CVE-2026-98921 ovl: fix UAF in ovl_do_mkdir() debug print

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldomkdir debug print ovldomkdir prints the input dentry with %pd after vfsmkdir. Since commit fe497f0759e0 "VFS: change vfsmkdir to unlock on failure.", vfsmkdir calls endcreating on the input dentry on failure...

CVE-2026-98921 ovl: fix UAF in ovl_do_mkdir() debug print

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldomkdir debug print ovldomkdir prints the input dentry with %pd after vfsmkdir. Since commit fe497f0759e0 "VFS: change vfsmkdir to unlock on failure.", vfsmkdir calls endcreating on the input dentry on failure...

CVE-2026-98920 netfs: Fix missing alloc tagging of direct mempool allocations

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folioqueue ENOMEM in writeback by adding a mempool" added a mempool for the folioqueues and made the request, subrequest and folioqueu...

CVE-2026-98920

The Linux kernel contains a vulnerability where direct mempool allocations for folio_queues skipped the alloc_hooks() wrapper. This caused missing alloc tagging when CONFIG_MEM_ALLOC_PROFILING_DEBUG=y is enabled, resulting in kernel warnings during file reads on a CIFS mount and missing data in /...

CVE-2026-98920 netfs: Fix missing alloc tagging of direct mempool allocations

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folioqueue ENOMEM in writeback by adding a mempool" added a mempool for the folioqueues and made the request, subrequest and folioqueu...

EUVD-2026-108884

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folioqueue ENOMEM in writeback by adding a mempool" added a mempool for the folioqueues and made the request, subrequest and folioqueu...

CVE-2026-98919 drm/xe: harden adjust_idledly() against divide-by-zero and overflow

In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several corner-case issues flagged during review: 1. If xegtclockinit failed to recognise the crystal clock, gt-info.timestampbase is 0, which mak...

CVE-2026-98919

The Linux kernel 's drm/xe component contains a vulnerability in the adjust_idledly() function. The issue stems from multiple corner-case flaws including divide-by-zero errors when timestamp_base is 0, u32 overflows during tick-to-ns conversions, and improper clamping that can cause values to exc...

EUVD-2026-108883

In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several corner-case issues flagged during review: 1. If xegtclockinit failed to recognise the crystal clock, gt-info.timestampbase is 0, which mak...

CVE-2026-98919 drm/xe: harden adjust_idledly() against divide-by-zero and overflow

In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several corner-case issues flagged during review: 1. If xegtclockinit failed to recognise the crystal clock, gt-info.timestampbase is 0, which mak...

CVE-2026-98918 mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

CVE-2026-98918

The Linux kernel contains a vulnerability where the DAMON (Deterministic Autorecover Memory Number) subsystem can cause a memory overrun on arm64 architectures. The issue arises in damon_ptep_mkold() because a random byte address, which may be unaligned, is passed to a page table walk. In some ca...

EUVD-2026-108882

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

CVE-2026-98918 mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

EUVD-2026-108881

In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, increase the default kernel stack size THREADSIZEORDER to 32 kB, in order to avoid kernel crashes which have been triggered recently when building the debian vt...

CVE-2026-98917

The Linux kernel experienced a vulnerability where the default kernel stack size for 64-bit parisc architectures was insufficient, leading to kernel crashes . Specifically, building the debian vtk9 package with gcc 17 triggered a kernel panic due to a low stack detected by the irq handler. The fi...

CVE-2026-98917 parisc: Increase kernel stack size to 32kb

In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, increase the default kernel stack size THREADSIZEORDER to 32 kB, in order to avoid kernel crashes which have been triggered recently when building the debian vt...

CVE-2026-98916 wifi: nl80211: check link is beaconing for color change

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link...

CVE-2026-98916

The Linux kernel contains a vulnerability within the wifi: nl80211 component. The root cause is a failure to validate that a link is beaconing before attempting a color change , which can lead to the system calling a driver with an invalid link . The vulnerability has been resolved by implementin...

EUVD-2026-108872

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link...