2026

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_establ

In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vho

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_keys(

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification l

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_X

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is re

In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-tim

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests Th

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device re

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segment

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts Whe

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint

In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in ke

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when d

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_repl

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to preven

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport m

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing skb dst bef

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD pa

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length pre

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc_listen_out() a

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stoppi

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exi

In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc_setsock

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during

In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on dea

In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits Whe

In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net he

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetch

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound U

In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnec

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKB

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty

In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page tabl

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_v

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to av

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr_verify() The

In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPV

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in TX_RING s

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-sock

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring rec

In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP fr