CVE-2026-98463

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. Improper handling of wakeup enqueue flags during remote task activation can cause a deferred action request to remain pending after the scheduler is disabled. When a new scheduler initializes and processes deferred...

CVE-2026-98524

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When memory region mapping fails during InfiniBand operations, the kernel can retain a stale reference to memory buffers that have already been released. A local attacker could exploit this flaw to trigger a...

CVE-2026-98514

A flaw was found in the Linux kernel's Nouveau graphics driver, which can lead to a Denial of Service DoS. A local user can trigger this flaw during graphics buffer validation operations that encounter specific error paths. Because the driver fails to properly release object references when these...

CVE-2026-98513

A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management PM reference. A local user can trigger this issue to cause a resource leak, preventin...

CVE-2026-98450

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability can lead to a Denial of Service DoS through resource exhaustion caused by unclosed remote file handles. When processing compound requests, an interrupted operation or synchronization failure causes previous...

CVE-2026-98448

A flaw was found in the Linux kernel's XFS file system. A local user could trigger an error during file system repair operations when changing ownership of an orphanage directory, causing the kernel to fail to release a reference to an inode a data structure representing a file system object. Thi...

CVE-2026-98515

A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local attacker to cause a Denial of Service DoS by crashing the system or potentially escalate privileges. During device initialization failures, the driver's error-handling path executes redundant cleanup...

CVE-2026-98512

A flaw was found in the Linux kernel's Nouveau graphics driver. When destroying a GPU scheduler object, the driver frees memory prematurely while user-space synchronization objects still hold references to it. A local, unprivileged user could exploit this flaw by querying synchronization file...

CVE-2026-98449

A flaw was found in the Linux kernel's SMB Server Message Block client. This issue may allow a remote attacker or malicious server to trigger a Denial of Service DoS by inducing network transmission failures during compound request processing. Because the client releases its connection lock witho...

CLSA-2026-1780516677 kernel: Fix of 135 CVEs

atm: lec: fix use-after-free in sockdefreadable CVE-2026-43050 - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames CVE-2026-23208 - xen/privcmd: fix double free via VMA splitting CVE-2026-31787 - cpufreq: governor: fix double free in...

CLSA-2026-1786761805 kernel: Fix of 46 CVEs

wifi: ath11k: update channel list in reg notifier instead reg worker CVE-2025-23133 - wifi: cfg80211: call regnotifier for self managed wiphy from driver hint CVE-2025-23133 - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception CVE-2025-37957 - KVM: x86: forcibly leave nested mode on vCPU...

CLSA-2026-1783362244 kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN CVE-2026-46113 - Bluetooth: bcsp: receive data only if registered CVE-2025-40308 - xen/privcmd: unregister xenstore notifier on module exit...

K000163775: Linux kernel vulnerability CVE-2026-31685

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. Th...

CLSA-2026-1781347338 kernel: Fix of 92 CVEs

octeontx2-pf: handle otx2mboxgetrsp errors in cn10k.c CVE-2024-56726 - octeontx2-pf: handle otx2mboxgetrsp errors in otx2common.c CVE-2024-56679 - USB: chipidea: fix memory leak with using debugfslookup CVE-2023-53334 - drivers: serial: jsm: fix some leaks in probe CVE-2022-50312 - drm: amd:...

CLSA-2026-1787303413 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 5.4.0-236...

CLSA-2026-1792419819 Fix of 74 CVEs

Bump kernel ABI to 30: ship the ELS kernel as 4.19.0-30-, distinct from the prior 4.19.0-29. CVE-2021-3493 - vfs: move capconvertnscap call into vfssetxattr CVE-2021-3493 - ecryptfs: fix uid translation for setxattr on security.capability CVE-2021-3493 CVE-2025-23142 - sctp: detect and prevent...

CLSA-2026-1787304608 kernel-uek: Fix of 34 CVEs

Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison CVE-2026-53309 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 - ixgbevf:...

CLSA-2026-1775655705 kernel-uek: Fix of 34 CVEs

ALSA: usb-audio: Fix use-after-free in sndusbmixerfree CVE-2026-23089 - HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 - KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory CVE-2024-50115 - KVM: x86: Reset IRTE to host control if new route isn't postable CVE-2025-37885...

CLSA-2025-1757699693 kernel-uek: Fix of 19 CVEs

Bluetooth: afbluetooth: Fix Use-After-Free in btsockrecvmsg CVE-2024-21803 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - netfilter: validate user input for expected length CVE-2024-35896 - drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate'...

CLSA-2026-1791132991 Fix of 400 CVEs

CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 CVE-2025-39827 - net: rose: include node references in roseneigh refcount CVE-2025-39827 CVE-2026-93140 - udf: Mark LVID...