221294 matches found
CVE-2026-89821
A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs when the islutlinear function processes a Look-Up Table LUT with a single entry, triggering a division-by-zero error. This error causes the kernel to crash, leading to a Denial of Service DoS for the syste...
CVE-2026-90042
A flaw was found in the Ceph filesystem client within the Linux kernel. This vulnerability arises from the improper handling of memory buffers during filename decryption, specifically when buffers are allocated in the vmalloc region. This can lead to a kernel panic, causing the system to crash. A...
CVE-2026-89991
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a Non-Maskable Interrupt NMI re-enters the pcpufreelistpush function on a system configured with a single possible CPU, and the interrupted context holds the freelist lock, an infinite loop can occur. This prevents...
CVE-2026-89942
A flaw was found in the Linux kernel's Industrial I/O IIO buffer subsystem. An anonymous buffer handle, which maintains a reference to an IIO device, can be improperly released if it holds the last reference when the device is removed. This improper handling of a mutex during the buffer's release...
CVE-2026-89842
A flaw was found in the Linux kernel's qla2xxx SCSI driver. Under certain conditions, specifically when the firmware is not fully initialized or is in a reset state, the driver attempts to communicate with it. This can cause the system to try and process an invalid command, leading to instability...
CVE-2026-89893
A flaw was found in the Linux kernel's cx23885 NetUP CI driver. This use-after-free vulnerability occurs when the netupciexit function frees a netupcistate structure while a related work item may still be pending or running. A local attacker could exploit this by triggering the module's removal,...
CVE-2026-90025
A flaw was found in the Linux kernel's USB Type-C DisplayPort UCSI displayport driver. An attacker with physical proximity or control over a connected USB-C device could provide a specially crafted response from the Port Partner Manager PPM. This invalid response could cause an out-of-bounds arra...
CVE-2026-89878
A flaw was found in the Linux kernel's s2255 media driver. The driver attempts to read a trailing marker and version from the end of a firmware blob without properly validating the firmware file's size. A local attacker could provide a specially crafted firmware file shorter than 8 bytes, leading...
CVE-2026-89984
A flaw was found in the Linux kernel's perf/x86/intel component. Insufficient validation of privilege levels in the Last Branch Record LBR stack allows a local attacker to expose kernel branch records to user space. This information disclosure vulnerability can lead to kernel addresses appearing ...
CVE-2026-89850
A flaw was found in the Linux kernel's qla2xxx SCSI driver. This issue arises when the system attempts to check the firmware status of the qla2xxx chip while it is not operational or is recovering from an error. This can cause the system to repeatedly send a command to the hardware, which may...
CVE-2026-89819
A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from insufficient validation of the plane degamma Look-Up Table LUT size. A local attacker, with access to the AMDPLANEDEGAMMALUT property available on systems with AMDPRIVATECOLOR defined, could provide a...
CVE-2026-89818
A flaw was found in the Linux kernel's drm/amdgpu/vcn component. An integer overflow vulnerability exists in the decmsg buffer count check. A local attacker could exploit this by providing a specially crafted message, causing the buffer count expression to wrap around. This allows the parser to...
CVE-2026-89952
A flaw was found in the Linux kernel's mtd: rawnand component. The nandflashdetectextparampage function fails to validate if the fixed page and subsequent variable-length sections of an ONFI Open NAND Flash Interface extended parameter page fit within the allocated memory. This improper validatio...
CVE-2026-93238
A flaw was found in the Linux kernel's s390 VFIO-AP Virtual Function I/O Adjunct Processor device driver. During certain device hot-plug configuration updates, the driver fails to initialize a memory structure before processing it. A local privileged user could trigger this issue to cause the...
CVE-2026-93239
A flaw was found in the Linux kernel. A race condition in the ARM64 page-table walk routine occurs when inspecting memory mappings without proper synchronization while interrupts remain enabled. A local user can trigger this flaw during concurrent memory cleanup operations, causing the kernel to...
CVE-2026-93205
A flaw was found in the Linux kernel's iommu/arm-smmu-v3 component. During device removal, the system incorrectly frees the Input-Output Memory Management Unit IOMMU Page Fault IOPF queue before its associated interrupt request IRQ handler finishes using it. This improper cleanup order leads to a...
CVE-2026-120243
A flaw was found in FFmpeg. This vulnerability allows an attacker to cause an information disclosure of sensitive stack memory by convincing a user to process a specially crafted Go2Meeting video stream. The Go2Meeting decoder fails to properly initialize palette data, which can result in...
CVE-2026-93784
A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service DoS or potential information disclosure by submitting a malformed Information Element IE buffer through wireless configuration commands. The kernel fails to properly valida...
CVE-2026-120245
A flaw was found in FFmpeg. An attacker could exploit this vulnerability by tricking a user or automated system into processing a specially crafted Sun Raster image file. Because the decoder fails to properly initialize memory buffers when handling truncated image data, uninitialized system memor...
CVE-2026-120246
A flaw was found in FFmpeg. This vulnerability leads to information disclosure when processing a specially crafted CDXL media file. By tricking a user or automated service into decoding a file that references uninitialized color palette entries, an attacker can cause sensitive internal stack memo...
CVE-2026-120244
A flaw was found in FFmpeg. An attacker could exploit this vulnerability by providing a specially crafted PCX image containing truncated image data. When processed, the PCX decoder copies uninitialized memory into the decoded image pixels, resulting in information disclosure of sensitive heap...
CVE-2026-120247
A flaw was found in FFmpeg. An attacker can achieve information disclosure by providing a specially crafted Huffyuv video stream with truncated data. Due to the use of an uninitialized buffer in the Huffyuv decoder, uninitialized heap memory is copied into the decoded output frames, exposing...
CVE-2026-93260
A flaw was found in the Linux kernel. When initialization of inter-processor interrupts fails within the PowerPC External Interrupt Virtualization Engine XIVE, the system ignores the failure after freeing allocated memory structures. This leads to a use-after-free condition when subsequent setup...
CVE-2026-93251
A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Due to improper synchronization during physical device lookups, a race condition can occur when a device is unbound concurrently. A local user could exploit this timing flaw to cause a use-after-free...
CVE-2026-93259
A flaw was found in the Linux kernel. In PowerPC builds configured with position-relative code support, inline assembly routines responsible for handling interrupts fail to declare modified processor registers. This omission can result in register corruption during interrupt processing, allowing ...
CVE-2026-98102
A flaw was found in the Linux kernel's IPv6 multicast implementation. When removing an active multicast source filter, an internal list pointer is updated before the read-copy update RCU grace period elapses. A local user can exploit this race condition during concurrent multicast address lookups...
CVE-2026-97568
A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A local attacker could cause a denial of service DoS by exploiting an uninitialized memory access during connection handling. When processing connection requests using SYN cookies, the kernel copies uninitialized subflow...
CVE-2026-98089
A flaw was found in the Linux kernel's network bonding driver. When transmitting or forwarding network packets in adaptive load balancing mode, the system fails to properly initialize header pointers before inspecting network traffic. An attacker transmitting packets through an affected interface...
CVE-2026-98091
A flaw was found in the Linux kernel's Btrfs file system. A local user with permissions to perform file system operations could exploit this vulnerability to cause a denial of service DoS via a system crash or potentially corrupt system memory. The issue occurs when error handling during sprout...
CVE-2026-98076
A flaw was found in the Linux kernel's tracing subsystem. When dynamic probe events are configured with multiple probes, removing the initial probe frees its argument name and type strings while the event remains registered. A local user with administrative or tracing privileges can trigger a...
CVE-2026-98088
A flaw was found in the Linux kernel's mpt3sas driver. On systems lacking Non-Uniform Memory Access NUMA topology information for a PCI device, the driver fails to validate the device node index before querying CPU affinity masks, resulting in an out-of-bounds array read. This issue can lead to...
CVE-2026-98097
A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem. This vulnerability allows information disclosure because the kernel fails to clear padding bytes in a fixed-size buffer when preparing network protocol messages. A remote peer or attacker on the network...
CVE-2026-98099
A flaw was found in the Linux kernel. A local user could exploit a race condition in the IPv6 multicast subsystem to cause a Denial of Service DoS or kernel memory corruption. Because internal multicast lists are modified without proper synchronization helpers, concurrent socket operations can ra...
CVE-2026-98004
A flaw was found in the Linux kernel's RISC-V IOMMU Input-Output Memory Management Unit driver. A local user can exploit this vulnerability to cause a Denial of Service DoS on systems running RISC-V architecture. A concurrency issue in how commands are published to the hardware queue allows lock...
CVE-2026-98316
A flaw was found in the Linux kernel's ALSA bcd2000 driver. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. A race condition exists between ongoing MIDI data processing and USB device disconnection, allowing active tasks to access memory after it ha...
CVE-2026-120210
A flaw was found in FFmpeg. An improper path validation issue in the Interoperable Master Format IMF demuxer leads to information disclosure via path traversal. By convincing a user or automated processing service to open a crafted IMF package containing directory traversal sequences or absolute...
CVE-2026-120208
A flaw was found in libheif. This vulnerability allows a remote attacker to achieve arbitrary code execution or cause a denial of service DoS by supplying a specially crafted High Efficiency Image File Format HEIF image. Due to improper handling of color components with unequal bit depths in the...
CVE-2026-120194
A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...
CVE-2026-100105
A flaw was found in Grafana. An authenticated user with permission to edit alert contact points can bypass field-level authorization restrictions by switching an integration to a legacy schema version. This flaw allows the user to alter protected settings such as destination URLs, potentially...
CVE-2026-61626
A flaw was found in libass. When handling subtitle streams, the library's event pruning mechanism fails to properly validate negative Matroska ReadOrder values. An attacker who provides a specially crafted media stream to an application using libass can trigger memory corruption, resulting in an...
CVE-2026-116128
A flaw was found in Starlet. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS through memory exhaustion. The issue occurs because the server fails to restrict buffer sizes when decoding chunked HTTP request bodies, allowing unconsumed input to accumula...
CVE-2026-109774
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer, undefined behavior in the DOM: Notifications component...
CVE-2026-109776
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the XPCOM component...
CVE-2026-109768
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Site Reports component...
CVE-2026-109771
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the WebRTC: Networking component...
CVE-2026-109777
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...
CVE-2026-109773
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Sync component...
CVE-2026-109770
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Web Serial component...