VulDB Recent Entries

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 7.1.8. This impacts the function vt_k_ioctl of the component Virtual Terminal. The manipulation results in permission issues. This vulnerability was named CVE-2026-74676. The attack needs to be approached locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1.8. It has been rated as very critical. This affects the function zap_pte_range of the component Direct Page Table Reclaim. The manipulation leads to incorrect control flow. This vulnerability is uniquely identified as CVE-2026-74674. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 7.1.8. It has been declared as critical. The impacted element is the function xattr_verify of the file security.ima of the component ima. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2026-74671. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.151/6.12.103/6.18.44/7.1.8. It has been classified as critical. The affected element is the function tpacket_snd of the component Packet Socket TX Ring. Performing a manipulation of the argument hard_header_len results in race condition. This vulnerability is known as CVE-2026-74668. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.6.151/6.12.103/6.18.44/7.1.8 and classified as very critical. Impacted is the function ip_vs_enqueue_estimator of the file net/netfilter/ipvs/ip_vs_est.c of the component ipvs. Such manipulation leads to buffer overflow. This vulnerability is traded as CVE-2026-74670. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.1.8 and classified as problematic. This issue affects the function bond_alb_monitor of the file drivers/net/bonding/bond_alb.c of the component Bonding. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-74726. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.8. This vulnerability affects the function snoop_file_read of the file mm/usercopy.c of the component lpc-snoop. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-74729. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.8. This affects the function adjust_ptr_min_max_vals of the component bpf. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-74720. The attack needs to be performed locally. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 7.1.8. Affected by this issue is the function mlx5_fw_tracer_trigger_core_dump_general of the file drivers/net/ethernet/mellanox/mlx5/core/fw_tracer.c of the component fw_tracer. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2026-74717. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.8. Affected by this vulnerability is the function exec_queue_set_hang_replay_state of the component drm xe. Performing a manipulation of the argument replay_state results in memory leak. This vulnerability is cataloged as CVE-2026-74699. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 7.1.8. Affected is the function ncsi_send_cmd_nl of the file net/ncsi/ncsi-cmd.c of the component NCSI. Such manipulation of the argument length leads to out-of-bounds read. This vulnerability is listed as CVE-2026-74694. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.1.8. This impacts the function data_ep_set_params of the component usb-audio. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2026-74682. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.44/7.1.8. This affects an unknown function of the component Vmalloc. The manipulation results in use after free. This vulnerability is identified as CVE-2026-74672. The attack is only possible with local access. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.103/6.18.44/7.1.8. The affected element is the function ipheth_sndbulk_callback of the component ipheth. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-74677. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Linux Kernel up to 7.1.8. The impacted element is the function tbnet_tear_down of the component Thunderbolt Network Driver. The manipulation leads to race condition. This vulnerability is referenced as CVE-2026-74691. The attack can only be performed from a local environment. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1.8. It has been rated as critical. Impacted is the function packet_parse_headers of the component Packet Socket. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-74667. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.6.151/6.12.103/6.18.44/7.1.8. It has been declared as very critical. This issue affects the function mac802154_beacon_worker of the component mac802154. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-74661. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel. It has been classified as critical. This vulnerability affects the function inet_frag_create of the component inet frags. This manipulation causes race condition. This vulnerability is handled as CVE-2026-74662. The attack can be initiated remotely. There is not any exploit available. It is suggested to install a patch to address this issue.

A vulnerability was found in Linux Kernel up to 6.18.44/7.1.8 and classified as problematic. This affects the function damon_pa_migrate/damos_va_migrate/damon_migrate_pages of the file mm/damon/ops-common of the component Damon. The manipulation of the argument target_nid results in memory leak. This vulnerability is known as CVE-2026-74644. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.1.8 and classified as problematic. Affected by this issue is the function br_mrp_alloc_test_skb of the component MRP. The manipulation leads to use of uninitialized variable. This vulnerability is traded as CVE-2026-74659. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.