CVE-2026-64184

The CVE-2026-64184 entry concerns the Linux kernel: damon_sysfs_memcg_path_to_id() breaks the mem_cgroup_iter() loop without calling mem_cgroup_iter_break(), leaking a cgroup reference. The fix is to call mem_cgroup_iter_break() before breaking the loop. Affected scope is within mm/damon/sysfs-sc...

CVE-2026-64182

The CVE affects the Linux kernel in drivers/base/memory where a memory block reference leak occurs during poison accounting. Specifically, memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_by_id(), which acquires a reference to the memory block device....

CVE-2026-64183

The CVE-2026-64183 issue concerns the Linux kernel where ACPI PRM calls were delegated to a runtime workqueue that could be accessed before efisubsys_init() allocated the queue, risking NULL pointer dereferences during early init. The fix splits the workqueue allocation into a dedicated postcore ...

CVE-2026-64181

In Linux kernel CVE-2026-64181, the issue on 32-bit x86 with THP enabled stems from __vm_normal_page failing to account for missing implementation of pmd_special()/pud_special(). This can cause warnings and later kernel state bugs (Bad rss-counter state, Bad page state) during memory reclaim when...

CVE-2026-64179

CVE-2026-64179 affects the Linux kernel’s net: wwan: iosm subsystem. The issue involved memory allocated during ipc_protocol_init() not being freed on error paths in ipc_imem_init(). The fix adds a call to ipc_protocol_deinit() in the error path to ensure proper release of resources and prevent m...

CVE-2026-64180

The CVE-2026-64180 entry documents a Linux kernel issue in the memory hotplug path (mm/memory_hotplug). The root cause is that remove_memory_blocks_and_altmaps() calls find_memory_block() to obtain a memory block device reference, but the acquired reference is not dropped, leading to a leaked dev...

CVE-2026-64178

The CVE-2026-64178 issue is in the Linux kernel Bluetooth BNEP implementation. A use-after-free can occur when reading dev->name during bnep_add_connection() because the underlying net_device may be freed concurrently by bnep_del_connection(). The root cause is that bnep_add_connection() did n...

CVE-2026-64177

Summary of CVE-2026-64177 : In the Linux kernel phonet/pep path, forwarding a backlog skb to a child socket via sk_receive_skb() acquires the child socket lock with BH enabled in the softirq path, creating an inconsistent lock state when the same child is traversed in normal process context. The ...

CVE-2026-64175

CVE-2026-64175 concerns the Linux kernel’s iwlwifi/iwl_mld stack. When the Intel BE201 Wi‑Fi 7 firmware restarts after a crash, the TX path lacked a guard like the RX path, so iwl_mld_tx_from_txq() could dequeue and push frames to the transport layer while the firmware was dead. This caused iwl_t...

CVE-2026-64176

The CVE-2026-64176 entry documents a Linux kernel issue in wifi: iwlwifi/mvm where TX rate handling for old devices (e.g., 7265D) used outdated v1 rate encoding. The driver initially shifted to v3 rates, then reverted due to beacon-rate beaconing failures, which could cause TX_CMD rate misreporti...

CVE-2026-64174

In the Linux kernel wifi stack, CVE-2026-64174 involves cfg80211_merge_profile() reassembling a Multi-BSSID non-transmitted BSS profile. The issue is that the while-loop uses cfg80211_get_profile_continuation() but never advances both mbssid_elem and sub_elem inside the loop body, causing repeate...

CVE-2026-64173

Summary: CVE-2026-64173 is a Linux kernel tracing issue that was resolved. The root cause was calling map->ops->elt_free() when elt_alloc() had failed during tracing_map_elt_alloc(). In affected code paths, elt_alloc() did not succeed, yet elt_free() was still invoked. Impact/Context: The v...

CVE-2026-64172

CVE-2026-64172 documents a Linux kernel/KVM vulnerability on Hygon Family 18h CPUs (Zen1-derived) where AVIC IPI virtualization could fail to wake blocking vCPUs due to a stale IsRunning=1 bit during ICR emulation. The root cause mirrors AMD Family 17h erratum #1235 and is mitigated by extending ...

CVE-2026-64171

The CVE-2026-64171 entry concerns the Linux kernel i2c/tegra path where tegra_i2c_mutex_lock() may return early, leaking a previously acquired runtime PM reference because pm_runtime_put() is not called on lock failure. This prevents the device from entering runtime suspend. A fix was added to ca...

CVE-2026-64169

Affected software: Linux kernel SPI ep93xx driver. Issue: error pointer dereference after DMA setup failure during probe, leading to potential dereferencing of an error pointer on later probe errors or driver unbind. Root cause: failure to clear DMA channel pointers when DMA setup fails, causing ...

CVE-2026-64170

Technical details (affected component, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-64168

The CVE-2026-64168 entry describes a Linux kernel SPI driver issue (spi: sprd) where a DMA setup failure could lead to a dereferenced error pointer or double-release of DMA channels. The fix makes the driver fall back to PIO on DMA setup failure and adds a check of the dma.enabled flag before rel...

CVE-2026-64167

In the Linux kernel, CVE-2026-64167 affects the KHO handling for kexec crash kernels. The root cause is in kho_fill_kimage(), which unconditionally populates image->kho.fdt and image->kho.scratch for every kexec image type, including crash kernels that run in a small reserved region. This c...

CVE-2026-64166

The CVE-2026-64166 issue affects the Linux kernel firmware for arm_ffa. The vulnerability stems from a bus match callback that assumed every FF-A driver provides an id_table and dereferenced it without a null check. The fix enforces the contract at driver registration time to ensure a buggy clien...

CVE-2026-64165

The CVE-2026-64165 entry describes a Linux kernel ARM integrator issue where intcp_init_early calls syscon_regmap_lookup_by_compatible before memory management is initialized, causing -ENOMEM or a NULL dereference (crash) when accessing a regmap during early init. The root cause is dereferencing ...