2026

In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Cap io_uring sense copy to max_response_

In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Fix TOCTOU in io_uring passthrough comma

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Limit NVMe request size to the

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop() failure d

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damon_start() failure P

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in apply

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeu

In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in str

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI report

SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allo

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues t

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_

In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_allo

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference du

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requ

In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name a

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpu_freelist push with o

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access() MDS se

In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in valida

In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobe_blacklist with RCU __withi

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: transfer the pmd dirty bit to the f

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in alloc_page

In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcg_r

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2c_

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add fail

In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMID_EL1 when MTE is disabled __

In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting I

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trig

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flus

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe d

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup eth

In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix DHCHAP secret leak on parse failu

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: fix double free of fabrics options when nv

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path

In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ tear

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix out-of-bounds write when receiving a

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmet_t

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: avoid out-of-bounds writes for c

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb_cma: fix null nodemask dereference in hu

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below th

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invali

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Fix null-ptr-def in extra size

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Prevent kexec range truncation