kernel vulnerabilities

Linux administrators and security teams have a newly documented kernel networking flaw to account for in CVE-2026-64530, a critical use-after-free vulnerability in the Linux traffic-control subsystem. The bug occurs in an unusual but meaningful combination of features: the RED queueing...

CVE-2026-64191 is a newly published Linux kernel vulnerability that turns a seemingly modest validation omission in the I²C stub driver into an out-of-bounds memory-access condition. The immediate risk is narrow: the flaw resides in a development and test module that is not built into standard...

Linux kernel security issue CVE-2026-63979 highlights a subtle but serious lifetime-management flaw in the kernel’s newer TLS handshake infrastructure: a file descriptor reference could be released while an accept-side path was still preparing to hand the socket to a user-space handshake agent...

CVE-2026-63961 is a newly published Linux kernel vulnerability that turns an apparently narrow USB Type-C DisplayPort Alt Mode parsing mistake into a meaningful kernel information-disclosure concern. The flaw, resolved upstream and already propagated into multiple stable kernel series, allows a...

CVE-2026-63959 is a newly published Linux kernel vulnerability that turns an apparently narrow USB Type-C protocol parsing flaw into a reminder that modern ports are no longer simple peripheral connectors. The issue, disclosed on July 19, 2026 and updated in the National Vulnerability Database...

CVE-2026-64001 is a newly published Linux kernel vulnerability in the legacy OSS compatibility layer of ALSA, the Advanced Linux Sound Architecture subsystem. The flaw is a use-after-free condition in the code that handles OSS PCM configuration through procfs: under a specific allocation-failure...

Linux kernel maintainers have addressed a newly cataloged flaw in AMD’s GPU compute stack, tracked as CVE-2026-63882, that can trigger a NULL-pointer dereference in the drm/amdkfd driver’s shared virtual memory attribute path. The bug occurs when a userspace process invokes the KFD shared...

CVE-2026-53402 is a newly published Linux kernel vulnerability in the framebuffer console, or fbcon, that can turn a failed console-font change into a deterministic out-of-bounds read and a potential disclosure of kernel memory. For Windows administrators, the immediate boundary is clear: native...

CVE-2026-63826 is a newly published Linux kernel use-after-free flaw in the legacy framebuffer subsystem, with fixes now identified in Linux 6.6.144, 6.12.95, 6.18.38, and 7.1.3. The issue is not a Windows host vulnerability, but it matters to Windows administrators and developers running Linux...

CVE-2026-53366 fixes a Linux IPv4 packet-construction flaw that can write past a socket buffer’s allocated linear area when an application combines MSG_MORE with MSG_SPLICE_PAGES. For Windows users, the immediate concern is WSL 2, which runs a real Linux kernel inside its lightweight VM; WSL 1...

CVE-2026-49167, a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free memory error, is fixed in Microsoft’s July 14, 2026 security updates. The flaw requires an attacker to already have authorized local access, but successful exploitation could raise that attacker’s...

GhostLock, tracked as CVE-2026-43499, is a long-lived Linux kernel use-after-free in futex and real-time mutex priority-inheritance code. On kernels with CONFIG_FUTEX_PI enabled, the researchers report that an unprivileged local user can reach the vulnerable path without special privileges or...