CVE-2026-74322

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability allows an attacker to trigger an invalid memory access when processing specific Wi-Fi frames. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...

CVE-2026-76885

A flaw was found in Wireshark. This vulnerability, a buffer over-read, occurs when the Tektronix K12xx file parser processes a specially crafted file. A remote attacker could exploit this by convincing a user to open a malicious Tektronix K12xx file, leading to a crash of the Wireshark applicatio...

CVE-2026-74317

A flaw was found in the Linux kernel's ixgbe network driver. This vulnerability occurs when configuring eXpress Data Path XDP queues on systems with a high number of CPUs and specific network adapters. An attacker could potentially trigger a memory corruption issue by exploiting the incorrect...

CVE-2026-74316

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. When a client sends a request to free an admin-revoked layout state ID, the system fails to properly release the associated resources. This oversight can lead to a resource leak, potentially allowing a remote attack...

CVE-2026-74313

A flaw was found in the Linux kernel's vduse component. A race condition in the vdusedevopen function allows a memory object to be freed while still in use. This use-after-free vulnerability could enable a local attacker to cause a system crash denial of service or potentially execute arbitrary...

CVE-2026-74315

A flaw was found in the lockd component of the Linux kernel. A remote attacker can exploit this vulnerability by presenting a Network Lock Manager version 4 NLMv4 file handle shorter than expected. This causes the system to hash uninitialized bytes, leading to inconsistent file handle lookups...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

CVE-2026-76923

A flaw was found in Wireshark. An out-of-bounds read vulnerability exists within the Bluetooth HFP Hands-Free Profile protocol dissector. A remote attacker could exploit this by tricking a user into opening a specially crafted capture file. Successful exploitation leads to a crash of the Wireshar...

CVE-2026-74307

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker can trigger a deadlock by performing an EXT4IOCMOVEEXT ioctl operation with a donor file from a different filesystem during a concurrent freeze operation. This late validation creates a circular lock dependency, leading to a...

CVE-2026-74312

A flaw was found in the Linux kernel's vhost/vdpa subsystem. Improper validation of the virtqueue index in the vhostvdpammap and vhostvdpafault functions allows an out-of-range index to be used. This can lead to an out-of-bounds memory access in driver-specific callbacks, potentially causing...

CVE-2026-74310

A flaw was found in the Linux kernel's vhost/net component. This use-after-free vulnerability occurs due to incorrect handling of zerocopy user buffers, where the system may prematurely complete buffer operations while other parts of the system still hold references to the same memory. This can...

CVE-2026-63633

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

CVE-2026-74304

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hciqca module. This vulnerability occurs when the qcasetup function is called for hciuart devices connected through non-serdev paths, leading to a NULL pointer dereference. A local attacker could potentially...

CVE-2026-76924

A flaw was found in Wireshark. An out-of-bounds read vulnerability exists within the Kerberos protocol dissector. This flaw can be triggered by processing a specially crafted Kerberos packet, leading to a crash of the Wireshark application. This results in a denial of service DoS for the user...

CVE-2026-76881

A flaw was found in Wireshark. A NULL pointer dereference vulnerability exists within the CMS Cryptographic Message Syntax protocol dissector. This issue can be triggered by processing a specially crafted network capture file, leading to an application crash. A remote attacker could exploit this ...

CVE-2026-76880

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a specially crafted Universal Mobile Telecommunications System UMTS RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the...

CVE-2026-74306

A flaw was found in the Linux kernel's vfio/qat driver. This vulnerability involves a race condition in the qatvfresumewrite function, where concurrent operations can bypass a critical bounds check. This allows data to be written beyond the intended memory area, potentially corrupting system...

CVE-2026-74303

A flaw was found in the Linux kernel's Bluetooth subsystem. The qcadmphdr function, when handling non-serdev devices, attempts to dereference a NULL pointer without proper validation. An attacker could potentially trigger this condition, leading to a system crash and a denial of service...

CVE-2026-74302

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the unregistration of a Bluetooth device, the system fails to properly disable timers before freeing the associated memory. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has...

CVE-2026-74300

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A malicious Bluetooth controller could send a specially crafted response during the 'Read Local Codec Capabilities' operation. Insufficient validation of the codec capability element length could allow the...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-55194

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

CVE-2026-76891

A flaw was found in the sharkd component of Wireshark. A remote attacker could exploit this vulnerability, which requires user interaction and has high attack complexity, by triggering a crash. This issue leads to a denial of service DoS, making the sharkd component unavailable. Mitigation Avoid...

CVE-2026-74295

A flaw was found in the Linux kernel, specifically within the ASoC hdachdmi audio codec driver. This vulnerability occurs because the driver does not properly validate an input value used to access an internal data structure. A local attacker could provide a specially crafted input, causing the...

CVE-2026-76884

A flaw was found in Wireshark. A remote attacker could exploit a buffer over-read vulnerability in the ERF Extensible Record Format file parser. This could lead to a denial of service, making the application unavailable to legitimate users. Mitigation Avoid opening ERF Extensible Record Format...

CVE-2026-76917

A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...

CVE-2026-74299

A flaw was found in the Linux kernel's RDMA/core component. When aging pools with pinned handles, a failure to move handles from the active queue to an inactive queue during new page allocation can lead to a memory leak. This occurs because the system does not properly handle the fault, resulting...

CVE-2026-74298

A flaw was found in the RDMA/core component of the Linux kernel. This vulnerability occurs when the push to the pool fails, leading to a failure in the destruction of FRMR Fast Registration Memory Region handles. This can result in a resource leak, potentially impacting system stability or...

CVE-2026-74297

A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...

CVE-2026-74296

A flaw was found in the RDMA/mlx5 component of the Linux kernel. This vulnerability occurs due to an incorrect User Access Register UAR index release, where the software-provided index is freed instead of the hardware-provided one. This improper resource management could potentially lead to...

CVE-2026-74294

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC meson audio interface unit AIU component. The AIU HDMI and internal codec mux put callbacks do not properly validate enum values before processing them. This allows an attacker to provide out-of-rang...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-74284

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC queueing discipline schhfsc. When a child qdisc drops its last packets, the updatevf function can be called twice for the same class, causing it to be marked passive multiple times. This double transition can lead to a...

CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

CVE-2026-74291

A flaw was found in the Linux kernel's ASoC Audio System on Chip topology component. This vulnerability allows a local attacker to provide a specially crafted, malformed audio topology configuration blob with non-NUL-terminated name strings. This can cause the parser to read beyond the intended...

CVE-2026-74290

A flaw was found in the Linux kernel's clsflow module. A local user, by operating a traffic control tc classifier within a user or network namespace, could manipulate specific parameters. This manipulation allows the user to recover sensitive 32-bit folded kernel pointer values, leading to...

CVE-2026-74289

A flaw was found in the Linux kernel. This use-after-free vulnerability exists within the IPv4 Forwarding Information Base FIB component. The issue occurs when the system attempts to dump fibinfo objects in the fibleafnotify function without properly managing their lifetimes through reference...

CVE-2026-74288

A flaw was found in the Linux kernel's networking subsystem. During the process of dumping network routing rules fibrulesdump, a race condition could occur where a 'dying' rule one being deallocated is incorrectly accessed. This could lead to a reference count error, potentially causing a system...

CVE-2026-74286

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP module. The module fails to properly allocate per-CPU statistics, leaving a pointer uninitialized. A local attacker can exploit this by creating a PFCP rtnetlink device, which triggers a null pointer dereference. This...

CVE-2026-74287

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet with a malformed embedded address parameter. This could lead to an out-of-bounds read, potentially allowing for information disclosure or...

CVE-2026-74282

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC component. A remote or local attacker could send an oversized connection acknowledgment ACK message, leading to an integer underflow. This underflow can cause the connection to become permanently congested,...

CVE-2026-74285

A flaw was found in the Linux kernel's network subsystem. An issue in the netifrxqcleanupunlease function, responsible for tearing down network queue memory providers, allows a device to perform Direct Memory Access DMA to an incorrect memory address. This occurs because the DMA mappings are...

CVE-2026-74280

A flaw was found in the Linux kernel's marvell/octeontx cryptographic driver. This issue occurs during Direct Memory Access DMA cleanup, where an incorrect loop index is used. This can lead to memory leaks by failing to unmap successfully mapped entries and repeatedly attempting to unmap already...

CVE-2026-74279

A flaw was found in the Linux kernel's cavium/cpt cryptographic driver. An incorrect loop index in the sgcleanup error path during Direct Memory Access DMA buffer unmapping could lead to resource exhaustion. This issue results in successfully mapped entries being leaked and failed entries being...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

CVE-2026-63652

A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol RDP client can send a specially crafted Client Audio Formats Protocol Data Unit PDU to the server. This malformed PDU can cause a double-free vulnerability in the rdpsndserverrecvformats function, leading to the server reliably...

CVE-2026-74278

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer. A local attacker could exploit a vulnerability in the bounceerrorevent function, which improperly handles bounce error events for user clients. This flaw allows for the disclosure of kernel heap memory...

CVE-2026-74277

A flaw was found in the Linux kernel's iommu/dma-iommu component. When handling PCI Peer-to-Peer Direct Memory Access P2PDMA cases, an incorrect assignment of the scatterlist length can cause all segments in a multi-segment scatterlist to inherit the length of the first segment. This leads to...

CVE-2026-74275

A flaw was found in the Linux kernel. A vulnerability exists in the cxlcancelautoattach function where an invalid negative index can be used to access an array. This out-of-bounds memory access could allow a local attacker to cause system instability or a denial of service DoS...