CVE-2026-98870

The Linux kernel contains a use-after-free vulnerability within the ksmbd component. The issue arises because ksmbd_sessions_deregister() only removes a connection's channels from other sessions if the conn->binding flag is set. Since conn->binding is a transient flag cleared during certain...

CVE-2026-98870 ksmbd: remove stale channels from all sessions on teardown

In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...

CVE-2026-98784

A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...

CVE-2026-98782

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When device initialization fails or during driver removal, the driver fails to unregister an allocated overlay adaptor platform device. A local user could exploit this flaw to cause a resource leak, potentially...

CVE-2026-98781

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When binding non-master display devices, the driver fails to release a device reference acquired during initialization. A local user could exploit this condition during device initialization or reconfiguration,...

CVE-2026-98780

A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs system filesystem interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpected registration failure can cause the memory to remain...

CVE-2026-98779

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During Audio CoProcessor ACP hardware initialization, child multi-function devices are not properly released if a power domain attachment fails or a hardware reset times out. This issue causes an internal resource leak, which may lead ...

CLSA-2026-1792753768 Fix of 29 CVEs

CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...

CVE-2026-98789

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter memory allocator. When releasing memory, objects queued while a delayed cleanup cycle is already in progress can fail to be reclaimed. A local user can exploit this vulnerability through repeated BPF operations, causing an unbounde...

CVE-2026-80764

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user could exploit a use-after-free vulnerability in the hcievent component. This occurs when the hciccreset function clears Bluetooth Low Energy LE lists without proper locking, allowing a debugfs reader to access freed memory...

CVE-2026-98849

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP driver. When creating a PFCP network interface, a failure during device registration triggers error handling that attempts to release an internal network socket twice. This improper cleanup results in a null pointer...

CVE-2026-98848

A flaw was found in the Linux kernel's AC100 Real-Time Clock RTC driver. During device probing, the driver accesses an internal array before initializing its element counter. On systems compiled with runtime bounds checking enabled, this premature access triggers an out-of-bounds trap, allowing a...

CVE-2026-98787

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Missing CPU migration protection during batch lookup and delete operations on hash tables allows a task to migrate between processors while freeing memory. A local attacker could exploit this condition to trigger a kerne...

CVE-2026-98785

A flaw was found in the Linux kernel's AMD display driver. During power management suspend operations under low memory conditions, the driver fails to handle memory allocation failures and retains an invalid null state. When the system subsequently attempts to resume or recover the graphics...

CVE-2026-98786

A flaw was found in the Linux kernel's AMD GPU display driver. During DisplayPort Multi-Stream Transport MST display disconnection, a race condition can cause the driver to access display data structures without verifying that they remain valid. A local user or physically proximate attacker...

CLSA-2026-1792753995 Fix of 14 CVEs

CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...

CLSA-2026-1792753697 Fix of 14 CVEs

CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...

CLSA-2026-1792753605 Fix of 16 CVEs

CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-46331 - net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 CVE-2026-64007 - netfilter: synproxy: refresh tcphdr after skbensurewritable CVE-2026-64007 CVE-2026-31532 - can: raw: fix...

CVE-2026-98783

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fails, the system attempts to use an invalid memory pointer,...

CVE-2026-98778

A flaw was found in the Linux kernel's Android Binder driver. This vulnerability allows a local user to cause a Denial of Service DoS or application disruption by triggering the unexpected closure of unrelated file descriptors in a target process. When an asynchronous transaction update supersede...