CVE-2026-98838

A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A local attacker can exploit this issue by altering font setting...

CVE-2026-98837

A flaw was found in the Linux kernel's ALSA caiaq USB audio driver. This flaw allows a local attacker to cause a Denial of Service DoS or potentially escalate privileges. When device initialization fails during the probing process, the driver frees internal device state structures while leaving t...

CVE-2026-98836

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Line 6 USB audio driver. The driver fails to validate the size of playback packets against the allocated memory buffer slice when handling asymmetrical audio configurations. An attacker capable of connecting a crafted U...

CVE-2026-98835

A flaw was found in the Linux kernel's Kionix KX022A accelerometer driver. A local user could trigger a Denial of Service DoS or kernel memory disclosure due to an off-by-one array bounds validation check when converting device register values to array indices. This flaw leads to an out-of-bounds...

CVE-2026-98834

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service DoS via a kernel crash. During the setup of One-Time Programmable OTP non-volatile memory devices, an initialization failure...

CVE-2026-98833

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A local user could exploit this flaw during device access...

CVE-2026-98832

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can trigger this flaw during storage operations, causing an...

CVE-2026-98831

A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service DoS through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fails to release previously acquired fragment references durin...

CVE-2026-83813

A flaw was found in Twisted. This vulnerability allows a network attacker to spoof Domain Name System DNS responses and redirect network traffic. The DNS protocol implementation accepts incoming User Datagram Protocol UDP responses that match a pending query transaction identifier without...

CVE-2026-98829

A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service DoS by transmitting a sequence of oversized wireless frame fragments. This causes an integer...

CVE-2026-115877

A flaw was found in Twisted. The HTTP server component improperly accepts bare carriage return or line feed characters within header values instead of enforcing strict line endings. A remote attacker can exploit this framing disagreement against an upstream proxy to conduct HTTP request smuggling...

CVE-2026-115774

A flaw was found in Twisted. An authenticated remote attacker can send a specially crafted search command with a negative size to the Internet Message Access Protocol IMAP service, triggering an infinite processing loop. This flaw leads to a Denial of Service DoS, freezing the application and...

CVE-2026-115778

A flaw was found in Twisted. The Telnet service implementation fails to enforce a size limit on incoming data buffers during protocol option negotiation, which occurs before user authentication. An unauthenticated remote attacker can exploit this vulnerability by sending a continuous stream of...

CVE-2026-98827

A flaw was found in the Linux kernel's ath9khtc wireless network driver. An attacker transmitting large network packets can trigger a Denial of Service DoS or system crash through memory corruption. This issue occurs because the driver limits aggregated transmit packets only by count rather than...

CVE-2026-115776

A flaw was found in Twisted. The Internet Relay Chat IRC protocol implementation does not enforce a maximum line length when buffering incoming connection data. An unauthenticated remote attacker can exploit this by sending a continuous stream of data without line feed characters to an IRC servic...

CVE-2026-98828

A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface WMI command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. A malicious or compromised device can return a truncated...

CVE-2026-115775

A flaw was found in Twisted. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. The issue occurs because the XML stream parser retains unfinished elements in memory without enforcing size or element count limits. By transmitting a continuous stream o...

CVE-2026-98824

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission TX status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata can trigger an out-of-bounds memory access, potentially...

CVE-2026-98825

A flaw was found in the Linux kernel's Microchip PolarFire Real-Time Clock RTC driver. During device probing or driver initialization, this flaw can lead to a Denial of Service DoS through a kernel crash. The driver fails to verify whether acquiring the reference clock returned an error before...

CVE-2026-98823

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service DoS by crashing the system. During a channel switch, the kernel improperly manages memory ownership when merging wireless scan entries that...

CVE-2026-98822

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point AP virtual local area networks VLANs. Due to improper station lookup logic, the kernel matches recipient devices...

CVE-2026-115586

A flaw was found in virtualenv. This vulnerability allows a local attacker to achieve arbitrary code execution by supplying a crafted prompt name during virtual environment creation. Due to insufficient sanitization of special shell characters in the bash activation script, the prompt value can...

CVE-2026-115585

A flaw was found in pypdf. A remote attacker could cause a Denial of Service DoS by convincing a user or automated system to process a crafted PDF file containing repeated malformed cross-reference entries. Due to an issue in the stream recovery caching mechanism, the library repeatedly reloads t...

CVE-2026-115580

A flaw was found in pypdf. A remote attacker can cause a Denial of Service DoS by convincing a user or automated system to process a specially crafted PDF document. By specifying an excessively large entry count in the document's cross-reference table, the file triggers prolonged processing loops...

CVE-2026-115572

A flaw was found in pypdf. An attacker can supply a specially crafted PDF document containing repeated references to nonexistent objects, triggering repetitive full-file recovery attempts during parsing. When processed, this flaw leads to excessive resource consumption and significant delays,...

CVE-2026-98821

A flaw was found in the Linux kernel's block layer. A local user could exploit this vulnerability to cause a denial of service DoS by initiating polled direct I/O operations combined with user integrity metadata. Because the kernel improperly attempts to poll integrity metadata as standard block...

CVE-2026-98820

A flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When cached input/output I/O requests originally allocated for passthrough commands are reused for standard read or write operations, scheduler flags are not properly updated. This failure bypasses required scheduler...

CVE-2026-98819

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...

CVE-2026-98818

A flaw was found in the Linux kernel. When freeing memory through the slab allocator, the system may attempt to wake the kernel swap daemon while an internal scheduler lock is already held. This unsafe sequence can trigger a circular locking dependency and cause a system deadlock. A local user...

CVE-2026-89927

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker, or a malicious guest operating system, could exploit an integer overflow vulnerability by programming a Hyper-V synthetic timer with a deadline in the past. This can prevent the CPU from maki...

CVE-2026-89920

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 component. This vulnerability arises from the incorrect reinjection of channel-subsystem damage machine checks into the guest virtual machine, which are intended for the host system. This misdirection can lead to memory...

CVE-2026-98816

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer overflow occurs in the constant blinding mechanism when calculating backward jump offsets during BPF program hardening. A local attacker capable of loading BPF programs could exploit this issue to jump beyond...

CVE-2026-98815

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express subsystem. When tearing down a device namespace in multipath mode, character devices may remain accessible after their underlying data structures have been released. A local user could exploit this timing issue to trigger a...

CVE-2026-98814

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver. A local attacker can cause a denial of service DoS or potentially escalate privileges by exploiting a use-after-free flaw. This issue occurs when an input/output I/O passthrough command is sent through a multipath...

CVE-2026-89941

A flaw was found in the Linux kernel's IIO Industrial I/O buffer component. The iiodmafence implementation incorrectly uses kfree instead of kfreercu for releasing DMA fence objects. This improper memory deallocation can lead to a use-after-free vulnerability. An attacker could potentially exploi...

CVE-2026-89929

A flaw was found in the Kernel-based Virtual Machine KVM in the Linux kernel. When using nested virtualization, the INVVPID Invalidate Virtual Processor ID instruction may be incorrectly emulated on a different physical CPU than where the guest operating system L2 last ran. This can lead to stale...

CVE-2026-115365

A flaw was found in OpenBao. An authenticated attacker can bypass authorization boundaries by assigning specially crafted policy names to tokens, allowing the tokens to reference cached Access Control List ACL policies from other namespaces. This can allow the attacker to gain unauthorized...

CVE-2026-98813

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format BTF metadata, allowing the metadata to be freed while background cleanup tasks were...

CVE-2026-98812

A flaw was found in the Linux kernel's Management Component Transport Protocol MCTP subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by triggering a kernel crash. During device setup, the kernel exposes the network device object before its internal pointers are...

CVE-2026-89959

A flaw was found in the Linux kernel's s390/vfio-ap component. An incorrect function was used during the removal of control domains, specifically bitmapandnot instead of bitmapand. This error prevents explicitly unplugged control domains from being properly removed from a Kernel-based Virtual...

CVE-2026-89956

A flaw was found in the Linux kernel's s390/vfio-ap component. Two functions, vfioapmdevprobe and vfioapmdevforqueue, access a list of apmatrixmdev objects without holding the required mutex. This concurrency issue could allow an attacker to cause kernel memory corruption or a use-after-free...

CVE-2026-115374

A flaw was found in Incus. The built-in Simple Storage Service S3 server does not properly verify request signatures, allowing an attacker with a presigned upload URL to inject unsigned request headers. By supplying an unauthorized copy source header, an attacker can copy other storage bucket...

CVE-2026-115372

A flaw was found in Incus. This vulnerability allows an authenticated attacker with restricted project permissions to achieve privilege escalation to administrative root level on the host system. By specifying custom creation options during volume update, copy, or move operations, a user can bypa...

CVE-2026-106069

A flaw was found in the Node.js TLS stack. When a non-canonical numeric hostname is used, hostname normalization for certificate verification can disagree with how the platform resolves the address used for the connection. This can cause checkServerIdentity to accept a certificate that does not...

CVE-2026-105483

A flaw was found in the Node.js TLS stack. Improper normalization of hostnames that use fullwidth Unicode digits to represent an IPv4 address can cause certificate hostname verification to accept a certificate that does not identify the intended peer. This may allow an attacker who can influence...

CVE-2026-105482

A flaw was found in the Node.js DNS resolver APIs. Hostnames passed to dns.resolve that contain an embedded NUL character can be truncated when processed by c-ares. An attacker who can supply such a name may cause the application to resolve and act on an unintended hostname. Mitigation To mitigat...

CVE-2026-55888

A flaw was found in xdg-desktop-portal. An attacker operating a sandboxed application can bypass isolation boundaries to gain unauthorized access to host files. This issue occurs because the FileChooser interface fails to properly validate filenames before passing them to backend services...

CVE-2026-98811

A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during creation. Due to improper error handling, the kernel fails...

CVE-2026-89973

A flaw was found in the Linux kernel's nvme-tcp component. A malicious or misconfigured NVMe controller can send a Controller to Host Data Protocol Data Unit C2HData PDU in response to a write command, which is not properly validated for data direction. This can trigger a kernel warning, leading ...

CVE-2026-89961

A flaw was found in the Linux kernel's powerpc/mm component. An error in how physical frame number PFN offsets are tracked during compound page population can lead to incorrect memory management decisions. This issue could potentially result in system instability or a denial of service. Mitigatio...