2026

In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent ma

In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for

In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping i

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer over

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket_job

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER wor

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in quer

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes lar

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on regis

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extractio

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_dat

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() err

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an ex

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_per

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its

In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap f

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build

In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arr

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_so

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the in

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_r

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint b

In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy check

In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect_md mode when metadata

In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forward

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() i

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnel

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for w

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in rai

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_

In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elf

In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_sel

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_J

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl aroun

In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid under

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum len

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_c

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroyin

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation _

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callbac