kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...

CVE-2026-98705

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When wireless mesh proxy paths are removed or expire, the interface path counter is decremented without having been accounted for during path creation. An attacker can exploit this accounting flaw through rapid proxy path churn,...

CVE-2026-98704

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When associating with a wireless network profile that omits certain configuration parameters, the system prematurely frees internal data structures and subsequently reads the freed memory during connection setup. A malicious acce...

CVE-2026-98703

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local privileged user can cause a Denial of Service DoS by writing an invalid index value to the fixed-rate debugfs debug filesystem interface. Due to missing input validation, the kernel uses the value to access data outside...

CVE-2026-98701

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When adding mesh network routes, failed or duplicate path requests do not release reserved slot quotas. An adjacent attacker could exploit this issue by repeatedly triggering failed path additions to exhaust the mesh...

K000163837: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46129 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfo error path When kobjectinitandadd fails, the call chain is: createspaceinfo - btrfssysfsaddspaceinfotype - kobjectinitandadd - failure -...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-98700

A flaw was found in the Linux kernel's mac80211 wireless subsystem. The transmission function for encapsulated Ethernet frames fails to set the operating frequency band from the channel context on non-Multi-Link Device MLD interfaces. A local user generating network traffic on an affected interfa...

CVE-2026-98697

A flaw was found in the Linux kernel's USB serial subsystem. A race condition during USB serial driver deregistration can result in a kernel memory leak. A local user with permissions to modify driver attributes can trigger this issue by writing to the dynamic identifier interface while the drive...

CVE-2026-98699

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition occurs during mesh network path deletion when an active lookup reinserts an entry into the fast transmission cache after the cache has been cleared, resulting in a use-after-free condition where memory is accesse...

CVE-2026-98698

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When handling a Fast Initial Link Setup FILS association request frame with an empty payload, the system fails to validate zero-length plaintext before cryptographic processing. This issue causes an invalid memory reference to be...

CVE-2026-98695

A flaw was found in the Linux kernel's USB serial subsystem. A local user could cause a Denial of Service DoS due to a race condition between input/output control ioctl operations and device disconnection. If a USB serial device is disconnected during an active operation, the driver may attempt t...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-98694

A flaw was found in the Linux kernel's Thunderbolt driver. When a control channel request is canceled, a race condition can cause the request to be rescheduled after its memory has already been freed, resulting in a use-after-free vulnerability. A local attacker could exploit this flaw to cause a...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-98693

A flaw was found in the Linux kernel's Thunderbolt driver. A physically proximate user or local attacker could trigger a Denial of Service DoS and crash the system by disconnecting a device or unbinding the driver while DisplayPort tunnel operations are still active. This issue occurs because the...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-98690

A flaw was found in the Linux kernel's Thunderbolt subsystem. This flaw allows a local user to cause a Denial of Service DoS by causing kernel cleanup operations to hang indefinitely. When a DisplayPort DP tunnel is disconnected before an internal read operation completes, the driver leaks an...