CVE-2026-63812

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System. Incorrect handling of extent information during inode destruction can lead to a stale extent cache. This can result in data integrity issues or filesystem corruption, potentially requiring administrative intervention to repai...

CVE-2026-63813

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A race condition can occur when an f2fs partition is nearly full, involving interactions between garbage collection, folio splitting, and LRU Least Recently Used isolation. This race can cause a folio a group of pag...

CVE-2026-63810

A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS, by attempting to mount the internal bdev pseudo-filesystem. This action triggers a null pointer dereference within the kernel, which could also potentially be...

CVE-2026-63811

A flaw was found in the Linux kernel's f2fs filesystem. During an atomic write operation, the system may attempt to decrypt data using an incorrect encryption context, specifically when the original file is unencrypted but its Copy-On-Write COW inode is encrypted. This mismatch can lead to a...

CVE-2026-63806

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A malicious guest operating system can trigger a host kernel crash, leading to a Denial of Service DoS. This occurs when the guest performs a specific memory write operation that causes an unaligned memory access...

CVE-2026-64060

A flaw was found in the netfs component of the Linux kernel. An issue in the error handling of the netfswritebegin function can lead to a leak of a request resource. This occurs when an error is returned from netfswaitforread, preventing the proper release of the resource. This resource leak may...

CVE-2026-63796

A flaw was found in the Linux kernel's Oracle Cluster File System 2 ocfs2. A local attacker could craft a malicious group bitmap descriptor that claims a size exceeding the physically allocated bitmap bytes. This improper input validation allows subsequent operations to read or write beyond the...

CVE-2026-64153

A flaw was found in the drm/msm Direct Rendering Manager / Qualcomm MSM driver within the Linux kernel. This vulnerability arises from an incorrect handling of return values in the iommumapsgtable function. Previously, the function would trigger a warning instead of properly returning an error wh...

CVE-2026-64167

A flaw was found in the Linux kernel's kexechandover KHO mechanism. This vulnerability occurs because the khofillkimage function unconditionally populates the kimage with KHO metadata, even when processing a crash kernel. When a crash kernel attempts to initialize KHO memory, it can try to access...

CVE-2026-63805

A flaw was found in the Linux kernel's cryptographic module. An issue with how the nxcryptoctxexit function handles arguments can cause the kernel to crash. This vulnerability could be exploited by a local user, leading to a Denial of Service DoS for the affected system...

CVE-2026-64050

A flaw was found in the Linux kernel's drm/msm/dpu component. This vulnerability occurs due to the incorrect use of different memory management functions, which can lead to data being prematurely released while still in use. A local user could exploit this during driver teardown, resulting in a...

CVE-2026-64142

A flaw was found in the Linux kernel's ksmbd component. Two race conditions in the ksmbddurablescavenger function can lead to list corruption and a Use-After-Free UAF vulnerability. A remote attacker could potentially exploit these race conditions during durable handle scavenging and lookup...

CVE-2026-63799

A flaw was found in the Linux kernel's scheduler component. A local attacker could exploit an out-of-bounds write vulnerability during the creation or execution of a new task in per-CPU mode, specifically when an internal identifier is unassigned. This can lead to a bounded memory corruption, whe...

CVE-2026-63798

A flaw was found in the Linux kernel's irqchip/imgpdc driver. This vulnerability occurs because the driver fails to properly free allocated resources and remove interrupt handlers when the driver is removed. This oversight can lead to a use-after-free condition, where the system attempts to acces...

CVE-2026-64164

A flaw was found in the Linux kernel's btrfs filesystem tracepoints. The btrfssyncfile trace event, when called in an atomic context, attempts to perform an operation that can cause the system to sleep. This can lead to a kernel crash, resulting in a Denial of Service DoS for the affected system....

CVE-2026-64082

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's handling of process tracing and signal restoration. When functions like compatriscvgprset or compatrestoresigcontext are invoked, they may process uninitialized stack data if a preceding user data copy operation...

CVE-2026-53403

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. When a new modelist is set from userspace, the fbnewmodelist function fails to ensure that the current framebuffer mode remains valid within the updated list. This can lead to a null-pointer dereference if a console attemp...

CVE-2026-63793

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability, a use-after-free, arises from insufficient protection during concurrent operations on the volume label. A local attacker could exploit this by simultaneously setting and getting the file system label, which may le...

CVE-2026-53401

A flaw was found in the Linux kernel's omapfb display driver. A race condition in the omapfbmmap function, which manages memory mapping, allows for concurrent operations that can lead to a use-after-free vulnerability. This could enable a local attacker to access freed physical memory, potentiall...

CVE-2026-16211

A flaw was found in the Hostname Allocation Handler component of ralph. A remote attacker with low privileges could exploit a race condition by manipulating an internal counter. This could lead to incorrect hostname assignments, impacting the integrity of system resource allocation...

CVE-2026-64171

A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...

CVE-2026-15690

A flaw was found in open62541, a widely used open-source OPC UA Open Platform Communications Unified Architecture toolkit. A remote attacker could trigger a denial of service by sending a specially crafted request that manipulates a specific argument within the Shared Client Library. This...

CVE-2026-64151

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit page table driver. This vulnerability involves a missing check for the system's fundamental memory page size PAGESIZE within the pgsizebitmap data structure. While an IOMMU configuration with this missing check would...

CVE-2026-64186

A flaw was found in the Linux kernel's AMD IOMMU debugfs. Improper handling of user-provided input in the iommummiowrite and iommucapabilitywrite functions can lead to an out-of-bounds memory access. This vulnerability could allow a local attacker to potentially cause a denial of service or...

CVE-2026-64087

A flaw was found in the Linux kernel's pmbus/adm1266 driver. A malformed response from a hardware monitoring device could cause the driver to read beyond the allocated memory buffer. This out-of-bounds read can lead to system instability or denial of service...

CVE-2026-53389

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a TCP-AO key is deleted asynchronously, the system fails to clear pointers to the freed memory. This can allow an attacker to access previously freed memory, potentially leading to information disclosure ...

CVE-2026-53390

A flaw was found in the Linux kernel's ksmbd component. An authenticated client can exploit an out-of-bounds read vulnerability in the smbcheckpermdacl function by providing a specially crafted Access Control Entry ACE. This crafted ACE, when processed during an access check on a share that uses...

CVE-2026-53385

A flaw was found in the Linux kernel's vcscreen module. A race condition in the vcswrite function can lead to a null pointer dereference. This occurs when the vcdata pointer becomes stale during concurrent write operations, and a subsequent call attempts to use the now-invalid pointer. A local...

CVE-2026-53386

A flaw was found in the Linux kernel's ti-ads1298 Analog-to-Digital Converter ADC driver. This vulnerability arises from an incorrect bounds check when accessing the pgasettings array. An attacker could potentially provide a crafted input that leads to an out-of-bounds array access. This could...

CVE-2026-53382

A flaw was found in the Linux kernel's vidtv media driver. This vulnerability occurs because the vidtvmuxpushsi function does not properly handle a NULL return value from vidtvmuxgetpidctx, which can happen if a PID context fails to allocate during initialization. An attacker could potentially...

CVE-2026-53383

A flaw was found in the Linux kernel's ksmbd component. A remote attacker can trigger a NULL pointer dereference by sending a specially crafted compound SMB2 request. This occurs because the session validation logic for non-first operations in a compound request does not properly check the sessio...

CVE-2026-53377

A flaw was found in the Linux kernel's Direct Rendering Manager DRM driver for Qualcomm Snapdragon Mobile MSM graphics processing units GPUs. The GPU recovery mechanism, intended to reset the GPU after a hang, did not always activate when no new tasks were submitted. This oversight could allow th...

CVE-2026-53380

A flaw was found in the Linux kernel's rzv2h-ivc media driver. The driver's buffer list, which is protected by a spinlock, can be concurrently modified because a buffer removal operation listdel is performed outside of the protected section. This concurrent access to the buffer list without prope...

CVE-2026-53379

A flaw was found in the Linux kernel's ov8856 media driver. This vulnerability occurs due to improper error handling where a control handler is not correctly released if an error occurs during its initialization. This oversight could potentially lead to resource exhaustion, which may result in a...

CVE-2026-16207

A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized...

CVE-2026-53375

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/vce component responsible for video encoding. This vulnerability arises when the system attempts to update a memory address using incomplete information, where only a portion of the address is valid. This can result in data...

CVE-2026-53376

A flaw was found in the AMD Kernel Fusion Driver AMDKFD in the Linux kernel. This vulnerability exists in the kfdioctlgetprocessaperturesnew function, where a missing upper bound check for the numofnodes argument could allow a local attacker to provide an excessively large value. This could lead ...

CVE-2026-64182

A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...

CVE-2026-53374

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-64162

A flaw was found in the Linux kernel's Intel Ethernet controller driver idpf. This vulnerability occurs because a critical synchronization mechanism, known as a spinlock, is accessed before it has been properly initialized. An attacker could potentially exploit this timing issue to cause the syst...

CVE-2026-53369

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could craft a malicious UDF image with an oversized Cyclic Redundancy Check CRC length. This could allow the attacker to bypass the integrity validation of UDF descriptors, leading to the acceptance of...

CVE-2026-53370

A flaw was found in the Linux kernel's performance monitoring unit perf/x86/intel related to the validation and configuration of Auto Counter Reload ACR masks. Incomplete validation of user-space ACR masks could lead to incorrect configurations. This issue could result in inaccurate performance...

CVE-2026-53368

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. A race condition exists where the f2fsneeddentrymark function incorrectly reads natentry flags without proper synchronization during checkpoint operations. This can lead to an inconsistent inode block marking state,...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64078

A flaw was found in the Linux kernel's netfilter xtables component. This vulnerability occurs when a userspace process attempts to re-instantiate a netfilter table after the module has been removed. Due to an incomplete unregistration process, the table cannot be properly re-established,...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

CVE-2026-64105

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the virtual Generic Interrupt Controller vgic component. When a virtual CPU vCPU fails to initialize, the private Interrupt ReQuests IRQs allocated for it are not properly released...

CVE-2026-64163

A flaw was found in the Linux kernel's kprobes test module. Improper cleanup of kprobes and kretprobes kernel probes used for debugging and tracing between test runs can lead to registration failures. Repeated execution of the kprobes sanity tests can cause the kernel to crash, resulting in a...

CVE-2026-64100

A flaw was found in the Linux kernel's Direct Rendering Manager drm/msm component. A local attacker could trigger a deadlock vulnerability due to a circular locking dependency when the kswapd0 process attempts to reclaim memory. This can lead to a Denial of Service DoS, causing the system to beco...

CVE-2026-64166

A flaw was found in the Linux kernel's ARM FF-A Firmware Framework for Arm firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this...