CVE-2026-74986

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the CSS Parsing and Computation component...

CVE-2026-74423

A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when the pinuserpagesfast function, responsible for pinning user buffer ubuf pages, returns fewer pages than requested. In such cases, the pages that were successfully pinned are not properly released, leadi...

CVE-2026-74984

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the JavaScript Engine component...

CVE-2026-74424

A flaw was found in the Linux kernel. The fbcon component, responsible for framebuffer console operations, can encounter a NULL pointer dereference. This occurs when fbconnewmodelist attempts to access console data vcdata that has been freed, leading to a system crash. A local attacker could...

CVE-2026-74425

A flaw was found in the Linux kernel's AFS Andrew File System cache manager. The CB.InitCallBackState3 handler did not properly verify the presence of an associated server record for incoming callback requests. This could lead to unexpected system behavior or instability if a request was processe...

CVE-2026-74392

A flaw was found in the Linux kernel's device mapper dm component. When iouring with IOPOLL is used on a dm-stripe target, a task can enter a prolonged spinning poll loop. This can lead to an RCU Read-Copy Update CPU stall, causing a Denial of Service DoS for the affected system...

CVE-2026-74956

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Service Workers component...

CVE-2026-74966

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Form Autofill component...

CVE-2026-74955

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Request Handling component...

CVE-2026-74391

A flaw was found in the tracing subsystem of the Linux kernel. This vulnerability occurs because synthetic field helpers use unbounded string concatenation strcat when building synthetic variable names and generated history commands. An attacker providing excessively long input for key lists, fie...

CVE-2026-74947

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

CVE-2026-74988

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we...

CVE-2026-74419

A flaw was found in the accel/amdxdna driver in the Linux kernel. This vulnerability occurs due to improper handling of user-provided buffer sizes when copying data from kernel space to user space. A local attacker could exploit this by providing a buffer smaller than the expected data size,...

CVE-2026-74396

A flaw was found in the Linux kernel's RDMA/mlx5 component. When the mlx5odppopulatexlt function encounters an error, it fails to properly clean up allocated resources. This can lead to a memory leak of the XLT DMA mapping and buffer. Additionally, if an emergency XLT page was used, a mutex could...

CVE-2026-74981

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Audio/Video: Web Codecs component...

CVE-2026-74397

A flaw was found in the Linux kernel's InfiniBand IB Mellanox 5 mlx5 driver. This vulnerability occurs when the driver allocates a transport domain but fails to properly deallocate it if a subsequent operation encounters an error. This oversight leads to a resource leak, which could potentially...

CVE-2026-74968

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...

CVE-2026-74410

A flaw was found in the Linux kernel's rtw88 wifi driver. An attacker able to control firmware RX descriptors could cause an out-of-bounds read from the pre-allocated Direct Memory Access DMA buffer. This occurs because the newlen calculation in the rtwpcirxnapi function does not properly validat...

CVE-2026-74398

A flaw was found in the Linux kernel's IPv6 address configuration addrconf component. A race condition can occur during the Duplicate Address Detection DAD failure handling. When addrconfdadfailure temporarily releases a lock, a concurrent ipv6deladdr operation can modify the network interface...

CVE-2026-74400

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter kfuncs bpfsetdentryxattr and bpfremovedentryxattr do not properly check for a null inode when handling negative dentries. This oversight can lead to a null pointer dereference. Additionally, warnings in bpfxattrreadpermission an...

CVE-2026-74411

A flaw was found in the Linux kernel's rtw89 Wi-Fi driver. An incorrect data type used for a scan index during Wi-Fi scanning on the 6GHz band can lead to an infinite loop. This can cause a kernel soft lockup, making the CPU unresponsive and ultimately leading to a system panic, effectively...

CVE-2026-74412

A flaw was found in the rtw88 Wi-Fi driver within the Linux kernel. This vulnerability arises from a type confusion during PCI Advanced Error Reporting AER handling, where a hardware-related pointer is mistakenly interpreted as a network device pointer. This misinterpretation causes the driver to...

CVE-2026-74395

A flaw was found in the RDMA/mlx5 component of the Linux kernel. During the devx subscribe-event unwind process, a null pointer dereference can occur if eventfdctxfdget fails. This issue arises because eventsub is linked into sublist before its fields are properly initialized, leading to an attem...

CVE-2026-74413

A flaw was found in the rtw89 Wi-Fi driver in the Linux kernel. The driver's Advanced Error Reporting AER handlers incorrectly use a netdevice pointer type instead of an ieee80211hw pointer type. This leads to operations on incorrect memory offsets, which can result in system instability or a...

CVE-2026-74422

A flaw was found in the Linux kernel's drm/rockchip: inno-hdmi driver. This vulnerability is due to improper memory management, where a critical data structure is deallocated before it is no longer needed. An attacker could exploit this use-after-free condition to potentially cause a system crash...

CVE-2026-74421

A flaw was found in the Linux kernel's drm/rockchip: dwdp driver. An issue in memory management, specifically a use-after-free vulnerability, occurs when an internal encoder structure is prematurely deallocated. This can happen when the DRM device reference is dropped, causing...

CVE-2026-74972

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

CVE-2026-74393

A flaw was found in the Linux kernel's drm/syncobj component. The drmsyncobjfindfence function fails to properly release a reference to a syncobj object, which is acquired by drmsyncobjfind. This oversight leads to a memory leak. A local attacker could exploit this vulnerability to consume system...

CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as tracedmafencesignaled, tracedmafencewaitend, and tracedmafencedestroy, after a fence operation has been signaled and its internal pointers...

CVE-2026-74408

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This vulnerability arises from an out-of-bounds memory access within the athtxedmatasklet function. An internal queue identifier, which is a 4-bit hardware field, can exceed the bounds of the transmit queue array. This can lead to memory...

CVE-2026-74407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. A race condition exists between the system's reboot or shutdown process and the WLAN firmware crash recovery SSR mechanism. This race condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial...

CVE-2026-74971

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

CVE-2026-74401

A flaw was found in the Linux kernel's Distributed Lock Manager DLM subsystem. Under specific high-load network conditions, the system could incorrectly order internal messages. This issue can lead to memory corruption, which might allow a local attacker to cause the system to crash denial of...

CVE-2026-74415

A flaw was found in the Linux kernel's atcspi200 Serial Peripheral Interface SPI driver. When the driver unbinds, the Direct Memory Access DMA resource can be prematurely deallocated while the SPI controller is still active and initiating DMA transfers. This timing issue can lead to a...

CVE-2026-74417

A flaw was found in the Linux kernel's drm/radeon component. An integer overflow vulnerability exists in the radeonalignpitch function. This flaw occurs when calculating memory alignment and pitch, where large values can cause the calculations to wrap around. If exploited, this could lead to the...

CVE-2026-74409

A flaw was found in the Realtek rtw89 Wi-Fi driver in the Linux kernel. This vulnerability arises from insufficient validation of the macid field, which is received from firmware and used as an array index. An attacker could potentially craft malicious firmware to provide an out-of-range macid,...

CVE-2026-74404

A flaw was found in the Linux kernel's crypto: ccp component. An off-by-one error in the snpfilterreservedmemregions function can lead to a heap buffer overflow. This vulnerability could allow an attacker to corrupt memory, potentially leading to a denial of service or arbitrary code execution...

CVE-2026-74987

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2026-74394

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA SCSI RDMA Protocol SRP Target srpt component. A remote attacker could exploit an integer overflow vulnerability in the immediate data length check. By sending a specially crafted network packet, a malicious initiator can caus...

CVE-2026-74945

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...

CVE-2026-74558

A flaw was found in the Linux kernel's zero-copy ZC transmit Tx batch path. When processing network packets, the system can fail to properly reclaim memory UMEM frames if it encounters invalid or oversized packet descriptors. This can lead to resource exhaustion, where memory is not returned to...

CVE-2026-74379

A flaw was found in the Linux kernel's dax/kmem module. This vulnerability occurs when the system attempts to remove a memory resource that was not fully initialized, leading to an attempt to access a null pointer. A local attacker could potentially trigger this condition, causing the system to...

CVE-2026-74374

A flaw was found in the Linux kernel's md/raid1 and md/raid10 modules. An issue in detecting the error path when using mdclonedbio can lead to incorrect memory allocation flags. This misallocation can result in a system deadlock under memory pressure, causing a denial of service...

CVE-2026-74367

A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability arises from inconsistent internal state management during error conditions in virtual device creation. If an error occurs, the driver may not properly clear its internal state, leading to resource issues. This cou...

CVE-2026-74957

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

CVE-2026-74527

A flaw was found in the Linux kernel's octeontx2-af driver. When Physical Functions PFs and Virtual Functions VFs share a network interface controller's NIC hardware programming PKIND state, a Virtual Function could overwrite the configuration set by the Physical Function. This could lead to...

CVE-2026-74492

A flaw was found in the Linux kernel's netfilter ipset component. During an ipset hash table resize operation, a race condition can occur where a packet-side add attempts to update a comment. This can lead to a stale pointer being dereferenced, resulting in a kernel crash and a Denial of Service...

CVE-2026-74489

A flaw was found in the Linux kernel's mac80211 component, which manages Wi-Fi Wireless Fidelity networking. This use-after-free vulnerability occurs during the stopping of a Block Acknowledgement BA session. An attacker within the same network segment could exploit this by triggering the BA...

CVE-2026-74390

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access irdma driver. This vulnerability occurs due to an error in how the irdmacopyuserpgaddrs function handles memory allocation, specifically when a certain counter is zero. This can lead to an out-of-bounds write, where data is...

CVE-2026-74389

A flaw was found in the Linux kernel's RDMA/hns component. When the hardware experiences an abnormality, the hnsrocecmdmbox command interface can fail. This failure leads to an uncontrolled flood of error messages, which can consume system resources and ultimately cause a system crash, resulting ...