CLSA-2026-1790030905 kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit CVE-2026-64348 - udf: validate VAT header length against the VAT inode size CVE-2026-64323 - USB: idmouse: fix use-after-free on disconnect race CVE-2026-64344 - USB: ldusb: fix use-after-free on disconnect race CVE-2026-64343 - USB: iowarrior: fix...

CVE-2026-98505

A flaw was found in the Linux kernel. A race condition within the Data Access Monitor DAMON subsystem allows hardware-driven page table updates to be lost during the monitoring of huge memory pages. A local user running processes monitored by DAMON can trigger concurrent memory operations,...

CVE-2026-98509

A flaw was found in the Linux kernel's virtio graphics processing unit virtio-gpu driver. A local user can cause a Denial of Service DoS by triggering a kernel memory leak during graphics command buffer processing. When invalid submission parameters are provided, the driver's error-handling path...

CVE-2026-98502

A flaw was found in the Linux kernel's ALPS Human Interface Device HID driver. The driver fails to properly unregister and release a secondary input device when the hardware is removed. A local user could exploit this issue by repeatedly disconnecting the device, causing a memory leak that can le...

CVE-2026-98506

A flaw was found in the Linux kernel's HugeTLB Huge Translation Lookaside Buffer subsystem. This flaw allows a local user to cause a Denial of Service DoS by triggering the dissolution of gigantic memory pages that lack runtime support. Because the kernel fails to verify runtime support before...

CVE-2026-98508

A flaw was found in the Linux kernel's VirtIO GPU driver. This flaw allows a local user to cause a denial of service DoS by triggering a kernel crash. Under memory pressure, the driver fails to verify whether fence memory allocation succeeds during graphics command submission, leading to an...

CVE-2026-98507

A flaw was found in the Linux kernel's memory management subsystem. Due to a missing synchronization barrier when preparing anonymous virtual memory areas, concurrent memory operations can be reordered. A local attacker can exploit this race condition by running concurrent threads on adjacent...

CVE-2026-98504

A flaw was found in the Linux kernel's PCI subsystem. When generating dynamic Open Firmware OF device tree properties, the kernel fails to verify that a subordinate bus exists for a PCI bridge before accessing its configuration. A local attacker or physical device configuration can trigger this...

CVE-2026-98503

A flaw was found in the Linux kernel's packet socket implementation. A local user can cause a Denial of Service DoS or system instability by triggering premature reuse of transmit ring buffer slots while packet data is still in flight. Because these shared memory slots may be released and reused...

CVE-2026-98501

A flaw was found in the Linux kernel's Alps Human Interface Device HID driver. If registration of an input device fails during configuration, the driver frees the device memory while communication channels are already active, leaving a dangling reference. An attacker capable of attaching a...

CVE-2026-98443

A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been freed. A local user capable of mounting a specially crafted...

CVE-2026-98445

A flaw was found in the Linux kernel's XFS file system. A local user could cause a Denial of Service DoS by triggering an online file system repair under low-memory conditions. When a memory allocation failure occurs during repair block reservation, the kernel cannot cleanly recover from the erro...

CVE-2026-98444

A flaw was found in the Linux kernel's XFS file system. When flushing disk quota records, the kernel fails to release the quota flush lock if an associated buffer cannot be retrieved. A local user could trigger this condition to cause a system deadlock, resulting in a Denial of Service DoS...

CVE-2026-98439

A flaw was found in the Linux kernel's Server Message Block SMB server, ksmbd. When a connection is closed while an asynchronous request is still waiting, the server fails to cancel active requests before waiting for them to complete. A remote client could exploit this flaw to prevent the...

CVE-2026-98440

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while other parts of the system may still reference them. A local...

CVE-2026-98442

A flaw was found in the Linux kernel's traffic control connection tracking action actct. An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service DoS or kernel memory corruption through a use-after-free vulnerability. This issue occurs because...

CVE-2026-98441

A flaw was found in the Linux kernel's traffic control conntrack action module actct. An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service DoS or kernel memory corruption. This issue arises when cloned network packets sharing an...

CLSA-2026-1789039259 kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct CVE-2026-74464 - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error CVE-2026-74456 - wifi: mwifiex: fix permanently busy scans after multiple roam iterations CVE-2026-68469 - drm/amdgpu/gfx8: drop...

CVE-2026-98438

A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. When handling connection termination DATAFIN packets without payload data while checksum negotiation is enabled, the kernel fails to properly initialize memory before computing the packet checksum. A network peer could trigger...

CVE-2026-98437

A flaw was found in the Linux kernel's Qualcomm Iris video driver. A local user could cause a Denial of Service DoS or resource exhaustion through improper error handling during power domain configuration. When enabling or disabling power domains encounters an error, the driver fails to properly...