2026

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after ini

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 ("OP

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix DM I2C teardown race DM I2C a

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read s

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Take cpa_lock around large-page collaps

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix counter type in iwl_fwrt_dump_er

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanit

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: guard against division by zero in iw

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Avoid stack over-read in debug output

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix task_struct reference leak in recover_

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Avoid possible memory reclaim dead

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: remove broken string co

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udf_syml

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration

In the Linux kernel, the following vulnerability has been resolved: speakup: keyhelp: guard letter_offsets possible out

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgq_inited

In the Linux kernel, the following vulnerability has been resolved: misc: ad525x_dpot: use driver core groups for sysfs

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-af

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans dev

In the Linux kernel, the following vulnerability has been resolved: mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_par

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses

In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpf_a

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-relate

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for gotox insn

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Terminate all descriptors witho

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize channel state checks

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: Keep link pointers valid on realloc fa

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrato

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexing

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_dom

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute leng

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds

In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that free

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpf_jit_free When b

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena load_acq

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock S

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested stru

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Fix CEQ tasklet use-after-free on remov

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: drain QP references after partial tab

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ib_query_qp() Whe

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_destr