CVE-2026-98371 xfrm: iptfs: fix runt reassembly panic from short inner tot_len

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...

CVE-2026-98286 drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwind paths in netdmtraceonset and netdmhwmonitorstart, per-CPU timers ar...

EUVD-2026-93214

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwind paths in netdmtraceonset and netdmhwmonitorstart, per-CPU timers ar...

CVE-2026-98286

The Linux kernel contains a vulnerability in the drop_monitor component where per-CPU timers are improperly handled during teardown paths, such as net_dm_trace_off_set(). A circular dependency between send_timer and dm_alert_work allows a worker to re-arm a timer via mod_timer following a memory ...

CVE-2026-98286 drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwind paths in netdmtraceonset and netdmhwmonitorstart, per-CPU timers ar...

CVE-2026-98259 fs/dax: check zero or empty entry before converting xarray entry

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

EUVD-2026-93187

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

CVE-2026-98259

The Linux kernel is vulnerable to a kernel panic when booting a VM with DAX enabled storage . The issue is caused by calling dax_to_folio() with an empty entry , which occurs in the fs/dax component. Specifically, the vulnerability persists in dax_associate_entry(), dax_disassociate_entry(), and ...

CVE-2026-98259 fs/dax: check zero or empty entry before converting xarray entry

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

EUVD-2026-93168

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

CVE-2026-98240 net: ip_tunnel: initialize `options_len` before referencing options

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

CVE-2026-98240 net: ip_tunnel: initialize `options_len` before referencing options

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

CVE-2026-98240

The Linux kernel contains a vulnerability in the net: ip_tunnel component where options_len is used to calculate an option pointer before being initialized. This oversight leads to a buffer overflow during a memcpy operation, specifically when processing geneve_opts . This issue can trigger a ker...

PT-2026-106615

In the Linux kernel, the following vulnerability has been resolved: drop monitor: use timer shutdown sync to prevent timer rearming during teardown In drop monitor teardown paths net dm trace off set, net dm hw monitor stop, and error unwind paths in net dm trace on set and net dm hw monitor star...

CVE-2026-98259: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

PT-2026-106569

In the Linux kernel, the following vulnerability has been resolved: net: ip tunnel: initialize options len before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 encap ip id 300 geneve opts 4660:66:11223344...

CVE-2026-98240: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

CVE-2026-98371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...

Linux Distros Unpatched Vulnerability : CVE-2026-98286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwin...

PT-2026-106588

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling dax to folio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling dax to foli...