Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-89520
The Linux kernel scheduler has a locking flaw in its core-scheduling code where a core-scheduling mode change can occur in the middle of an in-flight task selection, causing the scheduler to operate on locks it does not actually hold and to release a lock it never acquired. An attacker able to trigger this race could cause kernel instability or corruption of scheduler state, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89521
The Linux kernel scheduler has a flaw where a task-selection function can release the run-queue lock mid-operation, allowing an interleaving selection to corrupt scheduling state and mis-account CPU time. An attacker able to trigger this condition could cause incorrect scheduling decisions or accounting errors, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89519
The Linux kernel's sched_ext scheduler component contains a vulnerability where a stale run-queue flag (SCX_RQ_BAL_KEEP) can cause the scheduler to keep running a task that has already been dequeued, which the advisory states is exposed when core scheduling interleaves dispatch and pick operations. An attacker able to influence scheduling behavior could potentially exploit this to cause incorrect task scheduling, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89518
A flaw in the Linux kernel's sched_ext scheduler could let an attacker trigger a deadlock or incorrect scheduling behavior in the dispatch code paths, with the advisory not stating a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, since the affected component is a general-purpose operating system kernel rather than an automotive-specific product. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89516
A flaw in the Linux kernel's sched_ext scheduler can cause a kernel crash (BUG_ON) when a deferred reenqueue operation runs after its associated dispatch queue has already been destroyed. An attacker able to trigger this condition could crash the affected system, representing a denial-of-service impact; the advisory does not assign a numeric severity score. This could be relevant where the Linux kernel with sched_ext is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89514
The Linux kernel's fnic SCSI over Fibre Channel over Ethernet driver allocates a VLAN descriptor using a sleep-capable allocation while holding an IRQ-safe spinlock, which is not permitted in that atomic context and can trigger a sleeping-from-invalid-context warning or a deadlock. The fix switches that allocation to GFP_ATOMIC so it is safe under the spinlock. This could be relevant where the Linux fnic driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89515
The Linux kernel SCSI core has a vulnerability where DMA padding bytes in scsi_alloc_sgtables() are left uninitialized, which can expose uninitialized kernel memory during SCSI/ATA command processing. An attacker able to issue crafted SCSI ioctl requests could trigger this uninitialized-value condition, which the advisory reports as a kernel memory-safety bug detected by KMSAN fuzzing. This could be relevant where the Linux SCSI subsystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89512
The advisory describes a fix for a device reference leak in the remoteproc SCP component, where a failed lookup could leave a device reference unreleased. This could be relevant where remoteproc is deployed in automotive systems, since remote processor management is used in some embedded and automotive platforms. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89509
The Linux kernel's ionic RDMA driver has a flaw where a counter object was allocated with zero bytes because the driver was not updated to the newer counter allocation scheme, causing a NULL pointer dereference. An attacker or normal operation triggering this code path could crash the system, which is a denial-of-service condition; the advisory does not state a separate severity rating. This could be relevant where the Linux kernel ionic RDMA driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89505
A flaw in the Linux kernel's RDMA/uverbs subsystem could let malformed provider input trigger a NULL pointer dereference, potentially causing a crash or denial of service. The issue is resolved by initializing the method_elm pointer for legacy bundles and returning NULL when no ioctl method is present. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89506
A flaw in the Linux kernel's RDMA subsystem allows a malicious local userspace program to trigger a NULL pointer crash in the mthca, irdma and siw drivers by failing to pass valid user data during memory registration. The advisory does not state a severity rating. This could be relevant where the Linux kernel RDMA subsystem is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89504
A flaw in the Linux kernel's AS3722 regulator driver causes a device-tree node reference to be released too early, leaving a dangling pointer that the device continues to use. An attacker able to trigger this condition could cause a use-after-free, which may lead to a crash or other memory-corruption effects, though the advisory does not state a specific severity rating. This could be relevant where the AS3722 regulator driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89502
A vulnerability in the Linux kernel ring-buffer code could cause memory to be freed using the wrong allocation order when sub-buffers use an order greater than zero, potentially leading to memory corruption. An attacker able to trigger this condition could exploit it to disrupt system stability or possibly execute code, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89503
A race condition in the Linux kernel's ring-buffer code can cause a reader page to be allocated with an outdated or mismatched buffer order when the subbuffer order is changed concurrently. An attacker able to trigger this race could cause the allocated memory size to not match the recorded order, though the advisory describes the impact as limited and does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89501
A race condition in the Linux kernel's ring-buffer code can occur when resizing a sub-buffer, because the operation does not hold the cpu_buffer lock, potentially allowing concurrent access to shared state. An attacker able to trigger this race could cause memory corruption or a crash, though the advisory does not state a specific severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89499
The Linux kernel ring-buffer has a flaw where a failed page swap during remote reader updates is treated as if it succeeded, which can corrupt the reader's page list. An attacker able to trigger heavy event activity on a small buffer could exploit this to cause incorrect buffer handling, though the advisory does not state a severity rating. This could be relevant where the Linux kernel ring-buffer is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89500
A flaw in the Linux kernel's ring-buffer code can cause a kernel crash or memory leak when a cached reader page is freed after a concurrent ring buffer resize, because the page is freed using the wrong size order. This could be relevant where the Linux kernel is deployed in automotive systems, since a kernel crash or memory leak could affect the availability of an affected system. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89498
The advisory describes a fix for a double-free of trailer_buf in the Linux kernel's orangefs filesystem when a readdir copy operation fails, which could allow an attacker to trigger memory corruption. The advisory does not state a severity rating or confirm any automotive deployment. This could be relevant where the Linux kernel with orangefs is deployed in automotive systems, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89496
The advisory describes a memory leak in the Linux kernel's ocfs2 file system, triggered by a copy_file_range operation within the same file system, which leaves allocated memory unreferenced. An attacker able to perform such file operations could cause memory to be leaked, potentially leading to resource exhaustion over time. The advisory does not state an explicit severity rating. This could be relevant where the Linux kernel with ocfs2 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89497
A flaw in the Linux kernel's orangefs filesystem driver can cause a buffer overflow when a client debug entry begins with a space, because the memory allocated for the keyword is sized incorrectly while the parser copies a longer token. An attacker able to supply such a malformed debug entry could write past the end of the allocated buffer, potentially causing memory corruption or a crash. The advisory does not state a severity rating. This could be relevant where the Linux kernel with orangefs is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89492
The Linux kernel's ocfs2 filesystem fails to validate directory-index entry counts when reading metadata, so a crafted on-disk image can set counts to 0xffff and cause an out-of-bounds read of memory beyond a 4KB metadata block. An attacker able to mount such an image could trigger this slab out-of-bounds read through any path lookup, stat() or open() on an indexed directory. The advisory does not state a severity rating. This could be relevant where the Linux kernel with ocfs2 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89490
The advisory describes a fix for a readdir position truncation issue in the ocfs2 file system on 32-bit kernels, which is a Linux kernel component. This could be relevant where ocfs2 is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89491
The Linux kernel's ocfs2 cluster heartbeat code has a flaw where a function that pins heartbeat regions can sleep while holding a spinlock, which can trigger kernel warnings or deadlocks and, if pinning fails partway, can leak a counter and leave heartbeat regions unprotected on later mounts. An attacker able to influence this code path could potentially cause a denial of service or unstable cluster behavior, though the advisory does not state a severity rating. This could be relevant where the Linux kernel with ocfs2 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89484
The Linux kernel's lockd component can crash with a NULL pointer dereference when a lockowner allocation fails, because the file lock is torn down while still referencing an owner that was never installed. An attacker able to trigger this allocation failure could cause a kernel crash, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89485
A use-after-free vulnerability in the Linux kernel's lockd component could let an attacker crash the system or corrupt kernel memory by racing a file release against a file-table traversal. The advisory does not state an automotive connection, so this is only relevant where the Linux kernel is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.