Aggregator

A vulnerability described as critical has been identified in Linux Kernel up to 6.19.10. This affects the function offsetof of the component ksmbd. Executing a manipulation can lead to buffer overflow. This vulnerability appears as CVE-2026-31478. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.12.79/6.18.20/6.19.10. This vulnerability affects unknown code of the component drm. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2026-31479. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.10. Affected by this vulnerability is the function cpus_write_lock of the component tracing. The manipulation leads to deadlock. This vulnerability is traded as CVE-2026-31480. Access to the local network is required for this attack to succeed. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.167/6.6.130/6.12.79/6.18.20/6.19.10. Affected by this vulnerability is the function ksmbd_session_lookup_slowpath of the component ksmbd. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-31476. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.167/6.6.130/6.12.79/6.18.20/6.19.10. Affected is the function smb2_lock of the component ksmbd. Executing a manipulation can lead to memory leak. This vulnerability appears as CVE-2026-31477. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.18.20/6.19.10. It has been classified as critical. The affected element is the function devm_kzalloc. Performing a manipulation results in double free. This vulnerability is identified as CVE-2026-31475. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.6.130/6.12.79/6.18.20/6.19.10. It has been rated as critical. This affects the function isotp_sendmsg. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-31474. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.19.10. This impacts the function media_request_ioctl_reinit of the component media. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-31473. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.20/6.19.10. The impacted element is the function iptfs_clone_state of the component xfrm. This manipulation causes allocation of resources. This vulnerability is registered as CVE-2026-31471. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.20/6.19.10. This affects the function __input_process_payload of the component xfrm. Such manipulation leads to infinite loop. This vulnerability is documented as CVE-2026-31472. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.79/6.18.20/6.19.10. Affected by this issue is some unknown functionality. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2026-31470. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been rated as very critical. This vulnerability affects the function iommufd_veventq_fops_read of the component iommufd. This manipulation of the argument data_len causes buffer overflow. The identification of this vulnerability is CVE-2026-64293. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.18.39/7.1.3. It has been declared as critical. This affects an unknown part of the component iommufd. The manipulation results in allocation of resources. This vulnerability was named CVE-2026-64292. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been classified as problematic. Affected by this issue is the function iommufd_veventq_alloc of the component iommufd. The manipulation of the argument veventq_depth leads to allocation of resources. This vulnerability is uniquely identified as CVE-2026-64291. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3 and classified as critical. Affected by this vulnerability is the function iommufd_fault_fops_read of the component iommufd. Executing a manipulation can lead to infinite loop. This vulnerability is handled as CVE-2026-64290. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.12.95/6.18.38/7.1.3 and classified as problematic. Affected is the function iommufd_hwpt_invalidate of the component iommufd. Performing a manipulation of the argument entry_num/entry_len results in infinite loop. This vulnerability is known as CVE-2026-64289. Attacking locally is a requirement. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.38/7.1.3. This impacts the function kvm_invalidate_vncr_va of the component KVM arm64 VNCR pseudo-TLB. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-64288. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3. This affects the function flush_hyp_vcpu of the component KVM arm64 pKVM hyp vCPU. This manipulation of the argument used_lrs causes out-of-bounds read. This vulnerability appears as CVE-2026-64287. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3. The impacted element is the function flush_hyp_vcpu of the component KVM arm64. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2026-64286. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.18.38/7.1.3/7.2-rc2. The affected element is the function page_ext_iter_next of the component Page Ext Iteration. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-64295. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.