CVE-2026-31627

The CVE-2026-31627 entry concerns the Linux kernel i2c s3c24xx driver, where the first byte of an SMBUS message (the size) is not validated before processing. This could allow out-of-range SMBUS block lengths to be acted on, with potential impact to I2C SMBUS block operations. The description not...

CVE-2026-31692

In The Linux kernel, CVE-2026-31692 affects the rtnetlink path: the peer namespace CAP_NET_ADMIN check is missing in rtnl_newlink() when creating paired devices (e.g., veth, vxcan, netkit). This enables an unprivileged user with a user namespace to create interfaces in arbitrary network namespace...

CVE-2026-31703

The CVE-2026-31703 entry is supported by multiple connected sources describing a Linux kernel use-after-free in the writeback path. Specifically, inode_switch_wbs_work_fn() loops over switch_wbs_ctxs and can have wb->switch_work pending while the wb reference is dropped, enabling a use-after-f...

CVE-2026-43119

In CVE-2026-43119, the Linux kernel Bluetooth HCI synchronous command infrastructure has a data race on hdev->req_status: __hci_cmd_sync_sk() updates it under req_lock on one workqueue, while other paths (e.g., hci_send_cmd_sync on a different workqueue, plus hci_cmd_sync_complete/cancel) read...

CVE-2026-43304

CVE-2026-43304 affects the Linux kernel libceph component. The flaw arises when decoding key material in process_auth_done(), where the code failed to enforce an upper bound on key length. The fix defines and enforces CEPH_MAX_KEY_LEN and clamps key material to a fixed-size buffer, addressing a v...

CVE-2026-45911

CVE-2026-45911 affects the Linux kernel USB3 (cdns3) driver. When a USB role switch to host occurs during resume, the host path can dereference an uninitialized xhci-hcd device, causing a NULL pointer dereference. The fixed behavior is to skip the resume operation for the newly chosen role if a r...

CVE-2026-45917

The CVE-2026-45917 issue affects the Linux kernel IP Virtual Server (IPVS) component, where a race between the netdev notifier and the destination cache for a closing device could leak a device reference until the destination is removed. Root cause: the code caches dest_dst with a device that is ...

CVE-2026-45920

Technical details (affected products, exact impact, and fixes) for CVE-2026-45920 are not provided in the supplied documents. Monitor official advisories for updates and remediation guidance.

CVE-2026-46059

CVE-2026-46059 : In the Linux kernel, KVM/nSVM handling of NRIPS and NextRIP after the first L2 VMRUN could miscompute NextRIP if NRIPS is disabled and a soft interrupt is injected, leading to a correctness issue after save/restore. The vulnerability arises because L1 may provide an incorrect Nex...

CVE-2026-46121

The CVE-2026-46121 issue affects the Linux kernel DAMON sysfs interface (mm/damon/sysfs-schemes). A race between reads and writes of memcg_path and path can lead to a use-after-free when a user reads or writes the sysfs files while a buffer is being deallocated. The root cause is that user-direct...

CVE-2026-46160

CVE-2026-46160 concerns the Linux kernel’s Btrfs filesystem: when removing a directory, last_unlink_trans is not updated, which can lead to incorrect fsync behavior if a directory with an open file descriptor is fsynced after removal. This can cause log replay during mount to fail with -EIO, pote...

CVE-2026-46167

CVE-2026-46167 – Linux kernel usb/usblp heap leak : The vulnerability stems from an uninitialized status buffer (statusbuf) allocated at probe time for LPGETSTATUS. If a malicious printer returns zero bytes, a stale 8-byte heap region could be copied to userspace via LPGETSTATUS, causing a heap l...

CVE-2026-46203

The CVE-2026-46203 issue affects the Linux kernel, specifically the spi: cadence-quadspi driver. The root cause is unclocked register access that can occur if the controller is not runtime-resumed before being disabled during driver unbind. The fix ensures the controller is runtime resumed prior ...

CVE-2026-46225

CVE-2026-46225 concerns the Linux kernel SPI host controller driver (rspi). The issue arises when deregistering the controller: resources such as DMA can be released before proper deregistration, potentially impacting availability. The root cause is captured as “spi: rspi: fix controller deregist...

CVE-2026-46311

CVE-2026-46311 (Linux kernel) involves the drm/amdgpu/userq path where access to a stale wptr mapping could occur during queue creation. The root cause is improper locking when accessing the mapping data, risking unmapping of wptr_obj while a queue is in progress and another BO is at the same add...

CVE-2026-52934

The CVE-2026-52934 entry involves the Linux kernel’s batman-adv TVLV handling. The root cause is batadv_tvlv_container_list_size() using a 16-bit accumulator, which can wrap when the total size exceeds U16_MAX, causing an undersized allocation in batadv_tvlv_container_ogm_append() and a subsequen...

CVE-2026-52973

Summary: CVE-2026-52973 relates to the Linux kernel futex subsystem. The issue arises from dropping the CLONE_THREAD requirement for private default futex hash allocation, because the function need_futex_hash_allocate_default() relied on strict pthread semantics. This misinteraction with CLONE_TH...

CVE-2026-53079

CVE-2026-53079 affects the Linux kernel networking path in net_sched. The issue is a memory leak where, during deferred qdisc drops, packets not freed on root qdisc due to missing TCQ_F_DEQUEUE_DROPS handling remain stranded on child to_free lists. The fix makes qdisc_dequeue_drop() fetch and che...

CVE-2026-53180

CVE-2026-53180 involves a Linux kernel timers/migration livelock. The issue arises when tmigr_handle_remote_cpu() skips timer_expire_remote() if cpu == smp_processor_id(), under the incorrect assumption that the local softirq path already handled this CPU’s timers. Jiffies can advance after local...

CVE-2026-53205

The CVE-2026-53205 issue is in the Linux kernel Intel Versatile Processing Unit (IVPU) accelerator driver (accel/ivpu). It stems from insufficient validation of read/write indices in the firmware log buffer, allowing potential out-of-bounds access if firmware supplies invalid indices. Affected sy...

CVE-2026-53245

CVE-2026-53245 affects the Linux kernel in net/802/mrp due to a parsing logic error in mrp_pdu_parse_vecattr. The vector-attribute event encoding and valen handling could cause out-of-sync FirstValue processing and misapplication of events, leading to corruption of offsets during PDU parsing and,...

CVE-2026-53332

CVE-2026-53332 affects the Linux kernel’s Qualcomm NGD (qcom-ngd-ctrl) component. The issue is a race where callbacks can run before the NGD device is fully initialized, leading to operations on uninitialized data and boot issues on affected boards. The vulnerability stems from registering callba...

CVE-2026-53342

CVE-2026-53342 (ARM64 Linux kernel) has a concrete technical detail: page-table allocations on ARM64 now always call pagetable_ctor(), but the corresponding pagetable_dtor() was not added, which can trigger a BAD page state warning or memory leaks under certain hot-plug memory scenarios. The vuln...

CVE-2026-53393

CVE-2026-53393 (Linux kernel, NFS daemon) is resolved in the Linux kernel. The issue was that nfsd_vfs_write() and nfsd_commit() did not rotate the server’s write verifier (nn->writeverf) when deferred writeback errors occurred, unlike other durable-storage-failure paths which call commit_rese...

CVE-2026-64109

CVE-2026-64109 describes a Use-After-Free in the Linux kernel af_unix unix_stream_data_wait() due to peeking tail of the receive queue without proper locking, allowing a race between threads to free a skb while it is referenced. The issue arises because tail is compared to last after a race where...

CVE-2026-64207

CVE-2026-64207 affects the Linux kernel, specifically the net/sched DualPI2 GSO backlog accounting path. When a GSO skb is split into segments, the code previously counted and propagated an extra backlog to the parent, leaving the parent’s qlen inflated and risking a NULL pointer dereference in q...

CVE-2026-64309

CVE-2026-64309 is a Linux kernel vulnerability in the crypto: ccp (SEV-SNP) subsystem. The SNP_COMMIT ioctl would perform SNP initialization even when the component was previously uninitialized. Since the SNP_COMMIT command is valid in the UNINIT firmware state, this could cause side effects: if ...

CVE-2026-64321

CVE-2026-64321 is a reference count leak in the NVMe over RDMA (nvmet_rdma) target of the Linux kernel. In nvmet_rdma_queue_connect(), a call to nvmet_rdma_find_get_device() acquires an ndev reference via kref_get(), but on the early-return path triggered when the host queue backlog is exceeded (...

CVE-2026-64354

The CVE-2026-64354 entry concerns the Linux kernel BPF component, specifically btf_repeat_fields() handling of user-supplied BTF data during BPF_BTF_LOAD. A malformed BTF can trigger an integer overflow when calculating the expanded field count, allowing a heap out-of-bounds write past the fixed ...

CVE-2026-64391

The CVE-2026-64391 issue affects the Linux kernel ksmbd component, where alternate data streams (ADS) stored as xattrs were read/written using current task credentials via VFS xattr paths. The root cause is that ADS I/O did not use the credentials captured when the SMB handle was opened, allowing...

CVE-1999-0330

The CVE-1999-0330 entry concerns the Linux bdash game and a buffer overflow that allows local users to gain root access. The connected documents corroborate a local-privilege-elevation flaw in the bdash game kernel/user-space handling, with no explicit product version, patch, or root-cause code s...

CVE-1999-0780

CVE-1999-0780 affects KDE klock. The vulnerability allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. The available connected documents confirm this specific behavior and do not provide additional technical details (e.g., root cause, affected versi...

CVE-1999-1442

The CVE-1999-1442 entry describes a bug in AMD K6 processors running Linux 2.0.x and 2.1.x kernels where a specific sequence of instructions can be used by a local attacker to trigger a denial of service (kernel crash). Affected component: AMD K6 processor in these Linux kernel versions; root cau...

CVE-2004-2135

Cryptoloop in Linux kernel 2.6.x, when used on file systems with a block size of 1024 or greater, contains IV computation weaknesses that allow watermarked files to be detected without decryption. The documented impact is PARTIAL confidentiality loss. No exploits, specific remediations, or affect...

CVE-2006-6057

CVE-2006-6057 affects the Linux kernel (2.6.x up to 2.6.18) and possibly other OSes, notably Fedora Core 6, with a vulnerability in the GFS2 file system driver. The issue is triggered by a malformed gfs2 file stream that leads to a NULL pointer dereference in the init_journal function, causing a ...

CVE-2013-3302

The CVE-2013-3302 entry refers to a race condition in the Linux kernel’s CIFS transport path: smb_send_rqst in fs/cifs/transport.c, exploitable on affected kernels prior to 3.7.2. The vulnerability can allow local users to trigger a NULL pointer dereference and OOPS, with potential unspecified im...

CVE-2016-10285

CVE-2016-10285 concerns an elevation-of-privilege in the Qualcomm video driver within Android's kernel (Kernel-3.18). A local malicious application could execute arbitrary code in kernel context if it first compromises a privileged process. The issue is rated High and requires local access with u...

CVE-2016-10286

CVE-2016-10286 is an elevation-of-privilege vulnerability in the Qualcomm video driver on Android, enabling a local malicious application to execute arbitrary code in the kernel context. The issue affects Android with Kernel-3.18 and Android ID A-35400904; exploitation requires compromising a pri...

CVE-2016-6779

CVE-2016-6779 is a local elevation-of-privilege in the HTC sound codec driver affecting Android kernel 3.10 (Nexus 9). The vulnerability could let a local malicious application execute arbitrary code in the kernel context if it can compromise a privileged process. The issue is categorized as High...

CVE-2016-8439

CVE-2016-8439 is an Android vulnerability describing a possible buffer overflow in the trust zone access control API due to insufficient buffer size checking. The connected NVD entry lists affected software as Android kernel 3.18, with Android ID A-31625204, indicating the root cause lies in a bu...

CVE-2016-8441

CVE-2016-8441 : Possible buffer overflow in the Android hypervisor due to inappropriate use of a static array in Kernel 3.18. Impact: local code execution with high severity (CVSS2 7.2, CVSS3 7.8). Connected documents confirm product/versions but do not provide a concrete patch/remediation detail...

CVE-2016-8444

CVE-2016-8444 is an elevation of privilege vulnerability in the Qualcomm camera that could allow a local malicious app to execute arbitrary code in the kernel context on Android (Kernel-3.10). The flaw requires compromising a privileged process, and the description identifies Android as the produ...

CVE-2016-8449

CVE-2016-8449 is an elevation-of-privilege vulnerability in the NVIDIA Tegra GPU/NVMAP kernel driver. The issue arises from referencing memory after it has been freed in NVMAP, which can allow a local attacker to escalate privileges and potentially execute code in kernel context. Affected platfor...

CVE-2016-8483

CVE-2016-8483 describes an information-disclosure vulnerability in the Qualcomm power driver used by Android on Kernel-3.10. A locally installed, malicious app could access data outside its permission levels due to a flaw in the Qualcomm power driver component. The issue is categorized as High ri...

CVE-2017-0621

CVE-2017-0621 is an elevation-of-privilege flaw in the Qualcomm camera driver for Android. The vulnerability lets a local, malicious app run code in the kernel context by exploiting the Qualcomm camera driver after compromising a privileged process. The issue affects Android devices with the affe...

CVE-2017-8072

The vulnerability CVE-2017-8072 affects the Linux kernel 4.9.x with a flaw in cp2112_gpio_direction_input (drivers/hid/hid-cp2112.c): it does not return the expected EIO error for a zero-length report, enabling local users to cause an unspecified impact via unknown vectors. Affected: Linux kernel...

CVE-2022-50105

The CVE-2022-50105 issue affects the Linux kernel (powerpc/spufs) where of_find_node_by_path() could leak a refcount. The fix, as documented, is to call of_node_put() on the remotely referenced device node when done, preventing a refcount leak in spufs_init_isolated_loader. Connected advisories (...

CVE-2022-50233

The CVE-2022-50233 entry pertains to the Linux kernel Bluetooth stack (net/bluetooth/eir.c and net/bluetooth/mgmt.c). The root cause is using strlen on hdev->dev_name and hdev->short_name, which are not guaranteed to be NULL-terminated. This can lead to kernel memory reads when the terminal...

CVE-2022-50316

CVE-2022-50316 concerns orangefs: Fix kmemleak in orangefs_sysfs_init() in the Linux kernel. The issue occurs when inserting/removing the orangefs module, leaking kobjects (multiple unreferenced objects shown in the report) due to kmemleak. The description clearly states the vulnerability has bee...

CVE-2022-50386

CVE-2022-50386 is a Linux kernel Bluetooth L2CAP use‑after‑free vulnerability. The fix adds a guard by calling l2cap_chan_hold_unless_zero() after __l2cap_get_chan_blah() to prevent a use‑after‑free in l2cap_chan_destroy. Affected: Linux kernel Bluetooth L2CAP path; impact per sources is high (CV...