CVE-2026-98874 wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cas...

CVE-2026-98873 netfilter: nf_conntrack_expect: zero at allocation time

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days...

CVE-2026-98873 netfilter: nf_conntrack_expect: zero at allocation time

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days...

CVE-2026-98873

The Linux kernel contains a vulnerability in the netfilter component specifically within nf_conntrack_expect . The root cause is a zero at allocation time issue, where data might not be properly initialized. While there are reports of potential uninitialized data leakage to userspace via ctnetlin...

EUVD-2026-108719

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days...

CVE-2026-98872 freevxfs: don't BUG() on unknown typed-extent type

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

CVE-2026-98872 freevxfs: don't BUG() on unknown typed-extent type

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

EUVD-2026-108718

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

CVE-2026-98872

The Linux kernel contains a vulnerability in the freevxfs file system where the vxfs_bmap_typed() function calls BUG() when encountering an unknown typed-extent type. This can cause a kernel crash when processing an on-disk typed extent with an unexpected value. The flaw is reachable via the ioct...

CVE-2026-98871 crypto: ccp - Fix possible deadlock in SEV init failure path

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...

CVE-2026-98871

The Linux kernel contains a potential deadlock vulnerability within the crypto: ccp component during the SEV init failure path . Specifically, the function __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false, even though the parent function has already acqu...

EUVD-2026-108717

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...

CVE-2026-98871 crypto: ccp - Fix possible deadlock in SEV init failure path

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...

CVE-2026-98870 ksmbd: remove stale channels from all sessions on teardown

In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...

CVE-2026-98870 ksmbd: remove stale channels from all sessions on teardown

In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...

CVE-2026-98870

The Linux kernel contains a use-after-free vulnerability within the ksmbd component. The issue arises because ksmbd_sessions_deregister() only removes a connection's channels from other sessions if the conn->binding flag is set. Since conn->binding is a transient flag cleared during certain...

EUVD-2026-108716

In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...

CVE-2026-98784

A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...

CVE-2026-98782

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When device initialization fails or during driver removal, the driver fails to unregister an allocated overlay adaptor platform device. A local user could exploit this flaw to cause a resource leak, potentially...

CVE-2026-98781

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When binding non-master display devices, the driver fails to release a device reference acquired during initialization. A local user could exploit this condition during device initialization or reconfiguration,...