CVE-2026-97951

A flaw was found in the Linux kernel's iSCSI Internet Small Computer Systems Interface target subsystem. A remote client can trigger a Denial of Service DoS by sending remaining data packets for a write request that was aborted by a device reset command. Because the subsystem fails to signal...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97949

A flaw was found in the Linux kernel's configfs filesystem. A race condition between directory removal and symbolic link creation can result in a use-after-free vulnerability, where the system attempts to access memory after it has been released. A local user can exploit this flaw by concurrently...

CVE-2026-97944

A flaw was found in the Linux kernel. An incorrect offset calculation in the FineIBT Control Flow Integrity CFI mechanism causes invalid hash values to be read for Berkeley Packet Filter BPF trampolines. Consequently, indirect function calls into these BPF programs fail integrity verification and...

CVE-2026-97948

A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling EEH subsystem. A recursive locking issue occurs during device reset handling when an error recovery process attempts to acquire a lock it already holds. When an error is detected on an affected device, this condition causes th...

CVE-2026-102621

A flaw was found in poppler. An integer overflow vulnerability exists in the SplashClip rendering component when handling path clipping operations. A local attacker could exploit this flaw by providing specially crafted input, causing the application to crash and resulting in a Denial of Service...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-97946

A flaw was found in the Linux kernel. Improper reference counting during AMD PCI root device initialization and caching in the amdsmninit function fails to properly track device lifecycles. Under certain conditions, this flaw may allow a local attacker to cause a Denial of Service DoS or system...

CVE-2026-97945

A flaw was found in the Linux kernel. A local user can cause silent data loss or data corruption due to improper memory tracking in the x86 memory management subsystem. When modifying permissions on transparent huge pages a mechanism that optimizes memory by grouping it into larger blocks, the...

CVE-2026-97943

A flaw was found in the Linux kernel's x86 memory management subsystem. When collapsing memory page table entries into large pages, the kernel frees underlying page tables without holding the necessary lock to prevent concurrent page table walks. A local user can exploit this race condition to...

CVE-2026-97942

A flaw was found in the Linux kernel's x86 instruction patching subsystem. A race condition between runtime instruction modification text poking and page attribute updates can cause virtual memory lookup failures in shared executable memory. A local user can trigger this issue during kernel modul...

CVE-2026-97941

A flaw was found in the Linux kernel. A race condition in the slab memory management subsystem occurs when memory is concurrently freed and refilled across multiple processor cores without proper locking. An unprivileged local user could exploit this flaw by issuing concurrent system calls that...

CVE-2026-97940

A flaw was found in the Linux kernel's IPv6 routing subsystem. A race condition during route iteration termination can allow an internal routing table walker structure to remain on an active list after its associated memory is released. A local user could exploit this flaw during concurrent route...

CVE-2026-97939

A flaw was found in the Linux kernel's IP multicast routing subsystem. A local user with network administration privileges inside a network namespace can create an excessive number of multicast routing tables. Because these allocations are not tracked against memory control group limits, kernel...

CVE-2026-102904

A flaw was found in JupyterLab. When processing extension uninstallation requests, user-supplied package names are passed to the underlying package manager without properly filtering command-line options. An authenticated user with extension management access can exploit this argument injection...

CVE-2026-102930

A flaw was found in virtualenv. When fetching seed packages such as pip or setuptools during environment creation or updates, virtualenv does not verify the integrity of downloaded files against authoritative cryptographic checksums. A network attacker or compromised mirror could substitute...

CVE-2026-102925

A flaw was found in virtualenv. The generated activation scripts for shells such as bash, zsh, and fish apply improper quoting to environment and library path variables. An attacker can exploit this by providing a crafted virtual environment path containing shell metacharacters. When an...

CVE-2026-97492

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When reconfiguration of a Neighbor Awareness Networking NAN interface fails, the error path prematurely marks active interfaces as absent from the driver before completing state cleanup. This improper handling leaves wireless...

CVE-2026-97938

A flaw was found in the Linux kernel. A race condition in the reboot management subsystem allows a process identifier reference to be released while still being accessed by concurrent operations. A local attacker could exploit this use-after-free flaw to cause a Denial of Service DoS via a system...

CVE-2026-97937

A flaw was found in the Linux kernel. During process creation when the Function Tracer ftrace graph functionality is active, a memory allocation failure can lead to the kernel prematurely releasing memory still referenced by the parent process. A local attacker could exploit this use-after-free...

CVE-2026-97936

A flaw was found in the Linux kernel's tracing subsystem. A local user with permissions to configure event triggers could cause a Denial of Service DoS or memory corruption by applying a stacktrace modifier to an unsupported field. Because the kernel fails to validate the field type, it performs ...

CVE-2026-102330

An incorrect authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498793976 https://code.google.com/p/chromium/issues/detail?id=102330...

CVE-2026-97491

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When tearing down InfiniBand network connection paths, a shutdown worker thread may sleep indefinitely while waiting for pending operations to finish, blocking other work items in the queue. This condition can lead to...

CVE-2026-97488

A flaw was found in the Linux kernel. The QNX4 filesystem driver fails to properly handle errors when setting the block size during mount operations. A local attacker could exploit this vulnerability by mounting a crafted filesystem image with an invalid block size, triggering a kernel crash that...

CVE-2026-102310

A missing authorization flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=477726837 https://code.google.com/p/chromium/issues/detail?id=102310...

CVE-2026-102620

A flaw was found in Poppler. An integer overflow vulnerability in the TrueType font handling code can allow a local user to cause data corruption. By providing a specially crafted font file processed by the FoFiTrueType::cvtSfnts function, an attacker can cause improper data modification and...

CVE-2026-102325

A flaw was found in chromium-browser. An uninitialized resource issue in the Skia graphics library allows a remote attacker to obtain sensitive cross-origin data. By enticing a user to visit a specially crafted HTML page, an attacker can access information belonging to other web origins, leading ...

CVE-2026-97935

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to configure event triggers can trigger a use-after-free condition, leading to a system crash, Denial of Service DoS, or potential privilege escalation. This issue occurs when registering a named histogram trigger...

CVE-2026-97934

A flaw was found in the Linux kernel. An unbounded memory copy vulnerability exists in the tracing subsystem when processing event histogram keys like STACKTRACE due to improper field pointer handling. A local user with access to the kernel tracing interface can exploit this flaw by setting a...

CVE-2026-97933

A flaw was found in the Linux kernel's tracing subsystem. A race condition can occur when opening a tracer option file while the corresponding trace instance is being removed, causing the kernel to access memory that has already been released. A local user could exploit this use-after-free...

CVE-2026-97932

A flaw was found in the Linux kernel's tracing subsystem. A use-after-free vulnerability occurs when an event trigger performs deferred cleanup while a tracing instance is removed, leading to the access of already freed memory. A local user could exploit this flaw to cause memory corruption,...

CVE-2026-97490

A flaw was found in the Linux kernel's Amiga Fast File System AFFS driver. When mounting a filesystem, the driver fails to properly handle block size configuration failures. A local user with permissions to mount filesystems could exploit this flaw by mounting a specially crafted AFFS image,...

CVE-2026-97489

A flaw was found in the Linux kernel's BFS Boot File System implementation. The kernel fails to properly verify the return value when setting the block size during a mount operation. A local user with permissions to mount file systems could exploit this issue by mounting an incompatible file syst...

CVE-2026-102326

A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox. An attacker could exploit this flaw by convincing a user to open a specially crafted HTML page...

CVE-2026-102324

An use after free flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562174487 https://code.google.com/p/chromium/issues/detail?id=102324...

CVE-2026-102323

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=559266114 https://code.google.com/p/chromium/issues/detail?id=102323...

CVE-2026-102328

A flaw was found in chromium-browser. A type confusion vulnerability exists in the V8 JavaScript engine when processing web content. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, resulting in arbitrary code execution within the browser sandbo...

CVE-2026-102315

A flaw was found in chromium-browser. An uninitialized resource issue in the Media component allows a remote attacker who has already compromised the browser's renderer process to read memory outside the security sandbox. By enticing a user to visit a specially crafted HTML page, an attacker can...

CVE-2026-102308

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the browser's restricted security sandbox. By convincing a user to visit a specially crafted web page, an attacker can exploit a use-after-free memory corruption flaw within the Vie...

CVE-2026-102319

A flaw was found in chromium-browser. An uninitialized resource in the Graphics Processing Unit GPU component can lead to information disclosure by allowing memory to be read from outside the security sandbox. A remote attacker who has already compromised the browser's renderer process could...

CVE-2026-102307

A flaw was found in chromium-browser. An uninitialized resource in the Dawn component allows a remote attacker to read memory outside the restricted security sandbox by convincing a user to visit a crafted HTML page. Successful exploitation of this vulnerability can result in unauthorized...

CVE-2026-102304

An use after free flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560251736 https://code.google.com/p/chromium/issues/detail?id=102304...

CVE-2026-102299

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556908674 https://code.google.com/p/chromium/issues/detail?id=102299...

CVE-2026-102253

A flaw was found in iperf3. An unauthenticated remote attacker can exploit this issue by sending a crafted control-channel message followed by a specific User Datagram Protocol UDP datagram to the server. This causes the UDP receive processing thread to enter an unrecoverable infinite loop, leadi...

CVE-2026-102320

A missing authorization flaw was found in the CORS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554038924 https://code.google.com/p/chromium/issues/detail?id=102320...

CVE-2026-97931

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture US122L audio driver, which can lead to memory corruption or a Denial of Service DoS. The driver improperly permits read-only memory mappings to be upgraded to writable. A local user with read and write permissions to th...

CVE-2026-102300

An uninitialized resource flaw was found in the WebGPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560062638 https://code.google.com/p/chromium/issues/detail?id=102300...

CVE-2026-102329

A cross-site scripting flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563297615 https://code.google.com/p/chromium/issues/detail?id=102329...

CVE-2026-102327

An incorrect authorization flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496212975 https://code.google.com/p/chromium/issues/detail?id=102327...

CVE-2026-102318

An out of bounds read flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562279351 https://code.google.com/p/chromium/issues/detail?id=102318...