CVE-2026-45820

A flaw was found in fflate. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP archive. This archive, when processed, can lead to an infinite loop during decompression, causing a Denial of Service DoS condition. This occurs because a malformed central director...

CVE-2026-74547

A flaw was found in the Linux kernel's hwmon adt7470 component. A local user can exploit this by configuring the 'autoupdateinterval' to zero via sysfs while 'numtempsensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources an...

CVE-2026-74551

A flaw was found in the Linux kernel's hwmon: nzxt-smart2 driver. This vulnerability allows for immediate and deterministic memory corruption on systems with non-coherent CPU architectures, such as ARM or MIPS. When operations like setting a fan speed or updating an interval trigger a USB Direct...

CVE-2026-74541

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from the system's failure to properly clear isodata when a connection is detached from its host controller connection hcon. A local attacker could exploit this use-after-free condition to cause a denial of...

CVE-2026-74260

A flaw was found in the Linux kernel's netfilter component, specifically within the nfdupnetdev module. This vulnerability arises from an imbalanced decrementation of recursion counters when network packets are transmitted, particularly during a possible migration to a different CPU. This imprope...

CVE-2026-74259

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. A local user could trigger a null pointer dereference by unmounting a CIFS share while certain files are still being processed. This could lead to a system crash, resulting in a denial of service...

CVE-2026-74257

A flaw was found in the Linux kernel's sockmap feature. The udpbpfrecvmsg function, responsible for handling message reception, lacks proper serialization for skmsg objects. This allows multiple threads to access and modify the same skmsg object concurrently, resulting in a use-after-free...

CVE-2026-74255

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This use-after-free vulnerability occurs when the tipcdisablel2media function calls synchronizenet before properly invalidating a media pointer. This timing issue allows concurrent readers to access a memo...

CVE-2026-72502

A flaw was found in the Linux kernel. When processing TCP IPv6 packets with a large Maximum Transmission Unit MTU, a specific calculated Maximum Segment Size MSS value can conflict with an internal flag GSOBYFRAGS. A local attacker could send a specially crafted TCP packet that, when processed,...

CVE-2026-72500

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Broadcom NetXtreme-E bnxtre driver. This use-after-free vulnerability occurs because a specific memory page is released prematurely during the teardown process. A local attacker could exploit this timing issue, potentially...

CVE-2026-74560

A flaw was found in the Linux kernel's AFXDP Address Family eXpress Data Path subsystem. When handling multi-buffer transmissions, the xskdropskb function incorrectly cancels completion queue CQ reservations without submitting buffer addresses to the CQ. This leads to a buffer leak where userspac...

CVE-2026-74486

A flaw was found in the Linux kernel's binfmtmisc component. This vulnerability arises from an inconsistency in how write access is managed for cloned interpreter files. When a pre-content watch is applied to an interpreter after its registration, subsequent executions through that entry can lead...

CVE-2026-72497

A flaw was found in the RDMA/bnxtre component of the Linux kernel. This vulnerability arises from insufficient validation of the Work Queue Entry WQE mode, which dictates how tasks are managed, against the hardware's defined slot limits. A local attacker could exploit this by supplying an invalid...

CVE-2026-72496

A flaw was found in the Linux kernel's RDMA/bnxtre component. When the bnxtqpliballocdpi function attempts to map I/O memory ioremap, it may not properly handle failures. This oversight could lead to system instability or a denial of service DoS condition, as the system might proceed with an...

CVE-2026-72494

A flaw was found in the Linux kernel's RDMA/irdma driver. The driver utilized a waitqueue and a requestdone flag for synchronization without adequate memory barriers. This oversight could lead to a race condition, potentially causing unpredictable system behavior or instability...

CVE-2026-74563

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP module. The rdstcpladdrcheck function fails to hold the Read-Copy-Update RCU lock across an IPv6 address check. This allows a race condition where a network device can be freed while still being referenced, leading to a...

CVE-2026-74455

A flaw was found in the Linux kernel's peakusb Controller Area Network CAN driver. This vulnerability arises from insufficient validation of uCAN receive record lengths when processing data from a Universal Serial Bus USB receive buffer. A local attacker could potentially exploit this by sending...

CVE-2026-74557

A flaw was found in the Linux kernel's libiscsi component. An incorrect bounds check in the iscsiscsicmdrsp function allows a malicious iSCSI target to craft a SCSI Response. This can lead to a read beyond the intended buffer, causing stale connection data to be copied into the SCSI sense buffer...

CVE-2026-72499

A flaw was found in the Linux kernel's RDMA/bnxtre component. During firmware teardown, a memory page is prematurely freed. An NQ interrupt arriving at this time can write data to this already-freed memory, leading to memory corruption. This could potentially result in a system crash or other...

CVE-2026-72498

A flaw was found in the Linux kernel's RDMA/bnxtre component. This vulnerability occurs when a user dumps information about a Memory Region MR using the rdma tool, inadvertently exposing a kernel pointer. The exposure of this pointer, mrhwq, could provide an attacker with sensitive details about...

CVE-2026-72493

A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...

CVE-2026-72491

A flaw was found in the Linux kernel's net/9p RDMA transport module. An inconsistent locking mechanism around the rdma-state field allows for a race condition during connection teardown. This can lead to lost state transitions, corrupting the connection state machine. Consequently, a use-after-fr...

CVE-2026-72489

A flaw was found in the Linux kernel's nvec driver. An incomplete receive RX transfer in the nvecrxcompleted function can lead to a use-after-free vulnerability. This occurs because memory is freed and then immediately accessed, allowing a concurrent memory allocation to overwrite the freed data...

CVE-2026-72488

A flaw was found in the Linux kernel's soundwire component. An out-of-bounds memory access can occur within the sdwaddelementgroupcount function due to an incorrect loop condition. This error allows the system to attempt to access memory beyond its allocated buffer. Such an issue could lead to...

CVE-2026-53614

A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...

CVE-2026-53613

When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use TOCTOU window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that...

CVE-2026-53612

A flaw was found in util-linux. When an /etc/fstab entry uses the user option together with X-mount.owner, X-mount.group, or X-mount.mode, mount8 changes ownership or permissions on the mount target after mounting without re-verifying the path. A local unprivileged user can exploit this...

CVE-2026-72485

A flaw was found in the Linux kernel's coresight platform component. The functions responsible for adding input and output connections increment internal counters before successfully allocating memory. If a memory allocation fails, these counters become inconsistent with the actual state of...

CVE-2026-74542

A flaw was found in the netfs component of the Linux kernel. A memory allocation failure ENOMEM can occur during writeback operations when the system attempts to allocate folioqueue resources. This issue can lead to a kernel warning and potential system instability, which a local attacker could...

CVE-2026-74469

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

CVE-2026-47219

A flaw was found in find-my-way, a routing module for Node.js. A remote attacker could exploit this vulnerability when find-my-way is used with Node's HTTP/2 server. By sending specially crafted HTTP/2 method values, an attacker can cause the application to crash, leading to a Denial of Service...

CVE-2026-72482

A flaw was found in the gpib component of the Linux kernel. A double decrement of a descriptor counter within the commandioctl function can lead to a counter underflow. This re-enables a use-after-free vulnerability, where a concurrently active descriptor can be prematurely freed. This could resu...

CVE-2026-74559

A flaw was found in the Linux kernel's AFXDP eXpress Data Path networking component. This vulnerability, located in the xskbuildskb function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain...

CVE-2026-74526

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the mpi3mrfaultueventemit function is called from fault watchdog or reset paths, memory allocation requests can trigger a reclaim process. This reclaim process may then wait on host I/O that is already blocked, leading to a system...

CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...

CVE-2026-72479

A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452read function incorrectly returns a success status. This can lead to the mma8452readraw function using uninitialized stack memory, potentially resulting in information disclosure...

CVE-2026-72478

A flaw was found in the Linux kernel's NTFS3 file system driver. The rungethighestvcn function, which processes NTFS mapping-pairs buffers, does not properly validate buffer boundaries. A crafted NTFS log file, when mounted, can cause the system to read beyond its allocated memory. This memory...

CVE-2026-72477

A flaw was found in the Linux kernel's NTFS3 file system driver. This vulnerability occurs when a file rename operation fails, potentially leaving the file system in an inconsistent state. This inconsistency could lead to system instability or data integrity issues. The resolution ensures that...

CVE-2026-72474

A flaw was found in the Linux kernel's dma-axi-dmac component. Under specific conditions on architectures like Microblaze or arm64, a memory management error can occur when the system attempts to free Direct Memory Access DMA coherent memory from a soft interrupt softirq context. This improper...

CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...

CVE-2026-72469

A flaw was found in the xprtrdma component of the Linux kernel. An attacker could potentially exploit a use-after-free vulnerability due to an improper handling of Remote Direct Memory Access RDMA connection events. Specifically, an address change event occurring before a connection is fully...

CVE-2026-74512

A flaw was found in the Linux kernel. During the deletion of audit rules, the auditdelrule function prematurely frees a resource while other kernel functions can still access it. This creates a use-after-free vulnerability, which a local attacker could potentially exploit to cause system...

CVE-2026-74495

A flaw was found in the igbvf driver of the Linux kernel. An off-by-one error during the cleanup of transmit TX Direct Memory Access DMA buffer mappings can lead to a memory leak. If an error occurs while mapping TX buffers, one DMA mapping may not be properly unmapped, potentially impacting syst...

CVE-2026-72473

A flaw was found in the xprtrdma module of the Linux kernel. This vulnerability involves an issue with how the system manages references to data requests, potentially allowing a request to be released while it is still actively being used by the hardware. This improper handling of resources could...

CVE-2026-70496

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control RBAC configurations, approve Certificate Signing Requests CSRs, and manage ManifestWork. This grants...

CVE-2026-54330

A flaw was found in Ceph RGW's SigV4 signature verification handler. When processing S3 requests, RGW verifies only the headers explicitly listed in the X-Amz-SignedHeaders field but does not reject requests that carry additional unsigned x-amz- headers. This diverges from the AWS S3 specificatio...

CVE-2026-50152

A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contai...

CVE-2026-39944

A flaw was found in Ceph RGW's STS Security Token Service session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the token...

CVE-2026-74571

A flaw was found in the Linux kernel's btrfs filesystem. When mounting a btrfs filesystem with the rescue=ibadroots option after corrupting the block group tree root or raid stripe tree root, the system attempts to update the global block reserve. This process dereferences a missing root pointer,...