CVE-2026-98701

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When adding mesh network routes, failed or duplicate path requests do not release reserved slot quotas. An adjacent attacker could exploit this issue by repeatedly triggering failed path additions to exhaust the mesh...

Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

K000163837: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46129 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfo error path When kobjectinitandadd fails, the call chain is: createspaceinfo - btrfssysfsaddspaceinfotype - kobjectinitandadd - failure -...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-98700

A flaw was found in the Linux kernel's mac80211 wireless subsystem. The transmission function for encapsulated Ethernet frames fails to set the operating frequency band from the channel context on non-Multi-Link Device MLD interfaces. A local user generating network traffic on an affected interfa...

CVE-2026-98697

A flaw was found in the Linux kernel's USB serial subsystem. A race condition during USB serial driver deregistration can result in a kernel memory leak. A local user with permissions to modify driver attributes can trigger this issue by writing to the dynamic identifier interface while the drive...

CVE-2026-98699

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition occurs during mesh network path deletion when an active lookup reinserts an entry into the fast transmission cache after the cache has been cleared, resulting in a use-after-free condition where memory is accesse...

CVE-2026-98698

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When handling a Fast Initial Link Setup FILS association request frame with an empty payload, the system fails to validate zero-length plaintext before cryptographic processing. This issue causes an invalid memory reference to be...

CVE-2026-98695

A flaw was found in the Linux kernel's USB serial subsystem. A local user could cause a Denial of Service DoS due to a race condition between input/output control ioctl operations and device disconnection. If a USB serial device is disconnected during an active operation, the driver may attempt t...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-98694

A flaw was found in the Linux kernel's Thunderbolt driver. When a control channel request is canceled, a race condition can cause the request to be rescheduled after its memory has already been freed, resulting in a use-after-free vulnerability. A local attacker could exploit this flaw to cause a...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98693

A flaw was found in the Linux kernel's Thunderbolt driver. A physically proximate user or local attacker could trigger a Denial of Service DoS and crash the system by disconnecting a device or unbinding the driver while DisplayPort tunnel operations are still active. This issue occurs because the...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...