EUVD-2026-67490

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emacprobe Move devmrequestirq after devmplatformioremapresource so that dev-emacp is mapped before the interrupt handler can fire. An early interrupt hitting emacirq would dereference th...

CVE-2026-80612 net: lwtunnel: Drop skb metadata before LWT encapsulation

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

EUVD-2026-67488

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

CVE-2026-80612

This Linux kernel vulnerability affects the net lwtunnel (lightweight tunnel) subsystem. When LWT encapsulation prepends outer headers, it moves skb->data over the headroom where XDP/TC skb metadata resides. Non-BPF encaps types (MPLS, Seg6, IOAM6) silently overwrite this metadata via skb_push...

CVE-2026-80612

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

CVE-2026-80612 net: lwtunnel: Drop skb metadata before LWT encapsulation

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

CVE-2026-80611 ACPI: processor_idle: Mark LPI enter functions as __cpuidle

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80611

Linux kernel 's ACPI processor_idle subsystem contains a flaw in the acpi_idle_lpi_enter() function. When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle (LPI) state triggers an RCU warning because the function is invoked after RCU has been disabled for the current CPU, ye...

CVE-2026-80610

This Linux kernel vulnerability affects the enetc network driver on i.MX94 series SoCs. In standalone ENETC configurations where SR-IOV is not supported, pf->caps.num_vsi is zero, causing a divide-by-zero in enetc4_default_rings_allocation() when distributing rings between the physical functio...

CVE-2026-80610

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

EUVD-2026-67486

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

EUVD-2026-67487

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80611

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80610 net: enetc: fix potential divide-by-zero when num_vsi is zero

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

EUVD-2026-67484

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

EUVD-2026-67485

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

CVE-2026-80609

This vulnerability affects the qede (Qualcomm Ethernet) driver in the Linux kernel . The root cause is an out-of-bounds access on the cqe->len_list[] array, where the index bounds check was performed after the element was already accessed, allowing an out-of-bounds read or write. The fix moves...

CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608

This Linux kernel vulnerability affects the accel/amdxdna driver (AMD XDNA accelerator). When force_iova mode is enabled, a race condition exists during device removal: amdxdna_remove() frees the xdna->domain IOMMU domain, and a subsequent call to amdxdna_gem_obj_free() may access that freed m...