CVE-2026-113495

A flaw was found in cockpit-machines. Red Hat Subscription Management RHSM authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cross-user process inspection can view thes...

CVE-2026-98473

A flaw was found in the Linux kernel's s390 Virtual Function I/O Adjunct Processor VFIO-AP device driver. A local user with administrative privileges can trigger this issue by removing an AP queue from the host configuration while it remains assigned to an active virtual machine. Because the driv...

CVE-2026-98474

A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service DoS due to a missing device lock during PCI Peripheral Component Interconnect error recovery. When error recovery status is reported without proper locking, concurrent device operations can access...

CVE-2026-98472

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD SEV Secure Encrypted Virtualization implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service DoS through memory exhaustion. When an SEV guest is destroyed afte...

CVE-2026-98471

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. During intra-host migration of an encrypted virtual machine, the source virtual machine's CPU caches are not properly flushed before the system reclaims its memory. A loc...

CVE-2026-101201

A flaw was found in Qt. An out-of-bounds read vulnerability can occur when parsing a binary file with a malformed header in the QBinaryJson::fromBinaryData function. An attacker could exploit this flaw by convincing a user or application to process a specially crafted binary file, causing the...

CVE-2026-98470

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. This vulnerability allows a local attacker to cause a Denial of Service DoS. When running in protected mode, the kernel issues an internal warning upon receiving an unknown virtual machine I/O control IOC...

CVE-2026-98469

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem for ARM64 architectures. Improper handling of specific debug register accesses in 32-bit ARM AArch32 mode causes the hypervisor to encounter an internal assertion failure. A user inside a guest virtual machine can...

CVE-2026-92287

A flaw was found in Apache Arrow and PyArrow. When reading encrypted Parquet files configured with a Key Management Service KMS client, unvalidated KMS server addresses embedded within the file can be passed directly to the client implementation. An attacker can supply a maliciously crafted Parqu...

CVE-2026-84180

A flaw was found in Apache Camel's Knative component. When message processing fails, the Knative HTTP consumer returns detailed exception information, including class names, messages, and stack traces, directly in the response body to the caller. A remote attacker could exploit this flaw by sendi...

CVE-2026-110725

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting XSS by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers URIs using the suffix reference option. Because the library fails to...

CVE-2026-98603

A flaw was found in the Linux kernel's OpenVPN ovpn module. A local user can cause a Denial of Service DoS or network disruption during concurrent network traffic when an outdated local source address is cleared. Because the address is modified in place without proper synchronization, concurrent...

CVE-2026-110306

A flaw was found in fast-uri. The library incorrectly decodes percent-encoded characters in protocol schemes prior to validation, causing invalid or prohibited schemes to be accepted as valid. A remote attacker can exploit this vulnerability by submitting a specially crafted Uniform Resource...

CVE-2026-110180

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...

CVE-2026-98749

A flaw was found in the MAX3100 serial driver in the Linux kernel. This flaw allows a local privileged user to cause a Denial of Service DoS or memory corruption by unbinding the device during a system suspend cycle. In this scenario, the driver releases the device port memory while an active...

CVE-2026-98711

A flaw was found in the Linux kernel's cw1200 wireless network driver. During data transmission, the driver pads transfer sizes to meet hardware alignment requirements without reserving sufficient space in the frame buffer. This causes the driver to read beyond the buffer boundaries and transmit...

CVE-2026-98702

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A nearby wireless attacker can cause a Denial of Service DoS by sending a crafted Channel Switch Announcement CSA frame with an unsupported bandwidth configuration. Because the kernel fails to reject this channel definition, it...

CVE-2026-98662

A flaw was found in the Linux kernel's gp2ap020a00f ambient light sensor driver. During device removal or initialization failure, the driver fails to properly drain scheduled interrupt tasks before releasing memory structures. A local user capable of unbinding or disconnecting the device can...

CVE-2026-110095

A flaw was found in fast-uri. The library improperly applies dot-segment removal to relative Uniform Resource Identifier URI paths during normalization, causing leading parent-directory segments to be discarded. A remote attacker could supply a crafted relative path to an application that relies ...

CVE-2026-98801

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS or kernel memory corruption by manipulating socket memory reservation settings. Due to a lack of upper-bound validation and missing locking mechanisms when applied to User Datagram Protocol UDP sockets, integer...

CVE-2026-98768

A flaw was found in the Linux kernel's ANX7411 USB Type-C driver. This flaw allows a Denial of Service DoS due to a race condition during device removal. Because an interrupt request IRQ remains active while the driver destroys its work queue, an incoming interrupt during teardown can trigger a...

CVE-2026-98748

A flaw was found in the Linux kernel's Broadcom serial driver. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. During device removal, an incoming interrupt can restart a timer after it has been cancelled, leading to a use-after-free...

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...

CVE-2026-98475

A flaw was found in the Linux kernel's s390 Channel Measurement Facility CMF. This vulnerability can allow a local user to cause memory corruption or a Denial of Service DoS due to confusion between virtual and physical memory addresses. When extended format channel measurement data is recorded o...

CVE-2026-98826

A flaw was found in the Linux kernel's AC100 Real-Time Clock RTC driver. If device initialization fails during driver probing, unmanaged clock provider references remain registered in global system lists while their underlying memory is released. Subsequent lookups referencing the affected device...

CVE-2026-98600

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. This vulnerability allows an adjacent attacker within Bluetooth range to cause a Denial of Service DoS by transmitting a specially crafted frame with an extended length field. Because the kernel fails...

CVE-2026-93117

A flaw was found in the Linux kernel's USB subsystem. This use-after-free UAF vulnerability occurs when a dynamic ID is removed concurrently while the usbprobeinterface function is still using it. A local attacker could potentially exploit this timing issue, leading to memory corruption and...

CVE-2026-98599

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker can exploit this flaw to cause kernel memory corruption and potentially achieve privilege escalation or a denial of service system crash. This vulnerability occurs because the verifier fails to reject...

CVE-2026-98598

A flaw was found in the Linux kernel's IPv6 networking subsystem. A local attacker or network traffic triggering route exceptions while an IPv6 route is being removed can cause a circular reference leak. This failure to release resources prevents network devices from unregistering, resulting in...

CVE-2026-98597

A flaw was found in the Linux kernel's sr9700 USB Ethernet driver. When processing incoming packets, the driver fails to properly account for packet header overhead during buffer length validation. An attacker capable of sending crafted packet data could trigger an out-of-bounds read, leading to ...

CVE-2026-98596

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition during network device unregistration can lead to improper reference counting of uncached routes. A local attacker could exploit this flaw to cause an internal resource leak, leading to memory exhaustion and a Denia...

CVE-2026-90427

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. During the tegra241cmdqvprobe function, a memory reallocation operation can free an existing memory region. If this reallocation fails, a subsequent fallback path attempts to access the previously freed memory. This...

CVE-2026-98595

A flaw was found in the Linux kernel's UDP networking subsystem. When a connected User Datagram Protocol UDP socket bound to a specific address is disconnected, the kernel fails to remove the socket entry from its internal connection lookup table. A local user can cause stale entries to persist,...

CVE-2026-98594

A flaw was found in the Linux kernel's Broadcom Tigon3 tg3 ethernet driver. When the driver encounters an error during device initialization, it fails to properly release and unregister associated networking hardware resources. A local user capable of triggering initialization failures could...

CVE-2026-98593

A flaw was found in the Linux kernel's s390 debug subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a kernel crash. When static debug registration encounters an error, internal memory pointers are cleared while boundary records remain active. A local user...

CVE-2026-98592

A flaw was found in the Linux kernel's SpacemiT Ethernet driver. During network packet transmission, a failure to map packet fragments causes the driver to release memory buffers without properly clearing the corresponding hardware descriptors. A local user able to trigger transmission mapping...

CVE-2026-98591

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer underflow in the bounds-checking logic for network packet buffer pointers allows validation checks to pass incorrectly. A local user capable of running BPF programs could exploit this flaw to create pointers...

CVE-2026-98590

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. An error in context code generation incorrectly sign-extends register values when reading socket queue mappings, causing runtime register values to exceed boundaries tracked by the kernel's safety verifier. A local user...

CVE-2026-98589

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. When packet pointers are passed into subprograms that mutate packet data, the verifier incorrectly assumes the underlying memory remains valid across calls, failing to account for operations that invalidate or relocate...

CVE-2026-98588

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When allocating a socket map with an excessively large entry count, a signed integer overflow occurs during cleanup when the map is released. A local user with permission to create BPF maps can trigger this issue to caus...

CVE-2026-98587

A flaw was found in the Linux kernel's FireWire subsystem. A local user can trigger a race condition by concurrently releasing a device file descriptor while an asynchronous resource management task is running. This flaw allows a resource state to transition backwards from deallocation to...

CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into...

CVE-2026-98586

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. This vulnerability can lead to a Denial of Service DoS through a kernel crash. A race condition occurs between timer rearming and cleanup operations because the system modifies a timer before properly...

CVE-2026-98585

A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a denial of service DoS and crash the system by configuring a network ring buffer size of zero. Because the driver fails to validate the input before executing a rounding...

CVE-2026-98583

A flaw was found in the Linux kernel's Marvell NFC Near Field Communication driver. During firmware download operations, the driver removes packet headers and reads command data before verifying that the received packet length is valid. An attacker could exploit this vulnerability by submitting a...

CVE-2026-98582

A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. The driver fails to properly validate the length of received frames when processing escape sequences. An attacker capable of sending crafted NFC frames could exploit this vulnerability to trigger an out-of-bounds...

CVE-2026-98581

A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP implementation. When handling specific disconnection packets, the kernel fails to properly lock and unlink sockets before updating their state, leading to internal socket list corruption. A loca...

CVE-2026-98580

A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP implementation. A race condition occurs during concurrent socket release and connection accept operations due to improper lock synchronization. A local attacker could exploit this flaw to cause ...

CVE-2026-98579

A flaw was found in the Linux kernel's NFC Near Field Communication subsystem. Error handling routines in the netlink interface fail to properly release allocated memory when processing service discovery requests encounters a failure. A local user can exploit this vulnerability by sending crafted...

CVE-2026-98578

A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. This vulnerability allows a Denial of Service DoS when the system encounters malformed wireless NFC responses. A nearby attacker with a crafted NFC device can transmit a truncated ISO 15693 inventory response,...