CVE-2026-72210

A flaw was found in the Linux kernel's NTFS filesystem driver. An error in how the driver checks the boundaries of data it processes, specifically an 'off-by-one' error, allows it to read one byte beyond its intended memory region. This 'out-of-bounds read' could potentially lead to the disclosur...

CVE-2026-72209

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could craft a malicious NTFS image that causes the kernel to read beyond the intended memory boundary when processing $FILENAME attributes. This out-of-bounds read could lead to information disclosure or potentially a...

CVE-2026-72208

A flaw was found in the Linux kernel's NTFS file system driver. A missing bounds check when processing Extended Attribute EA entries in the ntfsealookup and ntfslistxattr functions could allow a local attacker to craft a malicious NTFS file system. When this file system is mounted, it could lead ...

CVE-2026-72207

A flaw was found in the NTFS file system driver in the Linux kernel. When the ntfsresidentattrresize function attempts to free space by converting resident attributes to non-resident, it incorrectly selects zero-length $DATA attributes for this conversion. This can lead to fsck file system check...

CVE-2026-72206

A flaw was found in the Linux kernel's NTFS filesystem driver. Insufficient validation of index block headers within INDX blocks could allow a local attacker to craft a malicious NTFS filesystem image. When this image is processed by the kernel, it could lead to a kernel panic due to an...

CVE-2026-72205

A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...

CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEXROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this...

CVE-2026-72202

A flaw was found in the Linux kernel's NTFS filesystem driver. When calculating free clusters or Master File Table MFT records, a temporary state object is allocated on the heap. If this allocation fails, processes waiting for these counts can become unresponsive, leading to a denial of service D...

CVE-2026-72159

A flaw was found in the OCFS2 file system within the Linux kernel. This vulnerability occurs when processing specially crafted file system metadata, specifically non-inline dinodes that report a non-zero file size but zero allocated clusters. An attacker could potentially create a malformed file...

CVE-2026-75924

A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests CSRs, which could lead to information disclosure and...

CVE-2026-72294

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the LoongArch architecture. The kvmvcpuioctlinterrupt function, which can be invoked from userspace, lacks proper validation of interrupt requests. This missing validity check could allow a loca...

CVE-2026-72201

A flaw was found in the Linux kernel's New Technology File System NTFS implementation. This vulnerability arises from insufficient validation of index entries when reading index roots or blocks from disk. An attacker could potentially craft a malicious NTFS filesystem, which, when processed by th...

CVE-2026-72197

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. This manipulation causes an incorrect calculation of memory movement length, leading to an out-of-bounds write operation. The primary...

CVE-2026-72196

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker could craft a malicious NTFS file system image that, when mounted, would cause a malformed log record header LRH to trigger an out-of-bounds write during log replay. This memory corruption could lead to a system...

CVE-2026-72195

A flaw was found in the Linux kernel's ntfs3 file system driver. An integer underflow vulnerability occurs in the UpdateResidentValue function when processing a maliciously crafted Log Record Header LRH. This underflow can lead to an incorrect calculation of datasize, allowing subsequent operatio...

CVE-2026-72194

A flaw was found in the Linux kernel's NTFS3 filesystem driver. A local attacker could craft a malicious NTFS image with circular index node references. When this filesystem is mounted and a specific file is deleted, it can trigger unbounded recursion in the indxfindbuffer function, leading to a...

CVE-2026-72193

A flaw was found in the Linux kernel's ntfs3 driver. A remote attacker could exploit this by providing a specially crafted NTFS3 disk image, which, when mounted, triggers an in-kernel infinite loop. This can cause the system to hang, leading to a Denial of Service DoS where the system becomes...

CVE-2026-71365

A server-side request forgery SSRF vulnerability was found in AWX's webhook status callback mechanism. When processing GitHub pull request webhooks, AWX extracts the status callback URL pullrequest.statusesurl from the incoming webhook payload without validating the target host against the expect...

CVE-2026-12564

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetesauth function in awxplugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential wi...

CVE-2026-72181

A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIGCPUMASKOFFSTACK enabled. An incorrect size calculation during the copyfromuser operation could lead to memory corruption. This vulnerability allows a local attacker to...

CVE-2026-72180

A flaw was found in the Linux kernel's huge memory management mm/hugememory. When a device-private Page Middle Directory PMD is downgraded, the pmdswpuffdwp bit, which indicates Userfault File Descriptor Write Protect UFFDWP, is not properly preserved. This oversight allows a local attacker to...

CVE-2026-72177

A flaw was found in the Linux kernel's memory management subsystem DAMON. Incorrect handling of directory references during error conditions in specific functions can lead to an uninitialized memory dereference or a memory leak. This vulnerability could potentially cause system instability or...

CVE-2026-72176

A flaw was found in the Linux kernel's mm/damon/sysfs-schemes component, which could lead to a denial of service or system instability. This vulnerability is caused by an incorrect error handling path in the damonsysfsschemeadddirs function, resulting in a resource leak and the dereference of...

CVE-2026-72175

A flaw was found in the Linux kernel. A race condition exists in the makeuffdwphugepte function, which is responsible for managing large memory pages HugeTLB Page Table Entries. This vulnerability occurs when the system attempts to update these memory entries, but a timing issue allows older,...

CVE-2026-72154

A flaw was found in the Linux kernel, specifically within the OpenRISC architecture's handling of jump label synchronization in Symmetric Multiprocessing SMP systems. The implementation did not correctly invalidate instruction caches icaches on remote processor cores after updates. This oversight...

CVE-2026-55717

A flaw in Unbound allows a remote attacker controlling a delegated domain to trigger a NULL pointer dereference and crash the daemon. Exploitation occurs when serve-expired: yes and specific response-ip or RPZ rules are configured, resulting in a denial of service. Mitigation Ensure serve-expired...

CVE-2026-50252

A flaw in Unbound's SOREUSEPORT implementation reduces UDP source port entropy by allowing attackers to map ports to specific worker threads. This enables DNS cache poisoning, potentially leading to traffic redirection or unauthorized information disclosure. Mitigation Disable the so-reuseport...

CVE-2026-72397

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the pmbus/core module. The pmbusdata2regvid function incorrectly hardcoded the VR11 encoding, disregarding the vrmversion configured by the driver. This issue could lead to drivers sending dangerously wrong voltage codes ...

CVE-2026-72395

A flaw was found in the Linux kernel's hwmon pmbus subsystem. A worker designed to batch regulator events can combine multiple distinct hardware fault events into a single bitmask. This combined bitmask is then incorrectly processed by the critical hardware protection function,...

CVE-2026-72360

A flaw was found in the Linux kernel's drm/xe/pf component. The Physical Function PF incorrectly attempts to process FASTREQUEST or EVENT messages, which are not part of the defined Virtual Function to Physical Function VFPF Application Binary Interface ABI protocol. This misprocessing can lead t...

CVE-2026-72331

A flaw was found in the accel/amdxdna component of the Linux kernel. The aie2populaterange and amdxdnaumaprelease functions access a saved Virtual Memory Area VMA pointer that may have already been freed. This race condition can lead to a use-after-free vulnerability, which could result in system...

CVE-2026-72293

A flaw was found in the kernel's KVM Kernel-based Virtual Machine s390 vsie component. A missing radixtreepreload call in the gaccessshadowfault function can prevent the system from guaranteeing forward progress. This could lead to system instability or a Denial of Service DoS, where the system...

CVE-2026-72230

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced fragmentation module of the Linux kernel. The batadvfragsendpacket function, responsible for sending fragmented packets, does not properly free allocated memory when a packet is deemed unfragmentable due to ...

CVE-2026-72192

A flaw was found in the Linux kernel's ntfs3 module. A local unprivileged attacker can exploit this vulnerability by mounting a specially crafted NTFS image and performing a file creation operation. This can lead to a controlled out-of-bounds write, a type of memory corruption. This memory...

CVE-2026-72191

A flaw was found in the Linux kernel's ntfs3 driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS filesystem image. This can lead to an integer underflow during a memory copy operation, resulting in an out-of-bounds kernel write. Successful exploitation...

CVE-2026-72187

A flaw was found in the Linux kernel's NTFS file system driver. An attacker with local access could trigger a self-deadlock condition during inode eviction. This occurs when an attribute-list update during cluster allocation causes a temporary inode to lose its last reference, leading to an...

CVE-2026-72186

A flaw was found in the Linux kernel's NTFS driver. A local user could exploit this by writing to specific system files, such as $Bitmap, which are exposed through the showsysfiles interface. This unauthorized write access can lead to file system corruption and potentially cause a system deadlock...

CVE-2026-75485

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...

CVE-2026-73834

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...

CVE-2026-67214

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the...

CVE-2026-72460

A flaw was found in the Linux kernel's AppArmor security module. When changing a security profile, the aachangeprofile function might attempt to use an invalid security label before properly checking if the label was successfully created. This oversight could allow a local attacker to trigger a...

CVE-2026-72427

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup program handling. Incorrect indexing in the replaceeffectiveprog and purgeeffectiveprogs functions, particularly when BPFFPREORDER programs are active, can lead to memory corruption. This issue can result in overwriting...

CVE-2026-72359

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could trigger a NULL pointer dereference when querying memory statistics for a buffer object that has been purged. This issue arises because the driver attempts to access a NULL resource, which can lead to a system crash...

CVE-2026-72214

A flaw was found in the Linux kernel's cpcap-battery driver. This vulnerability occurs because a reference to a non-volatile memory nvmem device is not properly released after being acquired. Repeated attempts to read battery properties can exacerbate this issue, leading to a permanent memory lea...

CVE-2026-72200

A flaw was found in the Linux kernel's NTFS mapping-pairs parser. A corrupted attribute can cause a signed integer overflow when processing Logical Cluster Number LCN deltas. This overflow leads to undefined behavior, which may result in the system incorrectly interpreting file system structures...

CVE-2026-72172

A flaw was found in the Linux kernel. When Direct Access DAX memory is hotplugged, certain internal memory structures struct pages may not be fully initialized. This uninitialized state can lead to unexpected system behavior or crashes, potentially resulting in a denial of service...

CVE-2026-72170

A flaw was found in the Linux kernel's 9p filesystem. A race condition can occur during file unlinking operations in cacheless mode, where the v9fsdeccount function attempts to decrement a file's link count nlink that has already reached zero. This leads to a kernel warning, which could potential...

CVE-2026-72168

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem, specifically within the vmu-flash driver. This vulnerability arises from incorrect memory allocation, where kmallocobj was used instead of kzallocobj for memcard structures. This can lead to access of uninitialized dat...