Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-93039
The Linux kernel's ASoC meson sound card driver has a memory-handling flaw in meson_card_reallocate_links() where a failed reallocation can leave a stale pointer, leading to a use-after-free and double free during error cleanup. An attacker able to trigger this failure path could potentially cause memory corruption or a crash. This could be relevant where the Linux kernel's meson ASoC driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-93038
The Linux kernel's ad5686 digital-to-analog converter driver lacks a NULL check on its chip information pointer, so a user who binds the driver to a device name not present in its match tables via sysfs driver_override can trigger a NULL pointer dereference. This could be relevant where the Linux kernel and this driver are deployed in automotive systems, potentially causing a crash or denial of service on affected devices. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-93037
The Linux kernel's RDMA/hfi1 driver contains a flaw where a failed sdma_txinit_ahg() call is ignored, so request processing continues even though initialization did not complete. An attacker could potentially trigger this error path to cause the driver to process an improperly initialized request, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel with RDMA/hfi1 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92525
A flaw in the Linux kernel's RDMA/rxe driver lets a local unprivileged user trigger an out-of-bounds read by posting a malformed send request, causing a local denial of service. The issue is a vmalloc out-of-bounds read in copy_data(), reproduced under KASAN and now fixed by validating the request's scatter-gather counts. This could be relevant where the RDMA/rxe component is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92524
A flaw in the Linux kernel's GICv3 ITS interrupt controller driver causes a resource leak when an interrupt allocation fails, because the error handling path does not properly tear down the associated interrupt. An attacker able to trigger this failure condition could cause a resource leak, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92523
A flaw in the Linux kernel's RDMA netlink subsystem allows a malformed dynamic counter attribute to be read without proper length validation, which an attacker could exploit to cause memory corruption or a crash. The advisory does not state a severity rating. This could be relevant where the Linux kernel's RDMA subsystem is deployed in automotive systems, but the advisory does not confirm any automotive use. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92522
A flaw in the Linux kernel's ACPI processor code could let an attacker cause out-of-bounds memory reads when the kernel parses IOAPIC hotplug records, because record lengths and headers were not fully validated before use. This could be relevant where the Linux kernel is deployed in automotive systems, such as ECUs or telematics units, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92521
The Linux kernel ACPI PCI subsystem has a use-after-free flaw where a freed acpi_pci_root object can remain referenced through device->driver_data, so a later acpi_pci_find_root() call may dereference a dangling pointer. An attacker able to trigger the relevant hot-add failure or root bridge removal path could cause a use-after-free, which may lead to a crash or potentially other memory-corruption effects. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92519
A memory leak exists in the Linux kernel's RISC-V BPF JIT compiler: when JIT compilation fails for a later subprogram, the cleanup routine bpf_jit_free() does not free the JIT context offsets array, leaking that memory. An attacker able to repeatedly trigger this failure path could exhaust kernel memory over time, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, for example in ECUs or telematics units running RISC-V hardware. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92520
A flaw in the Linux kernel's BPF subsystem allows a BPF program to read uninitialized stack memory when a queue or stack pop/peek helper fails to acquire a lock, because the helper returns an error without clearing the output buffer. An attacker able to run BPF programs could potentially observe leftover kernel stack contents, which is an information-disclosure risk. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, such as ECUs, infotainment units, or telematics gateways. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92517
A flaw in the Linux kernel's BPF handling on RISC-V processors means a specially crafted BPF program could trigger a crash (oops) and potentially leak stale register data through a map. This could be relevant where the Linux kernel is deployed in automotive systems, such as in ECUs or telematics units running RISC-V hardware. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92516
The Linux kernel contains a flaw in its BPF subsystem where the offset warning check for bpf_res_spin_lock incorrectly validates the offset for BPF_SPIN_LOCK instead of res_spin_lock_off. This could allow incorrect offset handling in that code path, though the advisory does not state a specific attacker impact or severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92515
A flaw in the Linux kernel's BPF subsystem allows a crafted user-supplied BTF (type information) input to trigger a kernel warning before capability checks are performed during map creation. The issue involves duplicate special fields in nested structures not being detected because the uniqueness tracking was reset at each recursion level. This could be relevant where the Linux kernel's BPF subsystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92505
The Linux kernel's AMD IOMMU driver contains a debugfs function, devid_write, that can access invalid memory when a loop finishes without finding a matching PCI segment, causing undefined behavior. An attacker able to trigger this code path could potentially cause a crash or other unpredictable behavior, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92504
A flaw in the Linux kernel's Intel thermal driver (int3400) means that when certain setup steps fail during device initialization, temporary files and memory created earlier are not properly cleaned up, leaving resources behind. An attacker able to trigger these failure conditions could potentially cause resource leaks that degrade system stability, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's Intel thermal driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92503
The Linux kernel's ext4 filesystem contains a deadlock vulnerability in its extended attribute (xattr) handling, where concurrent xattr operations can cause two threads to wait on each other indefinitely, hanging the affected system. An attacker able to trigger concurrent xattr workloads on a vulnerable system could cause a denial of service through this deadlock. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment units, telematics control modules, or gateway ECUs running Linux. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92502
The Linux kernel's ext4 filesystem has a writeback bug where, in data=journal mode, stale dirty and writeback tracking tags can be left on memory pages that are actually clean, causing warnings and potential data loss during a read-only remount such as at reboot. An attacker able to trigger this condition could cause a denial of service or data loss on an affected system. The advisory does not state a formal severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm an automotive connection. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92501
A race condition in the Linux kernel's ext4 filesystem can cause data-integrity errors, including failed fsync calls returning -EIO, when direct I/O and buffered writes overlap on the same file. An attacker or even normal concurrent I/O activity could trigger this race, leading to stale page cache warnings and I/O errors. The advisory does not state a severity rating. This could be relevant where the Linux ext4 filesystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92498
The Linux kernel's ath6kl Wi-Fi driver contains a flaw where several WMI event handlers read from an event buffer without first confirming the message is large enough, allowing an attacker to trigger an out-of-bounds read. This could be relevant where the ath6kl driver is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92497
The Linux kernel's ath12k Wi-Fi driver contains a buffer overread vulnerability in ath12k_wmi_op_rx(), where the firmware buffer is read without first verifying it holds enough data for a header. An attacker could potentially trigger an out-of-bounds read, though the advisory does not state a severity rating. This could be relevant where the ath12k driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92496
The Linux kernel's ath11k Wi-Fi driver contains a buffer overread vulnerability in ath11k_wmi_tlv_op_rx(), where a firmware buffer is read without first confirming it holds enough data for a header. An attacker could potentially trigger an out-of-bounds read, though the advisory does not state a severity rating. This could be relevant where the ath11k driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92495
A flaw in the Linux kernel's RDMA bnxt_re driver allows a user to create a read-only mapping of the DBR or toggle page that still retains write permission, which can later be upgraded to writable using mprotect and bypass the driver's write check. This could be relevant where the bnxt_re RDMA driver is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92494
The Linux kernel ext4 filesystem has a buffer_head memory leak in ext4_init_orphan_info() where a buffer reference obtained by ext4_bread() is not released when orphan block magic or checksum validation fails, because the cleanup loop skips the current buffer index. An attacker able to trigger these error paths could cause a memory leak, though the advisory does not state a severity rating. This could be relevant where the Linux kernel ext4 filesystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92493
A flaw in the Linux kernel's amd-pstate-ut CPU frequency testing module can cause a kernel crash (NULL pointer dereference) when the module is loaded on a system where the amd-pstate driver is not active, such as an Intel platform. An attacker or operator who can load this module on an affected system could trigger a denial-of-service crash of the kernel. The advisory does not state a formal severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-92492
A Linux kernel cpufreq driver for AMD processors, amd-pstate, has a flaw where two dynamic EPP callback paths can dereference a NULL policy pointer if a CPU is offline or the policy has been torn down during a race with CPU hotplug or driver teardown. An attacker able to trigger that race could cause a NULL pointer dereference, leading to a kernel crash or denial of service; the advisory does not state a formal severity rating. This could be relevant where the Linux kernel amd-pstate driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.