2026

In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00_add_iso_u

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usb_sdio_

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb_device in usb

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR_REQ length against the

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasp

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on create_cq mapping fai

In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcomm_mutex for the deferr

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free o

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufd_io

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification e

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notifica

In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup()

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execut

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe sn

In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: fix iovec leak when the async cmd is

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size overflow in io_vec_fi

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large x

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syz

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Curr

In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field acces

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_tr

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destina

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload l

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect_sn TLV walk to the skb

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV p

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: reject PDUs shorter than the LLCP header

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup p

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data_len bound checks to activation p

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix out-of-bounds write in nci_target_aut

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activ

In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip_do_fragment() i

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6_finish_output2() i

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH_RECEIVE response buffer

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nv

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled overs

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmet_pci_epf

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in h

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_inf

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardo

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in mag

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc->input if

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field->usage in hid_set_

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when hid->inputs is empty

In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A p

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec() race The check