CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-89828

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue with the initialization order in the amdgpuvrammgrinit function can lead to a kernel panic. If a specific registration function fails during module loading, critical data structures are not properly initialized. This can resul...

CVE-2026-89822

A flaw was found in the Linux kernel's drm/i915 module. A local user could exploit a null pointer dereference in the i915pciprobe function. This occurs when a device is force-bound via sysfs driveroverride, causing driverdata to be NULL and subsequently dereferenced. Successful exploitation could...

CVE-2026-89813

A flaw was found in the Linux kernel's amdgpu graphics driver. When a MODE1 reset occurs, the Kernel Interface Queue KIQ ring fences are not properly completed. This can cause the system to continuously poll for a fence value that is never written back, leading to a denial of service where the...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-89800

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When an OPUNMAPSPARSE operation is performed, a dirty flag is set for the affected memory region. If a subsequent operation within the same job fails, this dirty flag is not properly cleared during the error handling process. This...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89796

A flaw was found in the Linux kernel's DAMON Data Access MONitor core component. An integer overflow vulnerability in the kdamondmergeregions function, specifically during the calculation of a merge threshold, can lead to an infinite loop. This issue occurs under an unreasonable user setup...

CVE-2026-89795

A flaw was found in the Linux kernel's s390 PCI Peripheral Component Interconnect hotplug driver. On s390 systems, an incorrect assignment of PCI slot objects to multifunction devices can lead to the wrong PCI function being reset when a reset operation is initiated through the hotplug driver. Th...

CVE-2026-90355

A flaw was found in the Wi-Fi driver mt76: mt7996 of the Linux kernel. After a full chip reset, the driver fails to properly clear stale link state information, causing the device to become inoperative. This issue arises because the system attempts to re-create device and station records while ol...

CVE-2026-90169

A flaw was found in ksmbd within the Linux kernel. A remote attacker could exploit this vulnerability by initiating an SMB3.1.1 multichannel binding connection and then disconnecting after the NTLM negotiate request but before the authenticate request. This failure to properly free...

CVE-2026-90167

A flaw was found in ksmbd, the in-kernel SMB server for Linux. A race condition exists during the handling of oplock opportunistic locking close operations. This can allow a new oplock break owner to incorrectly overwrite internal state, leading to unexpected behavior or a denial of service. This...

CVE-2026-90156

A flaw was found in ksmbd, a component of the Linux kernel. When handling deferred locks, a failure in setting up asynchronous work can lead to a null pointer dereference and the continued linking of a freed file lock. This memory corruption issue can cause a system crash, resulting in a denial o...

CVE-2026-90153

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. The smbcheckpermdacl function incorrectly validates Access Control Entry ACE walks by using the remaining security descriptor length instead of the declared Discretionary Access Control List DACL size. This allows a remote attacker t...

CVE-2026-98492

A flaw was found in the Linux kernel's Cadence MACB network driver. During network buffer allocation, the driver's error-handling routines fail to properly release allocated Direct Memory Access DMA memory buffers when a failure occurs. A local user could trigger these error conditions during...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...

CVE-2026-98604

A flaw was found in the Linux kernel's OpenVPN ovpn subsystem. A race condition exists where local network endpoint updates modify binding data without proper synchronization while outbound network traffic reads the address concurrently. A remote peer or concurrent network activity could trigger...

CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service DoS through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventin...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-98500

A flaw was found in the Linux kernel's OneXPlayer Human Interface Device HID driver. A local user could cause a Denial of Service DoS through a race condition during device removal. Because delayed background tasks are canceled without waiting for active callbacks to finish, in-progress tasks...

CVE-2026-98494

A flaw was found in the Linux kernel's atl1 network driver. During a PCIe link or hardware reset, the network adapter can return an out-of-range status value that the driver fails to validate properly. This condition can trap the driver in an infinite loop, resulting in a kernel soft lockup and...

CVE-2026-98602

A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol BNEP implementation. Insufficient length validation when processing network frames allows out-of-bounds memory read operations. An attacker can exploit this vulnerability by transmitting malformed or truncated network...

CVE-2026-98497

A flaw was found in the Linux kernel's mlx5 network driver. When configuring IPv6 IPsec Internet Protocol Security rules with differing source and destination prefix lengths, the driver inadvertently swaps the source and destination address masks installed into hardware flow tables. This incorrec...

CVE-2026-98493

A flaw was found in the Linux kernel. This vulnerability allows an attacker capable of specifying system boot or network parameters to cause a Denial of Service DoS or memory corruption. During Dynamic Host Configuration Protocol DHCP autoconfiguration, the kernel appends options into a fixed-siz...

CVE-2026-98605

A flaw was found in the Linux kernel's Samsung DSIM display bridge driver. This vulnerability may allow a Denial of Service DoS due to improper management of General Purpose Input/Output GPIO hardware pins during display connection events. A local attacker triggering display attach and detach...

CVE-2026-98601

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate index values provided by the hardware device through Direct Memory Access DMA. A malicious or compromised PCIe device could supply out-of-range indices to trigger an out-of-bounds memory dereference o...

CVE-2026-98499

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. When processing a device report descriptor with mismatched usage and count configurations, the driver can calculate an invalid memory offset and perform an out-of-bounds read beyond the allocated report buffer. A loca...

CVE-2026-98496

A flaw was found in the Linux kernel's Airoha Neural Processing Unit NPU driver. During device unbinding or driver removal, an interrupt timing issue allows watchdog tasks to be scheduled after cleanup procedures have completed. A local user with administrative privileges could trigger this flaw ...

CVE-2026-96234

A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization...

CVE-2026-98495

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or potentially expose sensitive memory due to an out-of-bounds read flaw in the Address Resolution Protocol ARP networking interface. By supplying a network device request containing a device name that lacks...

CVE-2026-98491

A flaw was found in the Linux kernel's Open vSwitch subsystem. When cloned network packet buffers share an unconfirmed connection tracking entry, committing the entry with conflicting extensions can trigger a use-after-free memory issue during cleanup. An attacker could exploit this vulnerability...

CVE-2026-96990

A flaw was found in Apache Thrift's Erlang bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending requests that trigger excessive resource allocation without proper limits or throttling. This issue can lead to resource exhaustion, resulting in a Denial of Service...

CVE-2026-96294

A flaw was found in Apache Thrift's Node.js bindings. A remote attacker can exploit improper exception handling by triggering an uncaught exception. This failure causes the application process to crash, leading to a Denial of Service DoS...

CVE-2026-96289

A flaw was found in Apache Thrift's PHP bindings. A remote attacker could cause a denial of service DoS by sending specially crafted input that triggers uncontrolled recursion. This excessive recursion can exhaust system resources or stack space, leading to an application crash...

CVE-2026-96288

A flaw was found in Apache Thrift's Erlang bindings. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted input that triggers uncontrolled recursion and unrestricted resource allocation. As a result, the application can exhaust available system...

CVE-2026-96286

A flaw was found in Apache Thrift. An uncaught exception within the Perl bindings allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted input, an attacker can trigger an unhandled error condition, causing the application to crash unexpectedly...

CVE-2026-96287

A flaw was found in the Apache Thrift Perl bindings. A remote attacker could exploit this vulnerability by sending specially crafted input to an application using the affected bindings. This triggers inefficient data processing, leading to excessive resource consumption and a Denial of Service Do...

CVE-2026-93133

A flaw was found in the Linux kernel. In the riscvacpiaddprtdep function, the acpigethandle call can fail, leading to the linkhandle variable being uninitialized. This oversight could potentially lead to system instability or unexpected behavior...

CVE-2026-93132

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

CVE-2026-93173

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF and Linux Security Module LSM subsystems. This vulnerability occurs when a sleepable LSM program is incorrectly handled during the freeing of non-sleepable BPF programs. An attacker could potentially trigger a system crash, leading...

CVE-2026-93172

A flaw was found in the Linux kernel's memory management mm/mminit. A missing allocation check for pgdat-percpunodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-93158

A flaw was found in the Linux kernel's crypto: sa2ul module. This vulnerability occurs because the saulprobe function does not properly handle errors when the system fails to create a necessary Direct Memory Access DMA pool for security context buffers. If the pool creation fails, the system...

CVE-2026-93140

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. When an I/O error occurs during the writing of the Logical Volume Integrity Descriptor LVID buffer, the system incorrectly clears a flag indicating the buffer's validity. Subsequent operations, such as remounting the...

CVE-2026-93146

A flaw was found in the Linux kernel's time namespace handling. The proctimenssetoffset function does not properly validate the nanosecond field tvnsec when setting time offsets. This oversight allows for invalid nanosecond values to be used in time calculations, which can lead to incorrect syste...

CVE-2026-93131

A flaw was found in the Linux kernel's dell-privacy driver. A race condition occurs when the priv-featurespresent data structure is accessed without holding the necessary list mutex. This allows the priv object to be freed prematurely, which could lead to system instability or a denial of service...

CVE-2026-93128

A flaw was found in the Linux kernel's lg-laptop driver. This issue occurs due to improper handling of LED Light Emitting Diode resources, where the system attempts to access an LED device that has not been properly registered or has already been unregistered. This improper resource management...

CVE-2026-93127

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Incorrect handling of scalar identifiers during sign-extending and zero-extending stack operations can lead to a discrepancy between the BPF verifier's understanding of a register's value and its actual runtime value. Th...

CVE-2026-93124

A flaw was found in the Linux kernel's asus-wireless driver. When the driver is force-bound to a device lacking an ACPI Advanced Configuration and Power Interface companion object, it can lead to a NULL pointer dereference. This occurs because the asuswirelessprobe function incorrectly stores a...