2026

In the Linux kernel, the following vulnerability has been resolved: ieee802154: cc2520: fix FIFOP work use-after-free

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix dou

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation fib

In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket i

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued R

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iova_to_phys()

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when re

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asy

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion f

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitma

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in afs_dir_search_bucket()

In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afs_e

In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list c

In the Linux kernel, the following vulnerability has been resolved: hwmon: (gpio-fan) Fix use-after-free in alarm work

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop

In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divi

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exc

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC tile counts The s

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate AV1 tile counts The st

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ring's TPA state on qu

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle buffer allocation failure in bnxt_r

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring init failures in bnxt_in

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate TPA buffer allocation failures i

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Bound SW TPA IDs to prevent crashes FW su

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Prevent queue stop with deferred completio

In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag

In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect() and rtx S

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADD_ADDR when remov

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMB

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptio

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIF

In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callbac

In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping S

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2_parse_na

In the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewrite when the new DACL ex

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInfo reference leak in def

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount in cifs_queue_o

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifs_sb_tl

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs

In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount even

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs_defer_finish_one() xf

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args->total for parent pointer upda