Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-89483
The Linux kernel's NVMe driver has a flaw where a discard command can send uninitialized memory to a storage controller when a memory allocation fails under memory pressure. An attacker cannot trigger this remotely; it requires local memory pressure, and the impact is limited to leaking stale memory contents to the device rather than data corruption or code execution. This could be relevant where the Linux NVMe driver is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89481
A flaw in the Linux kernel's NVMe-over-TCP driver lets a malicious storage controller request data from a read operation, causing the host to send back the contents of a kernel memory buffer that was meant to receive data, potentially exposing stale kernel data. The vulnerability is rated as a host memory disclosure issue and is resolved by rejecting such requests when the operation is not a write. This could be relevant where the Linux NVMe-over-TCP driver is deployed in automotive systems, but the advisory does not confirm an automotive connection; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89480
A flaw in the Linux kernel's NVMe-over-TCP driver allows a storage controller to report a read as complete even when it returned fewer bytes than requested, so user space can receive uninitialized memory contents in place of the missing data. The issue affects the nvme-tcp component and was resolved by adding a byte count check that rejects such short reads; the advisory does not state a severity rating. This could be relevant where the Linux NVMe-over-TCP driver is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89476
A flaw in the Linux kernel's SCTP networking code can let a duplicate response to a stream reconfiguration request be processed twice, causing an internal counter to underflow. This could disrupt or crash affected systems, though the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89474
The advisory describes a Linux kernel power-supply driver issue in the bq256xx charger, where USB work is not drained before the charger is freed. This could be relevant where the bq256xx charger driver is deployed in automotive systems, since the flaw may allow an attacker to trigger unsafe memory access or a crash. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89473
The advisory describes a fix for a power supply reference leak in the bq25890 driver, a battery charger component in the Linux kernel. An attacker could potentially exploit this leak to cause resource exhaustion or a denial of service on affected systems. This could be relevant where the bq25890 driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89468
The Linux kernel's lp8788-charger power-supply driver contains a use-after-free flaw in its removal routine, where an interrupt handler can queue work after the driver has already flushed pending work, causing the work to run after memory is freed. An attacker able to trigger this race could cause the driver to access freed memory, which may lead to a crash or other memory-corruption effects. The advisory does not state a severity rating. This could be relevant where the lp8788-charger driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89466
A flaw in the Linux kernel's Qualcomm battery manager driver means a firmware-supplied battery string that fills its full field length is copied without a terminating character, so reading it can run past the end of the field into adjacent memory. This could expose unintended memory contents to user space and potentially cause a crash or other misbehavior. The advisory does not state a severity rating. This could be relevant where this Qualcomm battery manager driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89464
The advisory describes a Linux kernel fix in the twl4030_charger power supply driver that cancels worker threads through device-managed cleanup, addressing a flaw in how the driver handles those workers. An attacker able to trigger the affected code path could potentially cause improper worker handling, though the advisory does not state a specific severity rating. This could be relevant where the twl4030 charger driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89462
The advisory describes a fix in the Linux kernel's max17040 power-supply driver that propagates register read errors instead of ignoring them. This could be relevant where the max17040 fuel-gauge component is deployed in automotive systems, since an attacker able to trigger register read failures might cause incorrect battery or power-supply state reporting. The advisory does not state a severity rating. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89461
The advisory describes a Linux kernel fix in the max17040 power-supply driver that synchronizes work cancellation during suspend. Without this fix, an attacker could potentially trigger a race condition involving the driver's work handling, though the advisory does not state a specific severity rating. This could be relevant where the max17040 fuel-gauge driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89459
The Linux kernel has a flaw in its s390 per-CPU handling where, when built with older binutils (before version 2.39), an assembler macro is misparsed and the intended mviy instruction is silently not emitted. This means the interrupted per-CPU sequence is not marked in lowcore, so the exception return path cannot repair the per-CPU address register after migration, potentially causing incorrect behavior on affected s390 systems. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive or embedded systems on s390 hardware. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89457
The Linux kernel's s390 DASD driver has a flaw where certain sysfs attribute handlers can dereference unallocated private data during device online setup, causing a NULL pointer dereference and system panic. An unprivileged user could trigger this panic simply by reading a world-readable attribute during a narrow timing window, resulting in a denial of service. This could be relevant where the Linux kernel is deployed in automotive systems, though the advisory does not confirm automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89458
A flaw in the Linux kernel's s390/dasd driver causes a failed ESE read on an unallocated track to be reported as successful, so the block layer can receive stale or uninitialized memory instead of zeros. An attacker able to trigger this condition could potentially expose residual memory contents, though the advisory does not state an exploit scenario or severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89456
A flaw in the Linux kernel's s390 DASD storage driver causes a partially completed read request that goes through error recovery to lose its partial-completion length, so the system may report the request as fully complete and silently return zeroed data for the portion that was never actually read. This could allow an attacker to obtain incorrect data or cause data integrity issues, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's s390 DASD driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89454
The Linux kernel's PLDA PCIe controller driver fails to release IRQ domain resources when initialization errors occur, causing resource leaks. An attacker able to trigger these error paths could exhaust kernel resources, though the advisory does not state a severity rating. This could be relevant where the PLDA PCIe controller driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89453
The Linux kernel's AMD IOMMU driver leaks a PCI device reference each time it handles a PPR (page request) fault, because the code that looks up the requesting device never releases it afterward. Over time an attacker able to trigger these faults could exhaust PCI device references, potentially causing resource exhaustion or degraded system behavior. The advisory does not state a severity rating. This could be relevant where the Linux kernel's AMD IOMMU driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89451
A race condition in the Linux kernel's IOMMU SVA (Shared Virtual Addressing) code can leave a device handle partially initialized, so a concurrent operation may return a handle with a NULL device pointer. If that handle is later unbound, the kernel can dereference the NULL pointer, potentially causing a crash or denial of service. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89452
The Linux kernel's MSM IOMMU driver can leave a dangling entry in a global device list when certain registration steps fail during probe, which could later cause a crash if that list is traversed. This is a memory-safety issue in a kernel driver, and the advisory does not state a severity rating. This could be relevant where the Linux kernel with the MSM IOMMU driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89450
The Linux kernel's tegra241-cmdqv IOMMU driver fails to properly validate a guest-supplied virtual Stream ID before writing it into a hardware match register, so a value wider than the 20-bit field is silently truncated and can alias the wrong Stream ID. Because the value is guest-controlled, a virtual machine monitor could trigger this incorrect matching behavior. The advisory does not state a severity rating. This could be relevant where this IOMMU driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89448
The Linux kernel's IOMMU/VT-d subsystem can be misconfigured when tboot is enabled, because the code that requests ACS did not account for tboot, potentially leaving ACS disabled while the IOMMU is later forced on. This is a configuration weakness in the kernel rather than a direct attacker exploit, and the advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89449
The Linux kernel IOMMU subsystem has a memory leak in iommu_mock_device_add where, if device_add fails, the error path frees only the fwspec but leaves the dev_iommu structure allocated, as reported by kmemleak during Syzkaller fuzzing. An attacker able to repeatedly trigger this failure path could cause memory exhaustion, though the advisory does not state a severity rating. This could be relevant where the Linux kernel IOMMU subsystem is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89447
A flaw in the Linux kernel's iommufd subsystem causes an object reference to be leaked when internal accesses are skipped during an unmap operation, because the code locks the object before checking whether the access is internal. Repeated triggering of this path could exhaust resources and degrade or crash the affected system. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89445
A use-after-free flaw in the Linux kernel's iommufd selftest code for IOPF fault reporting could let an attacker trigger memory corruption by racing a fault report against a PASID detach, causing the code to access a freed handle. The advisory does not state a severity score. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm an automotive connection. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-89446
A flaw in the Linux kernel's iommufd subsystem can leave a lock and object reference unreleased when an internal memory-storage operation fails, which could lead to a resource leak or system instability. This could be relevant where the Linux kernel is deployed in automotive systems, such as in-vehicle infotainment or gateway controllers. Confirm applicability through the product SBOM or dependency inventory.