linux kernel security

CVE-2026-45956, published by NVD on May 27, 2026, covers a Linux kernel flaw in the Exynos DRM VIDI driver where an ioctl path could look up the wrong device context and potentially trigger crashes or memory-safety failures. The bug is obscure, hardware-specific, and still awaiting NVD...

CVE-2026-46056 is a newly published Linux kernel Bluetooth vulnerability, disclosed by kernel.org and added to NVD on May 27, 2026, involving a potential use-after-free in Secure Simple Pairing passkey event handlers. The fix is small, but the lesson is not: Bluetooth remains one of the kernel’s...

CVE-2026-46077, published by NVD on May 27, 2026, covers a Linux kernel fix in the Atmel TDES crypto driver where DMA output was synchronized in the wrong direction before CPU consumption. The bug is narrow, hardware-specific, and still awaiting NVD enrichment, but it is exactly the kind of...

CVE-2026-46098 is a Linux kernel flaw disclosed by kernel.org and published in the NVD on May 27, 2026, affecting the CAIF networking code where a stale service-layer pointer can be dereferenced during repeated socket teardown after remote shutdown. It is not, on present evidence, the sort of...

Linux kernel maintainers assigned CVE-2026-45845 on May 27, 2026, to a TAPRIO traffic-control flaw that can let a local user crash affected systems through a NULL pointer dereference in the class-dump path. The bug is not a remote network break-in, and it is not a privilege-escalation story on...

CVE-2026-45986 is a newly published Linux kernel vulnerability from kernel.org, recorded by NVD on May 27, 2026, covering a memory leak in the ccree crypto driver’s cc_mac_digest() path when final hash request mapping fails. It is not yet scored by NVD, and that absence matters almost as much as...

Linux kernel maintainers disclosed CVE-2026-45839 on May 27, 2026, after fixing a BPF CO-RE parsing bug that lets a privileged user with CAP_BPF crash kernels built with vmlinux BTF support. The flaw is not a Windows vulnerability, but it matters to WindowsForum readers because Linux is now a...

On May 27, 2026, NVD published CVE-2026-45932, a Linux kernel vulnerability in BPF detach handling that allowed unprivileged users to detach tcx or netkit programs when no program file descriptor was supplied. The bug is narrow, local, and not yet scored by NVD, but it lands in one of the...

CVE-2026-45835 is a Linux kernel Bluetooth vulnerability published by NVD on May 26, 2026, after kernel.org reported a fixed NULL pointer dereference in L2CAP’s l2cap_sock_new_connection_cb() callback, with stable kernel patches already linked but no NVD severity score assigned yet. That dry...

CVE-2026-46018 is a Linux kernel flaw disclosed by kernel.org and published by NVD on May 27, 2026, affecting the ALSA USB-audio driver’s handling of malformed USB Audio Class 2 sample-rate range responses. It is not the sort of vulnerability that screams for emergency unplugging of every...

The Linux kernel vulnerability now tracked as CVE-2026-46088 was published by NVD on May 27, 2026, after kernel.org assigned a flaw in ALSA’s control code involving snd_ctl_elem_init_enum_names() and a missing buffer-length guard before a fortified strnlen() call. The bug is not, on current...

Linux kernel maintainers disclosed CVE-2026-45894 on May 27, 2026, for an Intel VT-d IOMMU bug in which Linux could tear down an active PASID table entry in pieces, letting hardware briefly observe a corrupted translation state. The flaw is not a flashy remote-code-execution story, and NVD has...

CVE-2026-46085 is a newly published Linux kernel vulnerability, received by NVD from kernel.org on May 27, 2026, in the RxRPC rxkad security code, where malformed encrypted packet lengths could trigger incorrect crypto handling and a remotely reachable kernel warning. The record is still...

CVE-2026-46012 is a Linux kernel vulnerability published by NVD on May 27, 2026, after kernel.org assigned a CVE to a memory-leak fix in the rxrpc authentication path, specifically the rxkad_verify_response() function used by the RxRPC subsystem. It is not yet scored by NVD, and the record is...

CVE-2026-45930 is a Linux kernel information-disclosure flaw published by NVD on May 27, 2026, after kernel.org reported that MCTP netlink replies to RTM_GETNEIGH could expose uninitialized padding bytes in ndmsg response data. The bug is not the kind of remote-code-execution thunderclap that...

CVE-2026-46005 is a Linux kernel XFS vulnerability published by NVD on May 27, 2026, after kernel.org assigned a CVE to a fixed resource leak in xfs_alloc_buftarg() where an error path failed to release a DAX device reference. The patch is tiny, but the lesson is not. This is the kind of kernel...

Linux kernel maintainers have assigned CVE-2026-45841 to a netfilter flaw, published by NVD on May 27, 2026, in which a privileged CAP_NET_ADMIN user can load a malformed passive OS fingerprint that later causes a divide-by-zero panic when matching TCP SYN traffic. The bug is small, the patch is...

Microsoft listed CVE-2026-46333 on May 16, 2026, and updated it on May 21, identifying a Linux kernel ptrace flaw in get_dumpable logic that affects Azure Linux 3.0 kernel packages, including the HWE 6.12 line fixed at build 6.12.89.1-1. The dry MSRC page gives the issue the usual bureaucratic...

CVE-2026-43495 is a newly published Linux kernel vulnerability, added to NVD on May 21, 2026, in the MediaTek T7xx 5G WWAN modem driver, where malformed modem messages can trigger out-of-bounds kernel memory reads. The bug is narrow, hardware-specific, and not yet scored by NVD, but it is still...

CVE-2026-43464 is a Linux kernel vulnerability, published by NVD on May 8, 2026 and sourced to kernel.org, affecting Mellanox mlx5 Ethernet receive handling when XDP multi-buffer programs alter packet-buffer layout on affected 6.6, 6.12, 6.17, 6.18, 6.19, and 7.0 release lines. It is not a...