flaw was found in the Linux kernel. A local user can cause an information disclosure by exploiting a race condition during file or directory removal operations. When a file or directory serving as a mount point across namespaces is unlinked or renamed, the kernel detaches the filesystem mounts...

CVE-2026-99089

A flaw was found in the Linux kernel's Samsung I2S audio driver. The driver's initialization routine configures runtime power management without enabling the associated operating clock, leaving clock reference counters out of balance. When the device transitions into a suspended state, the kernel...

CVE-2026-99096

A flaw was found in the Linux kernel's iouring subsystem. A local user can bypass security restrictions by creating an initially disabled asynchronous I/O ring. Because disabled rings failed to enforce inherited task restrictions prior to activation, an attacker can execute restricted register...

CVE-2026-99004

A flaw was found in the Imagination Technologies GPU driver drm/imagination in the Linux kernel. An integer underflow in the driver's page table calculation can lead to a Denial of Service DoS. A local user can exploit this vulnerability when requesting memory mappings that cross page table...

CVE-2026-99199

A flaw was found in the Linux kernel's HiSilicon hip04 Ethernet driver. A local attacker can cause a Denial of Service DoS by triggering device probing under specific network shaping configurations. Due to an improper initialization order, the driver accesses internal network device operations...

CVE-2026-99216

A flaw was found in the Linux kernel's Hyper-V Virtual Machine Bus VMBus driver. During driver exit or connection failure handling, the connection state is prematurely set to disconnected before the disconnect routine runs, preventing the driver from notifying the host hypervisor to unload the...

CVE-2026-99007

A flaw was found in the Linux kernel's Direct Rendering Manager DRM framebuffer helper. A local user could trigger a Denial of Service DoS due to improper error handling during framebuffer device probing. When initialization fails unexpectedly, the kernel fails to mark the setup as deferred,...

CVE-2026-99045

A flaw was found in the Linux kernel's IBM Virtual Ethernet ibmveth driver. This issue can lead to a denial of service DoS or system instability due to improper resource cleanup during device activation. When memory allocation fails after registering a logical network with the underlying...

CVE-2026-99012

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS by issuing concurrent connection requests on Bluetooth isochronous ISO sockets. Due to improper locking and lack of serialization during connection establishment, simultaneous connect...

CVE-2026-99205

A flaw was found in the Linux kernel's task scheduler. A race condition occurs when updating the scheduling class of a queued task, which can prevent the system from recognizing higher-priority tasks that are ready to run. A local user could exploit this timing issue to cause central processing...

CVE-2026-99006

A flaw was found in the Linux kernel's Intel i915 graphics driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or potentially gain elevated privileges. By submitting a crafted graphics execution request that triggers an error path during relocation handling, an...

CVE-2026-99212

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS or memory corruption via a use-after-free condition. When route resolution fails during Remote Direct Memory Access RDMA connection...

CVE-2026-99041

A flaw was found in the Linux kernel. A local user can trigger a null-pointer dereference in the IPv6 Encapsulated Remote Switch Port Analyzer ERSPAN networking module by redirecting traffic with attached tunnel metadata to an ERSPAN device. This flaw leads to a kernel panic, resulting in a syste...

CVE-2026-99008

A flaw was found in the Linux kernel's Bluetooth subsystem. When an RFCOMM Radio Frequency Communication terminal device fails to register properly during initialization, closing the device triggers a null pointer dereference in the shutdown handler. A local attacker could exploit this...

CVE-2026-99209

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could exploit this vulnerability to cause a Denial of Service DoS via a kernel crash. The issue occurs when evicting a graphics buffer object that lacks an assigned memory resource, causing the driver to dereference a NUL...

CVE-2026-99011

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition between connection termination and incoming data handling in the Synchronous Connection-Oriented SCO protocol can lead to a use-after-free condition. An attacker within Bluetooth range or a local user could exploit this...

CVE-2026-99178

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. When an asynchronous page fault is interrupted by a Non-Maskable Interrupt NMI that also encounters a page fault, the kernel improperly clears the pending fault status flags belonging to the interrupted handler. A...

CVE-2026-99197

A flaw was found in the Linux kernel's Marvell mv643xx Ethernet driver. This flaw can result in a Denial of Service DoS by causing the system to crash during device initialization. The issue occurs because the driver attempts to attach the physical network interface before assigning its internal...

CVE-2026-99010

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. When a communication socket is closed while the underlying connection session remains active, incoming data packets are not released from memory. A remote attacker can exploit this vulnerability by...

CVE-2026-99003

A flaw was found in the Linux kernel's Panthor Direct Rendering Manager DRM driver. When the hardware firmware initializes fewer queue slots than the driver's hardcoded maximum, the driver fails to properly validate the requested queue count against the actual initialized firmware slots. A local...

CVE-2026-99013

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user could cause a Denial of Service DoS due to a race condition during concurrent setup of Broadcast Isochronous Stream BIS socket listeners. By issuing simultaneous listen calls on the same broadcast socket, an attacker can...