CVE-2026-97518

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. The subsystem fails to reject duplicate cipher suite entries during wireless device registration. This flaw allows a local user to cause an array buffer overflow within the Wireless Extensions WEXT compatibility...

CVE-2026-97517

A flaw was found in the Linux kernel's nl80211 wireless configuration interface. This flaw can lead to a Denial of Service DoS caused by an out-of-bounds memory read when processing wireless beacon settings. The kernel fails to validate that the variable-length portion of a High Efficiency HE...

CVE-2026-98157

A flaw was found in the Linux kernel's Error Detection and Correction EDAC subsystem. The sysfs interface for device polling improperly validated input values when configuring the polling interval, allowing integer truncation and zero-delay settings. A local user with write permissions to the...

CVE-2026-97516

A flaw was found in the Linux kernel's rtw88 wireless driver. The driver fails to verify whether certain hardware configuration settings exist before accessing them during firmware adaptivity processing. On systems equipped with specific wireless chipsets, this flaw triggers a null pointer...

CVE-2026-98156

A flaw was found in the Linux kernel. This vulnerability can lead to information disclosure when running a Xen paravirtualized PV guest. The virtio graphics driver virtio-gpu fails to use the Direct Memory Access DMA interface to translate memory addresses for the display framebuffer, passing raw...

CVE-2026-98158

A flaw was found in the Linux kernel's Point-to-Point Protocol asynchronous pppasync driver. When handling corrupted network frames, the driver improperly reuses packet buffers without preserving the required memory headroom. A connected peer can exploit this flaw by sending a sequence of crafted...

CVE-2026-98155

A flaw was found in the Linux kernel's Qualcomm Cloud AI qaic driver. A compromised or malicious device could trigger a Denial of Service DoS or information disclosure by sending a malformed response message. Due to missing bounds checks during message processing, the driver may read beyond...

CVE-2026-97515

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master driver. On affected hardware, when a target device on the bus holds the data line low, the controller triggers an interrupt feedback loop during recovery attempts. This issue creates an interrupt storm that can...

CVE-2026-97514

A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Improper synchronization during dynamic resolution changes allows functions that may sleep to run while holding an atomic lock, and permits state changes without required locks held. A local user with access to the video...

CVE-2026-96740

A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient configuration without filtering security-sensitive keys, allowing a Console CR author to set config.providers and...

CVE-2026-98154

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over RDMA Remote Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS due to improper error cleanup during request processing. When an input/output I/O communication error occurs while queuing a...

CVE-2026-98153

A flaw was found in the Linux kernel's NVMe driver. A race condition can lead to a denial of service DoS or memory corruption when multiple paths scan the same shared namespace concurrently. Because access to the Flexible Data Placement FDP configuration data is unprotected during initialization,...

CVE-2026-98148

A flaw was found in the Linux kernel's Generic USB Display GUD driver. This vulnerability can lead to a Denial of Service DoS if an attacker connects a malicious USB display device to the system. The driver fails to verify that the default display rotation capability is present in the device's...

CVE-2026-98147

A flaw was found in the Linux kernel printk subsystem. A local user could trigger a Denial of Service DoS by causing an unexpected system crash if the kernel is configured to panic on warnings. This issue occurs because the kernel inappropriately triggers a warning check when background print...

CVE-2026-97510

A flaw was found in the Linux kernel's Thunderbolt subsystem. When handling communication responses, a failure to set up a configuration request—such as when the control channel is already shut down—causes the system to return an error without releasing allocated memory. A local user or repeated...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...

CVE-2026-93829

A flaw was found in the Linux kernel. A race condition exists in the Server Message Block SMB client during background worker thread creation, allowing a newly spawned thread to access connection session data before it has been completely initialized. A local user initiating an SMB connection can...

CVE-2026-93828

A flaw was found in the Linux kernel's exFAT file system. A local user capable of mounting a corrupted or maliciously crafted storage volume can trigger an integer calculation error when the system processes an uppercase translation table with a size of zero. This failure causes the kernel to ent...

CVE-2026-98152

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over Fabrics RDMA Remote Direct Memory Access target subsystem. When pending disconnecting queues exceed the backlog threshold, the connection handler fails to release newly allocated queue structures and associated network...

CVE-2026-98151

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. A local user can trigger a Denial of Service DoS or kernel verification failure by loading a specially crafted BPF program containing speculative pointer arithmetic. This issue occurs because register subregister bounds a...

CVE-2026-98150

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user could trigger a Denial of Service DoS by providing an invalid processor identifier during per-CPU map operations on systems with non-contiguous CPU configurations. Due to improper validation of CPU flags, th...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

CVE-2026-97513

A flaw was found in the Linux kernel's Chips Wave5 video driver. A local user could trigger a Denial of Service DoS by causing a race condition during device release. When closing a video stream, the driver releases internal memory structures before removing the instance from the active list,...

CVE-2026-97511

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When handling transmission frames in Neighbor Awareness Networking NAN mode, the system sets an invalid frequency band value that triggers an out-of-bounds array read during header processing. A local user able to trigger or...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

CVE-2026-88815

A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...

CVE-2026-100723

A flaw was found in vm2. When an application permits the sandbox to access built-in Node.js modules such as the zlib compression library, returned data buffers fail to maintain memory isolation from the host system. An attacker executing untrusted code within the sandbox can inspect and alter the...

CVE-2026-88816

A flaw was found in perl-DBI. An attacker or user capable of supplying a numeric value to the FetchHashKeyName attribute can cause a Denial of Service DoS. The fetchrowhashref function attempts to use the attribute value as a string pointer without stringifying it first, leading to an invalid...

CVE-2026-82854

A flaw was found in nodemailer. When an application permits untrusted input to set the custom envelope size setting, carriage return and line feed CRLF characters are not properly sanitized before being placed into the Simple Mail Transfer Protocol SMTP command stream. A remote attacker could...

CVE-2026-2270

A flaw was found in Kubernetes kube-controller-manager. The StatefulSet controller restores ControllerRevision data onto the whole StatefulSet object, including metadata. A user with namespace-scoped write access to StatefulSet and ControllerRevision can cause the controller to create a pod in...

CVE-2026-85644

A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

CVE-2026-75973

A flaw was found in Apache Tomcat. When Jakarta Authentication is configured with SimpleAuthConfigProvider as the default provider and multiple web applications utilize it, an improper authentication vulnerability arises. This issue causes the authentication realm established for the first web...

CVE-2026-97399

A flaw was found in glibc. In builds optimized for specific hardware architectures, the string comparison function strncasecmp may read one byte beyond the boundary of the provided input string. An attacker capable of passing controlled strings that end at the edge of a memory page could trigger ...

CVE-2026-93823

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user with access to the GPU device interface can trigger excessive kernel memory allocation by providing an abnormally large buffer size parameter during an input/output control ioctl request. This issue can exhaust system memo...

CVE-2026-93825

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a system crash. The issue occurs because the spigetdevicematchdata function does not verify whether a device identifier exists before...

CVE-2026-100693

A flaw was found in Hugo. Case-sensitive validation in the URL deny rule mechanism allows an attacker to bypass access restrictions. By supplying mixed-case URL schemes when fetching remote resources, an attacker can access restricted network destinations, such as localhost or internal IP...

CVE-2026-100692

A flaw was found in Hugo. This vulnerability enables information disclosure when building a site that includes a crafted theme or vendored module. Because Hugo fails to properly restrict symbolic links symlinks at mount roots, links pointing to directories outside the project directory are...

CVE-2026-78437

A flaw was found in Apache Tomcat. An incomplete cleanup vulnerability allows a remote attacker to send a malformed HTTP/2 request. This can potentially cause a denial of service, leading to one request from another user failing...

CVE-2026-87022

A flaw was found in Apache Tomcat. This vulnerability, related to improper handling of length parameters, allows for WebSocket message smuggling when the 'per-message-deflate' extension is in use. A remote attacker could exploit this to bypass security controls or inject malicious data into...

CVE-2026-73581

A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...

CVE-2026-67236

A flaw was found in rabbitmq-server. This vulnerability allows information disclosure due to insecure handling of authentication cookies following a login request. The application stores base64-encoded user credentials in a cookie that lacks essential security flags, such as Secure, HttpOnly, and...

CVE-2026-98145

A flaw was found in the Linux kernel's AMD XDNA driver. A local user with access to the accelerator device node can trigger a Denial of Service DoS by submitting an empty command chain with a zero command count. Because the driver fails to properly validate the command count, it processes an empt...

CVE-2026-98142

A flaw was found in the Linux kernel's Cirrus video driver. This vulnerability can lead to a Denial of Service DoS due to missing validation of the Base Address Register BAR memory size during device initialization. An attacker capable of attaching a crafted PCI device with an undersized memory...

CVE-2026-98144

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local user could cause a denial of service DoS by triggering a resource leak during command error handling. By manipulating buffer handles and importing an unmappable memory buffer object BO, an attacker can cause buffer mappin...

CVE-2026-98143

A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...

CVE-2026-98141

A flaw was found in the Linux kernel's NTFS file system driver. When an index insertion fails during a reparse data update, the driver ignores the error and returns success instead of propagating the failure. A local user creating symbolic links or special files can trigger this issue, causing fi...

CVE-2026-98140

A flaw was found in the Linux kernel's NTFS file system. A local user could trigger this vulnerability during error handling in Master File Table MFT write operations, where temporary kernel memory mappings fail to be released properly. Because these local memory mappings require strict ordering,...

CVE-2026-98139

A flaw was found in the Linux kernel's NTFS New Technology File System driver. When errors occur while releasing storage blocks, the driver mistakenly counts failed release operations as successfully freed space. A local user could exploit this behavior to cause file system state corruption and a...