CVE-2026-80889

A flaw was found in the Controller Area Network CAN ISO-TP ISO 15765-2 Transport Protocol module of the Linux kernel. This vulnerability arises from improper handling of timer operations, state transitions, and generation tracking within the module. A local attacker could potentially exploit thes...

CVE-2026-80847

A flaw was found in the Linux kernel's Transmission Control Protocol TCP implementation. The system incorrectly handles certain network route-derived advmss advertised maximum segment size values, which can become zero or too small. This can lead to a divide-by-zero error within the...

CVE-2026-80904

A flaw was found in the Linux kernel. The tlsswspliceread function does not properly handle errors that occur during asynchronous decryption. This oversight allows the system to continue delivering records on a connection that has failed authentication, even though other functions would correctly...

CVE-2026-80872

A flaw was found in the ALSA Advanced Linux Sound Architecture hda/tas2781 driver in the Linux kernel. This vulnerability occurs when an asynchronous firmware request callback attempts to operate on driver-private data that has already been deallocated or is in the process of being torn down duri...

CVE-2026-80865

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF tracing component. A missing access check in the copyusersyms function, specifically the absence of an accessok call before using getuser on a user space pointer, could allow a local attacker to read sensitive kernel memory. This...

CVE-2026-120217

A flaw was found in loguru. An inefficient regular expression in the ANSI color-markup parser can lead to a Denial of Service DoS. A remote attacker can exploit this vulnerability by submitting specially crafted input to the ANSI color-markup parser's AnsiParser.feed function, triggering excessiv...

CVE-2026-89776

A flaw was found in the Linux kernel's VXLAN VNI filter. The system does not enforce an exact length for GROUP/GROUP6 address attributes. A remote attacker could exploit this by sending a malformed attribute, leading to an over-read of uninitialized kernel memory. This information is then disclos...

CVE-2026-89817

A flaw was found in the Linux kernel's drm/gud component. The gudconnectoraddtvmode function reads TV mode names from a USB device. These names are not guaranteed to be null-terminated, which can cause the system to read beyond the allocated buffer when processing them. This out-of-bounds read...

CVE-2026-89799

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. Specifically, within the bpfgetstackid function, preemption was not properly disabled when calling getperfcallchain and accessing its trace entries buffer. This oversight could lead to a race condition, where multiple...

CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure mbxcmdt can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00getfirmwarestate function copies uninitialized mailbox register values, which are not properly written due to early return paths ...

CVE-2026-89814

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when a graphics ring is not assigned to a partition, leading to an out-of-bounds array access during SDMA submissions. A local attacker could potentially exploit this to cause a system crash, resulting in a...

CVE-2026-89981

A flaw was found in the Linux kernel, specifically affecting arm64 architectures. When the Memory Tagging Extension MTE is disabled, the kernel attempts to read a register GMIDEL1 that should not be accessed. In a virtualized environment utilizing protected Kernel-based Virtual Machine pKVM, this...

CVE-2026-89992

A flaw was found in the Linux kernel. The dtidlepdfree function in the cpuidle subsystem attempts to free a memory region using an incorrect pointer, which is not the start of the original allocation. This memory corruption vulnerability can lead to a system crash, resulting in a Denial of Servic...

CVE-2026-89849

A flaw was found in the Linux kernel's qla2xxx SCSI driver. When the firmware delivers an unexpected status input/output control block IOCB for a non-SCSI command, the driver can incorrectly process a garbage pointer. This wild pointer dereference can lead to system instability or a denial of...

CVE-2026-90029

A flaw was found in the Linux kernel's realtekcr USB storage driver. This vulnerability, a use-after-free, occurs when the system attempts to access memory that has already been released. During a USB device disconnection, a timer within the realtekcr module is deleted before its associated...

CVE-2026-89962

A flaw was found in the Linux kernel's powerpc/kexecfile component. The mergememoryranges function incorrectly handles overlapping memory ranges, leading to critical memory truncation. This issue can cause valid memory areas to be lost from kexec exclude lists, potentially allowing the crash kern...

CVE-2026-90038

A flaw was found in the Network File System Daemon NFSD component of the Linux kernel. This vulnerability, a use-after-free, occurs when the nfsd4revokeexportstates function improperly handles client state revocation. An administrator removing an export can trigger a race condition, potentially...

CVE-2026-89988

A flaw was found in the kprobes component of the Linux kernel. A local attacker could potentially exploit a use-after-free vulnerability when a module is unloaded concurrently with a call to withinkprobeblacklist. This could lead to dereferencing freed memory, potentially causing system instabili...

CVE-2026-89805

A flaw was found in the drm/pagemap component of the Linux kernel. This vulnerability involves a 'use-after-free' error, a type of memory corruption, that occurs when the system attempts to access memory after it has been released. This could allow a local attacker to cause the system to crash,...

CVE-2026-89821

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs when the islutlinear function processes a Look-Up Table LUT with a single entry, triggering a division-by-zero error. This error causes the kernel to crash, leading to a Denial of Service DoS for the syste...

CVE-2026-90042

A flaw was found in the Ceph filesystem client within the Linux kernel. This vulnerability arises from the improper handling of memory buffers during filename decryption, specifically when buffers are allocated in the vmalloc region. This can lead to a kernel panic, causing the system to crash. A...

CVE-2026-89991

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a Non-Maskable Interrupt NMI re-enters the pcpufreelistpush function on a system configured with a single possible CPU, and the interrupted context holds the freelist lock, an infinite loop can occur. This prevents...

CVE-2026-89842

A flaw was found in the Linux kernel's qla2xxx SCSI driver. Under certain conditions, specifically when the firmware is not fully initialized or is in a reset state, the driver attempts to communicate with it. This can cause the system to try and process an invalid command, leading to instability...

CVE-2026-89942

A flaw was found in the Linux kernel's Industrial I/O IIO buffer subsystem. An anonymous buffer handle, which maintains a reference to an IIO device, can be improperly released if it holds the last reference when the device is removed. This improper handling of a mutex during the buffer's release...

CVE-2026-89893

A flaw was found in the Linux kernel's cx23885 NetUP CI driver. This use-after-free vulnerability occurs when the netupciexit function frees a netupcistate structure while a related work item may still be pending or running. A local attacker could exploit this by triggering the module's removal,...

CVE-2026-90025

A flaw was found in the Linux kernel's USB Type-C DisplayPort UCSI displayport driver. An attacker with physical proximity or control over a connected USB-C device could provide a specially crafted response from the Port Partner Manager PPM. This invalid response could cause an out-of-bounds arra...

CVE-2026-89878

A flaw was found in the Linux kernel's s2255 media driver. The driver attempts to read a trailing marker and version from the end of a firmware blob without properly validating the firmware file's size. A local attacker could provide a specially crafted firmware file shorter than 8 bytes, leading...

CVE-2026-89984

A flaw was found in the Linux kernel's perf/x86/intel component. Insufficient validation of privilege levels in the Last Branch Record LBR stack allows a local attacker to expose kernel branch records to user space. This information disclosure vulnerability can lead to kernel addresses appearing ...

CVE-2026-89850

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This issue arises when the system attempts to check the firmware status of the qla2xxx chip while it is not operational or is recovering from an error. This can cause the system to repeatedly send a command to the hardware, which may...

CVE-2026-89819

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from insufficient validation of the plane degamma Look-Up Table LUT size. A local attacker, with access to the AMDPLANEDEGAMMALUT property available on systems with AMDPRIVATECOLOR defined, could provide a...

CVE-2026-89818

A flaw was found in the Linux kernel's drm/amdgpu/vcn component. An integer overflow vulnerability exists in the decmsg buffer count check. A local attacker could exploit this by providing a specially crafted message, causing the buffer count expression to wrap around. This allows the parser to...

CVE-2026-89952

A flaw was found in the Linux kernel's mtd: rawnand component. The nandflashdetectextparampage function fails to validate if the fixed page and subsequent variable-length sections of an ONFI Open NAND Flash Interface extended parameter page fit within the allocated memory. This improper validatio...

CVE-2026-93239

A flaw was found in the Linux kernel. A race condition in the ARM64 page-table walk routine occurs when inspecting memory mappings without proper synchronization while interrupts remain enabled. A local user can trigger this flaw during concurrent memory cleanup operations, causing the kernel to...

CVE-2026-93238

A flaw was found in the Linux kernel's s390 VFIO-AP Virtual Function I/O Adjunct Processor device driver. During certain device hot-plug configuration updates, the driver fails to initialize a memory structure before processing it. A local privileged user could trigger this issue to cause the...

CVE-2026-93205

A flaw was found in the Linux kernel's iommu/arm-smmu-v3 component. During device removal, the system incorrectly frees the Input-Output Memory Management Unit IOMMU Page Fault IOPF queue before its associated interrupt request IRQ handler finishes using it. This improper cleanup order leads to a...

CVE-2026-93784

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service DoS or potential information disclosure by submitting a malformed Information Element IE buffer through wireless configuration commands. The kernel fails to properly valida...

CVE-2026-120243

A flaw was found in FFmpeg. This vulnerability allows an attacker to cause an information disclosure of sensitive stack memory by convincing a user to process a specially crafted Go2Meeting video stream. The Go2Meeting decoder fails to properly initialize palette data, which can result in...

CVE-2026-120246

A flaw was found in FFmpeg. This vulnerability leads to information disclosure when processing a specially crafted CDXL media file. By tricking a user or automated service into decoding a file that references uninitialized color palette entries, an attacker can cause sensitive internal stack memo...

CVE-2026-120244

A flaw was found in FFmpeg. An attacker could exploit this vulnerability by providing a specially crafted PCX image containing truncated image data. When processed, the PCX decoder copies uninitialized memory into the decoded image pixels, resulting in information disclosure of sensitive heap...

CVE-2026-120247

A flaw was found in FFmpeg. An attacker can achieve information disclosure by providing a specially crafted Huffyuv video stream with truncated data. Due to the use of an uninitialized buffer in the Huffyuv decoder, uninitialized heap memory is copied into the decoded output frames, exposing...

CVE-2026-120245

A flaw was found in FFmpeg. An attacker could exploit this vulnerability by tricking a user or automated system into processing a specially crafted Sun Raster image file. Because the decoder fails to properly initialize memory buffers when handling truncated image data, uninitialized system memor...

CVE-2026-93260

A flaw was found in the Linux kernel. When initialization of inter-processor interrupts fails within the PowerPC External Interrupt Virtualization Engine XIVE, the system ignores the failure after freeing allocated memory structures. This leads to a use-after-free condition when subsequent setup...

CVE-2026-93251

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Due to improper synchronization during physical device lookups, a race condition can occur when a device is unbound concurrently. A local user could exploit this timing flaw to cause a use-after-free...

CVE-2026-93259

A flaw was found in the Linux kernel. In PowerPC builds configured with position-relative code support, inline assembly routines responsible for handling interrupts fail to declare modified processor registers. This omission can result in register corruption during interrupt processing, allowing ...

CVE-2026-98102

A flaw was found in the Linux kernel's IPv6 multicast implementation. When removing an active multicast source filter, an internal list pointer is updated before the read-copy update RCU grace period elapses. A local user can exploit this race condition during concurrent multicast address lookups...

CVE-2026-97568

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A local attacker could cause a denial of service DoS by exploiting an uninitialized memory access during connection handling. When processing connection requests using SYN cookies, the kernel copies uninitialized subflow...

CVE-2026-98089

A flaw was found in the Linux kernel's network bonding driver. When transmitting or forwarding network packets in adaptive load balancing mode, the system fails to properly initialize header pointers before inspecting network traffic. An attacker transmitting packets through an affected interface...

CVE-2026-98091

A flaw was found in the Linux kernel's Btrfs file system. A local user with permissions to perform file system operations could exploit this vulnerability to cause a denial of service DoS via a system crash or potentially corrupt system memory. The issue occurs when error handling during sprout...

CVE-2026-98076

A flaw was found in the Linux kernel's tracing subsystem. When dynamic probe events are configured with multiple probes, removing the initial probe frees its argument name and type strings while the event remains registered. A local user with administrative or tracing privileges can trigger a...

CVE-2026-98088

A flaw was found in the Linux kernel's mpt3sas driver. On systems lacking Non-Uniform Memory Access NUMA topology information for a PCI device, the driver fails to validate the device node index before querying CPU affinity masks, resulting in an out-of-bounds array read. This issue can lead to...