CVE-2026-63998

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

CVE-2026-63997

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

CVE-2026-64144 Bluetooth: btmtk: fix urb->setup_packet leak in error paths

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

CVE-2026-64143

The CVE relates to the Linux kernel, specifically the platform/x86 uniwill-laptop code path. On older devices (~2020), the battery charging limit could be unintentionally enabled via the force module parameter, potentially causing permanent hardware damage. The fix is to prevent enabling the char...

CVE-2026-64089 batman-adv: tt: fix negative last_changeset_len

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative lastchangesetlen batadvpivtt::lastchangesetlen len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative...

CVE-2026-64076 netfilter: bridge: eb_tables: close module init race

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

CVE-2026-64076 netfilter: bridge: eb_tables: close module init race

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

EUVD-2026-45649

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

EUVD-2026-45571

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

CVE-2026-63998

The CVE-2026-63998 entry relates to the Linux kernel: during ethtool module handling, ethnl_ops_begin() may be followed by a failed validate() that incorrectly skips ethnl_ops_complete(), potentially leaving an imbalance in operation lifecycle handling on module flash errors. The issue is describ...

CVE-2026-63997

CVE-2026-63997 – Linux kernel ethtool module flash error handling : The issue arises in module_flash_fw_schedule where undo is missing for setting the “in_progress” flag and for taking the netdev reference, allowing the net device to persist while the rtnl_lock is held. This could prevent proper ...

EUVD-2026-45570

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

CVE-2026-63997 ethtool: module: avoid leaking a netdev ref on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

CVE-2026-63995 ethtool: cmis: validate start_cmd_payload_size from module

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate startcmdpayloadsize from module The CMIS firmware update code reads startcmdpayloadsize from the module's FW Management Features CDB reply and uses it directly as the byte count for memcpy. The destination...

CVE-2026-63995

CVE-2026-63995 affects the Linux kernel ethtool CMIS firmware update path. The CMIS FW update code reads start_cmd_payload_size from the module FW Management Features CDB reply and uses it directly as the byte count for memcpy, writing into a destination buffer of 112 bytes (ETHTOOL_CMIS_CDB_LPL_...

EUVD-2026-45568

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate startcmdpayloadsize from module The CMIS firmware update code reads startcmdpayloadsize from the module's FW Management Features CDB reply and uses it directly as the byte count for memcpy. The destination...

CVE-2026-63942 parport: Fix race between port and client registration

In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registration The parport subsystem registers port devices before they are fully initialised, resulting in a race condition where client drivers such as lp can attach to ports that are not...

EUVD-2026-45715

In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registration The parport subsystem registers port devices before they are fully initialised, resulting in a race condition where client drivers such as lp can attach to ports that are not...

CVE-2026-63865

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.