CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

DEBIAN-CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

DEBIAN-CVE-2026-97902

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

DEBIAN-CVE-2026-97588

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly When hardware persistently returns -EBUSY after exhausting retries, the error propagates to cryptofinalizerequest. The crypto API's completion wrapper treats -EBU...

CVE-2026-97550

In the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in perbinval computation LOLLM noticed that we're doing the unit conversion in the perbinval computation backwards -- xfsbufinvallogspace's second parameter is supposed to be in bytes, but maxbinval is i...

CVE-2026-97545

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release newbp,...

DEBIAN-CVE-2026-97545

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release newbp,...

DEBIAN-CVE-2026-97534

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

AZL-104532 CVE-2026-97534 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

UBUNTU-CVE-2026-98138

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the remount-read-only path both clear the dirty bit only when NVolErrorsvol is false. ntfssyncfs clears it unconditionally, so any sync on a...

UBUNTU-CVE-2026-97610

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is initialized. The empty-iterator check can do the same. For synchronous...

UBUNTU-CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

UBUNTU-CVE-2026-98041

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons Consider the following program: r1 = mapvalue; / low 32 bits are zero at runtime / r6 = 0xdead000000000000; if w1 != 0 goto l1; l0: r1 += r6; r2 = u64 r1 + 0; exit; l1: r6 = 0;...

UBUNTU-CVE-2026-98005

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

UBUNTU-CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

UBUNTU-CVE-2026-98114

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

CVE-2026-98159

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware...

CVE-2026-98154

The Linux kernel contains a vulnerability in the nvme-rdma component related to the queue_rq path. When a -EIO error occurs, the path incorrectly reports a host path error but continues to clean up the command and unmap the SQE DMA . Because the path error helper already completes the request, th...

CVE-2026-98154 nvme-rdma: fix -EIO cleanup order in queue_rq

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queuerq On -EIO, the RDMA queuerq path reports a host path error and then still cleans up the command and unmaps the SQE DMA. The path error helper completes the request, so that is double...

CVE-2026-98141

The Linux kernel contains a vulnerability in the ntfs component where the update_reparse_data() function incorrectly ignores the return value of set_reparse_index(). When an index insertion fails, the system removes the written reparse data as cleanup but still returns 0, causing symlink(2) and W...