2026

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_c

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_s

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sy

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() c

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_faul

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during

In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in th

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __close_file_table_ids

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientG

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf_g

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_n

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_re

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling befo

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is i

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/un

In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopback at

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_ru

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellati

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix advertising data UAFs hci

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transactio

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads

In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In afs_make_ca

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initialize_timer

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the c

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmidi e

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in ump_to_endpo

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digifac

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedb

In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_create

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an erro

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Una

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link grou

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kerne

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_rang

In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dump

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid_tx use-after-free on BA ses

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() for t

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field d

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't let an 'F' entry pin its own ins

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't leak the user namespace when the

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before releasin

In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix U