2026

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Ma

In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open pa

In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fa

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restor

In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f_pos race in qat_vf_resume_write()

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix UAF in hci_unregister_dev(

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element l

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdac_hdmi: Validate written enum valu

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum v

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_no

In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_ru

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory

In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK ti

In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bind

In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assig

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_

In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE comman

In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed

In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket ca

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion

In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super Cifs

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for upr

In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp_bpf_recvmsg() s

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_pop_d

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware t

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware te

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The vari

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same_client_has_lease(

In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_comple

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count f

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr befor

In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter incre

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3

In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor_busy in co

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel loo

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vcn()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_rele

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent potential lcn remains uninitializ

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting on

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpc

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after par

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed repl

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when pe