CVE-2026-99026

A flaw was found in the Linux kernel's team network driver. When a team interface is configured in broadcast mode and lacks transmittable ports, the driver fails to properly free packet buffers during transmission. A local user can exploit this vulnerability by sending network traffic through the...

CVE-2026-99023

A flaw was found in the Linux kernel's PCIe M.2 power sequencing driver. The driver fails to release memory allocated for regulator consumer arrays during error handling and device removal. A local attacker could exploit this issue by triggering repeated device probe failures or removal operation...

CVE-2026-99030

A flaw was found in the Linux kernel. An information disclosure vulnerability exists where the network subsystem fails to properly clear packet buffers when handling unreadable fragments. When copying packet data, the kernel can leave stale memory in buffers that are subsequently transmitted over...

CVE-2026-98962

A flaw was found in the Linux kernel's Btrfs file system. When an encoded read operation initiated through iouring fails, the kernel fails to release the allocated memory buffer. A local user could exploit this flaw by repeatedly submitting failing read requests, causing a memory leak that can le...

CVE-2026-98970

A flaw was found in the Linux kernel's VideoCore IV vc4 graphics driver. When the driver is unbound during device teardown, cached buffer objects are purged but the associated size list is not released. A local user capable of triggering repeated unbind operations could exploit this memory leak t...

CVE-2026-99034

A flaw was found in the Linux kernel's Spreadtrum SDHCI Secure Digital Host Controller Interface driver. This flaw allows a local privileged user to cause a Denial of Service DoS by triggering improper power management cleanup during device removal. Because the driver fails to disable runtime pow...

CVE-2026-99088

A flaw was found in the Linux kernel's Open vSwitch component. When performing address rewriting actions on non-first IPv6 packet fragments, the system attempts to calculate checksums using an uninitialized transport header offset. An attacker sending specially crafted IPv6 network traffic could...

CVE-2026-98966

A flaw was found in the Linux kernel's network bonding driver. This vulnerability can lead to a Denial of Service DoS caused by kernel memory exhaustion when updating network filters. Because the driver fails to release the reference to an existing eXpress Data Path XDP program when a new program...

CVE-2026-98981

A flaw was found in the Linux kernel. A local user can cause an information disclosure by exploiting a race condition during file or directory removal operations. When a file or directory serving as a mount point across namespaces is unlinked or renamed, the kernel detaches the filesystem mounts...

CVE-2026-99089

A flaw was found in the Linux kernel's Samsung I2S audio driver. The driver's initialization routine configures runtime power management without enabling the associated operating clock, leaving clock reference counters out of balance. When the device transitions into a suspended state, the kernel...

CVE-2026-99096

A flaw was found in the Linux kernel's iouring subsystem. A local user can bypass security restrictions by creating an initially disabled asynchronous I/O ring. Because disabled rings failed to enforce inherited task restrictions prior to activation, an attacker can execute restricted register...

CVE-2026-99004

A flaw was found in the Imagination Technologies GPU driver drm/imagination in the Linux kernel. An integer underflow in the driver's page table calculation can lead to a Denial of Service DoS. A local user can exploit this vulnerability when requesting memory mappings that cross page table...

CVE-2026-99199

A flaw was found in the Linux kernel's HiSilicon hip04 Ethernet driver. A local attacker can cause a Denial of Service DoS by triggering device probing under specific network shaping configurations. Due to an improper initialization order, the driver accesses internal network device operations...

CVE-2026-99216

A flaw was found in the Linux kernel's Hyper-V Virtual Machine Bus VMBus driver. During driver exit or connection failure handling, the connection state is prematurely set to disconnected before the disconnect routine runs, preventing the driver from notifying the host hypervisor to unload the...

CVE-2026-99007

A flaw was found in the Linux kernel's Direct Rendering Manager DRM framebuffer helper. A local user could trigger a Denial of Service DoS due to improper error handling during framebuffer device probing. When initialization fails unexpectedly, the kernel fails to mark the setup as deferred,...

CVE-2026-99045

A flaw was found in the Linux kernel's IBM Virtual Ethernet ibmveth driver. This issue can lead to a denial of service DoS or system instability due to improper resource cleanup during device activation. When memory allocation fails after registering a logical network with the underlying...

CVE-2026-99012

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS by issuing concurrent connection requests on Bluetooth isochronous ISO sockets. Due to improper locking and lack of serialization during connection establishment, simultaneous connect...

CVE-2026-99205

A flaw was found in the Linux kernel's task scheduler. A race condition occurs when updating the scheduling class of a queued task, which can prevent the system from recognizing higher-priority tasks that are ready to run. A local user could exploit this timing issue to cause central processing...

CVE-2026-99006

A flaw was found in the Linux kernel's Intel i915 graphics driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or potentially gain elevated privileges. By submitting a crafted graphics execution request that triggers an error path during relocation handling, an...

CVE-2026-99212

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS or memory corruption via a use-after-free condition. When route resolution fails during Remote Direct Memory Access RDMA connection...

CVE-2026-99041

A flaw was found in the Linux kernel. A local user can trigger a null-pointer dereference in the IPv6 Encapsulated Remote Switch Port Analyzer ERSPAN networking module by redirecting traffic with attached tunnel metadata to an ERSPAN device. This flaw leads to a kernel panic, resulting in a syste...

CVE-2026-99008

A flaw was found in the Linux kernel's Bluetooth subsystem. When an RFCOMM Radio Frequency Communication terminal device fails to register properly during initialization, closing the device triggers a null pointer dereference in the shutdown handler. A local attacker could exploit this...

CVE-2026-99209

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could exploit this vulnerability to cause a Denial of Service DoS via a kernel crash. The issue occurs when evicting a graphics buffer object that lacks an assigned memory resource, causing the driver to dereference a NUL...

CVE-2026-99011

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition between connection termination and incoming data handling in the Synchronous Connection-Oriented SCO protocol can lead to a use-after-free condition. An attacker within Bluetooth range or a local user could exploit this...

CVE-2026-99178

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. When an asynchronous page fault is interrupted by a Non-Maskable Interrupt NMI that also encounters a page fault, the kernel improperly clears the pending fault status flags belonging to the interrupted handler. A...

CVE-2026-99197

A flaw was found in the Linux kernel's Marvell mv643xx Ethernet driver. This flaw can result in a Denial of Service DoS by causing the system to crash during device initialization. The issue occurs because the driver attempts to attach the physical network interface before assigning its internal...

CVE-2026-99010

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. When a communication socket is closed while the underlying connection session remains active, incoming data packets are not released from memory. A remote attacker can exploit this vulnerability by...

CVE-2026-99003

A flaw was found in the Linux kernel's Panthor Direct Rendering Manager DRM driver. When the hardware firmware initializes fewer queue slots than the driver's hardcoded maximum, the driver fails to properly validate the requested queue count against the actual initialized firmware slots. A local...

CVE-2026-99013

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user could cause a Denial of Service DoS due to a race condition during concurrent setup of Broadcast Isochronous Stream BIS socket listeners. By issuing simultaneous listen calls on the same broadcast socket, an attacker can...

CVE-2026-99175

A flaw was found in the Linux kernel. A race condition in the filesystem notification fsnotify subsystem allows mark additions to occur during connector teardown. A local unprivileged user can exploit this race by modifying inotify watches while reading file descriptor information, triggering a...

CVE-2026-99001

A flaw was found in the Linux kernel's Intel Xe graphics driver. During device teardown, the driver fails to cancel pending background tasks before releasing associated device resources. A local privileged user could trigger this flaw by removing or unbinding the device while work is queued,...

CVE-2026-99042

A flaw was found in the Linux kernel's iouring subsystem. When evaluating IPv6 network connections, security filters are supplied with zeroed address and port values if a caller provides a valid 24-byte address structure instead of the full 28-byte structure. A local attacker can exploit this fla...

CVE-2026-99215

A flaw was found in the Linux kernel's power supply subsystem. A race condition can occur if a power supply device is unregistered while an event callback is still executing, causing the driver data to be deallocated while still in use. This leads to a use-after-free condition where the kernel...

CVE-2026-99213

A flaw was found in the Linux kernel's VM sockets vsock subsystem. This issue allows a local user to cause memory corruption and trigger a system crash, resulting in a Denial of Service DoS. The vulnerability occurs due to a race condition between socket connection establishment and reset handlin...

CVE-2026-99009

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. A circular locking dependency can occur when an RFCOMM connection is initiated while a Bluetooth link is undergoing authentication or encryption. A local user can exploit this issue to trigger a...

CVE-2026-99198

A flaw was found in the Linux kernel's Actions Semi Owl Ethernet driver. When initializing or probing the network device with network traffic shaping enabled, the driver attempts to access network device operations before they are assigned. A local user capable of attaching or probing the device...

CVE-2026-99044

A flaw was found in the Linux kernel's ice network driver. During dynamic port cleanup, the driver prematurely frees internal interface memory before removing the port entry, resulting in a use-after-free condition. A local user could exploit this flaw to cause a Denial of Service DoS through a...

CVE-2026-99203

A flaw was found in the Linux kernel's pipe subsystem. Improper error handling during asynchronous input/output I/O notification setup can leave freed file structures referenced after an allocation failure. A local, unprivileged attacker could exploit this condition under memory pressure to trigg...

CVE-2026-99174

A flaw was found in the Linux kernel's ext4 file system. A local user could exploit a race condition during concurrent file path lookup and filesystem unmount operations. When resolving a symbolic link as the filesystem's last mount reference is released, the kernel may dereference a null pointer...

CVE-2026-99182

A flaw was found in the Linux kernel's Sound Open Firmware SOF audio subsystem. When handling aggregated audio capture configurations where the channel count is smaller than the number of aggregated devices, an integer underflow occurs in the IPC4 topology driver. A local user could trigger this...

CVE-2026-99200

A flaw was found in the Linux kernel's HiSilicon Fast Ethernet MAC hisifemac network driver. This flaw can result in a Denial of Service DoS due to a system crash during device probing. When initializing the network interface, the driver attempts to access network device operations before they ar...

CVE-2026-99206

A flaw was found in the Linux kernel's iSCSI target subsystem. A race condition occurs when concurrent processes update discovery authentication parameters through the configuration filesystem configfs without proper locking. A local user could exploit this vulnerability to trigger a double-free...

CVE-2026-99210

A flaw was found in the Linux kernel's accel/rocket driver. This flaw can lead to a Denial of Service DoS through a system crash under specific hardware initialization failure conditions. If initial device setup fails, the driver does not properly clear an internal reference pointer, leaving an...

CVE-2026-99207

A flaw was found in the Linux kernel's SCSI target subsystem. This issue allows a storage initiator or virtual machine guest to cause a Denial of Service DoS through a system deadlock. The vulnerability occurs because the subsystem fails to disable interrupts while holding an internal lock during...

CVE-2026-99176

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested virtualization component. When loading nested virtual machine state fails during certain non-standard entry operations, KVM fails to reset the memory management unit MMU pointer back to the root context. A local user...

CVE-2026-99048

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When disabling network buffer pools XSK pools, the driver attempts to re-acquire a network device lock that is already held. A local user with administrative privileges could trigger this flaw during queue management...

CVE-2026-99179

A flaw was found in the Linux kernel's watch queue subsystem, which can lead to a Denial of Service DoS. A race condition exists between queue resizing and notification delivery due to improper memory access ordering. A local, unprivileged user could exploit this flaw by concurrently resizing a...

CVE-2026-99000

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user can trigger a Denial of Service DoS by pinning and unpinning shared buffer objects repeatedly. Improper tracking of nested pin operations causes memory accounting counters to underflow, misleading the system into reportin...

CVE-2026-99043

A flaw was found in the Linux kernel's Intel Ethernet ice driver. This vulnerability can lead to a denial of service DoS caused by a use-after-free condition when network routing metadata is freed prematurely during representor interface teardown while packets remain queued for transmission. A...

CVE-2026-99002

A flaw was found in the Linux kernel's VMware Virtual GPU vmwgfx driver. A local user could exploit this flaw to cause a Denial of Service DoS or disclose sensitive memory contents through an out-of-bounds read. The vulnerability occurs because the driver fails to validate the pitch value provide...