VulDB Recent Entries

A vulnerability classified as problematic was found in Linux Kernel up to 6.18.34/7.0.11. Impacted is the function probe of the component davinci. Such manipulation of the argument clock-frequency leads to divide by zero. This vulnerability is referenced as CVE-2026-64236. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. This issue affects the function dma_handle_rx of the component pch_uart. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2026-64234. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.174/6.6.141/6.12.91/6.18.33/7.0.10. This vulnerability affects the function msm_disp_snapshot_add_block of the file drivers/gpu/drm/msm/dsi of the component DSI. The manipulation of the argument io_offset results in out-of-bounds read. This vulnerability was named CVE-2026-64231. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Linux Kernel. This affects the function ethnl_req_get_phydev of the component PHY. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-64228. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. Affected by this issue is the function text_poke_apply_relocation of the file ftrace_64.S of the component ftrace. Executing a manipulation of the argument rip can lead to memory corruption. This vulnerability is handled as CVE-2026-64235. It is possible to launch the attack on the local host. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.91/6.18.33/7.0.10. Affected by this vulnerability is the function blk_insert_cloned_request of the file blk-mq.c of the component block. Performing a manipulation results in stack-based buffer overflow. This vulnerability is known as CVE-2026-64232. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.33/7.0.10. Affected is the function tps65219_regulator_irq_handler of the component regulator. Such manipulation leads to missing initialization of a variable. This vulnerability is traded as CVE-2026-64230. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.34/7.0.10. It has been rated as very critical. This impacts the function broadcast_tlb_flush of the component x86 mm. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-64229. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.0.10. It has been declared as critical. This affects the function probe of the component ACPI thermal zone driver. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2026-64227. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. It has been classified as critical. The impacted element is the function uvc_function_bind of the file drivers/usb/gadget/function/uvc_configfs.c of the component UVC Gadget. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-64233. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.0.10 and classified as very critical. The affected element is the function otx2_pool_aq_init of the component octeontx2-pf. Executing a manipulation of the argument stack can lead to double free. This vulnerability is registered as CVE-2026-64222. The attack needs to be launched locally. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.0.10 and classified as very critical. Impacted is an unknown function of the component octeontx2-af. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-64225. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This issue affects the function ieee80211_parse_neg_ttlm/ieee80211_tid_to_link_map_size_ok of the component mac80211. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-64223. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.0.10. This vulnerability affects unknown code of the component ti-qspi. This manipulation causes use after free. This vulnerability is tracked as CVE-2026-64221. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 7.0.10. This affects the function fwnode_init of the component Device Property. The manipulation of the argument secondary results in stack-based buffer overflow. This vulnerability is identified as CVE-2026-64220. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.10. Affected by this issue is the function batadv_bla_purge_backbone_gw of the component batman-adv. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-64218. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.141/6.12.91/6.18.33/7.0.10. Affected by this vulnerability is the function netfs_extract_user_iter of the component netfs. Executing a manipulation can lead to memory corruption. The identification of this vulnerability is CVE-2026-64217. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.91/6.18.33/7.0.10. Affected is the function scx_root_enable_workfn of the component sched_ext. Performing a manipulation results in use after free. This vulnerability was named CVE-2026-64226. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.33/7.0.10. This impacts the function rvu_rep_rsrc_init of the component octeontx2-pf. Such manipulation leads to double free. This vulnerability is uniquely identified as CVE-2026-64224. Local access is required to approach this attack. No exploit exists. The affected component should be upgraded.

A vulnerability identified as very critical has been detected in Linux Kernel up to 7.0.10. This affects the function dc_process_dmub_aux_transfer_async of the file drm/amd/display of the component Display Core. This manipulation of the argument length/link_index causes stack-based buffer overflow. This vulnerability is handled as CVE-2026-64219. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.