CVE-2026-68444

The CVE-2026-68444 affects the Linux kernel’s firmware/arm_ffa path. The vulnerability arises in ffa_partition_info_get(), which passes uuid_str directly to uuid_parse() without a NULL check. If a caller provides NULL, uuid_parse() dereferences the NULL, leading to a kernel panic. The fix adds a ...

CVE-2026-68444

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

EUVD-2026-57019

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

CVE-2026-68444

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

CVE-2026-68443

The CVE-2026-68443 entry concerns the Linux kernel hwmon Gigabyte WaterForce driver. A race condition occurs because calling hid_hw_stop() does not stop device IO, allowing hid_input_report() to run concurrently with the post-io-start path in the driver probe. If probe fails after io start, this ...

CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

EUVD-2026-57051

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68442 btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENTFLAGLOGGING to split extent maps When btrfsdropextentmaprange splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb "btrfs: us...

CVE-2026-68442 btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENTFLAGLOGGING to split extent maps When btrfsdropextentmaprange splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb "btrfs: us...

CVE-2026-68442

CVE-2026-68442 describes a Linux kernel btrfs bug where splitting extent maps incorrectly propagates EXTENT_FLAG_LOGGING to new split maps. The local flags copy was used for splits, while a later change cleared the flag on em->flags, so a split map being logged could be freed with the flag sti...

CVE-2026-68442

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENTFLAGLOGGING to split extent maps When btrfsdropextentmaprange splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb "btrfs: us...

EUVD-2026-57050

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENTFLAGLOGGING to split extent maps When btrfsdropextentmaprange splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb "btrfs: us...

CVE-2026-68442

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENTFLAGLOGGING to split extent maps When btrfsdropextentmaprange splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb "btrfs: us...

CVE-2026-68441 net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling bpfredirect or an actbpf action, the redirect was silently lost i.e ...

EUVD-2026-57049

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling bpfredirect or an actbpf action, the redirect was silently lost i.e ...

CVE-2026-68441 net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling bpfredirect or an actbpf action, the redirect was silently lost i.e ...

CVE-2026-68441

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling bpfredirect or an actbpf action, the redirect was silently lost i.e ...

CVE-2026-68441

The CVE-2026-68441 issue affects the Linux kernel net/sched path where TC_ACT_REDIRECT from qdisc filter chains could be lost and the packet redirected was silently dropped instead of being redirected. A fix adds a tcf_classify_qdisc() inline helper wrapping tcf_classify() to convert a TC_ACT_RED...