CVE-2026-98523

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can cause a Denial of Service DoS by closing a DRM device file descriptor associated with a partially initialized client. Because the kernel fails to properly unregister an incomplete framebuffer client...

CVE-2026-98456

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition in the readunconfindexlist function allows a local user to cause an out-of-bounds write during asynchronous controller setup. This issue occurs when device state flags change between response buffer sizing and data...

CVE-2026-98520

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. In multi-container environments, terminating an initial container session that accessed the GPU interface leaves behind an invalid internal memory reference. When a subsequent GPU reset occurs, accessing this freed reference triggers a...

CVE-2026-98455

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. By querying connection options on a socket whose connection was disconnected while deferred setup remain...

CVE-2026-98463

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. Improper handling of wakeup enqueue flags during remote task activation can cause a deferred action request to remain pending after the scheduler is disabled. When a new scheduler initializes and processes deferred...

CVE-2026-98524

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When memory region mapping fails during InfiniBand operations, the kernel can retain a stale reference to memory buffers that have already been released. A local attacker could exploit this flaw to trigger a...

CVE-2026-98514

A flaw was found in the Linux kernel's Nouveau graphics driver, which can lead to a Denial of Service DoS. A local user can trigger this flaw during graphics buffer validation operations that encounter specific error paths. Because the driver fails to properly release object references when these...

CVE-2026-98513

A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management PM reference. A local user can trigger this issue to cause a resource leak, preventin...

CVE-2026-98450

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability can lead to a Denial of Service DoS through resource exhaustion caused by unclosed remote file handles. When processing compound requests, an interrupted operation or synchronization failure causes previous...

CVE-2026-98448

A flaw was found in the Linux kernel's XFS file system. A local user could trigger an error during file system repair operations when changing ownership of an orphanage directory, causing the kernel to fail to release a reference to an inode a data structure representing a file system object. Thi...

CVE-2026-98515

A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local attacker to cause a Denial of Service DoS by crashing the system or potentially escalate privileges. During device initialization failures, the driver's error-handling path executes redundant cleanup...

CVE-2026-98512

A flaw was found in the Linux kernel's Nouveau graphics driver. When destroying a GPU scheduler object, the driver frees memory prematurely while user-space synchronization objects still hold references to it. A local, unprivileged user could exploit this flaw by querying synchronization file...

CVE-2026-98449

A flaw was found in the Linux kernel's SMB Server Message Block client. This issue may allow a remote attacker or malicious server to trigger a Denial of Service DoS by inducing network transmission failures during compound request processing. Because the client releases its connection lock witho...

CLSA-2026-1780516677 kernel: Fix of 135 CVEs

atm: lec: fix use-after-free in sockdefreadable CVE-2026-43050 - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames CVE-2026-23208 - xen/privcmd: fix double free via VMA splitting CVE-2026-31787 - cpufreq: governor: fix double free in...

CLSA-2026-1786761805 kernel: Fix of 46 CVEs

wifi: ath11k: update channel list in reg notifier instead reg worker CVE-2025-23133 - wifi: cfg80211: call regnotifier for self managed wiphy from driver hint CVE-2025-23133 - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception CVE-2025-37957 - KVM: x86: forcibly leave nested mode on vCPU...

CLSA-2026-1783362244 kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN CVE-2026-46113 - Bluetooth: bcsp: receive data only if registered CVE-2025-40308 - xen/privcmd: unregister xenstore notifier on module exit...

K000163775: Linux kernel vulnerability CVE-2026-31685

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. Th...

CLSA-2026-1781347338 kernel: Fix of 92 CVEs

octeontx2-pf: handle otx2mboxgetrsp errors in cn10k.c CVE-2024-56726 - octeontx2-pf: handle otx2mboxgetrsp errors in otx2common.c CVE-2024-56679 - USB: chipidea: fix memory leak with using debugfslookup CVE-2023-53334 - drivers: serial: jsm: fix some leaks in probe CVE-2022-50312 - drm: amd:...

CLSA-2026-1787303413 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 5.4.0-236...

CLSA-2026-1792419819 Fix of 74 CVEs

Bump kernel ABI to 30: ship the ELS kernel as 4.19.0-30-, distinct from the prior 4.19.0-29. CVE-2021-3493 - vfs: move capconvertnscap call into vfssetxattr CVE-2021-3493 - ecryptfs: fix uid translation for setxattr on security.capability CVE-2021-3493 CVE-2025-23142 - sctp: detect and prevent...