2026

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MF

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fa

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_b

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parame

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error r

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allo

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration rac

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write in

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanu

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_r

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_read_

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna_umap lifetime

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount aft

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should test f

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuo

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl boun

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_byt

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payl

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in con

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put an

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endp

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in Qo

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd rou

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioct

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirrori

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry c

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has sin

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsibili

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytes

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_u

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEU

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the ne

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() bef

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone int

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header adj

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tup

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment ca

In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP F

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sct

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb rea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb rea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX A