CVE-2026-98695

The Linux kernel contains a race condition involving tty ioctls and the hangup operation for USB serial devices. The vulnerability occurs when a device is disconnected or powered down during lengthy break signaling, potentially causing the kernel to call into a tty driver for a non-existent devic...

CVE-2026-98695 USB: serial: fix ioctl hangup race

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

CVE-2026-98695 USB: serial: fix ioctl hangup race

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

CVE-2026-98619

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...

EUVD-2026-103735

In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arpdev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to devgetbynamercu o...

CVE-2026-98470

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...

EUVD-2026-103710

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...

CVE-2026-98753: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: ttyport: restore TTYIOERROR on activation failure Make sure to restore the TTYIOERROR flag if activation fails to prevent I/O attempts on a port that is gone or powered down. This specifically avoids issues like kernel panic...

PT-2026-116826

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio gpu resource create blob ioctl function where drm gem object release is incorrectly called during error paths for virtio gpu resource assign uuid and drm ge...

PT-2026-116827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An object leak exists in the virtio gpu resource create ioctl function. The issue occurs when the function calls drm gem object release during the drm gem handle create error path instea...

PT-2026-116714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ARP ioctl. The system copies a user-provided struct arpreq into a stack object, but the arp dev field may lack a NUL terminator. When this input is...

PT-2026-116972

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tty subsystem where the TTY IO ERROR flag is not restored upon activation failure. This creates a race condition between a TTY ioctl, hangup, and open operations,...

PT-2026-116838

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnl lock for the ioctl self test An offline self test that brings the interface down and back up with netif close / netif open requires rtnl lock for both. Since the ethtool IOCTL path became rtnl-optional for...

PT-2026-116728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the virtio GPU driver when virtio gpu execbuffer ioctl reserves a DRM event via drm event reserve init for a ring enabled for polling. If an error occurs during...

CVE-2026-98495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arpdev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to devgetbynamercu o...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability arises from the fact that the KVM device’s ioctl command is not serialized with KVMRUN. As a result, when concurrent vCPUs are migrated, operations involving IMSIC attributes may use outdated physical CPUs and HGEI...

PT-2026-128500

In the Linux kernel, the following vulnerability has been resolved: tty: tty port: restore TTY IO ERROR on activation failure Make sure to restore the TTY IO ERROR flag if activation fails to prevent I/O attempts on a port that is gone or powered down. This specifically avoids issues like kernel...

PT-2026-116740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915 component where the i915 gem busy ioctl function uses dma resv for each fence unlocked to iterate over fences in a GEM Graphics Execution Manager object...

PT-2026-116983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel's FunctionFS implementation. When user space configures FunctionFS using only full-speed descriptors while the gadget operates at a...

PT-2026-116689

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvm pkvm ioctl allowed WARNs when kvm get cap for kvm ioctl doesn't find the ioctl number in vm ioctl caps, and kvm arch vm ioctl calls it for every number the gener...