Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-89574
The Linux kernel's device-mapper array code did not fully validate on-disk block headers when reading them, allowing a crafted metadata block with an oversized entry count to push a read past its buffer. An attacker able to supply such metadata could trigger an out-of-bounds read during cache activation, which the advisory treats as a memory-safety vulnerability. This could be relevant where the Linux kernel device-mapper subsystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89572
The advisory describes a fix in the Linux kernel's cpufreq apple-soc driver for OPP table cleanup, affecting systems using that driver. The advisory does not state an attacker impact or a severity rating, so no exploitation or severity details can be reported. This could be relevant where the Linux kernel cpufreq apple-soc driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89568
A flaw in the Linux kernel's kho_preserved_memory_reserve() function miscalculates the size of memory preservations larger than 2 GiB, causing undefined behavior. An attacker or faulty configuration could trigger this bug when such large, properly aligned memory reservations are made, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89566
A flaw in the Linux kernel's jbd2 journaling code causes the shrinker to hold a lock while scanning long lists of busy checkpoint buffers, which under memory pressure can lead to soft lockups or RCU stalls. An attacker able to trigger this condition could cause system hangs or stalls, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89567
The advisory describes a Linux kernel issue in jbd2, the journaling layer used by ext4 filesystems, where shrinker scans are now bounded by examined checkpoint buffers. The advisory does not state a specific attacker capability or impact, and no severity rating is provided. This could be relevant where the Linux kernel and ext4/jbd2 are deployed in automotive systems, such as infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89565
The advisory describes a Linux kernel fix for an IPIP tunnel issue in collect_md mode, where a socket buffer (skb) leak occurs when metadata_dst allocation fails. An attacker could potentially exploit this memory leak to cause resource exhaustion, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89562
A flaw in the Linux kernel's ip6_gre tunnel handling caused the hardware header length to be calculated incorrectly for NBMA tunnels, which could lead to malformed packet handling. An attacker able to influence tunnel traffic could potentially exploit this to cause memory corruption or a denial of service, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's ip6_gre tunneling is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89561
A NULL-pointer dereference flaw in the Linux kernel's IPv6 RPL source-routing receive path can be triggered when a network interface's MTU drops below the IPv6 minimum, causing the kernel to crash. An attacker able to send IPv6 traffic to the affected interface could exploit this to cause a denial of service. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89560
A flaw in the Linux kernel's Landlock security module allowed a process to create OverlayFS whiteout objects without holding the permission normally required for creating files, and in one case even when all file-creation rights were denied. An attacker able to run code under a restricted Landlock sandbox could bypass those restrictions to create such objects, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89557
The Linux kernel md software RAID driver fails to validate the bad-block shift value read from an on-disk superblock, allowing a crafted value to cause an integer overflow when computing bad-block sector and count positions. An attacker able to supply a malicious RAID superblock could trigger this overflow, which may lead to incorrect bad-block handling or a denial-of-service condition; the advisory does not state a numeric severity score. This could be relevant where the Linux md driver is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89556
The advisory describes a vulnerability in a component that validates string table section types, which could be relevant where this component is deployed in automotive systems. An attacker could potentially exploit this validation weakness, though the advisory does not state the specific impact or severity. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89554
The Linux kernel's MPTCP networking code contains a vulnerability where a field called local_id is not properly restored when rebuilding a connection request under SYN cookie handling, causing it to read stale memory that an off-path attacker could influence by sending concurrent MP_JOIN SYN packets. This can corrupt the path manager's internal bookkeeping of subflows for the connection. The advisory does not state a severity rating. This could be relevant where the Linux kernel's MPTCP stack is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89552
A flaw in the Linux kernel's parameter handling code could leave a parameter set to NULL when a memory allocation fails, which can later cause a kernel crash (NULL pointer dereference) in affected subsystems such as zswap. The fix ensures the new value is allocated before the old one is released, preventing the crash. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89549
The Linux kernel's sunrpc subsystem has a flaw where, if a service such as nfsd runs fewer threads than it has pools, some pools have no threads and connections routed to them hang indefinitely. An attacker could potentially cause a denial of service by leaving connections unserviced, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89547
The Linux kernel's SUNRPC service-pool code can leave a partially initialized RPC service running if a per-CPU memory allocation fails during startup, which can silently corrupt unrelated kernel memory and return garbage statistics. This issue is only reachable by a local administrator under memory pressure or fault injection, not by a remote attacker, and the advisory does not state a severity rating. This could be relevant where the Linux kernel's NFS/SUNRPC server components are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89546
A race condition in the Linux kernel's SUNRPC backchannel handling can occur when an NFS callback service is being torn down, potentially leaking resources or leaving requests linked to a service that is about to be freed. This could be relevant where the Linux kernel is deployed in automotive systems, such as in ECUs or telematics units running NFS-related services. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89539
Microsoft has released a fix for a flaw in the SUNRPC component of the Linux kernel that involves the rejection of duplicate CREDS_VALUE options. An attacker could potentially exploit this issue to cause a denial of service or other impact, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel's SUNRPC functionality is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89540
The advisory describes a race condition in the Linux kernel's sunrpc component, where a /proc entry is published before a lock is initialized, allowing a writer to acquire an uninitialized mutex. On production kernels this can let a second writer enter concurrently, shut down the first writer's client while still in use, and leak the losing client; on debug kernels it triggers a lock-used-without-init warning. This could be relevant where the Linux kernel's sunrpc/auth_rpcgss subsystem is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89538
A flaw in the Linux kernel's SUNRPC Kerberos v5 code allows a peer holding a valid GSS context to send a malformed token with an oversized "extra count" field, leaving an internal buffer in an inconsistent state; the fix rejects such tokens with a defined error. The advisory does not state a severity rating. This could be relevant where the Linux kernel's SUNRPC subsystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89535
A use-after-free vulnerability in the Linux kernel's svcrdma component could let an attacker trigger a crash or potentially execute code by racing device teardown against a concurrent device-unregister walk, and the advisory does not state a severity rating. This could be relevant where the Linux kernel's svcrdma (RDMA) subsystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89536
A race condition in the Linux kernel's SUNRPC client TLS handshake handling could allow a use-after-free of the underlying transport when a handshake times out or is interrupted, potentially causing a crash or memory corruption. This could be relevant where the Linux kernel's SUNRPC TLS client functionality is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89531
A flaw in the Linux kernel's svcrdma component causes it to accept a connection even when transport allocation fails, which could let an attacker trigger a denial-of-service condition. This could be relevant where the Linux kernel is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89529
A flaw in the Linux kernel's svcrdma RPC/RDMA Read list decoder allows a remote attacker to supply an oversized Read segment length that is not validated, potentially triggering a large memory allocation and leaking a resource. The advisory does not state a severity rating. This could be relevant where the Linux kernel's svcrdma component is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89527
The Linux kernel's svcrdma component has a flaw where a failed listener creation frees memory incorrectly, leaking a network namespace reference and unbalancing module reference counts. An attacker able to trigger this failure path could cause a resource leak that may lead to denial of service over time. The advisory does not state a severity rating. This could be relevant where the Linux kernel's svcrdma (RDMA-backed NFS server) component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89524
The Linux kernel's ath6kl Wi-Fi driver has a flaw where a short association request or response can cause an undersized length value to wrap around, making the driver treat it as a much larger length. An attacker could exploit this to copy extra memory from the kernel to user space, potentially disclosing sensitive data, though the advisory does not state a severity rating. This could be relevant where the ath6kl driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.