kernel vulnerability

CVE-2026-46152 is a Linux kernel Wi-Fi vulnerability published by NVD on May 28, 2026, affecting mac80211 fast-RX handling, where a mistakenly static per-call result variable could be shared by concurrent receive paths and misroute mesh packets. The patch is almost comically small: delete one...

CVE-2026-46186 is a newly published Linux kernel vulnerability, disclosed by kernel.org and listed by NVD on May 28, 2026, in the Bluetooth virtio_bt driver’s receive path, where malformed backend-supplied packets can reach core Bluetooth handling without minimum header-length validation. It is...

CVE-2026-46101 is a newly published Linux kernel vulnerability, recorded by NVD on May 27, 2026, in which malformed nftables bitwise shift rules could trigger undefined behavior in netfilter’s nft_bitwise packet-processing path. The fix is tiny, but the lesson is not. A three-line validation...

CVE-2026-43305 is a newly published Linux kernel vulnerability, disclosed through kernel.org and surfaced in Microsoft’s Security Update Guide on May 8, 2026, that fixes an AMD display-driver bug capable of hanging affected systems during a fast display update path. That plain sentence is the...

CVE-2026-31591: Linux KVM SEV-SNP vCPU Locking Flaw Can Corrupt Guest State or Crash the Host CVE-2026-31591 is a Linux kernel vulnerability in KVM’s AMD SEV-SNP launch path. The issue affects the way KVM synchronizes Virtual Machine Save Areas, or VMSAs, when finalizing the launch of an SEV-SNP...

Microsoft has recorded CVE-2026-25179 as a newly disclosed elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys), and system owners should treat it as an Important local privilege escalation that requires immediate inventorying and patching across...

Microsoft today confirmed a high‑severity elevation‑of‑privilege flaw in the Windows Ancillary Function Driver for WinSock (AFD.sys) tracked as CVE‑2026‑25176, a kernel‑level improper access control defect that — if left unpatched — allows a locally authorized, low‑privileged user to elevate to...

Microsoft’s security catalog lists CVE-2026-25175 as a newly recorded elevation-of-privilege vulnerability in the Windows NTFS file system: an out-of-bounds read in the NTFS driver that, when triggered by a local, low-privileged account, can be converted into a SYSTEM-level compromise...

Microsoft has published details for CVE-2026-25167, a use‑after‑free elevation‑of‑privilege flaw in the Microsoft Brokering File System (BFS) that can allow a locally‑accessible attacker to escalate to SYSTEM‑level privileges on unpatched machines; Microsoft lists the vulnerability in the March...

Microsoft’s March Patch Tuesday added another Windows kernel elevation-of-privilege entry to the list: CVE-2026-24289, an Important-rated Windows Kernel vulnerability that Microsoft patched as part of the March 10, 2026 security updates. This is one of dozens of elevation-of-privilege (EoP)...

Microsoft’s public tracking entry for CVE‑2026‑24283 identifies a new elevation‑of‑privilege weakness in the Windows Multiple UNC Provider kernel component that Microsoft classifies as a kernel‑mode, local attack path — and the vendor’s published confidence signal must be treated as the...

A logic error in the Android kernel’s mem_protect.c functions can let a local, unprivileged process cause arbitrary code execution in kernel context — giving an attacker a direct elevation to system privileges without any user interaction or extra execution rights. (nvd.nist.gov) Background /...

A high‑severity memory‑safety flaw in Portwell Engineering Toolkits (version 4.8.2) — tracked as CVE‑2026‑3437 — lets a local, authenticated user read and write arbitrary kernel memory through the product’s driver, creating a realistic path to local privilege escalation and denial‑of‑service on...

Security researchers have publicly released a working proof‑of‑concept (PoC) that reliably forces a Windows host into an unrecoverable Blue Screen of Death (BSoD) by abusing a logic bug in the Common Log File System driver (CLFS.sys), tracked as CVE‑2026‑2636 — a locally‑triggerable...

A subtle misstep in nftables object handling created a classic kernel-level use‑after‑free that has since rippled through distributions and cloud images: an nft object or expression could point to a set in a different nft table, and when that table was removed the remaining dangling reference...

The Linux kernel vulnerability tracked as CVE-2024-39495 is a use-after-free in the greybus subsystem (gb_interface_release) triggered by a race between workqueue execution and object teardown, and Microsoft’s Security Response Center (MSRC) has publicly attested that Azure Linux includes the...

Microsoft’s short advisory line — “Azure Linux includes this open‑source library and is therefore potentially affected by this vulnerability” — is accurate for the product Microsoft has inventory‑checked, but it is a product‑scoped attestation, not proof that no other Microsoft product or...

CVE-2025-38181 is a kernel-level null-pointer dereference in the CALIPSO option handling that was fixed upstream by defensive checks in calipso_req_setattr() and calipso_req_delattr(); Microsoft’s Security Response Center (MSRC) has publicly attested that Azure Linux includes the implicated...

The Linux kernel bug tracked as CVE-2025-38147 — described upstream as “calipso: Don't call calipso functions for AF_INET sk” — is a relatively compact but meaningful vulnerability whose real-world implications hinge less on dramatic remote code execution and more on software supply-chain and...

No — Azure Linux is the only Microsoft product Microsoft has publicly attested to include the specific open‑source component tied to CVE‑2025‑38122, but that attestation is product‑scoped and does not prove that other Microsoft artifacts cannot also include the same vulnerable upstream Linux...