VulDB Recent Entries

A vulnerability was found in Linux Kernel up to 6.12.103/6.18.44/7.1.8. It has been declared as critical. Impacted is the function create_direct_keys of the component vdpa. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2026-74712. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.44/7.1.8. It has been classified as problematic. This issue affects the function pmbus_notify of the file drivers/hwmon/pmbus/pmbus_core.c of the component pmbus. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-74711. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.12.103/6.18.44/7.1.8 and classified as very critical. This vulnerability affects unknown code of the component xsk. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-74710. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.1.8 and classified as very critical. This affects the function __skb_udp_tunnel_segment of the component UDP Tunnel Segmentation. This manipulation causes use after free. This vulnerability is registered as CVE-2026-74705. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.1.8. Affected by this issue is the function bnge_aux_dev_release of the component bnge. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-74706. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.8. Affected by this vulnerability is an unknown functionality of the file net/sched/sch_cake.c of the component sch_cake. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2026-74704. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.8. This impacts the function key_extract of the file net/openvswitch/flow.c of the component Open vSwitch. Performing a manipulation of the argument protocol results in out-of-bounds read. This vulnerability is identified as CVE-2026-74701. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.44/7.1.8. Affected is the function sg_alloc_table_chained of the component vhost-scsi. Executing a manipulation can lead to improper input validation. This vulnerability is tracked as CVE-2026-74703. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.8. This affects an unknown function of the component bnxt_en. Such manipulation leads to buffer overflow. This vulnerability is referenced as CVE-2026-74697. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.44/7.1.8. The impacted element is the function nf_flow_offload_ip_hook of the file net/netfilter/nf_flow_table_ip.c of the component nf_flow_table. This manipulation causes use after free. The identification of this vulnerability is CVE-2026-74695. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 7.1.8. The affected element is the function prestera_fw_hdr_parse of the component prestera. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-74693. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.1.8. Impacted is an unknown function of the component f_ncm. The manipulation of the argument ndp_index leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-74679. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.44/7.1.8. This issue affects the function ism_dev_exit of the component ism. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-74690. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel. It has been rated as critical. This vulnerability affects the function at91_ping of the file at91sam9_wdt.c of the component at91sam9_wdt. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-74687. Attacking locally is a requirement. No exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in Linux Kernel up to 7.1.8. It has been declared as very critical. This affects the function kbd_keycode of the component TTY Reference Counting. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-74675. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1.8. It has been classified as problematic. Affected by this issue is the function evdev_pass_values of the component evdev. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-74673. The attack requires local access. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.1.8 and classified as very critical. Affected by this vulnerability is the function ip_vs_in_icmp of the component ipvs. The manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-74669. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.151/6.12.103/6.18.44/7.1.8 and classified as very critical. Affected is the function packet_set_ring of the component packet. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-74666. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.103/6.18.44/7.1.8. This impacts the function bpf_prog_run_generic_xdp of the component Generic XDP. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-74665. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.8. This affects the function ovs_flow_cmd_new of the component openvswitch. Performing a manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2026-74664. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.