2026

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLen

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup

In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-fe

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPOR

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daem

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ec

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in pa

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when

In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ex

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fs

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on in

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non

In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for

In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping i

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in quer

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes lar

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on regis

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extractio

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_dat

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an ex

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_per

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-

In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arr

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the in

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation

In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forward

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() i

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnel

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for w

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_J

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl aroun

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_c

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroyin

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation _

In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after