VulDB Recent Entries

A vulnerability labeled as problematic has been found in Linux Kernel up to 7.2.5. This impacts the function imx6q_cpufreq_remove of the component cpufreq. Executing a manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2026-90296. The attack is restricted to local execution. No exploit exists. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.2.5. This affects the function sun4i_crtc_init of the file drivers/gpu/drm/sun4i/sun4i_crtc.c of the component CRTC. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-90297. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.2.5. The impacted element is the function o2net_hb_node_down_cb of the file fs/ocfs2/cluster/heartbeat.c of the component ocfs2. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-90302. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as critical. The affected element is the function isert_put_login_tx of the component IB/isert. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2026-90294. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in WP Engine FaustWP Plugin up to 1.8.10 on WordPress. It has been declared as critical. Impacted is the function WPE\FaustWP\Auth\encrypt/WPE\FaustWP\Auth\decrypt of the file plugins/faustwp/includes/auth/functions.php of the component Token Authentication. The manipulation results in improper verification of cryptographic signature. This vulnerability was named CVE-2026-54239. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Traccar up to 6.13.x. It has been classified as critical. This issue affects the function DatabaseStorage.removePermission of the file src/main/java/org/traccar/storage/DatabaseStorage.java of the component Permission Removal. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2026-52851. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5 and classified as problematic. This vulnerability affects the function __cgroup_bpf_replace of the component BPF Cgroup Storage. Executing a manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2026-90250. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5 and classified as very critical. This affects the function qgroup_free_reserved_data of the component qgroup. Performing a manipulation results in integer overflow. This vulnerability is known as CVE-2026-90259. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.5. Affected by this issue is the function siw_accept of the component RDMA/siw. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-90292. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected by this vulnerability is the function kmod_dup_request_exists_wait of the file kernel/module/dups.c of the component dups. This manipulation causes use after free. This vulnerability appears as CVE-2026-90291. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 7.2.5. Affected is the function swsusp_arch_suspend of the component Hibernate. The manipulation results in state issue. This vulnerability is reported as CVE-2026-90290. The attack requires a local approach. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Linux Kernel. This impacts an unknown function of the file drm/amd/display of the component AMD Display. The manipulation leads to off-by-one. This vulnerability is documented as CVE-2026-90289. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.5. This affects the function devm_phy_create of the component phy. Executing a manipulation can lead to double free. This vulnerability is registered as CVE-2026-90288. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. The impacted element is an unknown function of the component qmp-usb-legacy. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-90282. The attack must be initiated from a local position. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.5. The affected element is the function phy_create of the component snps-femto-v2. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-90281. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. Impacted is the function Runtime Suspend Callback of the component Qmp Usb. This manipulation of the argument phy causes uninitialized pointer. This vulnerability is tracked as CVE-2026-90280. The attack is restricted to local execution. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. This issue affects the function llbitmap_create of the component md-llbitmap. The manipulation results in use after free. This vulnerability is identified as CVE-2026-90277. The attack is only possible with local access. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as very critical. This vulnerability affects the function raid5_bitmap_sector_map of the component md-raid5. The manipulation leads to incorrect calculation. This vulnerability is referenced as CVE-2026-90279. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been declared as very critical. This affects the function llbitmap_destroy of the component md-llbitmap. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-90276. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as problematic. Affected by this issue is the function etm4_enable_hw of the component etm4x. Performing a manipulation results in denial of service. This vulnerability was named CVE-2026-90273. The attack needs to be approached locally. There is no available exploit. Upgrading the affected component is recommended.