CVE-2026-98677: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix use-after-free on unbind adsdbufferpostenable allocates sigmadelta-samplesbuf with devmkrealloc at runtime, so its devres entry sits after all probe-time entries of the driver. devm resources are...

Linux Distros Unpatched Vulnerability : CVE-2026-98677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: adsigmadelta: fix use-after-free on unbind adsdbufferpostenable allocates sigmadelta-samplesbuf with devmkrealloc at runtime, so its devres entry sits...

Linux Distros Unpatched Vulnerability : CVE-2026-98733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket...

Linux Distros Unpatched Vulnerability : CVE-2026-98734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Serialize SCO and ISO scheduling with teardown hcilowsent selects a connection under RCU but drops the read lock before calculating its quot...

Linux Distros Unpatched Vulnerability : CVE-2026-98737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix inquiry cache use-after-free The sync command worker holds hdev-reqlock, but inquiry-cache updates and flushes use hdev-lock. Both...

Linux Distros Unpatched Vulnerability : CVE-2026-98738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: Serialize SMP remote OOB data access buildpairingcmd looks up remote OOB data and copies its contents without holding hdev-lock, which serializes the...

PT-2026-116799

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in accept queue lifecycle In nfc llcp socket release, sockets and listener accept queues are walked under the local sockets rwlock and bh lock sock. However, bh lock sock does not synchronise against...

PT-2026-116825

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM object on virtio gpu vram create errors virtio gpu vram create frees the object with a bare kfreevram on both error paths after drm gem private object init has run, and on the second one after drm gem...

PT-2026-116875

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable work before freeing trigger iio trigger notify done atomic defers -reenable into trig-reenable work on the system workqueue, and the worker dereferences the owning trigger through container of. Nothi...

PT-2026-116883

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400 serial number fops is open coded and never calls debugfs file get, so debugfs remove recursive does not wait for a read in progress and unbind frees the iio dev...

PT-2026-116928

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: count only matching reservations in reserved switch ieee80211 vif use reserved switch validates a replacement by counting assigned links on ctx-replace ctx and treating reservations too broadly. A link can still b...

PT-2026-116954

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Serialize ACL scheduling with channel deletion hci chan sent selects a channel under RCU but drops the read lock before accessing chan-conn and returning the channel. The ACL and LE schedulers then use its...

PT-2026-116961

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize compat port-info ioctls The native sequencer ioctl path serializes handler calls with client-ioctl mutex, but the translated port-info compat path invokes the same handlers through snd seq kernel client ctl...

PT-2026-116969

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

PT-2026-116981

In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2 wakeup detected accesses the DWC2 host state and can rearm the wakeup timer. dwc2 hcd free currently deletes the timer only after freeing host-owned state, and timer...

PT-2026-116997

In the Linux kernel, the following vulnerability has been resolved: binder: fix is failure flag for superseded transaction cleanup When a TF UPDATE TXN transaction supersedes a pending async transaction, binder release entire buffer is called with is failure=false. Since the superseded transactio...

CVE-2026-98742: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize compat port-info ioctls The native sequencer ioctl path serializes handler calls with client-ioctlmutex, but the translated port-info compat path invokes the same handlers through sndseqkernelclientctl withou...

CVE-2026-98750: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

CVE-2026-98772: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down use-after-free Some drivers for multiport devices access port driver data from completion handlers of shared URBs submitted at attach or first open and stopped at disconnect or last close,...

CVE-2026-98773: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart in portshutdown if disconnected acmportshutdown is called from the tty-port machinery whenever the last user closes the port. acmdisconnect sets acm-disconnected and calls ttyportttyvhangup, which...