CVE-2026-98798

A flaw was found in the Linux kernel's Broadcom GENET network driver. A privileged local user could trigger a Denial of Service DoS by configuring receive coalescing settings on a network interface that has not yet been opened. This flaw leads to a null pointer dereference that can crash the kern...

CVE-2026-98796

A flaw was found in the Linux kernel's MediaTek Ethernet driver. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS through a kernel crash. Due to an ordering issue during device initialization, the network interface is registered and...

CVE-2026-98804

A flaw was found in the Linux kernel's networking subsystem. When page pool statistics are enabled, a race condition in the bulk recycling mechanism can allow a memory pool to be freed before statistical updates finish processing. An attacker capable of triggering concurrent network buffer teardo...

Security Bulletin: IBM MQ Appliance is affected by multiple vulnerabilities

Summary IBM MQ Appliance has addressed multiple vulnerabilities in version 10.0.0.6. Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399...

CVE-2026-98851

A flaw was found in the Linux kernel's netfilter subsystem. In the flow offload component, an error handling failure during rule initialization fails to release an incremented flow table reference count. A local user with network administration privileges can exploit this by triggering failed rul...

CVE-2026-98803

A flaw was found in the Linux kernel's stmmac ethernet driver. When receiving network frames larger than the primary buffer size, the Direct Memory Access DMA engine attempts to write excess data into a secondary receive buffer that is neither allocated nor mapped for regular frames. An attacker ...

CVE-2026-98855

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a second release double-free when the overlay node is torn...

CVE-2026-98790

A flaw was found in the Linux kernel's performance monitoring subsystem. A race condition occurs during process execution when cleaning up performance events while a task event is still pending. A local user could exploit this flaw to trigger an internal kernel warning, potentially leading to a...

CVE-2026-98793

A flaw was found in the Linux kernel's netfilter subsystem. Missing validation of Network Address Translation NAT manipulation types in BPF connection tracking helpers allows a local user with permissions to run BPF programs to trigger a system crash. By supplying an invalid manipulation type, an...

CVE-2026-98791

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A local user can exploit this vulnerability to cause a denial of service DoS through a system crash. During the teardown of an AFXDP eXpress Data Path transmit queue, outstanding descriptors requesting a transmit timestamp are...

CVE-2026-98794

A flaw was found in the Linux kernel's IPVS IP Virtual Server subsystem. An attacker on the local network can send synchronization messages containing invalid connection flag combinations to an IPVS backup server. This lack of validation can disrupt connection tracking lookups and corrupt...

CVE-2026-98856

A flaw was found in the Linux kernel's kernel probes kprobes tracing subsystem. When arming an optimized probe near an inactive probe, the overlap detection check fails to identify an active jump instruction. A privileged local user can exploit this issue by registering specific overlapping...

CVE-2026-98852

A flaw was found in the Linux kernel's networking subsystem. An attacker could exploit this vulnerability by sending specially crafted encapsulated IPv6 network traffic, leading to a Denial of Service DoS. This issue stems from improper validation and parsing of IPv6 extension headers in tunneled...

CVE-2026-98792

A flaw was found in the Linux kernel's netfilter flowtable component. This flaw allows an attacker to cause a denial of service DoS by crashing the operating system. A race condition exists between the connection cleanup worker and hardware offload handlers when background tasks run concurrently...

CVE-2026-98795

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When operating on devices where Precision Time Protocol PTP initialization is skipped, the driver does not check if PTP was initialized before executing its deinitialization routines. A local privileged user could trigger thi...

CVE-2026-98854

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could trigger this vulnerability during resource allocation...

CVE-2026-98853

A flaw was found in the Linux kernel's Generic Segmentation Offload GSO implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote attacker could exploit this vulnerability by transmitting...

kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs when commands sent to the firmware FW are not properly cleared after a chip reset. A local attacker could exploit a race condition during direct memory access DMA unmapping, leading to a kernel panic. This can...

kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000

A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...

kernel: mac802154: llsec: add skb_cow_data() before in-place crypto

A flaw was found in the Linux kernel's mac802154 IEEE 802.15.4 MAC security component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploi...