2026

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in accept_queue lifec

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix sdreq TLV list leak on parse/alloc/s

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match i

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when loggin

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: fix OOB read in pn533_acr122_is_rx_fram

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: stop Tx NAPI before disabling the qu

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skb_checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu i

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dst_dev_

In the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect metadata through ch

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour repl

In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class Onl

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: clamp freelist reconstruction requ

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: leave the MDIO IRQ mappings to re

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cann

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx-

In the Linux kernel, the following vulnerability has been resolved: nfp: hold IPsec RX state under the XArray lock nfp

In the Linux kernel, the following vulnerability has been resolved: net/rds: size a connection's path set by the transp

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port

In the Linux kernel, the following vulnerability has been resolved: net: flush skb_defer_nodes in dev_cpu_dead() When

In the Linux kernel, the following vulnerability has been resolved: gve: DQO: fix header length used by gve_can_send_ts

In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range M

In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llc_mac_hdr_init() fa

In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlan_dev_hard_h

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi->pipe file reference leak in autofs

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak in attach_perf_ctx_d

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a single assign

In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_ACK_MSG to

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in rtx

In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-coo

In the Linux kernel, the following vulnerability has been resolved: af_packet: fix integer overflow in prb_calc_retire_

In the Linux kernel, the following vulnerability has been resolved: arm64/boot: Disable trapping of PMZR_EL0 writes to

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: bound the ATA passthru sense desc

In the Linux kernel, the following vulnerability has been resolved: bna: prevent IOC timer rearm during teardown bna:

In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xattr: don't assume the inode is locked in

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Return PERR_NOCPUS in remote_partiti

In the Linux kernel, the following vulnerability has been resolved: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_D

In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraph_data list when the res

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use d_instantiate_new() in ntfs_create_in

In the Linux kernel, the following vulnerability has been resolved: writeback: bound cleanup_offline_cgwb() rescans by

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in flush depe

In the Linux kernel, the following vulnerability has been resolved: writeback: report a Tasks-RCU quiescent state per c

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read_dts_node()

In the Linux kernel, the following vulnerability has been resolved: ipe: fix use-after-free when auditing a newly loade

In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_

In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr() return an offset p

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: enforce exact attribute length for SEG6_A