CVE-2026-98431

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmaplock/disassociationlock circular dependency Commit 51976c6cd786 "RDMA/core: Provide rdmausermmapdisassociate to disassociate mmap pages" introduced disassociationlock to protect new mmap registrations against...

CVE-2026-98399

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

CVE-2026-98421

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARNONONCE!sta || !apsta Only accept...

CVE-2026-98401

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdiscpktlensegsinit caused by a stale transportheader offset after tunnel decapsulation. BUG: unable to handle page fault for addres...

CVE-2026-98425

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211requestibssscan warns when regulatory leaves no allowed channel, but that can happen as the regdomain can change while IBSS is operating, and it can continue...

CVE-2026-98420

In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbdsessionregister destroys valid sessions after ten seconds of inactivity whenever a client starts another SessionSetup exchange. This confuses Session.IdleTime with...

UBUNTU-CVE-2026-98409

In the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid division by zero clkgetrate could return 0. Avoid a division by zero panic...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8923-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8923-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8919-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8919-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2026-98391: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM reference is dropped asynchronously, allowing the device to autosuspend while stale page faults belonging to the now-dead VM are still...

UBUNTU-CVE-2026-98387

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...

CVE-2026-98387: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...

ROS-20261014-73-0001

The vulnerability of the strpabortstrp function in the net/strparser/strparser.c module of the Linux kernel is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20261014-73-0037

The vulnerability of the rsikillthread function in the drivers/net/wireless/rsi/rsicommon.h file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ALSA-2026:83157 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get CVE-2026-72262 kernel: net/sche...

CVE-2026-98417

In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand xfrm packets whose transport header offset no longer fits after the stream parser trims the TCP envelope. The plain transport header reset truncates...

CVE-2026-98386

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memsetio to clear QLAFX00 request ring slot For QLAFX00 the request ring is ioremapped device I/O memory ha-iobase + reqqueoff, not DMA-coherent RAM, which is why the rest of the FX00 path accesses it through...

CVE-2026-98389

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...

CVE-2026-98397: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98422

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces get cryptotxtailroomneededcnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the...