CVE-2026-98302

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning. ResetAdapter first calls cardstop, which sets smc-hw.hwstate to...

CVE-2026-98302

The Linux kernel contains a NULL pointer dereference vulnerability in the skfp (FDD-II) driver. The issue occurs because skfp_ctl_set_mac_address() calls ResetAdapter() unconditionally without verifying if the network interface is running via netif_running(). On an interface that has never been i...

EUVD-2026-93222

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Do not write to the serial port after it is closed hciuartclose closes the serdev port if HCIQUIRKNONPERSISTENTSETUP is set for example, for the WCN399x family. A failed hcidevopensync following a successful...

EUVD-2026-93213

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

CVE-2026-98285

The Linux kernel contains a vulnerability in the net: bridge: vlan component where switchdev could prevent vlan deletion and trigger errors in __vlan_del. This flaw can lead to inconsistent states , memory leaks , and a NULL pointer dereference during bridge flushing. The fix involves logging the...

CVE-2026-98285 net: bridge: vlan: fix bugs caused by switchdev deletion errors

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

CVE-2026-98285 net: bridge: vlan: fix bugs caused by switchdev deletion errors

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

EUVD-2026-93198

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

CVE-2026-98270

The Linux kernel contains a vulnerability in the drm/amdgpu component where the function nbio_v7_9_handle_ras_controller_intr_no_bifring() dereferences ras and obj without performing NULL checks. This occurs because amdgpu_ras_get_context() and amdgpu_ras_find_obj() can return NULL during a speci...

CVE-2026-98270 drm/amdgpu: check ras and obj before dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

CVE-2026-98270 drm/amdgpu: check ras and obj before dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

CVE-2026-98268 perf: Fix null pointer access in is_include_guest_event()

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmudetachevent...

CVE-2026-98268

The Linux kernel contains a vulnerability where a null pointer dereference occurs within the perf subsystem. Specifically, a module unload event with an active perf connection causes __pmu_detach_event() to set event->pmu to null. When the connection is subsequently closed, _free_event() calls...

CVE-2026-98268 perf: Fix null pointer access in is_include_guest_event()

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmudetachevent...

EUVD-2026-93196

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmudetachevent...

CVE-2026-98268

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmudetachevent...

CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

EUVD-2026-93171

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: Fix potential NULL pointer dereference" changed the check to test for the ops pointer instead of the signaled bit to avo...

CVE-2026-98243 dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: Fix potential NULL pointer dereference" changed the check to test for the ops pointer instead of the signaled bit to avo...

CVE-2026-98243

A vulnerability exists in the Linux kernel 's dma-buf/dma-fence component. A previous patch intended to prevent a NULL pointer dereference by testing the ops pointer instead of the signaled bit inadvertently removed RCU protection for many dma_fence implementations. This loss of protection can le...