CVE-2026-99214 drm/vc4: hdmi: Move packet RAM enable to PM runtime

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up before video has been restored, calling vc4hdmiwriteinfoframe for the audio infoframe. vc4hdmiwriteinfoframe needs Packet...

CVE-2026-99089

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable opclk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the "iis" bus clock enabled, but it also sets priv-opclk to the parent of the RCLKSRC m...

CVE-2026-98883

A flaw was found in the Linux kernel's 8250 serial port driver. On systems utilizing MIPS Alchemy hardware, the driver fails to recognize a specific communication port type during device probing. This failure triggers an internal kernel warning during system startup, which can result in a Denial ...

CVE-2026-98874

A flaw was found in the Linux kernel's iwlwifi driver. A local user can trigger an unintended kernel warning by configuring Wake on Wireless LAN WoWLAN and suspending the system while disconnected from a network. On systems configured to panic or halt on kernel warnings, this flaw may lead to a...

CVE-2026-98983

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

CVE-2026-98920

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folioqueue ENOMEM in writeback by adding a mempool" added a mempool for the folioqueues and made the request, subrequest and folioqueu...

CVE-2026-98983

The Linux kernel contains a vulnerability where ksys_unshare() incorrectly drops active namespace references that were never taken. Specifically, when set_cred_ucounts() fails during an unshare operation (which occurs when alloc_ucounts() cannot allocate, typically when the real UID differs from ...

CVE-2026-98983 unshare: don't drop active namespace references that were never taken

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

EUVD-2026-108777

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142749 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143087 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

CVE-2026-64591

A flaw was found in the Linux kernel's Intel IOMMU driver. This issue occurs because the driver attempts to disable I/O Page Fault IOPF handling for devices that never had it enabled, specifically when Shared Virtual Addressing SVA is used on hardware that does not support the PCI Page Request...

CVE-2026-93248

A flaw was found in the Linux kernel's drm/xe graphics driver. When a graphics device becomes unresponsive wedged and execution queues are terminated, the driver fails to retain the wedged status during cleanup. A local user could exploit this flaw during driver unbinding to trigger an unexpected...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-38105)

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call. This leaves the timer in an active state while the assigned...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23278)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch. If...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the thunderbolt subsystem, where the tbstop function does not disable the DP tunnel, and the HopID is not maintained during allocation, resulting in the IDA being released by the tbpathfree operation...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from a race condition between perfeventexittask and perfpendingtask during the beginnewexec operation. When the task does not set the PFEXITING flag, perfsigtrap continues to execute and triggers WARNONONCE...

CVE-2026-98418

A flaw was found in the Linux kernel's process scheduler. A local user can cause a Denial of Service DoS by initiating lock contention across processor cores with a task that has processor migration disabled. In this scenario, the scheduler incorrectly triggers a kernel warning when moving the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Futex: The stale exiting pointer was cleared in the retry path of futexlockpi. Events triggered due to fuzzying/stressing futexes: WARNING: kernel/futex/core.c:825 at waitforownerexiting+0x7a/0x80, CPU11: futexlockpis/524 When...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid using pciiounmap with an offset when PEERSPAD and CONFIG share a BAR. When BARPEERSPAD and BARCONFIG share one PCI BAR, the module teardown ultimately calls pciiounmap on the same iomem with an offset, which is...