2026

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the des

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its ma

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback th

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA wi

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggr_reset_stat

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length befo

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio bu

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio bu

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio bu

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_scratchbuffers idempot

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal T

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in set_termios

In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transfer_ar

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: set have_execfd only once the interpre

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init() before parse_earl

In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list

In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal with premature interru

In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cl

In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak int

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error p

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open

In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event"

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace trace_pipe

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt f

In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->compl

In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned address

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in get_loc

In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, bl

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges fo

In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns tea

In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardow

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace

In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length t

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Loca

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode

In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardow

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When