CVE-2026-98916

A flaw was found in the Linux kernel's nl80211 wireless subsystem. A local user with network administration privileges could cause a Denial of Service DoS by requesting a Basic Service Set BSS color change on an inactive or non-beaconing wireless link. Because the interface fails to verify that t...

CVE-2026-98093

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture fslmicfil audio driver. A local user can cause a Denial of Service DoS or system instability by repeatedly configuring or freeing audio stream parameters. Because the driver enables and disables the master audio clock...

CVE-2026-98914

A flaw was found in the Linux kernel's amdgpu graphics driver. The driver fails to limit the nesting depth during the execution of ATOM command tables, allowing unbounded recursion. A local user could trigger excessive recursion to cause a kernel stack overflow, leading to a system crash and Deni...

CVE-2026-98919

A flaw was found in the Linux kernel's Intel Xe graphics driver. Improper calculation handling and missing zero-value checks during graphics idle delay configuration can lead to integer overflows or a division-by-zero error. Under certain hardware initialization states or driver operations, this...

CVE-2026-98918

A flaw was found in the Linux kernel's DAMON Data Access Monitoring subsystem. A local user could cause a Denial of Service DoS or memory corruption on ARM64 systems due to improper handling of unaligned memory addresses during page table operations. When the kernel samples memory access, an...

CVE-2026-98990

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or unexpected system behavior by unmounting filesystem submounts that are still actively in use. During the removal of propagating mount trees, the kernel fails to verify that a submount is free of active...

CVE-2026-98946

A flaw was found in the Linux kernel's drm/vc4 graphics driver. During runtime power suspend transitions, the driver does not properly disable hardware interrupts before powering down the device. A local user triggering power transitions could cause interrupt handlers to execute while the hardwar...

CVE-2026-98944

A flaw was found in the Linux kernel's Steam Controller HID Human Interface Device driver. This issue allows a local user to cause a Denial of Service DoS by triggering a device registration failure. During an unsuccessful registration sequence, the driver fails to properly unregister the battery...

CVE-2026-98941

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a denial of service DoS and system crash by writing encrypted data to an ext4 filesystem when encryption is enabled after mounting. This occurs because the filesystem bypasses compatibility checks for large memory bloc...

CVE-2026-98940

A flaw was found in the Linux kernel's Qualcomm audio driver LPASS CPU. When configuring digital audio interfaces on certain platforms, the driver uses a hardware port identifier instead of the table index to update playback constraints. This issue causes an out-of-bounds memory write, which can...

CVE-2026-98939

A flaw was found in the Linux kernel's x86 memory management subsystem. Under memory pressure on systems with discrete graphics processing units GPUs, a circular locking dependency can occur between memory reclamation and page table freeing routines. A local user could exploit this flaw to cause ...

CVE-2026-98936

A flaw was found in the Linux kernel's ath11k wireless driver. During hardware restart events, the driver fails to properly reset its connected station counter. Consequently, the driver falsely reports that the connection capacity has been exceeded, resulting in a Denial of Service DoS where new...

CVE-2026-98925

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter sockmap subsystem. This flaw allows a local attacker to cause a Denial of Service DoS when redirecting network traffic back to the originating socket. The kernel improperly double-counts sequence numbers for received TCP Transmissi...

CVE-2026-98917

A flaw was found in the Linux kernel's PA-RISC architecture support. This vulnerability can lead to a Denial of Service DoS when deep call chains cause a kernel stack overflow on 64-bit systems. A local user executing complex or resource-intensive workloads can trigger this condition, causing the...

CVE-2026-98985

A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability by invoking the pivotroot system call with a file descriptor referencing an unmounted filesystem whose parent mount has already been freed. This flaw allows the kernel to access previously released memor...

CVE-2026-98986

A flaw was found in the Linux kernel's mount namespace subsystem. When cleaning up a mount namespace associated with filesystem notification marks, the kernel improperly attempts to acquire a sleeping lock within an invalid interrupt context. A local user with privileges to manage mount namespace...

CVE-2026-98930

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. A local user with access to the KVM interface can trigger a Denial of Service DoS by injecting a stop and store status signal into an already stopped virtual CPU vCPU. In this scenario, th...

CVE-2026-98934

A flaw was found in the Linux kernel's IPv6 Segment Routing SRv6 subsystem. This vulnerability can lead to a Denial of Service DoS when the kernel processes certain encapsulated packets—such as discovery traffic lacking socket or device associations—while segment routing flow labeling is enabled...

CVE-2026-98923

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by triggering an unexpected kernel warning on ARM64 systems. By establishing a restricted memory mapping and reading process details through the /proc interface, the kernel incorrectly flags valid user protection...

CVE-2026-98926

A flaw was found in the Linux kernel's AMD display driver. During Display Power Management Signaling DPMS sequences, the driver attempts to access a display sink pointer without verifying whether it is null. A local user could exploit this flaw during display power state transitions, triggering a...