Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-90388
The Linux kernel's IOMMU DMA subsystem has a flaw where a non-blocking memory allocation path could fail without being properly detected, potentially leading to use of an invalid memory reference during IOMMU mapping. An attacker able to trigger this condition could cause a kernel fault or crash, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90387
A flaw in the Linux kernel's swiotlb component causes dynamic pools backed by the DMA atomic pool to store an incorrect virtual address, which can make memory freeing fail. An attacker able to trigger this condition could cause incorrect memory handling in the affected kernel, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90386
The Linux kernel's DesignWare I3C master driver can trigger an undefined-behavior error (shift-out-of-bounds) when a device-discovery operation runs on an empty bus and assigns no devices, as observed on boot on a Gigabyte/AMD server. An attacker able to trigger this condition could cause the kernel to log a UBSAN error, though the advisory does not state any further impact such as privilege escalation or denial of service. The advisory does not assign a severity rating. This could be relevant where the DesignWare I3C master driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90385
A flaw in the Linux kernel's md/raid1 software RAID driver can cause a system crash (kernel oops) when a new disk is added to an existing RAID1 array that has the serialize_policy setting enabled, because a required internal data structure is not initialized. An attacker able to trigger this configuration could cause a denial of service on the affected system. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90384
A flaw in the Linux kernel's iomap subsystem means that, in certain error scenarios, a batch of memory pages (folios) used during zero-range operations is not properly released, potentially causing a resource leak. The issue arises when the iomap_begin or iomap_end callbacks fail, and the practical risk is described as low because no current user triggers the iomap_end error path, while the iomap_begin case is only theoretically possible through XFS. This could be relevant where the Linux kernel is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90383
The Linux kernel's sgi-gru driver contained a flaw where its TLB miss handler walked process page tables without holding page-table locks or a page reference, and used a kernel page-table accessor on user page tables. An attacker could potentially exploit this unsafe page-table access to cause memory corruption or other undefined behavior, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90381
A flaw in the Linux kernel's mt76 Wi-Fi driver could cause incorrect handling when channel switches occur across different radio bands in a short timeframe, potentially leading to unstable or faulty wireless operation. This could be relevant where the mt76 driver is deployed in automotive systems, such as in-vehicle Wi-Fi or telematics units, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90382
A Linux kernel Wi-Fi driver issue in the mt76x02 component means that, in monitor mode with the fcsfail filter enabled, a corrupted over-the-air frame can trigger a kernel warning and, if panic_on_warn is set, crash the system. The fix removes the warning so such frames are silently discarded instead. This could be relevant where the mt76x02 Wi-Fi driver is deployed in automotive systems, such as in-vehicle infotainment or telematics units using affected MediaTek chipsets. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90378
A memory leak exists in the Linux kernel's mt792x Wi-Fi driver SDIO transmit path, where a network packet is not freed when frame preparation fails, such as when zero-length frames are dropped to prevent hardware transmit hangs. An attacker able to trigger this condition could cause memory to be exhausted over time, degrading or crashing the system. The advisory does not state a severity rating. This could be relevant where the mt792x Wi-Fi component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90377
A flaw in the Linux kernel's mt76 Wi-Fi driver causes received data frames on RRO 3.0 hardware to be queued to the wrong list, so they can stall and arrive out of order until another process happens to run. This could be relevant where the mt76 driver is deployed in automotive systems, such as in-vehicle infotainment or connectivity modules using affected MediaTek Wi-Fi chips. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90376
The advisory describes a Linux kernel fix in the mt76 mt7996 Wi-Fi driver, where an incorrect MLD ID in transmit descriptors could cause a firmware busy loop and MCU command timeout when a third link is in power saving mode. An attacker able to trigger this condition could cause a denial of service through firmware hang or timeout, though the advisory does not state a severity rating. This could be relevant where the mt7996 Wi-Fi component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90375
A flaw in the Linux kernel's mt76 Wi-Fi driver causes packet counters for multi-link stations to be credited to the wrong link, which can permanently stop the transmit scheduler from serving an affected station. This could be relevant where mt76-based Wi-Fi chipsets are deployed in automotive systems, such as in-vehicle connectivity or telematics units. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90374
A flaw in the Linux kernel's mt7996 Wi-Fi driver allowed a corrupt or reserved value in a received packet descriptor to be used directly as an array index, potentially causing an out-of-bounds access or a NULL pointer dereference. An attacker able to supply such a malformed descriptor could trigger a crash or other memory-safety failure in the affected driver. The advisory does not state a severity rating. This could be relevant where this Wi-Fi chipset driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90373
The Linux kernel's mt76 driver for MediaTek mt7915 Wi-Fi hardware had a locking flaw where removing a network interface could race with other operations, potentially leaking or double-allocating an internal resource slot (wcid). This could be relevant where this Wi-Fi chipset is deployed in automotive systems, such as in-vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90372
A flaw in the Linux kernel's mt76 Wi-Fi driver for the MT7915 chipset could cause an incorrect value to be written to the wireless firmware when a connected device reports no supported spatial streams. This could be relevant where this chipset is deployed in automotive systems, such as in-vehicle Wi-Fi or telematics units. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90371
The Linux kernel's mt76 Wi-Fi driver has a buffer recycling race condition in its RXDMAD_C handling, where buffers tied to a different NAPI could be recycled incorrectly. An attacker could potentially exploit this race to cause memory corruption or a system crash, though the advisory does not state a specific severity rating. This could be relevant where the mt76 driver is deployed in automotive systems, such as in-vehicle infotainment or telematics units using MediaTek Wi-Fi chips. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90370
A flaw in the Linux kernel's mt76 driver for the mt7996 Wi-Fi chipset could let a malformed firmware response cause an infinite loop that hangs the CPU during device probe, and it also reads a value without checking bounds. The advisory does not state a severity rating. This could be relevant where this Wi-Fi chipset is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90369
A flaw in the Linux kernel's mt76 Wi-Fi driver could let an attacker trigger out-of-bounds memory reads or writes when data lengths are not multiples of four, potentially causing memory corruption or a crash. This could be relevant where the mt76 Wi-Fi driver is deployed in automotive systems, such as in-vehicle infotainment or telematics units using affected MediaTek wireless chips. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90368
The advisory describes a Linux kernel flaw in the mt7915 Wi-Fi driver where a failed interface addition leaves stale state, including leaked indices, a leftover firmware entry, and a dangling monitor pointer that could be dereferenced. An attacker able to trigger this failure path could cause resource leaks or a stale-pointer access, though the advisory does not state a severity rating. This could be relevant where the mt7915 Wi-Fi component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90366
A flaw in the Linux kernel's mt76 driver for the mt7996 Wi-Fi chipset means that when a channel-switch countdown is active, the driver could build a beacon update command larger than the buffer reserved for it, potentially causing a kernel panic. An attacker able to trigger this condition could crash the affected system, representing a denial-of-service risk. The advisory does not state a numeric severity rating. This could be relevant where this Wi-Fi chipset is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90367
A race condition in the Linux kernel's mt7996 Wi-Fi driver could let a reset event and a channel switch happen at the same time, corrupting internal DMA descriptors or tokens. This could be relevant where this MediaTek Wi-Fi chipset is deployed in automotive systems, though the advisory does not confirm any automotive use. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90365
The Linux kernel's mt76 Wi-Fi driver did not cancel two scheduled work items, reset_work and rc_work, when a wireless device was unregistered, leaving them able to run after the hardware had stopped. If one of these fired in that window, it could restart hardware operations on an already unregistered device or access station state that was being torn down, potentially causing instability or a crash. The advisory does not state a severity rating. This could be relevant where the mt76 Wi-Fi driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90364
A flaw in the Linux kernel's ACPI processor driver means that if initialization fails partway through, a cpufreq policy notifier is left registered instead of being cleaned up. This could be relevant where the Linux kernel is deployed in automotive systems, since the affected code is part of the kernel's power and CPU frequency management. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90362
A flaw in the Linux kernel's MSM DSI display driver involved calling dev_pm_opp_set_rate(0), which removed a required power vote without actually stopping the clock, leaving it running without necessary power backing. An attacker able to trigger this condition could cause the clock to operate without proper power support, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel MSM DSI driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-90361
The Linux kernel's ath11k Wi-Fi driver has a memory leak in the ath11k_service_ready_ext_event() function, where a temporary allocation made during TLV parsing is freed on the success path but not on the error path. An attacker or faulty input that causes parsing to fail after the allocation could trigger the leak, potentially leading to memory exhaustion over repeated occurrences. The advisory does not state a severity rating. This could be relevant where the ath11k driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.