CVE-2026-97410

The Linux kernel contains a vulnerability in the netconsole component where the drop_netconsole_target() function unlinks a target while only holding the target_list_lock . This creates a race condition because netconsole_process_cleanups_core() iterates the target_cleanup_list under a different ...

CVE-2026-97411

The Linux kernel contains a vulnerability where the mal_remove() function can cause a system hang during module removal. The root cause is the unconditional call to napi_disable() , which is not idempotent; if NAPI was never enabled or was already disabled, the kernel spins indefinitely waiting f...

CVE-2026-97409

The Linux kernel contains a vulnerability in the nvme-fc driver where a new controller in the CONNECTING state can trigger an admin request timeout. This schedules ctrl->ioerr_work to abort inflight requests by calling __nvme_fc_abort_outstanding_ios(). If the io tagset has not been initialize...

CVE-2026-97408

The Linux kernel contains a vulnerability in the Bluetooth L2CAP stack where the l2cap_recv_frame() function fails to adequately validate the length of connectionless frames. Specifically, the parser unconditionally reads a two-byte PSM from the payload without first ensuring the payload is large...

CVE-2026-97407

The Linux kernel contains a vulnerability in the ASoC: rockchip: rockchip_pdm driver. Specifically, the rockchip_pdm_set_fmt() function calls pm_runtime_get_sync() but fails to check its return value. If the runtime resume operation fails, the function continues to access hardware registers while...

CVE-2026-93830

The Linux kernel contains a vulnerability where enabling the RX Buffer Unavailable (RBUE) interrupt in the xgmac2 driver can trigger a MAC interrupt storm under heavy RX pressure. This occurs because the DMA fires RBUE continuously when it runs out of RX descriptors, while the standard RX complet...

CVE-2026-93829

The Linux kernel contains a vulnerability in the smb: client component related to races in cifsd thread creation . Specifically, the cifsd demultiplex thread can access tcp_ses before the parent thread finishes populating it, as it is accessed locklessly. Additionally, the kthread_run macro may s...

CVE-2026-93828

A vulnerability exists in the Linux kernel 's exfat filesystem module. Specifically, the function exfat_create_upcase_table() can enter an infinite loop due to an integer overflow when the size of the upcase table is set to zero (e.g., due to corrupted media or a misbehaving device). The issue is...

CVE-2026-93827

The Linux kernel is vulnerable to a double-free issue within the virtio-fs component during a failed queue setup. The root cause is that virtio_fs_setup_vqs() frees fs->vqs and fs->mq_map if virtio_find_vqs() fails, but subsequent cleanup in virtio_fs_ktype_release() attempts to free them a...

CVE-2026-93826

The Linux kernel contains a potential Use-After-Free (UAF) vulnerability within the hidpp HID driver. The issue occurs in the hidpp_connect_event() function where, if input_register_device() fails, the system calls input_free_device() but retains a stale pointer to the old device in hidpp->inp...

CVE-2026-93825

The Linux kernel contains a vulnerability where a NULL pointer dereference can occur within the spi subsystem. Specifically, the function spi_get_device_match_data() fails to perform a NULL check on the return value of spi_get_device_id(). This issue can be triggered when using driver_override wi...

CVE-2026-93824

The Linux kernel contains a vulnerability where the combination of TLS and sockmap (BPF psock) integration could lead to exploitable bugs. To resolve this, the kernel now rejects the configuration of TLS keys when used with sockmaps to prevent latent issues. This fix addresses a configuration ris...

CVE-2026-93823

The Linux kernel 's amdkfd driver contains a vulnerability where the buffer size for the AMDKFD_IOC_GET_DMABUF_INFO ioctl is controlled by the user. A malicious user could provide an excessively large value (e.g., 2 GiB) to trigger an out-of-memory (OOM) condition in the kernel context or cause m...

CVE-2026-93542

An out-of-bounds read exists in libXi before version 1.8.4 during the parsing of the XI2 class . The vulnerability is triggered via the size_classes() and copy_classes() functions. This flaw could be exploited by malicious servers to cause a crash of the X client. No specific exploit links or rem...

CVE-2026-93822

The Linux kernel contains a vulnerability where failing to hold the pci_rescan_remove_lock while stopping and removing a root bus can cause a race condition. This race occurs during concurrent rescan or hotplug operations triggered via sysfs . The flaw may lead to use-after-free issues or system ...

CVE-2026-93821

A vulnerability in the Linux kernel (PCI: altera) allows for racing conditions when stopping and removing a root bus. The issue is caused by failing to hold the pci_rescan_remove_lock, which can occur during concurrent rescan or hotplug operations triggered via sysfs. These races may lead to use-...

CVE-2026-93820

The Linux kernel is vulnerable to a race condition in the rockchip PCI driver. The root bus removal process fails to hold the pci_rescan_remove_lock while stopping and removing the bus, which can cause conflicts with concurrent rescan or hotplug operations triggered via sysfs . These races may re...

CVE-2026-93819

The Linux kernel contains a vulnerability in the mediatek PCI driver where the pci_rescan_remove_lock is not held while stopping and removing a root bus . This lack of synchronization can lead to races with concurrent rescan or hotplug operations triggered via sysfs , potentially resulting in use...

CVE-2026-93817

The Linux kernel contains a vulnerability within the perf subsystem related to the addr_filter_ranges lifetime. The root cause is that event::addr_filter_ranges is used under RCU but was not being RCU freed correctly. This issue has been resolved in the kernel. No specific exploitation details or...

CVE-2026-93818

The Linux kernel contains a vulnerability in the PCI subsystem where a race condition can occur during the stopping and removal of a root bus. The issue is caused by failing to hold the pci_rescan_remove_lock during these operations, which may lead to use-after-free issues or system crashes when ...