CVE-2026-98499 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract, resulting in memory reads at incorrect addresses -- possibly beyond the end...

CVE-2026-98499 HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract, resulting in memory reads at incorrect addresses -- possibly beyond the end...

CVE-2026-98499

The Linux kernel contains an out-of-bounds (OOB) read vulnerability within the HID wacom driver, specifically in the wacom_wac_pen_serial_enforce() function. The issue occurs because the function may calculate an invalid offset when calling hid_field_extract() if a HID descriptor lists more usage...

CVE-2026-98499

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract, resulting in memory reads at incorrect addresses -- possibly beyond the end...

EUVD-2026-103739

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract, resulting in memory reads at incorrect addresses -- possibly beyond the end...

CVE-2026-98477

The Linux kernel contains a vulnerability in the perf/core component where __perf_pmu_sched_task() incorrectly passes a NULL pmu_ctx to pmu->sched_task(). This occurs because perf_pmu_sched_task() returns early when cpuctx->task_ctx is set, making cpc->task_epc null. The issue results in...

CVE-2026-98477

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

EUVD-2026-103717

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98477 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98477 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98474

The Linux kernel contains a vulnerability in the s390/pci subsystem where the zpci_report_status() function fails to hold the necessary device lock when accessing a device's driver (specifically when pdev is non-NULL). This missing lock can lead to inconsistent states during recovery. The fix inv...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98474

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

EUVD-2026-103714

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98473 s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

CVE-2026-98473

The Linux kernel contains a vulnerability in the s390/vfio-ap driver where KVM GISC registrations and pinned guest pages are leaked when a queue is removed from the host's AP configuration while assigned to a mediated device (mdev) . This occurs because the driver fails to handle the AP_RESPONSE_...

CVE-2026-98473 s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

CVE-2026-98473

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

EUVD-2026-103713

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...