215278 matches found
CVE-2026-98055
A flaw was found in the Linux kernel's Intel Audio Voice Studio AVS driver. This flaw can lead to a Denial of Service DoS due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not releas...
CVE-2026-98054
A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS sound driver. When an error occurs while opening the driver's debugfs trace interface, the kernel fails to release a previously acquired module reference count. A local user with access to the interface can exploit this issue by...
CVE-2026-98053
A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS driver. This flaw may allow a local attacker to cause a Denial of Service DoS or expose sensitive kernel memory by triggering an out-of-bounds read. The issue occurs when the driver processes audio topology settings without...
CVE-2026-98052
A flaw was found in the Linux kernel's Broadcom ASP2.0 Ethernet driver. This vulnerability can result in a Denial of Service DoS or system instability due to premature memory deallocation. When handling fragmented network packets, the driver fails to properly clear state flags before reusing...
CVE-2026-97553
A flaw was found in the Linux kernel's XFS file system. When unmounting a file system, the health monitoring subsystem fails to acquire the necessary lock before inserting an unmount event into the event list. A local user with permissions to unmount file systems could trigger this race condition...
CVE-2026-98051
A flaw was found in the Linux kernel's Broadcom ASP 2.0 Ethernet driver. When evaluating whether sufficient transmit buffer space is available for outgoing packets, the driver fails to properly verify all required consecutive descriptor slots. A local user could exploit this flaw by generating...
CVE-2026-98049
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When executing a 32-bit atomic compare-and-exchange operation on arena memory, the kernel fails to properly clear zero-extend the upper half of the target register as required by BPF specifications. A local attacker with...
CVE-2026-97552
A flaw was found in the Linux kernel's XFS file system. An uninitialized variable in the deferred operation handling routine can cause the kernel to return an indeterminate value when processing empty work items during online repair. A local user initiating or interacting with file system repair...
CVE-2026-98050
A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a race condition in the Mellanox switch mlxsw driver. When handling Precision Time Protocol PTP traffic, the garbage-collection workqueue and the network polling thread may concurrently modify shar...
CVE-2026-98048
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability may allow a local user to achieve privilege escalation or cause a Denial of Service DoS through memory corruption. During helper call optimizations, the verifier improperly rewrites instruction sequence...
CVE-2026-87482
A flaw was found in chromium-browser. The HttpsUpgrades feature fails to properly enforce encrypted connections, resulting in the cleartext transmission of sensitive data. A remote attacker could exploit this vulnerability by sending crafted network traffic to intercept and expose sensitive...
CVE-2026-97551
A flaw was found in the Linux kernel's XFS file system. A local user can trigger a Denial of Service DoS by forcing an unexpected filesystem shutdown. When updating parent pointer attributes, the kernel fails to properly initialize the block reservation counter, causing an integer underflow durin...
CVE-2026-87517
A flaw was found in Google Chrome on iOS. A race condition in the mobile browser component allows a remote attacker to bypass the same-origin policy by tricking a user into opening a specially crafted HTML page. Successful exploitation enables unauthorized access to sensitive cross-origin web dat...
CVE-2026-98047
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier, which may allow a local attacker to cause a denial of service DoS or potentially escalate privileges. When verifying red-black tree rbtree callbacks, the verifier fails to enforce callback restrictions across nested...
CVE-2026-98045
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain stack retrieval helper functions can perform blocking filesystem operations, but were not properly marked as sleepable. A local user with permission to load BPF programs could exploit this flaw by invoking these...
CVE-2026-98046
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfbtffindbynamekind helper function was not properly marked as sleepable capable of pausing execution while waiting for resources, allowing it to be executed in non-sleepable contexts such as timer callbacks. A loca...
CVE-2026-98044
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...
CVE-2026-97549
A flaw was found in the Linux kernel's XFS file system. An incorrect block calculation during the online repair of shortform directories and extended attributes causes transaction space to be under-reserved. A local user capable of triggering metadata repair operations can exploit this flaw to...
CVE-2026-98043
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly assumes that certain pointer types are non-null without accounting for unbounded offsets that can wrap around to zero at runtime. A local user with permissions to load BPF programs can exploit thi...
CVE-2026-98042
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local user with permissions to load BPF programs could exploit this vulnerability to achieve privilege escalation or cause a denial of service DoS. The issue stems from improper handling of register states during...
CVE-2026-97548
A flaw was found in the Linux kernel's XFS file system. A local user can cause a Denial of Service DoS or system crash through an out-of-bounds memory access when processing large real-time reverse-mapping or reference count data structures. The issue occurs because the size calculation for...
CVE-2026-65412
A flaw was found in webkitgtk. Improper input validation can lead to a null pointer dereference, an error that occurs when software attempts to access an invalid memory location. By convincing a user to process specially crafted web content, a remote attacker could trigger an application crash,...
CVE-2026-98041
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly predicts that 32-bit conditional branch comparisons between a pointer and zero are always taken, failing to account for valid pointer values whose lower 32 bits can be zero. A local attacker could...
CVE-2026-98040
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. When validating conditional jump operations using register comparisons against null values, the verifier fails to properly track register precision across different execution paths. A local user capable of loading BPF...
CVE-2026-97547
A flaw was found in the Linux kernel's XFS file system. When exchanging file ranges between files that share storage blocks reflinks, a local user can trigger a condition where the system prematurely clears copy-on-write protection flags from a file that still retains shared data blocks...
CVE-2026-98039
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. The verifier improperly validates pointer types when storing values into per-CPU map fields, allowing standard memory allocations or kernel pointers to be accepted as per-CPU data. A local user with permissions to load BP...
CVE-2026-98038
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When validating programs that manage shared reference-counted objects, the BPF verifier incorrectly treats borrowed references as always valid and fails to require null-pointer checks. A local user can exploit this...
CVE-2026-97546
A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...
CVE-2026-97544
A flaw was found in the Linux kernel's XFS file system. This flaw allows a local user to cause a Denial of Service DoS through kernel memory exhaustion. The issue occurs during live quota check operations when memory allocated for quota tracking is not freed if an internal hash table insertion...
CVE-2026-97542
A flaw was found in the Linux kernel's XFS file system. When performing online repair of an allocation group free list AGFL, the kernel fails to check return values during bitmap processing, silently ignoring errors. A local user capable of triggering file system repair operations could cause the...
CVE-2026-97543
A flaw was found in the Linux kernel's XFS file system. A local user could cause a Denial of Service DoS due to a memory leak in the directory tree scrub and repair mechanisms. When an error occurs while appending a directory name to a path, the kernel fails to release previously allocated inode...
CVE-2026-98021
A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by triggering excessive memory consumption on the host. When creating or updating network interfaces through the routing netlink rtnetlink interface, the kernel fails to validate and enforce maximum limits on the...
CVE-2026-98037
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. An improper validation check fails to reject untrusted allocated-object pointers after their protection scope expires, incorrectly recognizing them as valid live objects. A local user with permissions to load BPF programs...
CVE-2026-98036
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user with permission to run BPF programs can trigger a use-after-free condition, potentially leading to a system crash, denial of service DoS, or privilege escalation. This flaw occurs during the recycling of...
CVE-2026-97545
A flaw was found in the Linux kernel's XFS file system. When an input/output I/O error occurs while writing cached data buffers to disk during b-tree preparation, the kernel fails to release an allocated buffer. A local user performing file system operations could trigger this condition to leak...
CVE-2026-98034
A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...
CVE-2026-98035
A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...
CVE-2026-98033
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel's program verifier improperly resets tracking identifiers when preparing callback functions, causing it to confuse different internal data structures sharing the same template. A local user with permission to...
CVE-2026-102277
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...
CVE-2026-98032
A flaw was found in the Linux kernel's tracing subsystem. A race condition occurs when concurrent subbuffer resizing takes place while raw trace data is being read. A local user could exploit this flaw to cause a Denial of Service DoS or disclose uninitialized kernel memory due to stale buffer si...
CVE-2026-98030
A flaw was found in the Linux kernel's Broadcom Starfighter 2 bcmsf2 network switch driver. An unprivileged local user can exploit this vulnerability by issuing a network control request to retrieve classification rules while providing a buffer size smaller than the number of active rules. Becaus...
CVE-2026-98031
A flaw was found in the Linux kernel. When removing a nexthop routing group entry, an error path fails to properly initialize an error-reporting pointer, causing the kernel to dereference uninitialized stack memory. A local user with network administration privileges could exploit this flaw durin...
CVE-2026-97541
A flaw was found in the Linux kernel's ath9khtc wireless driver. The driver stores a pointer to a USB device identifier that can be freed after the initial device probe when dynamic device identifiers are used. A local attacker could exploit this use-after-free vulnerability when the driver later...
CVE-2026-97540
A flaw was found in the Linux kernel's Pegasus USB Ethernet driver. This vulnerability can lead to a Denial of Service DoS through a system crash. When dynamic device identifiers are configured, the driver improperly uses pointer calculations on heap memory instead of referencing its static devic...
CVE-2026-98029
A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. The driver fails to validate the user-provided buffer size when retrieving network flow steering rules. An unprivileged local user can exploit this vulnerability to trigger an out-of-bounds memory write or a null...
CVE-2026-98028
A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. When replacing an existing flow steering rule fails during hardware reprogramming, the driver fails to remove the old rule from its internal list, creating an inconsistency with the active rule counter. A local us...
CVE-2026-98027
A flaw was found in the Linux kernel's Marvell 88E6xxx switch driver. The driver fails to validate the caller's buffer boundary when retrieving network policy rules, leading to memory writes beyond the allocated buffer or a null pointer dereference. A local unprivileged user can exploit this...
CVE-2026-98026
A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...
CVE-2026-97539
A flaw was found in the Linux kernel's xusbatm USB driver. When dynamic device identifiers are configured, the driver improperly performs pointer arithmetic on heap-allocated identifiers, resulting in an out-of-bounds array access. A local user could exploit this flaw to cause a Denial of Service...
CVE-2026-98025
A flaw was found in the Linux kernel's cx82310eth USB Ethernet driver. An attacker connecting a malicious USB device can trigger a heap-based buffer overflow by sending crafted packets containing a reboot indicator. Because the driver fails to discard the packet after detecting the reboot signal,...