CVE-2026-99185

A flaw was found in the Linux kernel's FireWire subsystem. A race condition occurs during split transaction handling when an incoming response and a timeout callback attempt to process the same transaction concurrently. An attacker could exploit this timing issue to cause a use-after-free...

CVE-2026-99166

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling connection events on non-InfiniBand Remote Direct Memory Access RDMA devices, the kernel fails to initialize an internal transport pointer. A remote attacker can exploit this vulnerability by sending a...

CVE-2026-99165

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This flaw allows a remote peer or local user to cause a denial of service DoS through a kernel crash. When message interleaving is enabled, the kernel drops the socket lock while waiting for associati...

CVE-2026-99164

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI driver for i.MX devices. The driver allocates Direct Memory Access DMA bounce buffers that are smaller than the cache line size used during hardware mapping and synchronization. This size discrepancy causes DMA operations to...

CVE-2026-99161

A flaw was found in the Linux kernel's VIA/Wondermedia I2C driver. The driver fails to properly release clock resources if an initialization error occurs or when the driver is unloaded. A local user could exploit this flaw to cause an unreleased reference count leak, potentially leading to resour...

CVE-2026-99162

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. A use-after-free vulnerability occurs when adding shared proxies because a lookup table can outlive the device object whose name string is referenced. A local attacker could exploit this flaw to cause memory...

CVE-2026-99160

A flaw was found in the Linux kernel's ring buffer subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS by crashing the kernel. The issue occurs when reading ring buffer metadata files for a central processing unit CPU that has never come online, resulting in a...

CVE-2026-99159

A flaw was found in the Linux kernel's ring-buffer subsystem. A local user can cause a Denial of Service DoS by crashing the system when interacting with persistent ring buffers. Due to an incorrect sub-buffer index calculation, the kernel leaves an entry uninitialized, resulting in a null pointe...

CVE-2026-99158

A flaw was found in the Linux kernel's ring buffer component. When a reader process accessing memory-mapped trace data catches up with a concurrent writer still committing events, the kernel incorrectly treats the temporary absence of data as an error and triggers a kernel warning. A local user...

CVE-2026-99157

A flaw was found in the Linux kernel's SCSI Generic BSG subsystem. A local attacker can exploit this flaw to cause a Denial of Service DoS or potentially escalate privileges by triggering an out-of-bounds write in kernel memory. The issue arises because the buffer allocated for Universal Flash...

CVE-2026-99156

A flaw was found in the SCSI tape driver in the Linux kernel. A local user can trigger a race condition between device removal and open operations, causing the kernel to access memory after it has been freed. This use-after-free vulnerability primarily results in a Denial of Service DoS by causin...

CVE-2026-99155

A flaw was found in the Linux kernel's Xen virtual Small Computer System Interface SCSI frontend driver. This vulnerability allows a malicious or compromised backend service to trigger a Denial of Service DoS by crashing the guest virtual machine. The issue occurs when the driver processes a...

CVE-2026-99154

A flaw was found in the Linux kernel's libiscsi module. A remote iSCSI target can trigger an out-of-bounds memory read by sending a crafted Protocol Data Unit PDU containing a negative task index. This flaw can cause a kernel crash, resulting in a Denial of Service DoS, or potentially lead to...

CVE-2026-99153

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...

CVE-2026-99152

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

CVE-2026-74691

A flaw was found in the Linux kernel's Thunderbolt networking driver. During the process of shutting down a Thunderbolt device, the system incorrectly deallocates resources before ensuring that all data has finished transferring through the Direct Memory Access DMA paths. This can cause the...

CVE-2026-80749

A flaw was found in the Linux kernel's drm/connector/hdmi component. A helper function responsible for copying audio infoframe data incorrectly used the destination buffer's size instead of the source's, leading to an out-of-bounds memory read. While this is a read operation and cannot corrupt...

CVE-2026-80747

A flaw was found in the drm/amdkfd component of the Linux kernel. A remote attacker could exploit this vulnerability by providing a malformed Cache Region Allocation Table CRAT with an oversized length field. This oversight in the CRAT parser, which validates the subtype header but not its...

CVE-2026-80774

A flaw was found in the ASUS Human Interface Device HID driver in the Linux kernel. This vulnerability occurs due to a missing check before using a function intended only for USB devices. A local attacker could exploit this by crafting a malicious HID device, leading to a kernel crash and a denia...

CVE-2026-80738

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter TCP syncookie handling. The bpftcpgensyncookie and bpftcpchecksyncookie functions do not properly validate socket states before accessing protocol-specific information. This oversight could allow an attacker to trigger an invalid...

CVE-2026-80808

A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability occurs in the ext4xattrblockset function, where an indefinite retry loop can be triggered when handling saturated extended attribute xattr cache entries, especially in the presence of a corrupted filesystem. A local attack...

CVE-2026-80812

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture dummy driver. A local user, by manually binding a device via the sysfs interface with an invalid card index, could trigger an out-of-bounds memory access. This vulnerability arises because the snddummyprobe function doe...

CVE-2026-80804

A flaw was found in the XFS file system component of the Linux kernel. When a transaction commit fails in xfstransroll, the NOFS No File System context is not properly restored in the error handling path. This oversight can lead to a circular lock dependency between xfsnondirilockclass and...

CVE-2026-80814

A flaw was found in the Linux kernel's rndishost component. An integer overflow vulnerability exists within the rndisrxfixup function. This issue arises when processing USB data, where insufficient validation of input sizes can cause a calculation to wrap around. This could lead to an out-of-boun...

CVE-2026-80859

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace subsystem. A missing memory barrier when checking the readiness of io-uring queues could allow a CPU to observe an inconsistent state. This inconsistency can bypass a critical check, potentially reintroducing a lock-order inversi...

CVE-2026-80776

A flaw was found in the Linux kernel's futex subsystem. A local attacker could exploit a race condition in the futexpivotpending function during a private hash resize operation. This vulnerability allows a malicious task to become indefinitely blocked, leading to a kernel panic and a Denial of...

CVE-2026-80761

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. The isosockgetname function fails to properly initialize the sockaddriso structure before returning it. This oversight allows an unprivileged attacker to read uninitialized kernel stack memory, leading to information disclosure...

CVE-2026-80763

A flaw was found in the Linux kernel's Bluetooth subsystem. A malicious or malfunctioning Bluetooth controller could send a specially crafted, truncated response to a command. This could lead to the kernel attempting to read beyond an allocated memory buffer, potentially causing a system crash...

CVE-2026-80882

A flaw was found in the Linux kernel's Tegra cryptography module. This vulnerability occurs when the system fails to properly return an ENOMEM error value if an input buffer allocation fails during cryptographic operations in the tegraccmdoonereq function. An attacker could potentially exploit th...

CVE-2026-80827

A flaw was found in the Linux kernel's USB serial option driver. A malicious USB device could exploit this vulnerability by sending a specially crafted short data packet. This could lead to an out-of-bounds read in memory, potentially allowing an attacker to access sensitive information or cause ...

CVE-2026-80781

A flaw was found in the Linux kernel. An out-of-bounds read vulnerability exists in the Human Interface Device HID core's hidsetfield function. This flaw occurs when an invalid offset is provided, causing hiddumpinput to read beyond its allocated buffer. A local attacker or a malicious USB device...

CVE-2026-80889

A flaw was found in the Controller Area Network CAN ISO-TP ISO 15765-2 Transport Protocol module of the Linux kernel. This vulnerability arises from improper handling of timer operations, state transitions, and generation tracking within the module. A local attacker could potentially exploit thes...

CVE-2026-80847

A flaw was found in the Linux kernel's Transmission Control Protocol TCP implementation. The system incorrectly handles certain network route-derived advmss advertised maximum segment size values, which can become zero or too small. This can lead to a divide-by-zero error within the...

CVE-2026-80904

A flaw was found in the Linux kernel. The tlsswspliceread function does not properly handle errors that occur during asynchronous decryption. This oversight allows the system to continue delivering records on a connection that has failed authentication, even though other functions would correctly...

CVE-2026-80872

A flaw was found in the ALSA Advanced Linux Sound Architecture hda/tas2781 driver in the Linux kernel. This vulnerability occurs when an asynchronous firmware request callback attempts to operate on driver-private data that has already been deallocated or is in the process of being torn down duri...

CVE-2026-80865

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF tracing component. A missing access check in the copyusersyms function, specifically the absence of an accessok call before using getuser on a user space pointer, could allow a local attacker to read sensitive kernel memory. This...

CVE-2026-120217

A flaw was found in loguru. An inefficient regular expression in the ANSI color-markup parser can lead to a Denial of Service DoS. A remote attacker can exploit this vulnerability by submitting specially crafted input to the ANSI color-markup parser's AnsiParser.feed function, triggering excessiv...

CVE-2026-89776

A flaw was found in the Linux kernel's VXLAN VNI filter. The system does not enforce an exact length for GROUP/GROUP6 address attributes. A remote attacker could exploit this by sending a malformed attribute, leading to an over-read of uninitialized kernel memory. This information is then disclos...

CVE-2026-89817

A flaw was found in the Linux kernel's drm/gud component. The gudconnectoraddtvmode function reads TV mode names from a USB device. These names are not guaranteed to be null-terminated, which can cause the system to read beyond the allocated buffer when processing them. This out-of-bounds read...

CVE-2026-89799

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. Specifically, within the bpfgetstackid function, preemption was not properly disabled when calling getperfcallchain and accessing its trace entries buffer. This oversight could lead to a race condition, where multiple...

CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure mbxcmdt can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00getfirmwarestate function copies uninitialized mailbox register values, which are not properly written due to early return paths ...

CVE-2026-89814

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when a graphics ring is not assigned to a partition, leading to an out-of-bounds array access during SDMA submissions. A local attacker could potentially exploit this to cause a system crash, resulting in a...

CVE-2026-89981

A flaw was found in the Linux kernel, specifically affecting arm64 architectures. When the Memory Tagging Extension MTE is disabled, the kernel attempts to read a register GMIDEL1 that should not be accessed. In a virtualized environment utilizing protected Kernel-based Virtual Machine pKVM, this...

CVE-2026-89992

A flaw was found in the Linux kernel. The dtidlepdfree function in the cpuidle subsystem attempts to free a memory region using an incorrect pointer, which is not the start of the original allocation. This memory corruption vulnerability can lead to a system crash, resulting in a Denial of Servic...

CVE-2026-89849

A flaw was found in the Linux kernel's qla2xxx SCSI driver. When the firmware delivers an unexpected status input/output control block IOCB for a non-SCSI command, the driver can incorrectly process a garbage pointer. This wild pointer dereference can lead to system instability or a denial of...

CVE-2026-90029

A flaw was found in the Linux kernel's realtekcr USB storage driver. This vulnerability, a use-after-free, occurs when the system attempts to access memory that has already been released. During a USB device disconnection, a timer within the realtekcr module is deleted before its associated...

CVE-2026-90038

A flaw was found in the Network File System Daemon NFSD component of the Linux kernel. This vulnerability, a use-after-free, occurs when the nfsd4revokeexportstates function improperly handles client state revocation. An administrator removing an export can trigger a race condition, potentially...

CVE-2026-89962

A flaw was found in the Linux kernel's powerpc/kexecfile component. The mergememoryranges function incorrectly handles overlapping memory ranges, leading to critical memory truncation. This issue can cause valid memory areas to be lost from kexec exclude lists, potentially allowing the crash kern...

CVE-2026-89988

A flaw was found in the kprobes component of the Linux kernel. A local attacker could potentially exploit a use-after-free vulnerability when a module is unloaded concurrently with a call to withinkprobeblacklist. This could lead to dereferencing freed memory, potentially causing system instabili...

CVE-2026-89805

A flaw was found in the drm/pagemap component of the Linux kernel. This vulnerability involves a 'use-after-free' error, a type of memory corruption, that occurs when the system attempts to access memory after it has been released. This could allow a local attacker to cause the system to crash,...