CVE-2026-98684 smb: client: flush and commit data before querying allocated ranges

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOCFLKEEPSIZE fallocate emulation for small interior ranges in smb3simplefallocaterange issues FSCTLQUERYALLOCATEDRANGES and zero-fills any...

EUVD-2026-103937

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3zerorange emulates FALLOCFLZERORANGE by invalidating the page cache over the target range with truncatepagecacherange and then issuing FSCTLSETZERODATA to the server. Dirty...

CVE-2026-98683 smb: client: flush dirty data before zeroing a range

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3zerorange emulates FALLOCFLZERORANGE by invalidating the page cache over the target range with truncatepagecacherange and then issuing FSCTLSETZERODATA to the server. Dirty...

CVE-2026-98683 smb: client: flush dirty data before zeroing a range

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3zerorange emulates FALLOCFLZERORANGE by invalidating the page cache over the target range with truncatepagecacherange and then issuing FSCTLSETZERODATA to the server. Dirty...

CVE-2026-98683

The Linux kernel contains a vulnerability in the SMB client component. The smb3_zero_range() function, which emulates FALLOC_FL_ZERO_RANGE, fails to unconditionally flush dirty data before invalidating the page cache and issuing FSCTL_SET_ZERO_DATA to the server. This occurs specifically for inte...

CVE-2026-98682 smb: client: drain and invalidate before server-side copy/clone

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

CVE-2026-98682

The Linux kernel contains a vulnerability in the SMB client where cifs_file_copychunk_range() and the FICLONE path of cifs_remap_file_range() fail to properly serialize the destination page cache during server-side copy/clone operations. Specifically, these functions do not hold the invalidate_lo...

EUVD-2026-103936

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

CVE-2026-98682 smb: client: drain and invalidate before server-side copy/clone

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

EUVD-2026-103935

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplockbreakcancelled, offload, and statusfiledeleted fields are stored in the same bitfield byte in struct cifsFileInfo, but ar...

CVE-2026-98681 smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplockbreakcancelled, offload, and statusfiledeleted fields are stored in the same bitfield byte in struct cifsFileInfo, but ar...

CVE-2026-98681 smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplockbreakcancelled, offload, and statusfiledeleted fields are stored in the same bitfield byte in struct cifsFileInfo, but ar...

CVE-2026-98681

The Linux kernel contains a race condition in the smb client where the invalidHandle, swapfile, oplock_break_cancelled, offload, and status_file_deleted fields are stored within the same bitfield byte of struct cifsFileInfo . Because these fields are updated in different concurrent code paths and...

CVE-2026-98680 iio: accel: kionix-kx022a: Prevent memory leak and fix state

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022afifoenable at the buffer enable path, the allocated memory is neve...

CVE-2026-98680

The Linux kernel contains a vulnerability in the iio: accel: kionix-kx022a driver. During the buffer enable path, the kx022a_fifo_enable() function fails to free allocated memory if a regmap operation fails. Additionally, the driver fails to revert hardware configurations and state flags on error...

CVE-2026-98680 iio: accel: kionix-kx022a: Prevent memory leak and fix state

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022afifoenable at the buffer enable path, the allocated memory is neve...

EUVD-2026-103934

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022afifoenable at the buffer enable path, the allocated memory is neve...

CVE-2026-98679 iio: accel: kxcjk-1013: reject duplicate event disable

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...

CVE-2026-98679

The Linux kernel contains a vulnerability in the IIO core (specifically kxcjk-1013) where duplicate writes to the event enable attribute are not properly filtered. While repeated enable requests are ignored, a repeated disable request triggers kxcjk1013_set_power_state(data, false), which drops a...

EUVD-2026-103933

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...