VulDB Recent Entries

A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.3-rc4. The impacted element is the function nv1a_ram_new of the file drm/nouveau of the component nouveau. The manipulation results in memory leak. This vulnerability is known as CVE-2026-98516. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.157/6.12.111/6.18.54/7.2.8/7.3-rc4. It has been rated as problematic. The affected element is the function virtio_gpu_execbuffer_ioctl of the file drivers/gpu/drm/virtio/virtgpu_submit.c of the component Virtio GPU Driver. The manipulation leads to memory leak. This vulnerability is traded as CVE-2026-98509. An attack has to be approached locally. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. It has been declared as problematic. Impacted is the function nouveau_connector_detect of the component nouveau. Executing a manipulation can lead to missing release of resource. This vulnerability appears as CVE-2026-98513. The attack requires local access. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. It has been classified as very critical. This issue affects the function drm_sched_fence_get_timeline_name of the file drivers/gpu/drm/nouveau of the component nouveau. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-98512. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.3-rc4 and classified as problematic. This vulnerability affects the function amdgpu_debugfs_test_ib_show of the component amdgpu. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-98519. The attack needs to be performed locally. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 and classified as critical. This affects the function xe_vm_close_and_put of the file drm/xe/vm of the component Xe. This manipulation of the argument pt_root causes null pointer dereference. This vulnerability is registered as CVE-2026-98510. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.6.157/6.12.111/6.18.54/7.2.8/7.3-rc4. Affected by this issue is the function virtio_gpu_fence_event_create of the file drivers/gpu/drm/virtio/virtgpu_submit.c of the component Virtio GPU Driver. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-98508. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.8/7.3-rc4. Affected by this vulnerability is the function nouveau_dmem_chunk_alloc of the file drm/nouveau/dmem.c of the component dmem. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-98518. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Linux Kernel up to 7.3-rc4. Affected is the function nouveau_bo_pin_locked of the file drivers/gpu/drm/ttm/ttm_bo.c of the component Nouveau Driver. Executing a manipulation of the argument pin_count can lead to operation on a resource after expiration. This vulnerability is tracked as CVE-2026-98511. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 7.3-rc4. This impacts the function nvif_vmm_dtor of the file drivers/gpu/drm/nouveau/nvif/vmm.c of the component nouveau. Performing a manipulation results in double free. This vulnerability is identified as CVE-2026-98515. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. This affects the function nouveau_uvmm_sm of the file drivers/gpu/drm/nouveau/nouveau_uvmm.c of the component uvmm. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-98517. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in WSO2 API Manager, Carbon User Manager Kernel, Enterprise Integrator, Identity Server, Identity Server as Key Manager, Open Banking AM and Open Banking IAM. The impacted element is an unknown function of the component Management Console. This manipulation causes improper input validation. The identification of this vulnerability is CVE-2024-4457. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.3-rc4. The affected element is the function virtio_gpu_vram_create of the file drm/virtio of the component virtio_gpu. The manipulation results in use after free. This vulnerability was named CVE-2026-98606. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. Impacted is an unknown function of the component CMF. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2026-98475. Local access is required to approach this attack. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.8. This issue affects the function dat_cond_set_storage_key of the component KVM s390. Executing a manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2026-98651. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.3-rc4. It has been rated as problematic. This vulnerability affects the function btf_struct_walk of the component BPF. Performing a manipulation results in divide by zero. This vulnerability is known as CVE-2026-98647. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 7.3-rc4. It has been declared as problematic. This affects the function mp2_select_ops of the file drivers/hid/amd-sfh-hid/amd_sfh_pcie.c of the component amd_sfh. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-98640. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. It has been classified as very critical. Affected by this issue is the function damon_hugetlb_mkold of the file mm/damon/vaddr.c of the component Damon Vaddr. This manipulation causes time-of-check time-of-use. This vulnerability appears as CVE-2026-98505. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.3-rc4 and classified as very critical. Affected by this vulnerability is the function nfc_get_local_general_bytes of the component NFC LLCP. The manipulation of the argument out_gb/gb_max_len results in use after free. This vulnerability is reported as CVE-2026-98483. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 and classified as very critical. Affected is the function build_prologue of the component BPF Exception Callback. The manipulation of the argument fp_used leads to memory corruption. This vulnerability is documented as CVE-2026-98641. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.