Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...

PT-2026-121912

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-dai driver. When configuring a DAI with LPAIF I2SCTL MODE...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.0. It stems from the fact that the isosockconnect function in Bluetooth ISO fails to serialize concurrent connect calls. As a result, multiple callers can pass through admission checks and replace socket connections simultaneously, leading...

PT-2026-121994

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV ALTERNATIVE EARLY for THEAD GHOSTWRITE errata probe ghostwrite only marks the CPU as vulnerable when it is called at the RISCV ALTERNATIVES EARLY BOOT stage, and the mitigation in ghostwrite enable...

PT-2026-121944

In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch ktls: disable softirqs around tid list erases chcr ktls cpl act open rpl inserts into tid list from the receive path using xa insert bh. The array is shared by the adapter's connections and initialized with XA FLAGS LOCK...

PT-2026-122019

In the Linux kernel, the following vulnerability has been resolved: io uring/net: populate CONNECT filter fields for 24-byte sockaddr in6 io connect bpf populate fills connect.port and connect.v6 addr for AF INET6 only when addr len = sizeofstruct sockaddr in6, i.e. 28 bytes. The IPv6 connect pat...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from the axienet driver failing to release unfinished DMA buffers when dmaengine is disabled, resulting in a leak of SKB and its DMA mappings. This may exhaust the limited IOMMU address space, and there is also a race condition...

PT-2026-121847

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed When accidentally setting “kvm-arm.vgic v4 enable=1” on a system that has no MSI controller device tree node and GICv4, it results a panic as “gic domain” is NULL and the...

Red Hat: CVE-2026-98872: kernel: freevxfs: don't BUG() on unknown typed-extent type

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

PT-2026-121879

In the Linux kernel, the following vulnerability has been resolved: net: cpsw new: unregister devlink on port registration failure cpsw probe registers devlink before registering the CPSW ports. If cpsw register ports fails, the error path only unregisters the notifiers and then releases the lowe...

PT-2026-122055

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF XDP on a striding RQ, mlx5e defers releasing XSK buffers until an MPWQE is refilled. If XSK allocation then returns -ENOMEM, actual wq head is not advanced...

PT-2026-121989

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent connect calls iso sock connect checks the socket state before taking the socket lock and drops the lock again before setting up a connection. Two callers can both pass the admission check whil...

PT-2026-122018

In the Linux kernel, the following vulnerability has been resolved: ip6 gre: remove obsolete ERSPAN PMTU update A tc tunnel key action can attach a METADATA IP TUNNEL dst to an skb, and mirred can redirect it to a native ip6erspan device. The legacy PMTU update in ip6erspan tunnel xmit treats tha...

Linux Distros Unpatched Vulnerability : CVE-2026-98981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: unhash a dentry before detaching the mounts on it unlink, rmdir and rename remove the entry from the filesystem, call detachmounts on the entry with...

Linux Distros Unpatched Vulnerability : CVE-2026-99031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: avoid recursive multicast port cleanup brmulticastsgdelexcludeports removes automatically added STAREXCL port groups by calling brmulticastdelpg. F...

PT-2026-122063

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dm integrity resume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructo...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because ovldomkdir uses %pd to print the input dentry after calling vfsmkdir. When CONFIGOVERLAYFSDEBUG is enabled, this may lead to reuse of freed dentries...

PT-2026-121851

In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu barrier in br multicast dev del This rcu barrier came from a time call rcu calls were used in net/bridge/br multicast.c. Now kfree rcu is there, we can remove this problematic rcu barrier which cause...

PT-2026-122058

In the Linux kernel, the following vulnerability has been resolved: bnxt en: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NO PASID Request...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.16. It stems from the ice driver’s use of metadatadstfree to release metadatadst when removing a representer; no checks are performed on the dstentry reference count. This may lead to use-after-free conditions if packets remain queued on...