CVE-2026-98518

A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local user to cause a denial of service DoS or system instability through an out-of-bounds memory access in video random-access memory VRAM. The issue occurs because the driver fails to allocate an...

CVE-2026-98517

A flaw was found in the Linux kernel's Nouveau graphics driver. When handling buffer objects in system memory, the driver improperly accesses memory past the allocated resource boundary. A local attacker could exploit this flaw to cause a Denial of Service DoS through a kernel crash or potentiall...

CVE-2026-98454

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious SMB server can exploit this vulnerability by sending malformed create context responses to a connecting system. Because the client fails to properly validate record boundaries during response parsing, this issue c...

CVE-2026-98453

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious or compromised SMB server can trigger this vulnerability by returning malformed context responses during a file open operation. When the client fails to parse the context data, it aborts the operation without...

CVE-2026-98452

A flaw was found in the Linux kernel's Server Message Block SMB client. When opening cached directories, the client fails to validate server responses to compound commands before reading their contents and handling file identifiers. A malicious or compromised SMB server could exploit this flaw by...

CVE-2026-98522

A flaw was found in the Linux kernel's Imagination PowerVR GPU driver. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when the driver fails to properly return an error code after a memory mapping failure, allowing execution to...

CVE-2026-98523

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can cause a Denial of Service DoS by closing a DRM device file descriptor associated with a partially initialized client. Because the kernel fails to properly unregister an incomplete framebuffer client...

CVE-2026-98456

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition in the readunconfindexlist function allows a local user to cause an out-of-bounds write during asynchronous controller setup. This issue occurs when device state flags change between response buffer sizing and data...

CVE-2026-98520

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. In multi-container environments, terminating an initial container session that accessed the GPU interface leaves behind an invalid internal memory reference. When a subsequent GPU reset occurs, accessing this freed reference triggers a...

CVE-2026-98455

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. By querying connection options on a socket whose connection was disconnected while deferred setup remain...

CVE-2026-98463

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. Improper handling of wakeup enqueue flags during remote task activation can cause a deferred action request to remain pending after the scheduler is disabled. When a new scheduler initializes and processes deferred...

CVE-2026-98524

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When memory region mapping fails during InfiniBand operations, the kernel can retain a stale reference to memory buffers that have already been released. A local attacker could exploit this flaw to trigger a...

CVE-2026-98514

A flaw was found in the Linux kernel's Nouveau graphics driver, which can lead to a Denial of Service DoS. A local user can trigger this flaw during graphics buffer validation operations that encounter specific error paths. Because the driver fails to properly release object references when these...

CVE-2026-98513

A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management PM reference. A local user can trigger this issue to cause a resource leak, preventin...

CVE-2026-98450

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability can lead to a Denial of Service DoS through resource exhaustion caused by unclosed remote file handles. When processing compound requests, an interrupted operation or synchronization failure causes previous...

CVE-2026-98448

A flaw was found in the Linux kernel's XFS file system. A local user could trigger an error during file system repair operations when changing ownership of an orphanage directory, causing the kernel to fail to release a reference to an inode a data structure representing a file system object. Thi...

CVE-2026-98515

A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local attacker to cause a Denial of Service DoS by crashing the system or potentially escalate privileges. During device initialization failures, the driver's error-handling path executes redundant cleanup...

CVE-2026-98512

A flaw was found in the Linux kernel's Nouveau graphics driver. When destroying a GPU scheduler object, the driver frees memory prematurely while user-space synchronization objects still hold references to it. A local, unprivileged user could exploit this flaw by querying synchronization file...

CVE-2026-98449

A flaw was found in the Linux kernel's SMB Server Message Block client. This issue may allow a remote attacker or malicious server to trigger a Denial of Service DoS by inducing network transmission failures during compound request processing. Because the client releases its connection lock witho...

K000163775: Linux kernel vulnerability CVE-2026-31685

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. Th...