CVE-2026-72098

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2026-72097

A flaw was found in the Linux kernel's dm-verity component. A possible NULL pointer dereference can occur in the dmverityloadpinisbdevtrusted function if a device lacks a table. This vulnerability could allow a local attacker to cause a system crash, leading to a Denial of Service DoS...

CVE-2026-72096

A flaw was found in the Linux kernel's dm-verity component. The 'corruptederrs' counter, which tracks errors in corrupted blocks, was not atomic. This vulnerability could allow a race condition to occur, potentially causing the system to skip auditing when the maximum number of corrupted errors i...

CVE-2026-72095

A flaw was found in the Linux kernel's dma-fence component. The dmafencededuparray function incorrectly handles zero-count input, leading to a memory corruption vulnerability. A local attacker could potentially exploit this by triggering specific conditions in the amdgpuuserqwait functions, which...

CVE-2026-72094

A flaw was found in the Linux kernel's dma-fence subsystem. This vulnerability arises from a timing issue on weakly ordered platforms, where memory operations related to fence signaling and pointer nullification can occur out of order. This can lead to a NULL pointer dereference, potentially...

CVE-2026-72093

A flaw was found in the Linux kernel, specifically within the amdxdna graphics driver. This vulnerability is a use-after-free error, where a memory object is incorrectly freed twice when certain memory allocation operations fail. This leads to memory corruption. A local attacker could potentially...

CVE-2026-72091

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. An attacker with local access to the accelerator node can trigger a null pointer dereference by submitting a command with an invalid command buffer object. This can lead to a kernel crash, resulting in a denial of service DoS for...

CVE-2026-72090

A flaw was found in the Linux kernel's amdxdna graphics acceleration driver. A local user could exploit an incorrect client handling issue within the amdxdnadrmsyncboioctl function. When performing a SYNCDIRECTFROMDEVICE operation, the amdxdnahwctxsyncdebugbo function is called with an incorrect...

CVE-2026-72089

A flaw was found in the Linux kernel's Intel Versatile Processing Unit IVPU accelerator driver. An attacker could exploit a vulnerability in how the driver handles firmware logs with incorrect size information. This could lead to an out-of-bounds read, potentially disclosing sensitive information...

CVE-2026-72086

A flaw was found in the Linux kernel's scsi: xen: scsiback component. A pvSCSI guest can trigger a resource leak by issuing specific SCSI Small Computer System Interface requests when a task management operation fails. This vulnerability allows the guest to leak command tags associated with a...

CVE-2026-72085

A flaw was found in the Linux kernel's scsi: xen: scsiback component. This vulnerability allows a malicious virtualized SCSI pvSCSI guest to trigger a reference count underflow by sending specially crafted requests. This can lead to a denial of service, potentially stopping a Logical Unit Number...

CVE-2026-72082

A flaw was found in the Linux kernel's SCSI Small Computer System Interface elx: efct module. This vulnerability occurs when an I/O abort operation fails to properly release a resource reference. This can lead to a permanent resource leak, which prevents subsequent attempts to abort the same I/O...

CVE-2026-72081

A flaw was found in the Linux kernel's scsi: elx: efct driver. When processing an unsolicited Fibre Channel Protocol FCP command that contains an unsupported additional Command Descriptor Block CDB, the system fails to properly free allocated I/O resources. This resource leak can lead to resource...

CVE-2026-72080

A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...

CVE-2026-72079

A flaw was found in the Linux kernel's ims-pcu driver. A malicious device can exploit an issue in the imspcudisconnect function, which incorrectly distinguishes between control and data interfaces. By presenting a data interface with the same class as the control interface, a malicious device can...

CVE-2026-72078

A flaw was found in the Linux kernel's ims-pcu driver. This driver incorrectly assumes that the first endpoint of the control interface is an interrupt IN endpoint without proper validation. A malicious Universal Serial Bus USB device could exploit this by providing a different endpoint type. Thi...

CVE-2026-72077

A flaw was found in the Linux kernel's ims-pcu input driver. This vulnerability occurs when the firmware object is not properly released if validation fails during an asynchronous update. This oversight can lead to a firmware leak, potentially exposing sensitive information or system resources. T...

CVE-2026-72076

A flaw was found in the Linux kernel's ims-pcu driver. The debug logging in the imspcuirq function can attempt to read data beyond the allocated buffer when processing certain Universal Serial Bus USB control requests. This out-of-bounds read occurs if the length of the control request exceeds th...

CVE-2026-72075

A flaw was found in the Linux kernel's ims-pcu input driver. A race condition occurs when the imspcuresetdevice function is called without proper synchronization, allowing concurrent operations to corrupt a shared command buffer. This vulnerability could be exploited by a local attacker to cause...

CVE-2026-72074

A flaw was found in the Linux kernel's ims-pcu driver. A type confusion vulnerability exists in the CDC union descriptor parsing, where the driver trusts the bMasterInterface0 value without proper verification. This could allow a local attacker, or a malicious USB device, to overwrite the private...

CVE-2026-14456

A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...

CVE-2026-66795

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request CSR auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a...

CVE-2026-72084

A flaw was found in the Linux kernel's SCSI target subsystem. An attacker, by submitting a specially crafted iSCSI TransportID during a PERSISTENT RESERVE OUT operation, could cause an out-of-bounds read. This vulnerability, which occurs due to unbounded parsing of the TransportID, can lead to a...

CVE-2026-72083

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...

CVE-2026-72073

A flaw was found in the Linux kernel's vub300 driver, which manages MultiMediaCard MMC controllers. A race condition can occur during the driver's probe failure path. If the mmcaddhost function fails after an inactivity timer has been armed, a use-after-free vulnerability can arise. This could...

CVE-2026-72072

A flaw was found in the Linux kernel's MACsec Media Access Control Security component. A race condition during the deletion of an offloaded MACsec RX Security Channel SC allows the RX datapath to access and operate on memory that has already been freed. This use-after-free vulnerability can lead ...

CVE-2026-72071

A flaw was found in the Linux kernel's tracing/userevents component. An unprivileged local attacker can exploit a race condition during process forking within the usereventmmdup function. This use-after-free vulnerability occurs when an enabler is prematurely freed while still being accessed...

CVE-2026-72070

A flaw was found in the Linux kernel's libertastf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtffreeadapter function, responsible for freeing adapter resources, does not properly synchronize...

CVE-2026-72067

A flaw was found in the Linux kernel's CPU hotplug mechanism. When the cpuhpinvokecallback function attempts to unwind previous operations after a failure, it can incorrectly reuse a return value. This issue allows a successful rollback to mask the original error, causing a failed CPU hotplug...

CVE-2026-72066

A flaw was found in the Linux kernel, specifically within the CPU hotplug feature. This vulnerability occurs because the statesshow function, which displays CPU hotplug state information, does not correctly limit the size of its output. An attacker could exploit this by providing a large number o...

CVE-2026-72064

A flaw was found in the Linux kernel's mana network driver. When the driver allocates receive RX buffers from page pool fragments, it fails to perform an explicit synchronization for the CPU. This oversight can lead to data integrity issues or system instability on systems configured to require...

CVE-2026-72065

A flaw was found in the Linux kernel's mana network driver. This vulnerability arises from the driver's failure to validate the packet length reported by the Network Interface Card NIC within the Receive Completion Queue Entry RX CQE before further processing. A malicious NIC, or an attacker...

CVE-2026-72062

A flaw was found in the Linux kernel's gpio: mt7621 module. This vulnerability arises from non-atomic operations on shared interrupt trigger state. When mediatekgpioirqtype is called concurrently for different interrupts on the same bank, it can lead to an overwrite of configurations. This...

CVE-2026-70495

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

CVE-2026-72678

A flaw was found in Elasticsearch. An authenticated user with read privileges can submit a crafted request that causes the node to attempt an excessively large memory allocation due to unvalidated user input. This memory exhaustion leads to a fatal error, terminating the Elasticsearch node proces...

CVE-2026-72060

A flaw was found in the Linux kernel's Texas Instruments TI Industrial Communication Subsystem Gigabit ICSSG ethernet driver. This vulnerability occurs because the driver attempts to read hardware performance statistics even when they are unavailable. This leads to the silent corruption of networ...

CVE-2026-72061

A flaw was found in the Linux kernel. An incorrect permission check in the ipip6changelink function, which manages IPv6 over IPv4 SIT tunnels, allows a local attacker to bypass intended security restrictions. A user with administrative capabilities CAPNETADMIN in one network namespace a virtualiz...

CVE-2026-71472

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource CR editor, to inject malicious shell commands or SQL statements. This occurs because the WORKMEM string provided in the Search CR is not properly...

CVE-2026-72058

A flaw was found in the Linux kernel's ixp4xxhss network driver. The ixp4xxhssprobe function incorrectly allocates two High-Level Data Link Control HDLC network devices instead of one. This programming error leads to a memory leak, as the initially allocated device is not properly unregistered an...

CVE-2026-72057

A flaw was found in the Linux kernel's networking subsystem, specifically within the actct module. This vulnerability occurs when the kernel processes fragmented network traffic, failing to correctly preserve essential packet metadata. An attacker could exploit this by sending specially crafted...

CVE-2026-71290

A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security TLS hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can...

CVE-2026-72656

A flaw was found in Elasticsearch. An authenticated user, by submitting a specially crafted ES|QL query, could trigger an unbounded allocation of heap memory. This excessive memory consumption exhausts the available resources on the receiving node, leading to a denial of service DoS condition whe...

CVE-2026-72055

A flaw was found in the Linux kernel's ip6vti component, which handles IPv6 Virtual Tunnel Interfaces. A local attacker with certain network administration privileges in one isolated network environment network namespace could exploit this vulnerability. This allows them to modify the configurati...

CVE-2026-72054

A flaw was found in the Linux kernel's ipvti component. An attacker with CAPNETADMIN privileges in one network namespace netns but not in another, can exploit an insufficient capability check in the vtichangelink function. This allows them to rewrite a Virtual Tunnel Interface VTI tunnel that...

CVE-2026-72053

A flaw was found in the Linux kernel's ipip networking component. A local attacker with certain network administration capabilities in one network namespace could exploit an insufficient permission check in the ipipchangelink function. This could allow them to modify the configuration of a networ...

CVE-2026-72052

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

CVE-2026-72051

A flaw was found in the Linux kernel's IPv6 tunnel ip6tunnel handling. A local attacker, privileged in one network namespace but not another, could exploit a missing capability check in the ip6tnlchangelink function. This vulnerability allows the attacker to modify an IPv6 tunnel residing in a...

CVE-2026-72048

A flaw was found in the Linux kernel. The ieee802154: ca8210 driver fails to free allocated memory casctl when the spiasync operation encounters an error. Under sustained Serial Peripheral Interface SPI bus contention, this can lead to repeated memory leaks. This continuous resource exhaustion ma...

CVE-2026-72047

A flaw was found in the Linux kernel's ieee802154 ca8210 driver. On 64-bit systems, a pointer truncation vulnerability occurs during internal buffer operations. This issue causes only a partial pointer to be written, leading to an uninitialized upper portion when read back. Consequently, the syst...

CVE-2026-72046

A flaw was found in the Linux kernel's gve driver. When the header-split and Hardware-assisted Generic Receive Offload HW-GRO features are active, the driver incorrectly indexes network packet header buffers. This can lead to the driver reading headers belonging to different packets or overwritin...