CVE-2026-98869 bpf: Infer zext_dst based on static register liveness analysis

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

CVE-2026-98869

A flaw in the Linux kernel BPF verifier's 32-bit operations zero extension logic allows a local attacker to achieve privilege escalation . The vulnerability occurs because the verifier fails to correctly track register states across execution paths, specifically on the s390 architecture . This ov...

CVE-2026-98620

A flaw was found in the Linux kernel's MediaTek Ethernet driver mtkethsoc. This issue allows a local attacker to cause a Denial of Service DoS by triggering a failure during the network device registration probe sequence. When registration fails, the driver's error cleanup path frees registered...

CVE-2026-98619

A flaw was found in the Linux kernel's ethtool subsystem. A local user with network administration privileges can cause a Denial of Service DoS by initiating an offline self-test on affected network drivers. Because the test routine fails to hold the necessary synchronization locks when taking th...

CVE-2026-98618

A flaw was found in the Linux kernel's fbnic network driver. When configuring the maximum number of standalone transmission and reception channels, the driver under-allocates vector resources, leaving uninitialized entries. This flaw allows a local user with administrative privileges to trigger a...

CVE-2026-98628

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A privileged local user can cause a Denial of Service DoS by loading a specially crafted BPF program containing numerous redundant instructions that trigger intensive post-verification cleanup. Because these rewrite...

CVE-2026-98629

A flaw was found in the Linux kernel's u32 traffic control classifier clsu32. A local user with network administration privileges can trigger this flaw by creating and removing filter hash tables with manually assigned handles. Due to an identifier mismatch between table creation and deletion...

CVE-2026-98098

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS by binding an excessive number of service addresses to sockets in the Transparent Inter-Process Communication TIPC subsystem. When the internal name table reaches its capacity limit, required protocol service...

CVE-2026-98627

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When verifying packet pointer registers that share an identifier, the BPF verifier fails to preserve register displacement during state pruning. A local user with permission to load BPF programs could exploit this...

CVE-2026-98622

A flaw was found in the Linux kernel's traffic control connection tracking subsystem. Under normal load or during connection tracking flushes, expected memory allocation failures inappropriately trigger a kernel warning. A local user can exploit this condition by racing connection flushes against...

CVE-2026-98630

A flaw was found in the Linux kernel's fbnic network driver. When memory allocation for a payload page pool fails, the error cleanup routine incorrectly attempts to destroy an invalid error pointer instead of releasing the allocated header page pool. A local user able to trigger interface queue...

CVE-2026-98624

A flaw was found in the Linux kernel's netfilter subsystem. A race condition exists between socket release event processing and configuration requests within the nfnetlinkqueue component. A local user could exploit this vulnerability by executing concurrent socket operations, triggering a kernel...

CVE-2026-98086

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA subsystem. When configuring Universal MIDI Packet UMP devices, the driver prematurely treats endpoint structures as fully initialized before legacy MIDI data structures are attached. A local user or connected device...

CVE-2026-98085

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local user with permissions to load BPF programs could exploit this vulnerability to cause a Denial of Service DoS via a kernel crash or potentially bypass verifier safety checks. This issue occurs because the verifier...

CVE-2026-98623

A flaw was found in the Linux kernel's Nouveau driver. A local user can trigger an out-of-bounds read by requesting an invalid clock performance state through the debugfs interface. This issue can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-98625

A flaw was found in the Linux kernel's netfilter subsystem. A timing conflict, or race condition, in the flowtable offload component allows flow data to be prematurely released from memory while still being processed by a cleanup worker. A local attacker could exploit this use-after-free...

CVE-2026-98626

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing Compile Once – Run Everywhere CO-RE relocation records, the kernel modifies target instructions before verifying that the instruction is an eligible relocation target. A local user can exploit this...

CVE-2026-98621

A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE networking component. A remote attacker could exploit this vulnerability by sending specially crafted network packets containing invalid remote checksum offsets. This improper input validation causes an integer underflow, allowi...

CLSA-2026-1789373515 Fix of 124 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

CLSA-2026-1783336721 Fix of 30 CVEs

CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in readonechunk CVE-2022-50300 CVE-2022-50082 - ext4: fix warning in ext4iomapbegin as race between bmap and wri...