CVE-2026-93221

A flaw was found in the Linux kernel's NFS daemon nfsd. A race condition occurs when multiple internal processes concurrently access the graceended flag without proper synchronization. This can lead to memory corruption, including double-free vulnerabilities and attempts to read from freed memory...

CVE-2026-90028

A flaw was found in the Linux kernel's usb: typec: hd3ss3220 driver. This vulnerability occurs because the regulatorisenabled function reports the overall power regulator state rather than the state specific to a particular consumer. If another component enables the VBUS Voltage Bus first, the...

CVE-2026-89976

A flaw was found in the Linux kernel's accel/ethosu component. This vulnerability occurs due to improper handling of job completion fences, where an uninitialized fence can be leaked or a zeroed reference count is passed to the dmafenceput function. A local attacker could potentially exploit this...

CVE-2026-89939

A flaw was found in the Linux kernel's iio: chemical: atlas-sensor driver. This vulnerability occurs when the atlasbufferpostenable function acquires a Power Management PM reference but fails to release it if an interrupt setup operation atlassetinterrupt does not complete successfully. This...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

CVE-2026-89935

A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306readdata function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from enteri...

CVE-2026-89934

A flaw was found in the Linux kernel's ltrf216a driver, which manages light sensors. When the system attempts to read data from the sensor, a power management PM reference is acquired. If the data reading operation fails, this reference is not properly released. This oversight leads to an...

CVE-2026-89830

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. When the system attempts to allocate new data blocks, it may incorrectly increment the count of valid blocks without properly reversing this action if the allocation process fails. This oversight leads to a...

CVE-2026-82983

A flaw was found in Nextcloud Tables. The application fails to properly verify that a requesting user has management permissions before returning table share details. An authenticated user with read-only access can exploit this flaw by directly querying the share-listing endpoint, leading to...

CVE-2026-58496

A flaw was found in ThorVG. The vector graphics engine's font loader does not verify that an input buffer contains the minimum required data before attempting to inspect font headers. An attacker could exploit this flaw by enticing an application to load a specially crafted, undersized font...

CVE-2026-98965

A flaw was found in the Linux kernel's Intel Ethernet ice driver. The packet transmission path uses relaxed memory-mapped I/O MMIO write ordering when updating hardware doorbells on certain processor architectures. This flaw introduces a race condition where the network interface card processes...

CVE-2026-98975

A flaw was found in the Linux kernel's XFS file system. A local user could exploit this flaw to cause data corruption across shared files during file exchange operations. When exchanging file storage mappings, the kernel may improperly clear the reference link reflink flag that marks blocks as...

CVE-2026-99033

A flaw was found in the Linux kernel. A local user with network privileges can trigger a Denial of Service DoS by causing a complete system crash. This issue occurs when a packet socket receives traffic on a network interface that lacks a link-layer header, such as a Controller Area Network CAN...

CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

CVE-2026-98954

A flaw was found in the Linux kernel's networking subsystem. Due to improper validation of Generic Segmentation Offload GSO packets during virtio network header processing, packets with malformed headers or certain IP options can bypass flow dissection and leave transport headers uninitialized. A...

CVE-2026-98971

A flaw was found in the Linux kernel's Exar GPIO General Purpose Input/Output driver. A local user could cause a Denial of Service DoS when device initialization error handling triggers cleanup before the newly allocated device identifier is saved. Because the identifier is not yet stored, the...

CVE-2026-99099

A flaw was found in the Linux kernel. On systems running affected AMD processors without microcode fixes, the processor may fail to properly clear cached entries in the Translation Lookaside Buffer TLB, a hardware cache used to speed up memory address translation, during flush operations. A local...

CVE-2026-98964

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe target subsystem. When handling peer-to-peer P2P memory requests, an allocation failure during metadata processing causes the cleanup handler to reference an unassigned device structure. An attacker could exploit this flaw to...

CVE-2026-98955

A flaw was found in the Linux kernel. An integer truncation issue in the network flow dissector component occurs when calculating transport header offsets for network packets exceeding 64 kilobytes. An attacker could exploit this flaw by transmitting specially sized network frames, causing the...

CVE-2026-99031

A flaw was found in the Linux kernel's network bridge subsystem. When cleaning up multicast port entries, the kernel executes recursive function calls that consume a new stack frame for each port being removed. An attacker capable of triggering the removal of a large number of multicast ports can...

CVE-2026-98961

A flaw was found in the Linux kernel's Btrfs file system. A local attacker can cause a Denial of Service DoS by triggering error conditions during asynchronous read operations. When an iouring read request fails, such as during a memory allocation failure, the kernel does not release acquired...

CVE-2026-98979

A flaw was found in the Linux kernel. The kernel improperly allows automount operations beneath internal mount points that are not associated with a mount namespace. A local user can exploit this vulnerability by accessing an affected mount path, causing an invalid pointer dereference. This flaw...

CVE-2026-99036

A flaw was found in the Linux kernel's Device Mapper subsystem. A local privileged user could trigger a race condition by issuing concurrent device control ioctl operations during a device resume sequence. Because the kernel accesses mapping information without proper locking after swapping table...

CVE-2026-99032

A flaw was found in the Linux kernel's Shared Memory Communications SMC subsystem. A race condition in the smcgetname function allows an underlying socket to be released while its address information is being retrieved. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-99025

A flaw was found in the Linux kernel's Open vSwitch component. A local attacker can cause a Denial of Service DoS by initiating a Netlink flow dump while the system is processing heavy network traffic. In this scenario, the dumping thread repeatedly processes pending software interrupts without...

CVE-2026-98976

A flaw was found in the Linux kernel. This vulnerability allows information disclosure when filesystem mount locks are improperly handled during mount propagation. When a propagated mount is placed beneath a locked mount and subsequently removed, the covering mount is incorrectly left unlocked. A...

CVE-2026-98963

A flaw was found in the Btrfs file system within the Linux kernel. During asynchronous read operations, an early I/O error can cause both the direct and deferred error handling paths to release the same resources. This double-free condition can be exploited by a local user to corrupt memory and...

CVE-2026-99021

A flaw was found in the Linux kernel's regulator subsystem. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering a system crash. When processing bulk regulator requests, the kernel fails to populate the power supply names in the allocated memory array. ...

CVE-2026-99037

A flaw was found in the Linux kernel's dm-crypt subsystem. A privileged local user can cause a Denial of Service DoS by configuring an incompatible encryption cipher and initialization vector mode. This improper handling triggers an out-of-bounds memory read, resulting in a kernel crash...

CVE-2026-99035

A flaw was found in the MediaTek SD/MMC host controller driver within the Linux kernel. When the driver is removed or unbound, it fails to wait for active request timeout tasks to complete before releasing host memory resources. A local user could exploit this timing issue during device removal t...

CVE-2026-99039

A flaw was found in the Linux kernel's memstick subsystem. This vulnerability allows a local user or physically proximate attacker to cause a Denial of Service DoS or kernel memory corruption. When device initialization or configuration requests experience a timeout, the kernel prematurely frees...

CVE-2026-98973

A flaw was found in the Linux kernel's DRM Direct Rendering Manager bridge subsystem. A local attacker could exploit a race condition in the drmbridgeadd function to cause a Denial of Service DoS through a system crash. When re-adding a previously removed display bridge, the function modifies an...

CVE-2026-99038

A flaw was found in the Linux kernel's Realtek USB MemoryStick rtsxusbms driver. This vulnerability can lead to a Denial of Service DoS due to a race condition when a device is disconnected while handling active requests. Because the driver drops an in-flight request without signaling completion,...

CVE-2026-99024

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment driver. The driver registers device interfaces before internal data structures are fully initialized. A local user can access the device during this initialization window, triggering uninitialized mutex...

CVE-2026-98957

A flaw was found in the Linux kernel's MT7915 wireless driver. The driver fails to properly disable receive network polling before freeing device resources during hardware teardown or module unloading. This flaw may allow a local privileged user to induce kernel warnings and cause system...

CVE-2026-98983

A flaw was found in the Linux kernel. During a failed namespace unshare operation, the kernel improperly decrements reference counters for namespaces that were never fully established. A local attacker could exploit this flaw by triggering specific credential allocation failures, leading to...

CVE-2026-99098

A flaw was found in the Linux kernel's dm-integrity subsystem. When operating in inline mode with a tag size larger than the expected maximum digest size, checksum calculation pads data past the boundary of a fixed-size stack buffer. A local privileged user configuring an integrity device with an...

CVE-2026-98968

A flaw was found in the Linux kernel's Automatic Multicast Tunneling AMT driver. Network query packets queued for transmission can outlive and reference an AMT tunnel structure after it has expired and been freed. When the delayed packet is subsequently transmitted, the kernel accesses the...

CVE-2026-99028

A flaw was found in the Linux kernel's Xilinx Axi Ethernet driver. During network interface shutdown, the driver fails to unmap and release active Direct Memory Access DMA buffers and suffers from a race condition during teardown. A privileged local user could exploit this vulnerability by...

CVE-2026-98958

A flaw was found in the Linux kernel's mt76 wireless driver. When handling connections that use Multi-Link Operation MLO, transmission completions can be reported on a different wireless link than the one where packets were initially queued, causing packet accounting counters to drift upward...

CVE-2026-99027

A flaw was found in the Linux kernel's team network device driver. When a network packet is dropped during a queue override operation, the driver attempts to reuse the freed packet buffer on subsequent transmit attempts. A local attacker could exploit this use-after-free condition to cause a syst...

CVE-2026-98978

A flaw was found in the Linux kernel's mount namespace subsystem. This issue allows a local attacker to cause an information disclosure by exposing files and directories protected by locked mounts. When an unlocked ancestor mount is unmounted, the kernel improperly allows locked submounts to expi...

CVE-2026-98982

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability to cause a Denial of Service DoS or potentially escalate privileges on the system. By bind-mounting a pseudo file descriptor, such as a Berkeley Packet Filter BPF token, as the root of a mount point, t...

CVE-2026-98977

A flaw was found in the Linux kernel. A local attacker with the ability to create user and mount namespaces can trigger an improper filesystem lock during an automatic mount automount operation. Because the kernel incorrectly assigns mount locks across namespaces during propagation, the lock is...

CVE-2026-98980

A flaw was found in the Linux kernel. A race condition during reference-based path lookup allows a local user to access files hidden beneath mount points, resulting in information disclosure. When an overmounted file or directory is unlinked or removed while another process traverses the path, th...

CVE-2026-98972

A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability when a control group cgroup filesystem is rebound, causing the cpuset subsystem to access a stale pointer. This flaw can lead to a Denial of Service DoS by crashing the system or potentially allow...

CVE-2026-99022

A flaw was found in the Linux kernel's LTC3676 regulator driver. The driver improperly marks write-only command registers, including the hardware reset register, as readable. A local user with administrative privileges can cause a Denial of Service DoS by reading the regulator registers through...

CVE-2026-99097

A flaw was found in the Linux kernel's Trusted Execution Environment TEE subsystem. A local user can cause a Denial of Service DoS by requesting a zero-sized shared memory allocation. Because the subsystem fails to validate the requested allocation size before calculating page counts, the kernel'...

CVE-2026-117997

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget component...

CVE-2026-117602

A flaw was found in Electrum. The external plugin loader does not verify authorization signatures before executing enabled plugins. A local attacker with write access to the application data directory can place malicious plugin code into the plugins folder and enable it in the configuration file...