CVE-2026-72020

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a new connection is created from a malformed synchronization message, certain TCP sequence number fields may not be properly initialized. This can lead to forwarded packets containing stale data in their TCP sequence an...

CVE-2026-59881

A flaw was found in AIOHTTP. The WebSocket client in AIOHTTP processes compressed data frames even when the compression mechanism, known as permessage-deflate, has not been properly negotiated. A malicious server can exploit this by sending specially crafted compressed frames. This can lead to...

CVE-2026-72021

A flaw was found in the kernel's IP Virtual Server IPVS component. This vulnerability occurs when the setsctpstate function incorrectly calculates the offset for Stream Control Transmission Protocol SCTP chunk headers in IPv6 packets that contain extension headers. A remote attacker could exploit...

CVE-2026-72238

A flaw was found in the Linux kernel. A local user could cause a system hang during early boot by providing an invalid baud rate for the console=uart8250 parameter. This invalid input leads to a division-by-zero error in the earlyserialinit function, resulting in a Denial of Service DoS...

CVE-2026-72022

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. The llcuiautobind function fails to properly release a reference to a Service Access Point SAP after a successful autobind operation. A local user can repeatedly perform autobind and close cycles, which leads to the...

CVE-2026-8723

A flaw was found in the qs library. When the qs.stringify function processes arrays containing null or undefined elements, and is configured with both arrayFormat: 'comma' and encodeValuesOnly: true, it can trigger a TypeError. This error causes the application to crash or return a 500 error,...

CVE-2026-35505

A flaw was found in DCMTK. An unauthenticated remote attacker can repeatedly send specially crafted connection requests, leading to a memory leak. This memory growth can cause the service to become unresponsive and terminate, resulting in a Denial of Service DoS for single-process deployments...

CVE-2026-22020

No description is available for this CVE...

CVE-2026-73283

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

CVE-2026-72486

A flaw was found in the Linux kernel's mtk-adsp mailbox driver. During device teardown, if the Sound Open Firmware SOF audio driver fails to initialize, a timing issue can occur where an interrupt is processed after the associated memory has been released. This Use-After-Free UAF vulnerability ca...

CVE-2026-72483

A flaw was found in the Linux kernel's USB host driver, specifically in the max3421hubcontrol function. A malicious userspace task with access to the root hub can trigger a shift-out-of-bounds vulnerability by issuing a crafted USBDEVFSCONTROL ioctl. This can lead to arbitrary bit corruption of t...

CVE-2026-72472

A flaw was found in the Network File System NFS component of the Linux kernel. Inadequate synchronization during the traversal of the file lock list can lead to a use-after-free UAF vulnerability. This occurs when certain functions release file locks prematurely while iterating, potentially...

CVE-2026-72411

A flaw was found in the Linux kernel's mxl862xx Digital Subscriber Line DSA driver. An issue during the driver's teardown process, specifically when handling MDIO CRC errors, can lead to a use-after-free vulnerability. This allows the system to attempt to access memory that has already been...

CVE-2026-72361

A flaw was found in the Linux kernel's drm/xe/hwengine component. An error handling path in the hwengineinit function attempts to free a Buffer Object BO that is already managed by the device resource management devm system. This redundant free operation results in a double-free vulnerability. A...

CVE-2026-72303

A flaw was found in the ASoC Sound Open Firmware SOF ipc4-control component of the Linux kernel. This vulnerability arises from insufficient validation of the MODULENOTIFICATION payload length when handling control updates. An attacker could potentially exploit this by providing a malformed...

CVE-2026-72247

A flaw was found in the Linux kernel's netfilter nfconncount component. An incorrect comparison of conntrack zones in the connection counting logic can cause different zones to be treated as equal. This miscalculation in connection deduplication may lead to connection limits not being properly...

CVE-2026-72163

A flaw was found in the Linux kernel's OCFS2 component. A local user with write access to an OCFS2 filesystem could trigger a kernel panic by performing a direct write over unwritten extents. This occurs when the journal aborts during Direct I/O DIO completion, leading to a NULL pointer dereferen...

CVE-2026-72018

A flaw was found in the Linux kernel's dibs: loopback functionality. A missing bounds check in the movedata function allows an attacker to provide an out-of-bounds offset or an oversized write. This can lead to an out-of-bounds write past an allocated kernel buffer, potentially causing memory...

CVE-2026-72017

A flaw was found in the Linux kernel's MACB network driver. This driver fails to properly release outgoing Socket Kernel Buffers SKBs when the driver is closed. This continuous leakage of resources can lead to resource exhaustion over time, potentially resulting in a Denial of Service DoS conditi...

CVE-2026-72016

A flaw was found in the Linux kernel's CPU hotplug mechanism on arm64 systems. When a system is booted with more maximum CPUs configured than are physically present, some CPUs are incorrectly marked as present but are not fully registered. This can lead to a kernel warning due to a null kobject...

CVE-2026-72015

A flaw was found in the Linux kernel's fs/resctrl component. A double-free vulnerability occurs when a pseudo-locked group's Resource Monitoring ID RMID is freed upon creation and then again during unmount operations by the rmdirallsub function. This double-free can lead to memory corruption,...

CVE-2026-72014

A flaw was found in DRBD, a component of the Linux kernel. A malicious or man-in-the-middle DRBD peer can send a specially crafted data reply with an out-of-range payload size. This incorrect size calculation can lead to an out-of-bounds write, allowing the attacker to copy arbitrary data past a...

CVE-2026-72013

A flaw was found in the Linux kernel. Specifically, within the riscv architecture's machinekexecprepare function, a NULL pointer dereference can occur. This vulnerability arises when a NULL buffer is copied without proper validation during the kexec preparation process. An attacker could...

CVE-2026-72012

A flaw was found in the Linux kernel's tracing/osnoise component. When unregistering a tracer instance, the system failed to call synchronizercu, a mechanism for synchronizing read-copy-update RCU operations. This oversight could allow RCU readers to access memory that has already been freed,...

CVE-2026-45699

A flaw was found in Netatalk. An integer underflow vulnerability exists in the copydir function of the afpd daemon. This flaw occurs when a file operation crosses a device boundary within an Apple Filing Protocol AFP shared volume. Incorrect calculation of buffer size can lead to a stack-based...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...

CVE-2026-72006

A flaw was found in the Linux kernel's mlx5 driver. Repeated allocation and release of mkeys with TPH steering-tag hints can cause a memory leak of struct mlx5stidxdata. This unreferenced memory accumulates over time, potentially leading to resource exhaustion and a Denial of Service DoS for...

CVE-2026-68479

A flaw was found in the Linux kernel's Bluetooth btrtl module. This vulnerability allows a local attacker to provide a specially crafted firmware patch during Bluetooth setup. This can cause an integer underflow, leading to an oversized read and write operation. Such an operation can result in...

CVE-2026-68478

A flaw was found in the Linux kernel's Memory Stick block driver memstick: msblock. A malicious Memory Stick card, crafted to report an excessive number of blocks, can cause the driver to write beyond the bounds of an allocated memory structure. This out-of-bounds write can lead to memory...

CVE-2026-68477

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability arises from incorrect IPv6 transport offsets, where TCP application code might incorrectly assume an IPv4 network header when processing IPv6 packets. Additionally, the ICMPv6 header offset in ipvsouticmpv...

CVE-2026-68475

A flaw was found in the Linux kernel. In the sunxiresetinit function, a memory region obtained during initialization is not properly released if the ioremap operation fails. This oversight can lead to a resource leak within the system...

CVE-2026-52868

A flaw was found in DCMTK. An unauthenticated attacker can read sensitive worklist records from a directory outside the intended storage area. This could lead to unauthorized information disclosure, potentially crossing departmental or clinic data separation in multi-area deployments...

CVE-2026-50254

A flaw was found in DCMTK. An unauthenticated remote attacker can exploit this vulnerability by repeatedly sending a single crafted connection request. This can lead to memory leakage, causing the service to eventually terminate and stop accepting new connections, resulting in a Denial of Service...

CVE-2026-72183

A flaw was found in the Linux kernel's Landlock security module. A sandboxed process can bypass the intended signal isolation provided by LANDLOCKSCOPESIGNAL. By manipulating file descriptors with specific fcntl calls and asynchronous I/O SIGIO delivery, a local attacker can send signals, such as...

CVE-2026-72003

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

CVE-2026-74442

A flaw was found in the Linux kernel's drm/vmwgfx driver. This vulnerability occurs when the vmwvkmsinit function fails to initialize a workqueue, leaving a pointer as NULL. During module unload, the vmwvkmscleanup function attempts to destroy this NULL workqueue, leading to a kernel panic. A loc...

CVE-2026-72259

A flaw was found in the Linux kernel's ASoC Audio System on Chip Mediatek MT8192 audio driver. This vulnerability occurs because the driver fails to release reserved memory after a successful assignment during the probe process. This oversight can lead to a memory leak, potentially causing system...

CVE-2026-68474

A flaw was found in the Linux kernel, specifically within the powerpc/spufs component responsible for managing memory access. This vulnerability allows for an out-of-bounds memory access due to incorrect boundary checks in the spufsmemmmapaccess function. An attacker could exploit this to corrupt...

CVE-2026-68473

A flaw was found in the Linux kernel's powerpc/uaccess component. The maskuseraddress function incorrectly checks for CONFIGE500 instead of CONFIGPPCE500. This error prevents the maskuseraddressisel function from being used on PowerPC E500 hardware, which could lead to improper handling of user...

CVE-2026-68472

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted EHT Multi-Link Element MLE in an MBSSID beacon. This could cause the kernel to read beyond the intended memory boundary when processing the...

CVE-2026-68471

A flaw was found in the Wi-Fi IEEE 802.11 component of the Linux kernel. The ieee80211mlecommonsize function uses the first common-info octet as the length for all known MLE Management Link Establishment types. However, the ieee80211mlesizeok function did not properly validate this length for all...

CVE-2026-68468

A flaw was found in the mtd: virt-concat component of the Linux kernel. When a virtual concatenated device is already registered, the mtdvirtconcatcreatejoin function generates a duplicate name but fails to free the newly allocated string. This oversight leads to a memory leak, which could...

CVE-2026-74561

A flaw was found in the Linux kernel, specifically within its nexthop component responsible for network routing. A timing issue, known as a race condition, allows the system to access memory after it has been freed. This occurs when the kernel attempts to flush its routing cache while other...

CVE-2026-74519

A flaw was found in the Linux kernel. An issue within the pinctrl subsystem's device tree handling could lead to a double-free vulnerability. This occurs when an error path during device binding attempts to free uninitialized memory, potentially allowing a local attacker to trigger a system crash...

CVE-2026-74511

A flaw was found in the Linux kernel's Bluetooth management component. A race condition exists during Extended Inquiry Response EIR updates when the MGMTOPSETLOCALNAME operation is processed concurrently with modifications to the UUID list. This can lead to a use-after-free vulnerability in the...

CVE-2026-74503

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. An unprivileged local user with access to the /dev/snd/timer and /dev/snd/seq devices can exploit a race condition where a timer instance's SNDRVTIMERIFLGDEAD flag is not properly cleared after closing...

CVE-2026-72430

A flaw was found in the Linux kernel's network scheduling component. An unprivileged user with administrative privileges in a network environment can trigger a resource leak. This occurs when specific error handling paths fail to properly release network connection labels. Repeated exploitation o...

CVE-2026-72059

A flaw was found in the Linux kernel's net: wwan: t7xx component. This issue occurs during the initialization of the Cellular Direct Memory Access CLDMA module. If the setup of the transmit or receive rings fails, a dedicated memory resource, known as a Direct Memory Access DMA pool, is not...

CVE-2026-68465

A flaw was found in the Linux kernel's SDHCI eSDHC i.MX driver. The esdhcchangepinstate function contains an error in how it checks for high-speed pin states. This prevents devices with a sleep pinctrl state from restoring their default pin configuration, potentially leading to an improper system...

CVE-2026-68464

A flaw was found in the Linux kernel's sdhci-esdhc-imx driver. When the system enters suspend mode without disabling the usdhc interrupt, and a Wi-Fi out-of-band wakeup triggers a system resume, a card interrupt can be sent before the usdhc driver has fully resumed. This can result in an unhandle...