Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-90419
The Linux kernel's nilfs2 filesystem has a vulnerability where malformed filesystem images can cause an out-of-bounds read during super root block parsing. An attacker could exploit this by supplying a crafted filesystem image, potentially causing the kernel to read beyond the intended memory boundary. The advisory does not state a severity rating. This could be relevant where the Linux kernel with nilfs2 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90418
The Linux kernel's nilfs2 filesystem has a flaw where a dirty page can unexpectedly lose its dirty status, causing a kernel BUG that crashes the system; the fix returns an error when the filesystem has gone read-only and downgrades the crash to a one-time warning otherwise. This could be relevant where the Linux kernel with nilfs2 is deployed in automotive systems, since a kernel crash could disrupt a head unit or other embedded controller. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90417
A flaw in the Linux kernel's RDMA/cxgb4 driver can cause a memory leak or a double free when the device is in a fatal error state, because an error path frees a network buffer twice or not at all. An attacker able to trigger that error condition could potentially cause memory corruption or a crash, though the advisory does not state a severity rating. This could be relevant where the cxgb4 RDMA driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90416
A stack out-of-bounds read vulnerability exists in the Linux kernel's RDMA/mlx5 driver within the cc_params debugfs interface, where a congestion parameter value with bit 31 set causes a buffer to be read one byte past its boundary. An attacker able to trigger this condition could read a single byte of adjacent stack memory, a low-severity information disclosure. This could be relevant where the Linux kernel RDMA/mlx5 driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90415
A flaw in the Linux kernel's RDMA/cxgb4 driver causes a memory resource (an STAG index) to leak when a hardware table write fails, and the fix ensures that index is properly released. An attacker able to repeatedly trigger this failure could gradually exhaust the device's STAG index pool, though the advisory does not state a severity rating. This could be relevant where the cxgb4 RDMA driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90412
A flaw in the Linux kernel's NVMe target (nvmet) code causes a log page request to report success even when memory allocation for the log buffer fails, so the host believes the command succeeded while no data was actually transferred. An attacker or faulty condition triggering this allocation failure could cause the host to act on a false success response, though the advisory does not describe a direct exploit beyond this incorrect status reporting. The advisory does not state a severity rating. This could be relevant where the Linux nvmet subsystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90411
A flaw in the Linux kernel's NVMe over Fibre Channel driver can leak a DMA mapping when a second memory mapping step fails during request setup, because the code did not clean up the first mapping or leave the request in a safe state. An attacker able to repeatedly trigger this failure could exhaust DMA mappings, potentially causing resource exhaustion or degraded system availability. The advisory does not state a severity rating. This could be relevant where the Linux kernel NVMe-FC driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90410
The Linux kernel's davinci SPI controller driver has a memory-safety flaw: during device removal, the controller and its embedded data can be freed before the interrupt handler is drained, so a late or latched interrupt can dereference already-freed memory. An attacker able to trigger such an interrupt could cause a use-after-free, though the advisory does not state a severity rating. This could be relevant where the davinci SPI driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90409
The Linux kernel's Panthor GPU driver did not check whether user-requested virtual memory mappings overlapped with a reserved region set aside for kernel buffer objects, and the fix adds that overlap and overflow check. An attacker able to issue these mapping requests could potentially create conflicting mappings in the reserved region, though the advisory does not state a severity rating. This could be relevant where the Panthor driver is deployed in automotive systems, for example in GPU-accelerated automotive SoCs. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90408
The Linux kernel's ath12k Wi-Fi driver has a flaw in how it processes a firmware event related to channel switch announcements, where missing length checks and an unchecked count value taken from firmware can cause out-of-bounds memory reads. An attacker able to supply crafted firmware data could trigger these overreads, potentially exposing memory contents or causing instability, though the advisory does not state a severity rating. This could be relevant where the ath12k driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90407
The Linux kernel's ath11k Wi-Fi driver has a flaw in how it processes a firmware event related to channel-switch counting, where the driver fails to validate the length of the incoming data and the number of virtual devices reported by firmware. An attacker able to supply malformed firmware event data could trigger out-of-bounds memory reads, potentially exposing sensitive memory contents or causing a crash. The advisory does not state a severity rating. This could be relevant where the ath11k Wi-Fi driver is deployed in automotive systems, such as in-vehicle infotainment or connectivity modules using affected Qualcomm chipsets. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90406
The advisory describes a Linux kernel fix in the Qualcomm iris media driver that checks the return value of pm_runtime_resume_and_get() during core deinitialization, skipping hardware power-off and the matching pm_runtime_put_sync() call if the resume fails, while still performing software teardown. The stated impact is a runtime PM reference imbalance that could leave the device in an inconsistent power state. This could be relevant where the Qualcomm iris media driver is deployed in automotive systems, since Qualcomm SoCs are used in in-vehicle platforms. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90405
The Linux kernel's STM32 DCMI camera-interface driver contains error-handling bugs in its probe function that can cause memory leaks and a NULL pointer dereference. An attacker or faulty condition triggering these error paths could crash the system or leak kernel memory. The advisory does not state a severity rating. This could be relevant where the STM32 DCMI driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90404
A flaw in the Linux kernel's Chrome OS embedded controller debug interface left a panic notification handler registered after the device was removed, so a later system panic could trigger work that accesses freed memory. This could lead to a crash or unpredictable behavior, though the advisory does not state a severity rating. This could be relevant where this Chrome OS embedded controller driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90403
A flaw in the Linux kernel's rtlwifi PCI driver causes the rtl_pci_probe() function to skip cleanup steps when it fails, and it also fails to undo successful calls to rtl_init_rfkill(), ieee80211_register_hw(), and rtl_debug_add_one(). This could leave resources improperly released, and the advisory does not state a severity rating. This could be relevant where the rtlwifi PCI driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90402
A flaw in the Linux kernel's MHI host bus driver means that if creating an optional sysfs file fails during controller registration, the error path fails to properly unregister the controller device, leaving it registered. This could be relevant where the MHI bus driver is deployed in automotive systems, since MHI is used for modem and peripheral interfaces in some embedded and connected-vehicle platforms. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90401
The Linux kernel md software RAID personalities raid1, raid10 and raid456 previously advertised REQ_NOWAIT support, which is incomplete because write requests can partially succeed across mirrors and md cannot tell queue pressure from a real device failure, risking divergent mirror data. The fix removes REQ_NOWAIT support from these personalities, while keeping it for linear and raid0. The advisory does not state a severity rating. This could be relevant where the Linux kernel md RAID subsystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90400
The Linux kernel md (software RAID) subsystem has a race condition where spare disk configuration can change after an initial check but before a lock is acquired, potentially causing a NULL pointer dereference and system crash. This could be relevant where the Linux kernel md driver is deployed in automotive systems, such as embedded ECUs or telematics units running Linux. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90397
The Linux kernel's Qualcomm SCM firmware driver had a NULL pointer dereference bug where the interrupt handler and certain probe-time calls could access an internal structure before it was fully initialized, potentially causing a crash. This could be relevant where this Qualcomm firmware driver is deployed in automotive systems, since Qualcomm chips are used in some vehicle platforms. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90396
A flaw in the Linux kernel's block layer can leak a direct I/O reference when an integrity metadata mapping fails, which may lead to a resource leak. This could be relevant where the Linux kernel block layer is deployed in automotive systems, such as in embedded controllers or telematics units. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90395
The Linux kernel's ISP1704 charger driver fails to cancel pending work during device removal, which could allow a use-after-free or similar race condition when the driver is unloaded while work is queued or running. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment or telematics units using this charger driver. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90394
The Linux kernel's SC2731 charger driver, used for power-supply management, fails to cancel scheduled work when the driver is removed, which could lead to use-after-free issues if queued work runs after driver data is released. An attacker able to trigger this race could potentially cause memory corruption or a system crash, though the advisory does not state a specific severity rating. This could be relevant where the SC2731 charger driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90391
The Linux kernel's test_hmm test module has a flaw where a fault operation can report success even though no page was actually faulted, causing the calling process to retry the same address indefinitely and potentially hang. An attacker or faulty process could trigger this infinite loop condition when the mirrored memory has already exited, resulting in a denial of service. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90389
The Linux kernel md (software RAID) driver had a flaw where a memory-allocation flag could be saved by one task and restored by another during concurrent suspend operations, potentially leaving a task running in the wrong memory-allocation state. This could be relevant where the Linux md subsystem is deployed in automotive systems, though the advisory does not confirm any automotive deployment. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90390
A flaw in the Linux kernel's md/bitmap subsystem can leave a RAID array suspended when a configuration write fails, blocking further I/O to that array. An attacker or operator able to trigger this error path could cause a denial of service on the affected storage. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, such as ECUs or telematics units relying on software RAID. Confirm applicability through the product SBOM or dependency inventory.