CVE-2026-97955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mana: restore the XDP program pointer when pre-allocation fails manaxdpset publishes the new program into apc-bpfprog before it allocates anything, because manapreallocrxbufs sizes the buffers from it via managetrxbufcfg. Wh...

CVE-2026-97959

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the handle from TCAROUTE4TO/ FROM/IIF, and the handle-mismatch check is...

CVE-2026-97982: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

CVE-2026-97982

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

CVE-2026-97981: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...

CVE-2026-97959: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the handle from TCAROUTE4TO/ FROM/IIF, and the handle-mismatch check is...

CVE-2026-97958

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Don't replay RTMGETCHAIN in tcctlchain. If a netlink socket sends RTMGETCHAIN requests repeatedly without recving the responses, tcctlchain hogs CPU and triggers Hung Task splat. 0 As caught in the stack trace,...

PT-2026-98551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the OpenvSwitch component of the Linux kernel. The tbl mask array realloc function retires the old mask array before it is no longer reachable. Because...

golang-x-net Clickjacking

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

CVE-2026-98013

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table qdiscpktlen reaches 2 GiB, so quantum=1 makes the deficit-refill loop spin 2^31 times und...

PT-2026-98554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the legacy FCS tagger within the Distributed Switch Architecture DSA implementation. The tagger calculates the Cyclic Redundancy Check CRC over skb-len bytes starting ...

PT-2026-98675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service occurs in the Linux kernel when the sfq change function accepts any non-negative quantum value. By using a crafted size table, the qdisc pkt len can reach approximate...

PT-2026-98735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A store-buffering pattern exists in the release in xmit function. The function uses clear bit unlock to clear RDS IN XMIT, which orders the critical section before the bit clear but fail...

PT-2026-98714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the tx spb ring full function within the bcmasp network component. The function incorrectly initializes the next index variable from intf-tx spb index during every loop...

PT-2026-98620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the net failover slave name change function. The issue arises because dev open is called while netdev lock ops is already held by upper callers. To resolve this, net...

PT-2026-98762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the net/ipv6/mcast.c component, RCU-protected lists including np-ipv6 mc list, idev-mc list, and idev-mc tomb are updated using direct pointer assignments instead of the required rcu...

PT-2026-98645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cortina ethernet driver where the RX loop only consumes the budget when a frame is successfully delivered. Because error paths consume descriptors without reducing...

PT-2026-98652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost component where cached vring pointers and IOTLB metadata are not properly invalidated when VIRTIO F ACCESS PLATFORM changes. This can lead to stale ring...

PT-2026-98734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the rds conn path reset function. The function performs a plain store operation to clear the cp-cp flags word, while other accessors use atomic bitops. This can lea...

PT-2026-98766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cls u32 classifier where the node ID pool can be exhausted. The function gen new kid fails to report an error when idr alloc u32 ranges are full, instead returning...