2026

In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concur

In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer realloc

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-len

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_de

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_in

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When

In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardow

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns tea

In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling

In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event"

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal T

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback th

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its ma

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the des

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference c

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on start_st

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe fa

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streamin

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds i

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on start_stre

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal to

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after relea

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_tas

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overfl

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before mappin

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_entit

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_ini

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling T

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcp_bpf_se

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down lis

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod re

In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MT

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure i

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drm_dev guards when detaching CCS re

In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if drive

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd

In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buff

In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network name

In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummy_hcd: prevent fifo_req reuse duri

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read(

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in j