CVE-2026-93121

A flaw was found in the Linux kernel's USB gadget function filesystem ffs component. Specifically, an issue in the ffsdmabuftransfer function's error handling can lead to undefined behavior. This occurs when a fence object is prematurely deallocated without proper initialization, potentially...

CVE-2026-93120

A flaw was found in the Linux kernel's USB gadget configfs component. This out-of-bounds read vulnerability occurs when the osdescqwsignshow function incorrectly handles string length during conversion. A local attacker could potentially exploit this to read sensitive information from memory,...

CVE-2026-93119

A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...

CVE-2026-93039

A flaw was found in the Linux kernel's ASoC Audio System on Chip meson driver. This vulnerability occurs in the mesoncardreallocatelinks function when memory reallocation krealloc fails after successfully moving data for the DAI link array. This can result in a use-after-free and double free...

CVE-2026-90417

A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...

CVE-2026-93038

A flaw was found in the Linux kernel's AD5686 digital-to-analog converter DAC driver. A local user can exploit this vulnerability by attempting to bind the driver to an unrecognized device name through the system file interface sysfs. This trigger leads to an invalid null pointer access due to...

CVE-2026-93183

A flaw was found in the Linux kernel's drm/lima component. The limavmcreate function is called prematurely, before virtual address VA start and end ranges are properly initialized. This can lead to the drmmminit function receiving invalid memory allocation ranges, which, if debug options are...

CVE-2026-93182

A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...

CVE-2026-93184

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Freescale Audio Mixer fslaudmix driver in the Linux kernel. During the driver's initialization probe phase, the audio mixer hardware is powered off after runtime power management is enabled. Subsequent attempts to...

CVE-2026-93180

A flaw was found in the panthor component of the Linux kernel. A local attacker could exploit this vulnerability by performing a partial unmap of an evicted Buffer Object BO when the Graphics Processing Unit GPU mapping is split. This occurs because the logic for handling partial unmap of huge...

CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS Video Basic Input/Output System provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds OOB read in the system's memory. This could...

CVE-2026-93178

A flaw was found in the Linux kernel's drm/amdgpu/pm/powerplay component. This vulnerability arises because the vddInd and vddcInd fields, derived from VBIOS-parsed tables, are used to index into voltage lookup tables without proper boundary checks. A local attacker could exploit this by providin...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93176

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. Specifically, the amdgpudmplanedrmplanereset function attempts to free memory before successfully allocating a new state. Should the new memory allocation fail, a dangling pointer to the previously freed memory remains. Th...

CVE-2026-93175

A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpudmcrtcresetstate function when it attempts to reset the display state. If a memory allocation fails during this process, the system can...

CVE-2026-93174

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When handling per-CPU map elements, the copymapvaluelong function incorrectly copies only the map-valuesize instead of the full allocated size, which includes padding. This oversight can lead to user-space applications,...

CVE-2026-93171

A flaw was found in the Linux kernel's leds: lp5860 component. This vulnerability occurs when the lp5860deviceinit function attempts to unlock a mutex that has already been released, specifically if the lp5860initdt function fails. Such a double-unlock operation can lead to unexpected system...

CVE-2026-93170

A flaw was found in the Linux kernel's Xilinx DMA Direct Memory Access engine. A race condition in the AXIDMA and MCDMA interrupt handlers can cause the DMA channel to be incorrectly marked as idle while data transfer descriptors are still being processed. This premature idle state can lead to...

CVE-2026-93169

A flaw was found in the Linux kernel's dmaengine: zynqmpdma component. A race condition exists during device removal, specifically in the zynqmpdmaremove function, where runtime power management PM is disabled after checking the device state and performing a manual suspend. This timing issue can...

CVE-2026-93168

A flaw was found in the Linux kernel's dmaengine: xilinxdma component. When the xilinxdmapolltimeout function is called with a zero-value delay and an unfulfilled condition, the CPU can enter a prolonged busy-wait state. This occurs due to an underestimation of wall clock time, causing the system...

CVE-2026-93167

A flaw was found in the Linux kernel. When tracing system calls on C-SKY ABIv2, an issue in restoring register values a4/a5 can lead to incorrect arguments being passed to certain system calls. This can cause traced applications to fail or behave unexpectedly, potentially resulting in a denial of...

CVE-2026-93166

A flaw was found in the wifi: rtw89 driver of the Linux kernel. An off-by-one error in the rtw89ppdustr function, due to an incorrect comparison, can lead to an out-of-bounds access. This vulnerability could potentially result in a denial of service or information disclosure...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...

CVE-2026-93163

A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...

CVE-2026-93162

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. When re-enabling SR-IOV Single Root I/O Virtualization, the QAT reset worker queues a work item using data allocated on the stack. If a timeout occurs during this process, the reset worker can return while the work item,...

CVE-2026-93157

A flaw was found in the xilinx-trng hardware random number generator HWRNG driver in the Linux kernel. The xtrngreadblock32 function can incorrectly indicate a successful read even when a timeout occurs and no random data has been produced. This can result in the kernel processing incomplete or...

CVE-2026-93160

A flaw was found in the Linux kernel's atmel-ecc cryptographic driver. The hardware Elliptic Curve Diffie-Hellman ECDH computation could use a private key that was not generated for the current cryptographic operation. This issue arises because the public key is only cached after a private key is...

CVE-2026-93156

A flaw was found in the Linux kernel's rk3288 crypto driver. The rkhashrun function fails to properly handle a HASH idle timeout, ignoring the poll result. This can lead to the driver finalizing a cryptographic request with a previous success value, even if the hash engine is not idle...

CVE-2026-93155

A flaw was found in the Linux kernel's cryptographic module, specifically within the keembay driver. When certain cryptographic algorithms fail to register, the system attempts to unregister previously registered algorithms using an incorrect count. This error in the unregistration process could...

CVE-2026-93154

A flaw was found in the Linux kernel's RDMA/irdma component. This vulnerability allows a local user to deregister Memory Regions MRs that are actively backing Queue Pair QP, Completion Queue CQ, and Shared Receive Queue SRQ rings. By doing so, a malicious user could potentially disrupt network...

CVE-2026-93153

A flaw was found in the Linux kernel's RDMA/bngre component. This vulnerability occurs when the waitforresp function fails to properly handle firmware responses that stall, causing it to ignore timeout expiry. A local attacker could exploit this by triggering a stalled firmware response, leading ...

CVE-2026-93152

A flaw was found in the Linux kernel's nvme-apple driver. The driver incorrectly handled memory synchronization when initializing and enabling a queue. This could lead to the queue's state not being properly updated before it is accessed by other parts of the system, potentially causing unexpecte...

CVE-2026-93150

A flaw was found in the Linux kernel's cgroup/cpuset component. A race condition exists where concurrent modifications to the nrdeadlinetasks variable can lead to its corruption. This corruption can result in incorrect system operations, potentially impacting system stability or availability...

CVE-2026-93149

A flaw was found in the Linux kernel's mac80211hwsim component. A race condition exists in the mac80211hwsimstop function. This condition occurs when a network packet skb is removed from a queue after it has been checked for emptiness but before it is actually dequeued. This can lead to a null...

CVE-2026-93148

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability arises from incorrect boundary checks during BPF Type Format BTF struct walks for memory-allocated objects. Specifically, the system fails to reject accesses that extend beyond the allocated object's...

CVE-2026-93147

A flaw was found in the kernel. The s390/bpf component incorrectly handles the loading of a 32-bit CPU number cpunr into a 64-bit BPF register BPFREG0. The ly instruction, used for this operation, fails to clear the upper bits of the 64-bit register. This oversight could lead to the unintended...

CVE-2026-93143

A flaw was found in the ipu7 driver within the Linux kernel. When the ipu7resume function is called, if the runtime power management PM resume operation fails, a reference count is incremented but not properly decremented. This resource leak could lead to system instability or a Denial of Service...

CVE-2026-93142

A flaw was found in the Linux kernel's thermal management driver for Renesas R-Car systems. This vulnerability stems from incorrect error handling during the driver's initialization process. Specifically, a function was called before properly checking if a previous operation had failed, which cou...

CVE-2026-93141

A flaw was found in the r8a66597 USB gadget driver in the Linux kernel. This vulnerability occurs in the r8a66597probe function during an error handling path, where the ep0req object is erroneously freed twice if usbaddgadgetudc fails. This double free can lead to memory corruption, potentially...

CVE-2026-93139

A flaw was found in the AMDGPU driver within the Linux kernel. An issue with the hungqueuedbarray loop limit for multi-XCC Cross-Chiplet Interconnect GPUs can leave array entries uninitialized. This can lead to a null pointer dereference when accessing arrays indexed by XCC ID greater than or equ...

CVE-2026-93138

A flaw was found in the Linux kernel. Specifically, a race condition exists within the Berkeley Packet Filter BPF subsystem when preparing vmlinux BPF Type Format BTF data. This issue occurs because the system can publish a pointer to the BTF data before its contents are fully visible, allowing...

CVE-2026-93137

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A use-after-free vulnerability exists in the bpffindvma function. This occurs when bpffindvma attempts to access memory management structures mmstruct of a different process. A race condition can arise where the target...

CVE-2026-93135

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF. When the Just-In-Time JIT compiler is unavailable or fails, BPF programs that use inlined helper functions are processed by the interpreter with unpatched helper identifiers. This incorrect processing can lead to an instruction...

CVE-2026-93134

A flaw was found in the Linux kernel. When the printk function handles legacy console printing, a specific scenario involving context handover can lead to a use-after-free vulnerability. This occurs because the system fails to verify if a memory area has been freed after a handover, potentially...

CVE-2026-105941

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-93129

A flaw was found in the Linux kernel's dell-wmi-base driver. This vulnerability occurs due to an incorrect index used when accessing data fields related to the ultra performance key, which can lead to a potential buffer over-read. A local attacker could potentially exploit this to read sensitive...

CVE-2026-93123

A flaw was found in the Linux kernel's qcom-geni serial driver. When the uartflushbuffer function is called after a Direct Memory Access DMA transfer completes but before its completion interrupt is processed, the transmit buffer can be reset. If new data is written to the buffer before the stale...

CVE-2026-93115

A flaw was found in the Linux kernel's Mellanox mlxbf-pmc driver. A local attacker could exploit this by forcing the driver to bind to a device lacking an ACPI Advanced Configuration and Power Interface companion object. This action triggers a NULL pointer dereference, which can lead to a system...

CVE-2026-93103

A flaw was found in the Linux kernel's RDMA/hfi1 component. During an allocation failure, the hfi1freedevdata function can incorrectly attempt to free a device that was not properly initialized. This can lead to the removal of an unrelated device from the system's unit table. The consequence of...