2026

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has sin

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsibili

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytes

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_u

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEU

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the ne

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() bef

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone int

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header adj

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tup

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment ca

In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP F

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sct

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb rea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb rea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX A

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests head

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_initial

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add

In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to preve

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readah

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject non-resident records for resident-only

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue aga

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the S

In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-

In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device l

In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARN

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nand_select_target(

In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters F

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode typ

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump_label smp syncing The original

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion i

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Curre

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_IN

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request afte

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all d

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in the

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable T