CVE-2026-74502

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability, a double free error, occurs when handling legacy raw MIDI Musical Instrument Digital Interface conversions. Specifically, an error during the initialization of a USB...

CVE-2026-74517

A flaw was found in KVM Kernel-based Virtual Machine. This vulnerability occurs when the system attempts to process a delayed I/O APIC End-of-Interrupt EOI after the associated virtual CPUs vCPUs have been destroyed. This timing issue results in a Use-After-Free UAF condition, where the system...

CVE-2026-74447

A flaw was found in the Linux kernel's drm/amdkfd component. An integer overflow vulnerability exists when aligning the End-of-Pipe EOP ring buffer size. A local attacker could exploit this by providing a specially crafted size that, due to a 32-bit integer overflow, causes the system to bypass...

CVE-2026-74554

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. An out-of-bounds write vulnerability exists in the ath12kmacdppeercleanup function. This issue occurs due to incorrect indexing of a bitmap, leading to memory corruption adjacent to the bitmap. This could allow a malicious Wi-Fi peer to...

CVE-2026-74533

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability is caused by a race condition where certain data is accessed and modified without proper synchronization, leading to a use-after-free UAF error. An attacker could potentially exploit this to execute arbitrary...

CVE-2026-74484

A flaw was found in the Linux kernel's binfmtmisc component. A local attacker can exploit this vulnerability by registering an 'F' entry that points to its own instance or uses it as an overlayfs lower layer. This self-pinning prevents the associated file from being closed, leading to a resource...

CVE-2026-74479

A flaw was found in the Linux kernel's pktgen module. This vulnerability, a use-after-free, occurs due to a race condition when handling proc entries, which are kernel interfaces. A local attacker could exploit this timing issue to trigger a system crash, leading to a Denial of Service DoS...

CVE-2026-74483

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local attacker, operating under specific memory constraints a tight memory cgroup, could repeatedly trigger a failure in the bmfillsuper function during a mount operation. This failure prevents the proper release of...

CVE-2026-74507

A flaw was found in the Linux kernel's Bluetooth Human Interface Device Protocol HIDP component. A connected HIDP peer can send a malformed report with only a data transaction header, leading to the use of an uninitialized value in hidpsessionrun. This vulnerability could potentially result in a...

CVE-2026-74468

A flaw was found in the Linux kernel's GPIO PCH driver. On systems configured with PREEMPTRT, a local attacker could trigger a specific interrupt handler pchirqtype in a non-sleepable context. This improper use of a spinlock, which attempts to acquire a sleeping lock in an atomic context, can lea...

CVE-2026-74546

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically within the adt7470 driver. A local attacker could exploit a time-of-check to time-of-use TOCTOU race condition. If fan data becomes zero between a validation check and a conversion operation, it can lead to a...

CVE-2026-74544

A flaw was found in the Linux kernel's clsu32 module. An unprivileged user, through user or network namespaces, could provide a specially crafted offshift value that is not properly validated. This improper validation leads to a shift-out-of-bounds condition, resulting in undefined behavior and...

CVE-2026-74537

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A race condition in the isoconnready function allows a socket to be prematurely freed while still in use. This Use-After-Free UAF vulnerability could lead to memory corruption, potentially causing a system crash or other unpredictabl...

CVE-2026-74467

A flaw was found in the s390/qeth component of the Linux kernel. An unprivileged local user could exploit this vulnerability by invoking specific SIOCDEVPRIVATE ioctl commands, such as SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE, and SIOCQETHQUERYOAT. These commands were not properly restricte...

CVE-2026-74574

A flaw was found in the Linux kernel's dmaengine IDXD subsystem. A race condition during file-device setup failure cleanup in the idxdcdevopen function could lead to a deadlock, causing a denial of service. Furthermore, incorrect cleanup paths could result in operations on a freed memory context,...

CVE-2026-53791

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...

CVE-2026-74566

A flaw was found in the Linux kernel's keys subsystem. An inconsistency in how key descriptions are processed by the keyringgetkeychunk and keyringdiffobjects functions could allow a local attacker to create specially crafted key descriptions. These crafted descriptions might collide, potentially...

CVE-2026-74496

A flaw was found in the Linux kernel's Foo Over UDP FOU tunnel driver. An ordering issue in the foucreate function can lead to a use-after-free vulnerability. This occurs when a struct fou object is published before being fully added to the system's list. If the addition fails, the object can be...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

CVE-2026-74510

A flaw was found in the Linux kernel's Bluetooth management mgmt component. A race condition exists during the cancellation of a pairing command and the handling of pairing completion or authentication failure callbacks. This race condition can lead to a use-after-free vulnerability, which may...

CVE-2026-74504

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer component. An unprivileged local user with access to ALSA timer and sequencer devices can trigger a division-by-zero error. This occurs by manipulating the ALSA timer's hardware resolution, leading to an integ...

CVE-2026-74530

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, occurs when a connection is prematurely released while a related synchronization task in hciconnectbigsync is still running. This theoretical flaw could allow an attacker to cause a system crash...

CVE-2026-74550

A flaw was found in the kernel. When the network stack fails to allocate a peer entry, it can send un-rate-limited Internet Control Message Protocol ICMP or Neighbor Discovery NDISC Redirect messages. This can be exploited by a remote attacker to cause an uncontrolled flood of network traffic,...

CVE-2026-74509

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...

CVE-2026-74476

A flaw was found in the veth component of the Linux kernel. This vulnerability occurs when a specially crafted network packet, known as a fraglist skb socket buffer, is processed by the veth driver. An attacker could potentially send such a packet, causing the system to misinterpret fragment...

CVE-2026-74531

A flaw was found in the Bluetooth hciconn component of the Linux kernel. A theoretical Use-After-Free UAF vulnerability exists if a connection conn is prematurely freed while the hcisync task is still active. This could potentially allow an attacker to cause a system crash or execute arbitrary co...

CVE-2026-74446

A flaw was found in the drm/amdkfd component of the Linux kernel. A race condition exists in the kfdcriucheckpointevents function where a mutex is not consistently held during event checkpointing. This allows a local attacker to cause memory corruption, potentially leading to privilege escalation...

CVE-2026-77682

A code injection vulnerability exists in Epiphany when the user invokes form autofill from the context menu on a page containing a malicious HTML form. In embed/web-process-extension/resources/js/ephyautofill.js, getSelector builds a CSS selector by directly interpolating an element's id attribut...

CVE-2026-66374

A flaw was found in Knot Resolver. This vulnerability, a heap-based buffer overflow, exists in the DNS-over-QUIC DoQ receive path. A remote attacker could exploit this flaw to achieve remote code execution, allowing them to run arbitrary commands on the affected system...

CVE-2026-39155

A flaw was found in Knot DNS. The mod-onlinesign component incorrectly computes the next NSEC Next Secure owner name. This can lead to an overly broad authenticated denial interval, allowing DNS Domain Name System resolvers that use aggressive negative caching to incorrectly generate negative...

CVE-2026-77648

A flaw was found in OpenStack Glance. A privileged administrator could exploit a vulnerability in the /v2/tasks API by crafting a specific import task. This action bypasses security filtering, enabling the administrator to perform Server-Side Request Forgery SSRF. As a result, an attacker could...

CVE-2026-73267

A flaw was found in the clusterclaims-controller component of multicluster engine MCE. A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the spec.namespace field. This allows the tenant to specify and delete any ManagedCluster, includi...

CVE-2026-74975

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...

CVE-2026-13789

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=493847920...

CVE-2026-74982

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Widget component...

CVE-2026-74979

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Add-ons Manager component...

CVE-2026-74970

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...

CVE-2026-74961

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Side-channel in the Web Audio component...

CVE-2026-74958

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the WebRTC component...

CVE-2026-74952

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Application Update component...

CVE-2026-74954

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to side-channel in the Storage: Cache API component...

CVE-2026-74951

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in Firefox for Android...

CVE-2026-74980

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the Downloads component in Firefox for Android...

CVE-2026-74989

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these cou...

CVE-2026-75874

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

CVE-2026-74439

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...

CVE-2026-74436

A flaw was found in the Linux kernel. A synchronization issue in the rxrpc component, specifically between rxrpckernelchargeaccept and rxrpcdiscardprealloc, can lead to a use-after-free vulnerability. A local attacker could potentially exploit this flaw, causing a kernel preallocation worker to...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74434

A flaw was found in the Linux kernel's rxrpc subsystem. When an out-of-band OOB message is read using the MSGPEEK flag in the rxrpcrecvmsgoob function, the message is incorrectly left on one queue while also being added to another. This can lead to the message being freed twice when the socket is...