CVE-2026-98117

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

CVE-2026-98116 ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF sndpcmhwparams and sndpcmhwfree guard buffer reallocation with an mmapcount check performed under the PCM stream lock, but the lock is released long before th...

CVE-2026-98024

A vulnerability exists in the Linux kernel (s390/ism) where the ism_alloc_dmb() function incorrectly used kfree() instead of folio_put() during an error exit for memory allocated via folio_alloc(). This flaw could lead to slab allocator corruption . The fix involves using folio_put() and resettin...

CVE-2026-98000 hwmon: Fix potential UAF in pec_store

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-97977

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...

CVE-2026-97940 ipv6: fix fib6 walker UAF on seq stop

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

CVE-2026-97940 ipv6: fix fib6 walker UAF on seq stop

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

CVE-2026-97940

The Linux kernel is affected by a Use-After-Free (UAF) vulnerability in the ipv6 component. The issue arises because ipv6_route_iter_active() incorrectly treats a walker in FWS_U at the table root as already unlinked. This allows fib6_del_route() to move a still-linked walker into that state when...

CVE-2026-97609

The Linux kernel contains a use-after-free (UAF) vulnerability within the netfilter: cttimeout component during module unload. The issue occurs because cttimeout_exit() unregisters per-net operations before clearing the hook, allowing a race condition where one CPU can free the pernet storage whi...

EUVD-2026-86740

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609 netfilter: cttimeout: prevent UAF during module unload

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97940: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

PT-2026-98663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the pec store function. The problem occurs when a guardmutex&hwdev-lock is acquired and a chip write operation returns an error other than -EOPNOTSUP...

PT-2026-98779

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF or KASAN warning can occur in the cachefiles module. This happens because the trace cachefiles coherency function is passed a pointer to a be64 overlaid on the...

CVE-2026-98024: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

CVE-2026-98117: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

CVE-2026-98117

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

Linux Distros Unpatched Vulnerability : CVE-2026-98000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than...