CVE-2026-97607

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature error Route unsupported provisioned features through the common error path after vdpaallocdevice so the allocated device and adapter pointer are released consistently...

CVE-2026-97588

The Linux kernel contains a vulnerability in the s390/crypto component where persistent -EBUSY errors from hardware during key conversion result in the error being swallowed by the crypto API's completion wrapper. Because the wrapper treats -EBUSY as a queueing status, the completion callback fai...

CVE-2026-97580

In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity computetilesuniform and computetilesnonuniform loop over numtilecolumnsminus1 + 1 / numtilerowsminus1 + 1 entries, and assemblehwpps writes one COLUMNWIDTH /...

CVE-2026-97552

The Linux kernel contains a vulnerability in the xfs filesystem where xfs_defer_finish_one() declares an error variable without an initialiser. If the dfp->dfp_work list is empty, the loop body is skipped, and the function returns an indeterminate value . This occurs when xfs_reap_ag_blocks() ...

CVE-2026-97552 xfs: initialise error in xfs_defer_finish_one()

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfsdeferfinishone xfsdeferfinishone declares error without an initialiser and only assigns it inside the loop over dfp-dfpwork. When that list is empty the loop body never runs, control falls through to t...

CVE-2026-97552

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfsdeferfinishone xfsdeferfinishone declares error without an initialiser and only assigns it inside the loop over dfp-dfpwork. When that list is empty the loop body never runs, control falls through to t...

CVE-2026-97550

The Linux kernel contains a logic error in the xfs filesystem regarding per_binval computation. The vulnerability stems from performing unit conversions in the wrong direction: the second parameter of xfs_buf_inval_log_space is expected in bytes , while max_binval is measured in fsblocks . This r...

CVE-2026-97545 xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release newbp,...

CVE-2026-97534 f2fs: accurately adjust free_sections during free_segment_range

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

CVE-2026-97534

The Linux kernel contains a vulnerability in the f2fs filesystem related to how it handles free_sections during free_segment_range(). When restricting block allocation to a safe main area during Garbage Collection (GC), the system fails to deduct already-free sections within the truncated range f...

EUVD-2026-86842

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

CVE-2026-97534 f2fs: accurately adjust free_sections during free_segment_range

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

CVE-2026-97528

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error qlanvmexmtlsrsp obtains uctx, which was linked into fcport-unsolctxhead by qla2xxxprocesspurlsiocb and is still linked when the NVMe transport calls back to...

EUVD-2026-86830

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

CVE-2026-79148

A flaw was found in DevTools in Google Chrome. An off-by-one error exists that a remote attacker could exploit by leveraging social engineering to persuade a user to install a malicious Chrome extension. This vulnerability could potentially allow the attacker to read sensitive memory within the...

OESA-2026-4038 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association...

CVE-2026-97990

In the Linux kernel, the following vulnerability has been resolved: vdpasimnet: check TX pull result before RX copy vringhiovpulliotlb returns a signed byte count. A failed TX pull is currently added to the unsigned byte counter and then passed as a sizet length to receivefilter and...

CVE-2026-98002: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

PT-2026-98485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfs module where the xfs btree bload prep block function fails to release the new bp variable if the xfs btree bload drop buf function encounters an IO error while...

PT-2026-98691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfp net fs add function where a failure in nfp net fs add hw prevents an old rule from being removed from the nn-fs.list. This causes the list to be longer than th...