CVE-2026-98772

A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service DoS due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been...

CVE-2026-98775

A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to cause a system crash, resulting in a Denial of Service DoS, ...

SUSE-SU-2026:4889-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. - CVE-2026-68158: libceph: Fix multiplication overflow in...

SUSE-SU-2026:4888-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63795: 9p: avoid putting oldfid in p9clientwalk error path bsc1272136. - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput append...

RLSA-2026:87375 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the security issues, including the impact, a CVSS score,...

CVE-2026-98771

A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated...

CVE-2026-98770

A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...

CVE-2026-98767

A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leaves the interrupt line continuously asserted, triggering an...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

CVE-2026-98766

A flaw was found in the Linux kernel's Aspeed virtual hub vhub driver. When a device is removed, scheduled wakeup tasks are not properly canceled, allowing background work to run after the associated memory structures have been freed. A local attacker could exploit this race condition to trigger ...

CVE-2026-98765

A flaw was found in the Linux kernel's USB dummy Host Controller Driver dummy-hcd. This vulnerability occurs because the driver fails to properly wait for active request completion callbacks before unbinding or unloading the module. A local attacker could trigger this race condition, leading to...

CVE-2026-98764

A flaw was found in the Linux kernel's USB Universal Serial Bus FunctionFS gadget subsystem. A local user can cause a Denial of Service DoS by triggering a kernel crash when querying endpoint descriptors on a USB gadget configured with lower-speed settings than the active connection speed. In thi...

CVE-2026-98763

A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service DoS or potentially execute arbitrary code. When disabling a...

CVE-2026-98761

A flaw was found in the Linux kernel's USB Type-C Port Manager TCPM. This issue may result in a denial of service DoS or unintended power delivery on the affected port. When a USB Type-C cable is disconnected while signaling a Fast Role Swap FRS, the controller autonomously begins sourcing bus...

CVE-2026-98760

A flaw was found in the Linux kernel's TPS6598x USB Type-C driver. When a partner device connects, the driver fails to properly initialize temporary memory structures allocated on the stack before registering the connection. An attacker connecting a USB Type-C device could exploit this flaw to...

CVE-2026-98758

A flaw was found in the Linux kernel's USB Type-C Connector System Software Interface UCSI GLINK driver. A local attacker with administrative privileges could trigger this flaw during device removal, leading to a Denial of Service DoS or potentially arbitrary code execution. The issue occurs...

CVE-2026-98759

A flaw was found in the Linux kernel's USB Type-C TI Power Delivery tipd driver. The driver fails to initialize memory for descriptor structures when handling partner device connections. An attacker connecting a USB device can cause the system to invoke uninitialized function pointers, leading to...

CVE-2026-98757

A flaw was found in the Linux kernel's Cadence USB3 gadget driver. This vulnerability can lead to a Denial of Service DoS through a system crash or potentially allow privilege escalation. During device teardown, the driver releases memory without waiting for pending background work tasks to finis...

CVE-2026-98756

A flaw was found in the Linux kernel's Cadence USB3 driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. During device discovery of a multi-function Cadence USBSS Peripheral Component Interconnect PCI device, the driver attempts to access shared da...

CVE-2026-98755

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. When sending control messages across a Logical Domain Channel LDC, the driver transmits packets without completely clearing the allocated memory buffer first. A connected peer can inspect these messages to access...