2026

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger hand

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 tri

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images witho

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Id

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: bound altmode_desc[] per iteratio

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count be

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_messa

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO a

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption wit

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled con

In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails I

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_W

In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-leng

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_t

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: serialize iso_sock_clear_timer with

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_s

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share bu

In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registrat

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a gue

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' E

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the act

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indi

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6

In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in writ

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong sta

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fix division by zero in write

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial repl

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in err

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enque

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with sm

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpf_msg_p

In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_ju

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_han

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option

In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copyi

In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport r

In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get

In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink(). ip