Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
nvdmedium
cve-2026-80993
The Linux kernel's phylink networking subsystem contains a flaw where a function that selects a PCS (a physical coding sublayer component) fails to properly validate the returned value, allowing an error pointer to be treated as a valid object. An attacker able to trigger this condition could cause a kernel panic, resulting in a denial of service on the affected system. The advisory does not state a numeric severity score. This could be relevant where the Linux kernel's phylink networking stack is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80992
The Linux kernel's ravb Ethernet driver can dereference an invalid PTP clock pointer, which may cause a crash or denial of service when the clock is queried before the interface is first opened or after a registration failure. This could be relevant where the ravb driver is deployed in automotive systems, since it is used for Renesas Ethernet interfaces that may appear in embedded or in-vehicle networking hardware. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80990
A flaw in the Linux kernel's Thunderbolt networking driver causes a HopID resource to be leaked when a requested ID does not match the one allocated, and the fix releases that ID properly. An attacker able to trigger this mismatch could exhaust the finite pool of HopIDs over repeated connections, potentially causing a denial of service on affected systems. The advisory does not state a severity rating. This could be relevant where the Linux Thunderbolt networking driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80989
A flaw in the Linux kernel's Thunderbolt networking driver leaves a connection marked as established after a failed attempt to bring it up, so a later teardown repeats cleanup that already happened, which can trigger a kernel warning that is fatal on systems configured to panic on warnings and can wrongly release a network resource still in use by another connection. The fix clears the stale login state so the teardown leaves the already-unwound connection alone. This could be relevant where Thunderbolt networking is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80987
The Linux kernel's NTB transport component mishandles oversized transmit buffers, causing a memory leak because the network driver never frees the packet. An attacker able to send oversized buffers through this path could exhaust memory over time, though the advisory does not state a severity rating. This could be relevant where the Linux NTB transport component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80988
A flaw in the Linux kernel's NTB transport driver caused network packets submitted while the QP link was down to be silently leaked instead of dropped, because the function returned a success code without actually queuing or freeing the packet. An attacker or normal traffic racing a link-down event could exhaust memory one packet at a time, though the advisory does not state a severity rating. This could be relevant where the Linux NTB transport component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80984
A flaw in the Linux kernel's SMC-D networking teardown path can cause a NULL pointer dereference, crashing the system when a socket is closed while a link group is terminating. An attacker able to trigger this condition could cause a denial of service. The advisory does not state a severity rating. This could be relevant where the Linux kernel's SMC-D networking is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80983
The advisory describes a socket reference-count leak in the Linux kernel's net/smc subsystem, fixed in smc_switch_conns(), which could allow an attacker to exhaust resources over time. This could be relevant where the Linux kernel is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80980
The Linux kernel's SMC networking code has a flaw where three connection-state flags share a single byte, so updating one flag can accidentally overwrite the others because they are written from different contexts without a common lock. An attacker could potentially trigger this race to corrupt connection state, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's SMC networking component is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80978
A flaw in the Linux kernel networking stack lets a stack of user-created IP tunnel devices advertise an excessively large headroom value that can overflow 16-bit packet header offsets, potentially causing memory corruption during packet transmission. The fix caps the advertised headroom at 512, matching the existing runtime limit, so a nonsensical stacked tunnel configuration can no longer publish an unbounded reservation to upper layers. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80973
The advisory describes a Linux kernel ALSA driver issue in the 6fire audio component, where the MIDI event length received from the device is not properly bounded, allowing a malicious or malformed device input to trigger unsafe behavior in the driver. This could be relevant where the ALSA 6fire driver is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80974
The Linux kernel's SM501 multifunction device driver does not free memory allocated during device setup when the device is removed, causing a memory leak. An attacker able to repeatedly trigger device removal could gradually exhaust system memory, though the advisory does not state a severity rating. This could be relevant where the Linux kernel SM501 driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80972
The Linux kernel's ALSA aloop driver fails to validate the sound card index value when a device is bound manually through sysfs, allowing an out-of-range value such as -1 to cause an out-of-bounds memory access. An attacker able to bind the device this way could trigger memory corruption, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's aloop driver is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80970
A flaw in the Linux kernel's ALSA USB audio driver (the FCP component) leaves a memory buffer uncleared, so an attacker with access to a malicious or compromised USB audio device could read uninitialized kernel memory that is copied back to userspace. The advisory does not state a severity rating, but it notes the disclosure can expose kernel memory contents, and the fix clears the buffer and requires the full expected data transfer. This could be relevant where the affected Linux kernel and ALSA USB audio subsystem are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80969
The Linux kernel ALSA mpu401 driver fails to validate the sound card index at probe time, so a device bound manually through sysfs with an invalid index such as -1 can cause an out-of-bounds memory access. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm any automotive deployment; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80967
The Linux kernel ALSA pcxhr driver can encounter a race during device probing where an interrupt may fire before a required lock is initialized, potentially causing unstable behavior. This could be relevant where the Linux kernel with the pcxhr audio driver is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80968
The advisory describes a Linux kernel ALSA driver issue in the mts64 component, where card index validity is checked at probe time. The stated impact is limited to that driver's probe handling, and the advisory does not describe attacker actions or a severity rating. This could be relevant where the ALSA mts64 driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80965
A flaw in the Linux kernel's ALSA serial-u16550 audio driver allows an attacker who manually binds the device through the sysfs interface to supply an invalid card index value, causing an out-of-bounds memory access. The advisory does not state a severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm an automotive connection; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80966
The advisory describes a Linux kernel ALSA portman2x4 driver issue where card index validity is not checked at probe time. This could be relevant where the ALSA portman2x4 driver is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80964
The advisory describes a Linux kernel ALSA virmidi driver issue where card index validity is checked at probe time, affecting the virmidi component. The advisory does not state a specific attacker capability or impact, and no severity rating is provided. This could be relevant where the ALSA virmidi driver is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80963
A flaw in the Linux kernel's dm-stats component can cause a crash (NULL pointer dereference) when memory allocation for per-CPU data fails, and the fix adds a NULL check to prevent that crash. This could be relevant where the Linux kernel is deployed in automotive systems, since a kernel crash may affect the availability of the underlying platform. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80961
The Linux kernel's dm-pcache component fails to validate two metadata fields from a cache device, allowing an attacker with CAP_SYS_ADMIN privileges to trigger out-of-bounds reads that can leak adjacent persistent memory to user space. This could be relevant where the Linux kernel's dm-pcache module is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80959
A flaw in the Linux kernel's dm-pcache component allows a user with administrative privileges (CAP_SYS_ADMIN) who supplies the cache device to set a persisted offset that causes reads past the segment data boundary. This could be relevant where the Linux kernel's dm-pcache is deployed in automotive systems, since an attacker with those privileges could trigger out-of-bounds reads. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80958
A flaw in the Linux kernel's dm-pcache device-mapper target allowed a tail-kset read to extend past the segment data region into the following control area, because the read length was bounded by the raw segment size rather than the data region. An attacker able to trigger this read could cause out-of-bounds access to adjacent control data, though the advisory does not state a severity rating. This could be relevant where the Linux kernel's dm-pcache target is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdmedium
cve-2026-80956
A flaw in the Linux kernel's dm-pcache device-mapper target allows a crafted cache image to cause the allocator to return an uninitialized cache segment, which can then be written through a NULL data pointer and crash the system. The issue is resolved by limiting the allocator's search to only initialized segments. This could be relevant where the Linux kernel's dm-pcache target is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.