EUVD-2026-108872

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link...

CVE-2026-98916

The Linux kernel contains a vulnerability within the wifi: nl80211 component. The root cause is a failure to validate that a link is beaconing before attempting a color change , which can lead to the system calling a driver with an invalid link . The vulnerability has been resolved by implementin...

CVE-2026-98916 wifi: nl80211: check link is beaconing for color change

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link...

EUVD-2026-108871

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2videounregisterdevice on driver removal The driver uses vb2foprelease as its file release operation, so vb2videounregisterdevice should be used instead of videounregisterdevice during driver removal. This...

CVE-2026-98915

The Linux kernel contains a vulnerability in the media: video-i2c driver during driver removal. The driver incorrectly uses video_unregister_device() instead of vb2_video_unregister_device() when the vb2_fop_release() file release operation is used. This issue prevents the vb2 queue from being pr...

CVE-2026-98915 media: video-i2c: use vb2_video_unregister_device on driver removal

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2videounregisterdevice on driver removal The driver uses vb2foprelease as its file release operation, so vb2videounregisterdevice should be used instead of videounregisterdevice during driver removal. This...

CVE-2026-98914

The Linux kernel contains a vulnerability in the drm/amdgpu driver related to ATOM command table nesting depth . The issue is addressed by capping nesting at 32 levels using execute_depth and returning -ELOOP when this limit is exceeded. While the specific impact is not explicitly detailed, the f...

CVE-2026-98914 drm/amdgpu: cap ATOM command table nesting depth

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

EUVD-2026-108870

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

EUVD-2026-108869

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913

The Linux kernel contains a PTP device reference leak within the nicvf_probe() function of the thunderx driver. The issue occurs because cavium_ptp_get() acquires a reference to the PTP PCI device via pci_get_device(), but fails to release this reference if subsequent initialization steps fail. T...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

EUVD-2026-108868

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event sndseqossread checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it from the read queue. The check is inverted. It...

CVE-2026-98912

The Linux kernel contains a vulnerability in the ALSA (Advanced Linux Sound Architecture) seq: oss component within the snd_seq_oss_read() function. The root cause is an inverted check regarding whether a queued OSS sequencer event fits in the remaining userspace buffer. Specifically, the system ...

CVE-2026-98912 ALSA: seq: oss: Reject reads that cannot fit the next event

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event sndseqossread checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it from the read queue. The check is inverted. It...

EUVD-2026-108867

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This is incorrect since the dpaa2switchfreefd is intended to be used on Tx...

CVE-2026-98911

The Linux kernel contains a vulnerability in the dpaa2-switch driver within the dpaa2_switch_rx() function. The issue arises because the dpaa2_switch_free_fd() function is incorrectly called during an error path; this function is intended for Tx frame descriptors and expects a valid skb pointer i...

CVE-2026-98911 dpaa2-switch: fix the error path in dpaa2_switch_rx()

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This is incorrect since the dpaa2switchfreefd is intended to be used on Tx...

CVE-2026-98911 dpaa2-switch: fix the error path in dpaa2_switch_rx()

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This is incorrect since the dpaa2switchfreefd is intended to be used on Tx...

CVE-2026-98910

The Linux kernel contains a vulnerability in the drm/amdkfd component. When the kfd_dbg_trap_enable() function fails during a copy_to_user operation while copying runtime_info , it fails to unwind several state changes. Specifically, it leaves the trap activated, sets debug_trap_enabled , retains...