CVE-2026-98577

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. In the Logical Link Control Protocol LLCP implementation, the kernel validates service names using only the length of the provided name instead of verifying an exact match. A local attacker could exploit this flaw by...

CVE-2026-98576

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. When processing certain service names and requests, the kernel attempts to log strings that lack null-termination using an unbounded format specifier. A local user can exploit this vulnerability to trigger an...

CVE-2026-98575

A flaw was found in the Linux kernel's PN533 NFC Near Field Communication driver. An attacker capable of connecting a malicious or malfunctioning USB device can supply a crafted response frame with an arbitrary data length value. Because the driver fails to validate this length against maximum...

CVE-2026-98574

A flaw was found in the Linux kernel's Broadcom GENET network driver. Improper synchronization between disabling transmission queues and stopping completion polling during interface shutdown or suspend operations can prematurely re-enable a queue. This race condition allows packet transmission to...

CVE-2026-98573

A flaw was found in the Linux kernel. An integer underflow in the networking subsystem allows an attacker to trigger an out-of-bounds memory copy by sending specially crafted Internet Protocol version 6 IPv6 packets with extension headers. This vulnerability can lead to kernel memory corruption,...

CVE-2026-98572

A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF Just-In-Time JIT compiler on 32-bit MIPS systems. An instruction generation error during 64-bit jump comparisons causes negative numeric constants to be incorrectly evaluated against a hardware register instead of the...

CVE-2026-98571

A flaw was found in the Linux kernel's stmmac network driver. This vulnerability can lead to a Denial of Service DoS or memory corruption when processing incoming network traffic under resource constraints. When the driver fails to allocate a network packet buffer, it recycles the underlying memo...

CVE-2026-98570

A flaw was found in the Linux kernel's IPv6 networking subsystem. An unauthenticated remote attacker can cause a Denial of Service DoS by sending network traffic through an affected IPv6 tunnel interface. Due to insufficient buffer allocation when reconstructing packet headers, an unchecked...

CVE-2026-98569

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE subsystem. A local user with network administration privileges could cause a Denial of Service DoS by enabling metadata collection on an existing GRE network device through a netlink interface modification request. Because t...

CVE-2026-98568

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN networking module. A race condition can occur when link properties are modified while neighbour advertisement reply packets are being processed, leading to inconsistent buffer size calculations. A local attacker could exploit thi...

CVE-2026-98567

A flaw was found in the Linux kernel. A local privileged user could trigger a Denial of Service DoS or kernel memory corruption by causing an out-of-bounds memory write. This issue occurs in the Transmit Packet Steering XPS networking mechanism when traffic classes are decreased without clearing...

CVE-2026-98566

A flaw was found in the Linux kernel's drm/imagination GPU driver. The driver fails to properly validate and bound the firmware reconstruction count against the fixed protocol array capacity when processing freelist reconstruction requests. A local attacker could exploit this vulnerability by...

CVE-2026-98565

A flaw was found in the Linux kernel's MediaTek MT7530 network switch driver. This flaw allows a local user with administrative privileges to cause a Denial of Service DoS through a kernel crash. The issue occurs during driver unbinding or module removal on specific hardware variants, where the...

CVE-2026-98564

A flaw was found in the Linux kernel's MediaTek MT7530 DSA Distributed Switch Architecture driver. During device removal or driver unbinding, interrupt mappings are prematurely disposed while the parent interrupt is still active. A local privileged user could trigger this flaw during device...

CVE-2026-98563

A flaw was found in the Linux kernel's phylink component. When an error occurs during Ethernet physical layer PHY device initialization, the kernel prematurely stores a reference to the device before setup finishes. If the bringup operation fails, the device is detached and freed, but the kernel...

CVE-2026-98560

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling local connections, the system miscalculates the required communication paths, allocating internal work queues that are not properly freed during connection teardown. A local user can exploit this...

CVE-2026-98561

A flaw was found in the Linux kernel's Netronome Flow Processor nfp network driver. A race condition occurs when incoming Internet Protocol Security IPsec network packets are processed concurrently with the removal of security associations. Because the driver releases internal locks before securi...

CVE-2026-98562

A flaw was found in the Linux kernel's Wangxun network driver library libwx. This vulnerability allows a local user to cause a Denial of Service DoS through memory corruption. A race condition in the Precision Time Protocol PTP transmit timestamp handling fails to properly synchronize packet...

CVE-2026-98559

A flaw was found in the Linux kernel's Shared Memory Communications SMC subsystem. When processing port errors, the kernel traverses active link groups without holding the appropriate lock, allowing a concurrent termination event to free memory while it is still in use. An attacker capable of...

CVE-2026-98556

A flaw was found in the Linux kernel's Google Virtual NIC gve driver. A local user with raw packet access or an adjacent guest system can trigger a Denial of Service DoS by sending network packets with an excessively large segment size. The driver fails to validate the Maximum Segment Size MSS...

CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

CVE-2026-86922

A flaw was found in WebKitGTK. Due to a type confusion issue—where the application misinterprets an object's data type in memory—processing maliciously crafted web content can lead to memory corruption. A remote attacker could exploit this vulnerability to achieve arbitrary code execution on the...

CVE-2026-98557

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. This vulnerability may allow a local attacker to cause a Denial of Service DoS by transmitting network traffic that uses User Datagram Protocol UDP Generic Segmentation Offload GSO. Because the driver improperly...

CVE-2026-98558

A flaw was found in the Linux kernel's networking subsystem. When a central processing unit CPU is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or administrative action offlining a CPU during network device...

CVE-2026-98553

A flaw was found in the Linux kernel's automount file system autofs. A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file references. Repeated exploitation can permanently leak syst...

CVE-2026-98552

A flaw was found in the Linux kernel's Performance Counters for Linux perf subsystem. A race condition during the attachment of performance monitoring context data can cause the kernel to fail to update tracking flags, resulting in a reference count leak. A local attacker could exploit this...

CVE-2026-98554

A flaw was found in the Linux kernel's virtual local area network VLAN driver. When processing network packets that lack sufficient reserved buffer space headroom before network headers are appended, the system triggers a panic condition. An attacker could exploit this vulnerability to cause a...

CVE-2026-98551

A flaw was found in the Linux kernel's Performance Events perf subsystem on ARM64 architectures. This flaw allows a local user to cause an information disclosure of sensitive kernel memory. The issue occurs because certain branch tracking data structures are not properly cleared, allowing an...

CVE-2026-98549

A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue. This issue may allow an attacker on the network to obtai...

CVE-2026-98550

A flaw was found in the TIPC Transparent Inter-Process Communication subsystem of the Linux kernel. This flaw allows an attacker to cause a Denial of Service DoS by sending unexpected or duplicate group acknowledgment messages. Due to improper validation of incoming protocol messages, an internal...

CVE-2026-98548

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service DoS or memory corruption by sending specially crafted packets containing bundled error and data chunks. This issue...

CVE-2026-98547

A flaw was found in the Linux kernel's afpacket network socket implementation. An integer overflow occurs during timeout calculations when configuring packet receive rings with large block sizes. A local user with raw network privileges can exploit this vulnerability by setting an oversized socke...

CVE-2026-98546

A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by...

CVE-2026-98542

A flaw was found in the Linux kernel's cpuset subsystem, which can lead to a denial of service DoS or compromised resource isolation. A local user with permissions to configure control groups cgroups can trigger this flaw by creating a remote partition that requests processor cores already...

CVE-2026-112901

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted XBM X BitMap image file. When the application parses the image header, an inefficient regular expression causes excessive computational backtracking, stalling worker processes and...

CVE-2026-112898

A flaw was found in Pillow. When processing an image with an empty palette during color quantization, internal stack memory is left uninitialized and emitted into the output image data. An attacker who supplies a crafted palette image can exploit this vulnerability to read uninitialized memory...

CVE-2026-98545

A flaw was found in the Linux kernel's libata SCSI subsystem. When processing ATA pass-through commands to an ATAPI storage device, the kernel fails to properly validate the length byte returned in the device's sense response buffer. A malicious or faulty device can exploit this issue to trigger...

CVE-2026-98541

A flaw was found in the Linux kernel's Foo-over-UDP FOU networking subsystem. When configuring a direct encapsulation tunnel without specifying the required network protocol attribute, the kernel permits tunnel socket creation with an uninitialized protocol value. Consequently, incoming network...

CVE-2026-98544

A flaw was found in the Linux kernel's Brocade 10Gb Ethernet bna driver. During device removal or shutdown, internal timers can rearm each other and continue executing after associated driver data structures have been released. A local user with administrative privileges could exploit this race...

CVE-2026-98543

A flaw was found in the Linux kernel. A local privileged user could cause a Denial of Service DoS or file system corruption due to improper locking in the BPF Berkeley Packet Filter subsystem. When attaching sleepable BPF programs to certain file removal hooks, the kernel verifier incorrectly...

CVE-2026-98540

A flaw was found in the Linux kernel's function probe fprobe tracing component. This vulnerability can result in a Denial of Service DoS due to improper memory initialization. When tracing kernel functions, unused shadow stack space is left uncleared, causing return routines to parse leftover dat...

CVE-2026-98539

A flaw was found in the Linux kernel's NTFS3 file system driver. A race condition during directory creation allows concurrent path lookup or mount operations to access and lock an inode before its initialization finishes. This improper synchronization resets and corrupts the directory's internal...

CVE-2026-112897

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

CVE-2026-112896

A flaw was found in Pillow. When saving or re-encoding a Tagged Image File Format TIFF image containing inconsistent color map metadata, the encoder reads beyond an allocated memory buffer. A remote attacker could exploit this vulnerability by submitting a specially crafted image, leading to a...

CVE-2026-112405

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image file to an application that processes images with the library. This issue occurs because the Image.merge function fails to properly validate the first input band, allowing...

CVE-2026-98538

A flaw was found in the Linux kernel's writeback subsystem. This flaw allows a local user to cause a Denial of Service DoS by triggering prolonged processor stalls. When the kernel cleans up offline control group writeback structures with a large number of cached files, it repeatedly rescans...

CVE-2026-112895

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...

CVE-2026-112894

A flaw was found in Pillow. When converting multi-frame images into a multi-page PDF document, the library repeatedly scans previously assigned object identifiers, resulting in quadratic processing time. A remote attacker could exploit this vulnerability by supplying a crafted image with a large...

CVE-2026-112893

A flaw was found in Pillow. When rendering text using FreeType with an active stroke width, a failure during glyph loading can cause the library to free an uninitialized or stale memory pointer. A remote attacker could exploit this vulnerability by supplying a malformed font to an application tha...

CVE-2026-112404

A flaw was found in Pillow. When processing Tagged Image File Format TIFF images, the library fails to properly validate buffer boundaries during tile and color decoding routines. A remote attacker could exploit this vulnerability by supplying a specially crafted TIFF file with conflicting metada...