CVE-2026-98443 xfs: fix cursor and pointer handling when recovering iunlink buckets

In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM pointed out a bug in xlogrecoveriunlinkbucket: 1. We don't null out previp after releasing it, which can lead to UAF problems if the inodegc flush call in...

CVE-2026-98443

A flaw in the Linux kernel's XFS file system regarding cursor and pointer handling during the recovery of iunlink buckets allows for a use-after-free (UAF) condition. Specifically, in xlog_recover_iunlink_bucket, failing to null out prev_ip after release can lead to UAF if an inodegc flush call f...

EUVD-2026-103682

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport - nfctexpectinsert -...

CVE-2026-98442 net/sched: act_ct: fix helper UAF due to extensions realloc

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport - nfctexpectinsert -...

CVE-2026-98442

The Linux kernel contains a use-after-free (UAF) vulnerability within the traffic control connection tracking action (act_ct) . The flaw occurs because connection tracking helpers record a raw pointer to the extensions area into the expectations list before all extensions are added; if additional...

CVE-2026-98442 net/sched: act_ct: fix helper UAF due to extensions realloc

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport - nfctexpectinsert -...

CVE-2026-98441 net/sched: act_ct: avoid modifying shared unconfirmed ct entry

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

CVE-2026-98441

A flaw in the Linux kernel's traffic control conntrack action module (act_ct ) allows an attacker sending network traffic through affected packet filters to trigger a Denial of Service (DoS) or kernel memory corruption . The root cause is a use-after-free (UAF) condition occurring when cloned net...

CVE-2026-98441 net/sched: act_ct: avoid modifying shared unconfirmed ct entry

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

EUVD-2026-103681

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

EUVD-2026-103680

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm. Freeing the page tables is fair game this is what this callback is for...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4718-1 Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98439

The Linux kernel contains a vulnerability in the smb/server component where an async request might still be pending when a connection is closed. This issue can prevent the connection from closing properly. The vulnerability is resolved by canceling active async requests before waiting for them to...

EUVD-2026-103678

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439 smb/server: cancel async requests when closing connection

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439 smb/server: cancel async requests when closing connection

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

CVE-2026-98438

The Linux kernel contains a vulnerability in the mptcp options where an uninitialized value was used in mptcp_write_data_fin. Specifically, when sending a DATA_FIN without data, the system fails to properly initialize the csum field and other fields in the ext_copy structure, as these are no long...

CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...