2026

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before cachin

In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when even

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the var ref when its initia

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a ba

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram st

In the Linux kernel, the following vulnerability has been resolved: tracing: Take the reference before publishing the n

In the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registration when enabling the hi

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_c

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate firmware log buffer metadata

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_job_open() return value

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop o

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping fai

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job

In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IR

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destroy RPMsg endpoints befor

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak return code when parsi

In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size che

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysf

In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publi

In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc_fl

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump Th

In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list

Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebi

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endp

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after r

In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accounting from ->ki_complet

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overconsume buffers when using

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publishin

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release all action references o

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame hand

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_brcm: legacy FCS: request needed tail

In the Linux kernel, the following vulnerability has been resolved: net: mana: Reserve extra CQ slot for the fence comp

In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow ta

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfs_unbu

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unl

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregister loggers before per-ne

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature erro

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super()

In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure Th

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference

In the Linux kernel, the following vulnerability has been resolved: idpf: disable DIM work before freeing q_vectors id

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan