CVE-2026-90776

A flaw was found in Nodemailer's addressparser component. A remote attacker can exploit this by crafting malicious email headers containing specially formatted comments. This can lead to excessive CPU consumption and block the Node.js event loop, resulting in a denial of service for the...

CVE-2026-89448

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit component. When tboot Trusted Boot is enabled, the system may fail to correctly request Access Control Services ACS. This misconfiguration could potentially lead to a bypass of intended Access Control Services, which...

CVE-2026-88878

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When HTTP/3 is enabled, an unauthenticated remote client can exploit a timeout bypass vulnerability by trickling request body bytes. This allows the client to hold a request open indefinitely, exhausting backend connection pool...

CVE-2026-90553

A flaw was found in vLLM. The LlavaOnevision2 processor loader incorrectly ignores the trustremotecode parameter, which is designed to prevent the execution of untrusted code. This oversight allows an attacker to craft a malicious model containing arbitrary code. When such a model is loaded, the...

CVE-2026-90555

A flaw was found in vLLM. An authenticated client can exploit this vulnerability by submitting forged FLAC Free Lossless Audio Codec headers with an inflated sample rate to the transcription endpoint. This bypasses duration checks, leading to excessive memory allocation within the API server...

CVE-2026-90554

A flaw was found in vLLM. This vulnerability allows a remote attacker to cause a denial of service by providing a specially crafted, highly compressed video as multimodal input when the NanoNemotronVL model is configured to use audio from video. The lack of proper size or duration limits during...

CVE-2026-89664

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When processing malformed NFSv4 OPEN compound operations that include valid Portable Operating System Interface POSIX Access Control List ACL attributes, the kernel fails to release allocated memory resources. This oversight...

CVE-2026-89607

A flaw was found in ecryptfs in the Linux kernel. The parsetag3packet function does not properly validate the size of the encrypted key, allowing an oversized key to be processed. This improper validation leads to out-of-bounds writes, corrupting critical data structures within the ecryptfsauthto...

CVE-2026-89629

A flaw was found in the Linux kernel, specifically within the corsair-void driver for Human Interface Devices HID. This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. The system fails to properly check the size of these events, whi...

CVE-2026-89459

A flaw was found in the Linux kernel's s390/percpu component. This vulnerability arises when the kernel is compiled with older versions of GNU as prior to binutils 2.39. A parsing error prevents a crucial instruction from being correctly processed, which can lead to issues with system resource...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

CVE-2026-89727

A flaw was found in the Kernel-based Virtual Machine KVM for ARM64 arm64 architecture. A malicious guest operating system can provide an interrupt ID INTID that is outside the expected range to the GICv2 Generic Interrupt Controller version 2 during interrupt deactivation. This can trigger a...

CVE-2026-89522

A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup probe error path, a V4L2 asynchronous notifier is not correctly removed from a global list. This results in a use-after-free vulnerability, where the...

CVE-2026-89646

A flaw was found in the Ceph filesystem component of the Linux kernel. When a writeback operation is aborted during an unmount process, a reference to an inode a data structure describing a filesystem object is not properly released. This prevents the inode from being evicted, potentially leading...

CVE-2026-89500

A flaw was found in the Linux kernel's ring-buffer component. When a cached reader page is discarded after a concurrent ring buffer resize, the system may use an incorrect buffer size for memory deallocation. This mismatch can lead to a kernel crash, resulting in a Denial of Service DoS, or it...

CVE-2026-89470

A flaw was found in the Linux kernel's crosusbpd-charger driver. This driver, which manages USB power delivery, incorrectly processes port count information from an embedded controller. A malicious embedded controller could provide an exaggerated port count, leading to an out-of-bounds write and...

CVE-2026-89496

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. A local user could exploit this vulnerability by performing a copyfilerange operation within the same filesystem. This can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service DoS...

CVE-2026-89487

A flaw was found in openvswitch in the Linux kernel. This vulnerability occurs when the queueuserspacepacket function incorrectly modifies a shared network packet buffer by stripping a critical flag. This action can lead to an unprivileged page-cache write, allowing a local attacker to modify dat...

CVE-2026-80954

A flaw was found in the Linux kernel's i3c driver. The i3cdevicegetsupportedxfermode function attempts to access a device descriptor without holding the necessary lock. This unlocked dereference can lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-80951

A flaw was found in the Linux kernel's I3C master driver. A malicious I3C device could exploit this by sending an In-Band Interrupt IBI payload that exceeds the allocated slot size. This can lead to an out-of-bounds write into the IBI pool, potentially causing memory corruption and system...

CVE-2026-89668

A flaw was found in the nfsd component of the Linux kernel. The nfsddebugfsinit function is called before nfsd4initslabs. If the slab allocation fails, the nfsddebugfsexit cleanup function is bypassed, leaving orphaned debugfs files with stale function pointers. This can lead to a use-after-free...

CVE-2026-80941

A flaw was found in the rtw88 Wi-Fi driver of the Linux kernel. This issue occurs because the rtwtxqpushskb function fails to free a socket buffer skb when an error occurs during transmission. This oversight can lead to a memory leak, potentially impacting system stability and performance over ti...

CVE-2026-89666

A flaw was found in the kernel. A remote attacker, acting as an NFSv3 client, can send malformed time values during SETATTR or create operations. This can lead to the corruption of on-disk metadata, resulting in incorrect timestamps for files. This issue affects filesystems that support nanosecon...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

CVE-2026-89627

A flaw was found in the Linux kernel's HID Human Interface Device roccat driver. When a roccat device is destroyed, the driver fails to properly free buffered reports, leading to a memory leak. A local attacker could potentially exploit this to exhaust system memory, resulting in a Denial of...

CVE-2026-89711

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An invalid assumption in the nfsdmodecheck function regarding directory lookup capabilities during NFS reexport could lead to a null pointer dereference. A remote attacker could exploit this by performing a LOOKUP operation o...

CVE-2026-89594

A flaw was found in the Linux kernel's OMAP SSI driver. The driver uses a synthetic HSI controller device that does not properly initialize its Direct Memory Access DMA mask. This oversight can lead to the driver crashing or triggering warnings when attempting DMA mapping operations, potentially...

CVE-2026-89570

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. Lifetime issues with the CXL Machine Check Exception MCE notifier can lead to NULL dereferences and use-after-free vulnerabilities in the MCE handler. This could allow an attacker to cause system instability or a denial of...

CVE-2026-89554

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. When reconstructing a Multipath TCP MPTCP join request under SYN cookies, the localid field is not properly initialized. An off-path attacker can influence this uninitialized field by sending concurrent MPJOIN SYN requests...

CVE-2026-89525

A flaw was found in the Linux kernel. A local attacker could craft a malicious Universal Disk Format UDF image to trigger an out-of-bounds read vulnerability in the udfgetpblockvirt15 function. This occurs when the system attempts to read a Virtual Allocation Table VAT index equal to the entry...

CVE-2026-89453

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit driver for AMD. This vulnerability occurs when the system handles certain memory access errors, specifically Page Request PPR faults, without properly releasing a reference to a PCI device. This oversight causes a...

CVE-2026-81014

A flaw was found in the Linux kernel's hp-bioscfg module. A local attacker with write access to the sysfs entry for hp-bioscfg could exploit a heap out-of-bounds read vulnerability. This occurs because the skstore and kekstore functions incorrectly handle input that ends with a newline character,...

CVE-2026-81011

A flaw was found in the Linux kernel's hp-bioscfg module. The module's package parsers incorrectly determine the number of elements in a package, using a value derived from a name string rather than the true package size. While currently prevented by existing validation, a future change to the...

CVE-2026-89759

A flaw was found in the Linux kernel's memory leak detector kmemleak. When kmemleakscan attempts to scan task stacks on systems with a large number of threads, it can hold a CPU for an extended period without allowing other processes to run. This can lead to a 'soft lockup,' where the system...

CVE-2026-89603

A flaw was found in the Linux kernel. A race condition exists where a seccomp filter, intended to restrict system calls, can be bypassed by an unprivileged process. This occurs when a thread is stopped for tracing ptrace and another thread attempts to apply a seccomp filter with the...

CVE-2026-89556

A flaw was found in the Linux kernel. This vulnerability arises from insufficient validation of string table section types within ELF Executable and Linkable Format files. A local attacker could exploit this by providing a specially crafted ELF module, leading to the kernel attempting to access...

CVE-2026-89499

A flaw was found in the Linux kernel's ring-buffer component. When a remote reader update fails during a page swap, the system incorrectly proceeds as if the swap succeeded. This can lead to log flooding, potentially causing a denial of service by exhausting system resources or hindering system...

CVE-2026-89452

A flaw was found in the iommu/msm component of the Linux kernel. This vulnerability occurs when msmiommuprobe fails to properly unwind its probe state during registration, leaving a dangling list entry. A local attacker could potentially exploit this to cause a dereference of the dangling list...

CVE-2026-80972

A flaw was found in the ALSA Advanced Linux Sound Architecture aloop driver within the Linux kernel. This vulnerability arises from insufficient validation of the card index during device setup, specifically when a device is manually configured using the sysfs interface. A local attacker could...

CVE-2026-89705

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability occurs due to a synchronization issue where a status counter rqstatuscounter is not correctly reset on all exit paths within the nfsddispatch function. This can lead to a race condition where a lockles...

CVE-2026-89667

A flaw was found in the Linux kernel's Network File System Daemon nfsd file caching mechanism. A race condition can occur during concurrent shutdown operations and file disposal, where a file might be unhashed and moved to a dispose list, but the shutdown process misses it. This can lead to a...

CVE-2026-89579

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically impacting 32-bit systems. This vulnerability stems from incorrect sizing and indexing of bloom filters, which can lead to out-of-bounds memory access. A local attacker with CAPBPF capabilities could exploit...

CVE-2026-89532

A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send a specially crafted network packet that causes an integer underflow in the pclforeachsegment function when processing a chunk with zero segments. This vulnerability leads to an out-of-bounds read, resulting in ...

CVE-2026-89492

A flaw was found in the Linux kernel's OCFS2 filesystem. A local attacker with the ability to mount a crafted on-disk image could exploit this vulnerability by providing excessive directory-index entry counts when reading metadata. This can lead to an out-of-bounds read, potentially causing...

CVE-2026-80978

A flaw was found in the Linux kernel, specifically within its IP tunnel devices. A local attacker could create a stack of user-controlled IP tunnel devices, causing the system to miscalculate the required memory for network packet headers. This miscalculation can lead to unnecessary memory...

CVE-2026-80960

A flaw was found in the Linux kernel's dm-pcache component. A local attacker with CAPSYSADMIN capabilities can exploit this vulnerability by supplying a specially crafted cache device. The segnum value, which dictates the size of cache segments, is not adequately validated against the actual devi...

CVE-2026-89770

A flaw was found in the iomap component of the Linux kernel. This vulnerability occurs when Protection Information PI verification is disabled on a block device, causing fsbiointegrityalloc to not allocate a bio integrity payload. Subsequently, the iomapbioreadfoliorangesync function attempts to...

CVE-2026-89728

A flaw was found in the Linux kernel's I3C Renesas driver. When the I3C bus is empty and software initiates Dynamic Address Assignment DAA, an out-of-bounds access can occur. This is due to an incorrect calculation of the newly discovered devices bitmask, which can lead to system instability or...

CVE-2026-89692

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability occurs when a delegation recall operation fails, leaving a critical internal flag uncleared. This prevents subsequent attempts to break the same delegation, leading to a denial of service where file...

CVE-2026-89641

A flaw was found in the Linux kernel's Common Internet File System CIFS module. This vulnerability, a use-after-free, occurs in the cifsfilesetsize function. When a file's size is being modified, a critical system resource tcon object can be released too early but then accessed again. A local...