CVE-2026-98509

A flaw was found in the Linux kernel's virtio graphics processing unit virtio-gpu driver. A local user can cause a Denial of Service DoS by triggering a kernel memory leak during graphics command buffer processing. When invalid submission parameters are provided, the driver's error-handling path...

CVE-2026-98502

A flaw was found in the Linux kernel's ALPS Human Interface Device HID driver. The driver fails to properly unregister and release a secondary input device when the hardware is removed. A local user could exploit this issue by repeatedly disconnecting the device, causing a memory leak that can le...

CVE-2026-98508

A flaw was found in the Linux kernel's VirtIO GPU driver. This flaw allows a local user to cause a denial of service DoS by triggering a kernel crash. Under memory pressure, the driver fails to verify whether fence memory allocation succeeds during graphics command submission, leading to an...

CVE-2026-98506

A flaw was found in the Linux kernel's HugeTLB Huge Translation Lookaside Buffer subsystem. This flaw allows a local user to cause a Denial of Service DoS by triggering the dissolution of gigantic memory pages that lack runtime support. Because the kernel fails to verify runtime support before...

CVE-2026-98507

A flaw was found in the Linux kernel's memory management subsystem. Due to a missing synchronization barrier when preparing anonymous virtual memory areas, concurrent memory operations can be reordered. A local attacker can exploit this race condition by running concurrent threads on adjacent...

CVE-2026-98504

A flaw was found in the Linux kernel's PCI subsystem. When generating dynamic Open Firmware OF device tree properties, the kernel fails to verify that a subordinate bus exists for a PCI bridge before accessing its configuration. A local attacker or physical device configuration can trigger this...

CVE-2026-98503

A flaw was found in the Linux kernel's packet socket implementation. A local user can cause a Denial of Service DoS or system instability by triggering premature reuse of transmit ring buffer slots while packet data is still in flight. Because these shared memory slots may be released and reused...

CVE-2026-98501

A flaw was found in the Linux kernel's Alps Human Interface Device HID driver. If registration of an input device fails during configuration, the driver frees the device memory while communication channels are already active, leaving a dangling reference. An attacker capable of attaching a...

CVE-2026-98445

A flaw was found in the Linux kernel's XFS file system. A local user could cause a Denial of Service DoS by triggering an online file system repair under low-memory conditions. When a memory allocation failure occurs during repair block reservation, the kernel cannot cleanly recover from the erro...

CVE-2026-98443

A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been freed. A local user capable of mounting a specially crafted...

CVE-2026-98444

A flaw was found in the Linux kernel's XFS file system. When flushing disk quota records, the kernel fails to release the quota flush lock if an associated buffer cannot be retrieved. A local user could trigger this condition to cause a system deadlock, resulting in a Denial of Service DoS...

CVE-2026-98439

A flaw was found in the Linux kernel's Server Message Block SMB server, ksmbd. When a connection is closed while an asynchronous request is still waiting, the server fails to cancel active requests before waiting for them to complete. A remote client could exploit this flaw to prevent the...

CVE-2026-98442

A flaw was found in the Linux kernel's traffic control connection tracking action actct. An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service DoS or kernel memory corruption through a use-after-free vulnerability. This issue occurs because...

CVE-2026-98440

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while other parts of the system may still reference them. A local...

CVE-2026-98441

A flaw was found in the Linux kernel's traffic control conntrack action module actct. An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service DoS or kernel memory corruption. This issue arises when cloned network packets sharing an...

CVE-2026-98438

A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. When handling connection termination DATAFIN packets without payload data while checksum negotiation is enabled, the kernel fails to properly initialize memory before computing the packet checksum. A network peer could trigger...

CVE-2026-98437

A flaw was found in the Linux kernel's Qualcomm Iris video driver. A local user could cause a Denial of Service DoS or resource exhaustion through improper error handling during power domain configuration. When enabling or disabling power domains encounters an error, the driver fails to properly...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...