2026

In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_eve

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tok

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: reject duplicate CREDS_VALUE options gssx_

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized e

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake cal

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacemen

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocatio

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pu

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject oversized Read segments at decode t

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page bud

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on creat

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before recon

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count U

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If

In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on prob

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq loc

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-fligh

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix this_rq() assumptions in dispatch kf

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix rq->core_pick corruption under core

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't BUG_ON a destroyed DSQ in process_

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_alloc

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spi

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on faile

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device o

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdma_count

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path()

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event(

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_R

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method_el

In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premat

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffe

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with subbuf

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_da

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page sw

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer_buf on readdir

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client

In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write complet