VulDB Recent Entries

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.3. Impacted is the function i2c_get_adapter of the component i2c. The manipulation leads to use after free. This vulnerability is traded as CVE-2026-64279. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Linux Kernel up to 7.1.3. This issue affects some unknown processing of the file kvm_mm.h of the component guest_memfd. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-64283. The attack requires local access. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.3. This vulnerability affects unknown code of the component elan_i2c. Performing a manipulation of the argument x_traces/y_traces/width results in divide by zero. This vulnerability is reported as CVE-2026-64275. The attack requires a local approach. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.3. This affects the function rmi_f3a_attention of the component synaptics-rmi4. Such manipulation of the argument gpio_count leads to out-of-bounds read. This vulnerability is documented as CVE-2026-64277. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.1.3. Affected by this issue is the function rmi_f30_map_gpios/rmi_f30_attention of the component synaptics-rmi4/F30 handler. This manipulation of the argument gpioled_count/keycodemax/keycode causes out-of-bounds read. This vulnerability is registered as CVE-2026-64276. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improper access controls. This vulnerability is cataloged as CVE-2026-17432. The attack may be launched remotely. Furthermore, there is an exploit available. Applying a patch is advised to resolve this issue.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.1.3. Affected is the function goodix_ts_read_input_report of the component Goodix Touchscreen Driver. The manipulation of the argument max_touch_num leads to out-of-bounds write. This vulnerability is listed as CVE-2026-64274. The attack must be carried out locally. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. This impacts the function __mms114_read_reg of the component mms114. Executing a manipulation can lead to improper validation of array index. This vulnerability is tracked as CVE-2026-64272. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as very critical. This affects the function tw_interrupt of the component Touchwindow Driver. Performing a manipulation of the argument data results in out-of-bounds write. This vulnerability is identified as CVE-2026-64271. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. It has been declared as critical. The impacted element is the function mms114_interrupt of the component mms114. Such manipulation of the argument packet_size leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-64270. The attack can only be performed from a local environment. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been classified as problematic. The affected element is an unknown function of the component imx-lpi2c. This manipulation causes race condition. The identification of this vulnerability is CVE-2026-64278. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.1.3 and classified as very critical. Impacted is the function iforce_process_packet of the component iforce. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-64273. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.1.3 and classified as critical. This issue affects the function rdma_write_sg of the component RDMA/rtrs-srv. The manipulation of the argument desc[0].len leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-64269. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.3. This vulnerability affects the function siw_proc_rresp of the file drivers/infiniband/sw/siw/siw_qp_rx.c of the component siw. Executing a manipulation of the argument processed/laddr can lead to out-of-bounds read. This vulnerability is handled as CVE-2026-64268. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.38/7.1.3. This affects the function fuse_copy_fill of the component fuse. Performing a manipulation results in integer overflow. This vulnerability is known as CVE-2026-64267. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Linux Kernel up to 7.1.3. Affected by this issue is the function fuse_ref_folio of the component FUSE. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-64266. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.1. Affected by this vulnerability is the function adf_cfg_del_all/adf_devmgr_verify_id/adf_devmgr_get_num_dev/adf_devmgr_get_dev_by_id/adf_get_vf_real_id of the file adf_ctl_drv.c/adf_cfg_user.h of the component QAT Driver. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-64529. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 7.0.11. Affected is the function s3c24xx_serial_rx_enable of the component Serial. The manipulation results in deadlock. This vulnerability is reported as CVE-2026-64528. The attack requires a local approach. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.18.34/7.0.11. This impacts the function tsconfig_prepare_data of the component ethtool. The manipulation leads to handling of exceptional conditions. This vulnerability is documented as CVE-2026-64526. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.0.11. This affects the function hyperv_connect_vsp/drm_internal_framebuffer_create of the file drm/hyperv of the component drm/hyperv. Executing a manipulation of the argument resolution_count can lead to buffer overflow. This vulnerability is registered as CVE-2026-64524. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.