2026

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named tr

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap_prepare Commi

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for_ea

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response lengt

In the Linux kernel, the following vulnerability has been resolved: rapidio: mport_cdev: fix use-after-free in dma_req_

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in __vi

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime i

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3_gadge

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91_udc: drain polled-VBUS timer/work

In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freein

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix use-after-free on sound c

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in u

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvc_func

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent deadlock during ep0 read

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds A

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trail

In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensor_

In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Fix out-of-bounds access for newdevs

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_s

In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on R

In the Linux kernel, the following vulnerability has been resolved: media: vicodec: fix out-of-bounds write in FWHT enc

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs_direct_prop

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci_write_lega

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_r

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length c

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in read_block_state(

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store()

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destro

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate use

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs_uuid_add_file fail

In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_serve

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock n

In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping

In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_che

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_layout

In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsv

In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-fr

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfs

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writebac

In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd

In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async CO

In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_sti

In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_lo

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listen

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREAT

In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to socka

In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATT