CVE-2026-80550

A flaw was found in the s390/vfioccw component of the Linux kernel. The ccwchaincalclength routine, which counts channel command words CCWs, incorrectly checked array boundaries. This could lead to an out-of-bounds read, where the system attempts to access memory beyond its allocated limits. Such...

CVE-2026-80489

A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...

CVE-2026-80525

A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC4 topology component. During suspend and resume operations, the system fails to refresh the Inter-Process Communication IPC payload for audio copier widgets. This oversight causes outdated Direct Memory Access DMA channel assignmen...

CVE-2026-80577

A flaw was found in the Linux kernel's drm/panthor driver. When the panthorfwloadsectionentry function processes zero-sized firmware sections, it can leave a memory pointer uninitialized. Subsequent operations that attempt to access this uninitialized memory can lead to a null pointer dereference...

CVE-2026-80580

A flaw was found in the fbdev component of the Linux kernel. This vulnerability arises because the modestring function, when generating output for the sysfs interface, can write more data than its allocated buffer can hold. An attacker could exploit this by providing a specially crafted input,...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2026-80566

A flaw was found in the hynitroncstxxx driver in the Linux kernel. This vulnerability allows an attacker to provide specially crafted touch input that can bypass validation checks for touch count and finger identifiers IDs. This improper handling can lead to the corruption of the touch state or t...

CVE-2026-80559

A flaw was found in the Linux kernel's sur40 input device driver. Due to improper ordering of device registration, a local user could trigger a race condition by opening the input device immediately after its registration. This could lead to the system accessing uninitialized data, resulting in a...

CVE-2026-74742

A flaw was found in the Linux kernel's veth component. In a multi-queue setup without an eXpress Data Path XDP program attached, the vethpoll function incorrectly derives the index of the peer transmit TX queue to wake. This can cause a TX queue to stop indefinitely if it becomes full, as the...

CVE-2026-80558

A flaw was found in libceph within the Linux kernel. A remote attacker, by sending a specially crafted or corrupted OSD map osdmap from a Ceph monitor or OSD, could cause the system to attempt to access memory outside of allocated bounds. This out-of-bounds access occurs because invalid OSD indic...

CVE-2026-80543

A flaw was found in the Linux kernel's s390/zcrypt component. When copying user-space messages into a kernel buffer, the system fails to properly pad the message to a 4-byte length. This oversight can lead to up to three bytes of uninitialized kernel memory being exposed to the crypto card...

CVE-2026-74736

A flaw was found in the Linux kernel's clsbpf component. A device-bound program could be incorrectly attached to a different network device than it was intended for. This misconfiguration could allow an attacker to trigger a system panic, leading to a denial of service, if the original device is...

CVE-2026-6471

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server. Mitigation To mitigate this...

CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

CVE-2026-65915

A flaw was found in NLTK. A logic bug in the FileSystemPathPointer.open function allows the sandbox validation check to be bypassed. A remote attacker can exploit this by providing specially crafted file:// Uniform Resource Locators URLs to nltk.data.load. This enables the attacker to read...

CVE-2026-63311

A flaw was found in NLTK. This server-side request forgery SSRF vulnerability allows an attacker to bypass network access restrictions. By triggering DNS resolution failures or using DNS rebinding, an attacker can cause the validatenetworkurl function to incorrectly validate URLs. This enables...

CVE-2026-80567

A flaw was found in the Linux kernel. The synaptics-rmi4 input driver's rmif54bufferqueue function failed to propagate errors from its worker thread. This oversight could result in the delivery of stale or uninitialized memory to user applications, potentially leading to information disclosure or...

CVE-2026-80527

A flaw was found in the Linux kernel's Ceph client. A reader can experience an indefinite hang when the client's local capability state mdswanted becomes stale after a Metadata Server MDS capability revocation. This occurs because the client believes it still wants a capability e.g., FILERD that...

CVE-2026-74738

A flaw was found in the regmap: sdw-mbq component of the Linux kernel. This vulnerability occurs when the regmapsdwmbqpollbusy function attempts to call an unset readablereg callback. If a device responds with COMMANDIGNORED, it can lead to a NULL function pointer dereference. This could...

CVE-2026-80581

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80523

A flaw was found in the Linux kernel. The HDMA Hardware Direct Memory Access clock, responsible for the internal TCM Tightly Coupled Memory access path of the X100 RISC-V core, was not set as critical. This oversight allows the clock to be shut off, which can lead to a system hang, for example,...

CVE-2026-80562

A flaw was found in the Linux kernel's gpio: ml-ioh component. An incorrect spinlock type spinlockt was used in interrupt handling routines where a non-sleeping lock rawspinlockt was required. This could lead to invalid lock acquisition, potentially causing system instability or a denial of...

CVE-2026-80553

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability arises from the improper management of workqueues, where existing tasks might not be canceled before associated resources are released. A local attacker could potentially leverage this issue to trigger a...

CVE-2026-80545

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability stems from insufficient input validation in the xcrbmsgtotype6ep11cprbmsgx function when handling EP11 Cryptographic Coprocessor Request Block CPRB messages. A local attacker could exploit this by crafting a maliciou...

CVE-2026-69097

A flaw was found in GitPython. This vulnerability allows an attacker to inject malicious configuration directives into Git configuration files by using specially crafted submodule names. This can lead to remote code execution, enabling the attacker to run unauthorized commands on the affected...

CVE-2026-80586

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...

CVE-2026-80541

A flaw was found in the Linux kernel's drm/amdgpu component. A local user could exploit improper validation of Graphics Execution Manager GEM CREATE domain combinations. By combining specific memory domains CPU|GTT|VRAM with special hardware domains DOORBELL, GDS, GWS, or OA, a user could trigger...

CVE-2026-80557

A flaw was found in the kernel's libceph component. A malicious or compromised Ceph Object Storage Daemon OSD can send a specially crafted message that causes an out-of-bounds read when processing watcher information. This vulnerability can lead to memory corruption or a denial of service,...

CVE-2026-74743

A flaw was found in the Linux kernel's macvlan component. The macvlan component incorrectly initializes network packet buffer skb headroom and tailroom values, failing to inherit them from the underlying network device. This can occur when the underlying device requires additional space for heade...

CVE-2026-80546

A flaw was found in the Linux kernel's s390/zcrypt component, specifically within the xcrbmsgtotype6cprbmsgx function. This vulnerability is due to insufficient input validation, which can lead to integer overflows during memory allocation and arithmetic operations, as well as a lack of minimum...

CVE-2026-80585

A flaw was found in the Linux kernel. In the Multipath TCP MPTCP Fast Open feature, a vulnerability exists where the system incorrectly marks a subflow as MPTFO even when a TCP Fast Open TFO SYN packet does not contain data. This can lead to a stale MPTFO state, potentially triggering a...

CVE-2026-74744

A flaw was found in the Linux kernel's ipvlan component. The ipvlan devices do not properly inherit neededheadroom and neededtailroom from the physical device phydev. This can lead to insufficient space being reserved for packet headers and trailers, potentially causing memory corruption, such as...

CVE-2026-74753

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

CVE-2026-74754

A flaw was found in the Linux kernel SCSI core. A race condition exists where the shost-ehnoresume flag is checked multiple times during error handling. This can lead to an incorrect handling of power management PM references, specifically an unmatched reference put. The consequence is a runtime ...

CVE-2026-74748

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the list:set garbage collection and set swap operations. This concurrency issue can lead to a kernel bug and a system crash, effectively causing a denial of service. This vulnerability can be trigger...

CVE-2026-80575

A flaw was found in the Linux kernel. The cs40l50-vibra driver, responsible for haptic feedback, improperly validates the length of custom data provided by a local user. This insufficient validation can lead to out-of-bounds reads and accesses when processing specially crafted input. A local...

CVE-2026-74739

A flaw was found in the Linux kernel's clsu32 module, responsible for traffic control. This vulnerability occurs because the u32bindclass function incorrectly handles certain data structures, leading to a slab-out-of-bounds read. A local attacker with network administration capabilities could...

CVE-2026-80576

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit this vulnerability by providing oversized input buffer IB bytes to the amdgpucsp2ib function on Graphics GFX rings. This lack of size validation allows the oversized values to corrupt adjacent control bits...

CVE-2026-74751

A flaw was found in the Linux kernel's RISC-V Reduced Instruction Set Computer - V ZBB-optimized strnlen function. This vulnerability occurs because the strnlen loop attempts to read one word beyond the intended boundary. If the read operation crosses an unmapped memory page, it can lead to a...

CVE-2026-74734

A flaw was found in the Linux kernel's FireWire IEEE 1394 Open Host Controller Interface OHCI driver. During the error handling path of the driver's probe function, a NULL pointer dereference can occur in the arcontextrelease function if the context was not properly initialized. This vulnerabilit...

CVE-2026-80547

A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises from the lack of a proper lock to manage the list of Channel Report Word CRW payloads, which are asynchronous events from hardware. Without this lock, these payloads may not be read cohesively, potentially...

CVE-2026-74752

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...

CVE-2026-80554

A flaw was found in the Linux kernel's s390/vfioccw component. The vfio-ccw logic processes channel programs recursively, breaking them into segments when a Transfer-In-Channel TIC Channel Command Word CCW is encountered. An attacker could exploit the lack of a proper limit on these segments,...

CVE-2026-80522

A flaw was found in the Linux kernel's Tegra cryptography module. An incorrect calculation in the 'tegragcmdoonereq' function, specifically when handling the 'cryptlen' parameter, can occur if a caller does not properly initialize the authentication size. This can lead to a write beyond the...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...

CVE-2026-59295

A flaw was found in Micrometer Instrumentation for Apache HttpAsyncClient. When asynchronous requests fail before receiving a response, such as due to connection resets or timeouts, the system can leak memory unboundedly. This continuous memory leak leads to heap exhaustion and OutOfMemoryError...

CVE-2026-64778

A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks. Mitigation Do not visit untrusted websites or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-80158

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...

CVE-2026-43795

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...