CVE-2026-99038

A flaw was found in the Linux kernel's Realtek USB MemoryStick rtsxusbms driver. This vulnerability can lead to a Denial of Service DoS due to a race condition when a device is disconnected while handling active requests. Because the driver drops an in-flight request without signaling completion,...

CVE-2026-99024

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment driver. The driver registers device interfaces before internal data structures are fully initialized. A local user can access the device during this initialization window, triggering uninitialized mutex...

CVE-2026-98957

A flaw was found in the Linux kernel's MT7915 wireless driver. The driver fails to properly disable receive network polling before freeing device resources during hardware teardown or module unloading. This flaw may allow a local privileged user to induce kernel warnings and cause system...

CVE-2026-98983

A flaw was found in the Linux kernel. During a failed namespace unshare operation, the kernel improperly decrements reference counters for namespaces that were never fully established. A local attacker could exploit this flaw by triggering specific credential allocation failures, leading to...

CVE-2026-99098

A flaw was found in the Linux kernel's dm-integrity subsystem. When operating in inline mode with a tag size larger than the expected maximum digest size, checksum calculation pads data past the boundary of a fixed-size stack buffer. A local privileged user configuring an integrity device with an...

CVE-2026-98968

A flaw was found in the Linux kernel's Automatic Multicast Tunneling AMT driver. Network query packets queued for transmission can outlive and reference an AMT tunnel structure after it has expired and been freed. When the delayed packet is subsequently transmitted, the kernel accesses the...

CVE-2026-99028

A flaw was found in the Linux kernel's Xilinx Axi Ethernet driver. During network interface shutdown, the driver fails to unmap and release active Direct Memory Access DMA buffers and suffers from a race condition during teardown. A privileged local user could exploit this vulnerability by...

CVE-2026-98958

A flaw was found in the Linux kernel's mt76 wireless driver. When handling connections that use Multi-Link Operation MLO, transmission completions can be reported on a different wireless link than the one where packets were initially queued, causing packet accounting counters to drift upward...

CVE-2026-99027

A flaw was found in the Linux kernel's team network device driver. When a network packet is dropped during a queue override operation, the driver attempts to reuse the freed packet buffer on subsequent transmit attempts. A local attacker could exploit this use-after-free condition to cause a syst...

CVE-2026-98978

A flaw was found in the Linux kernel's mount namespace subsystem. This issue allows a local attacker to cause an information disclosure by exposing files and directories protected by locked mounts. When an unlocked ancestor mount is unmounted, the kernel improperly allows locked submounts to expi...

CVE-2026-98982

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability to cause a Denial of Service DoS or potentially escalate privileges on the system. By bind-mounting a pseudo file descriptor, such as a Berkeley Packet Filter BPF token, as the root of a mount point, t...

CVE-2026-98977

A flaw was found in the Linux kernel. A local attacker with the ability to create user and mount namespaces can trigger an improper filesystem lock during an automatic mount automount operation. Because the kernel incorrectly assigns mount locks across namespaces during propagation, the lock is...

CVE-2026-98980

A flaw was found in the Linux kernel. A race condition during reference-based path lookup allows a local user to access files hidden beneath mount points, resulting in information disclosure. When an overmounted file or directory is unlinked or removed while another process traverses the path, th...

CVE-2026-98972

A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability when a control group cgroup filesystem is rebound, causing the cpuset subsystem to access a stale pointer. This flaw can lead to a Denial of Service DoS by crashing the system or potentially allow...

CVE-2026-99022

A flaw was found in the Linux kernel's LTC3676 regulator driver. The driver improperly marks write-only command registers, including the hardware reset register, as readable. A local user with administrative privileges can cause a Denial of Service DoS by reading the regulator registers through...

CVE-2026-99097

A flaw was found in the Linux kernel's Trusted Execution Environment TEE subsystem. A local user can cause a Denial of Service DoS by requesting a zero-sized shared memory allocation. Because the subsystem fails to validate the requested allocation size before calculating page counts, the kernel'...

Important: Red Hat Security Advisory: librsvg2 security update

An update for librsvg2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

kernel: KEYS: encrypted: fix integer overflow of datablob_len

A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...