UBUNTU-CVE-2026-98600

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...

Linux Distros Unpatched Vulnerability : CVE-2026-98442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: -...

Linux Distros Unpatched Vulnerability : CVE-2026-98501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: alps: fix use-after-free on input2 registration failure alpsinputconfigured stores data-input2 before calling inputregisterdevice. If registration fails,...

UBUNTU-CVE-2026-98587

In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...

UBUNTU-CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

UBUNTU-CVE-2026-98627

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve packet pointer class displacement in regsafe regsafe maps packet pointer IDs between states and checks that each current register range is a subset of the corresponding explored register range. It does not, however,...

UBUNTU-CVE-2026-98619

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...

Linux Distros Unpatched Vulnerability : CVE-2026-98446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: don't let hiddenspace go negative in xfsmetafileresvinit LOLLM points out that if the...

VulnCheck KEV: CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

UBUNTU-CVE-2026-98787

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in rhtabmaplookupanddeletebatch bpfmemcachefreercu uses thiscpuptr which requires migration to be disabled. All callers of rhtabdeleteelem disable migration except rhtabmaplookupanddeletebatc...

Linux Distros Unpatched Vulnerability : CVE-2026-98440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shado...

Linux Distros Unpatched Vulnerability : CVE-2026-98445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair...

UBUNTU-CVE-2026-98865

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't run ops.dequeue with a DSQ lock held ops.dequeue is invoked with the source user DSQ's lock still held on the consume and move paths scxconsumedispatchq, movetaskbetweendsqs. A BPF scheduler which locks the source...

UBUNTU-CVE-2026-98866

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce taskstruct-schedcachegrp to fix UAF Add a schedcachegrp pointer to taskstruct so that scheduler code can access the cache group directly via the task, without going through mm-schedcachegrp. This decouples...

Linux kernel wcn36xx_smd_trigger_ba_rsp Buffer Overflow

The vulnerability of the wcn36xxsmdtriggerbarsp function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

batadv_gw_out_of_range() Function Heap Buffer Overflow

The vulnerability of the batadvgwoutofrange function in the net/batman-adv/gatewayclient.c component of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel qede_tpa_cont qede_tpa_end Component

The vulnerability in the qedetpacont and qedetpaend functions within the drivers/net/ethernet/qlogic/qede/qedefp.c file of the Linux kernel system is related to buffer overflow conditions. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

Linux kernel LZNT Decompression Data Compromise

The vulnerability in the decompresslznt function within the fs/ntfs3/lznt.c component of the Linux kernel operating system is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected...

Linux Distros Unpatched Vulnerability : CVE-2026-98447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that...

ALSA-2026:85321 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: sctp: diag: reject stale...