2026

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: bound memcpy length in cmd callback

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream fa

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string pa

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocatio

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute obj

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: guard MBWU state before adding it to garb

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confu

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed pa

In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket re

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_o

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks T

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: validate Realtek vendor event len

In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpf_net_cont

In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconf_all NULL dereference when IPv6

In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network name

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_threa

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airoha

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect f

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buff

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resou

In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to t

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_a

In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_laten

In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6_addr_lst NULL dereference when IPv6

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect

In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sctp_au

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix deadlock between reset thread and rem

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix use-after-free on workqueue during re

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two p

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd

In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strrese

In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if drive

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit

In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in d

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76_

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drm_dev guards when detaching CCS re

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warnin

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind T