2026

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on com

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout bef

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length i

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short a

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX do

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to

In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the devic

In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the device n

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device netn

In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device ne

In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device n

In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device netns

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits

In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zer

In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and time

In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in the

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_IN

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode typ

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb rea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb rea

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirrori

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioct

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd rou

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fa

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MF

In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent tr

In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before i

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5_Overlap races while breaking str

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntra

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when pe

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpc

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same_client_has_lease(

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The vari

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware te

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware t

In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assig

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element l

In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open pa

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt79

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized fir

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value c

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shut