CVE-2026-98988

A flaw was found in the Linux kernel. When creating a new mount namespace using the opentree system call, child and covered mounts are not properly preserved during namespace copying. A local attacker can exploit this vulnerability to reveal and access sensitive filesystem paths intentionally...

CVE-2026-98945

A flaw was found in the Linux kernel's Steam Human Interface Device HID driver. A timing issue during the device teardown sequence allows scheduled background tasks to access memory after it has been freed. A local attacker could exploit this use-after-free condition to cause a system crash,...

CVE-2026-98938

A flaw was found in the Linux kernel's Rust interrupt handling subsystem. During interrupt request IRQ registration, an interrupt can be serviced before the registration structure is fully initialized, causing the callback handler to access uninitialized memory. A local attacker could exploit thi...

CVE-2026-98933

A flaw was found in the Linux kernel's USB hub driver. An excessive hold time during the resume of USB root hubs causes instability in runtime power management on certain platforms. A local user running software that frequently wakes and polls the USB subsystem can trigger this issue, leading to ...

CVE-2026-98932

A flaw was found in the Linux kernel's Altera EDAC Error Detection and Correction driver. In device setup error-handling paths, driver memory is released before the associated interrupt handlers are unregistered. If an interrupt fires during this cleanup window, the handler dereferences freed...

CVE-2026-98928

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. A local privileged user can cause a Denial of Service DoS by initializing a virtual machine with inconsistent Scalable Vector Extension SVE settings. This condition leads to a null pointer dereference whe...

CVE-2026-98924

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS when attempting to unmount a filesystem after its underlying storage device has been disconnected while in use. During cleanup, the kernel repeatedly rescans cached file metadata structures without making...

CVE-2026-98922

A flaw was found in the Linux kernel's IBM EMAC Ethernet Media Access Controller network driver. During device initialization, the driver attempts to attach the physical network interface before network device operations are configured, causing a null pointer dereference. A local user capable of...

CVE-2026-98920

A flaw was found in the Linux kernel's netfs subsystem. Direct memory pool allocations bypassed required memory tracking hooks when memory profiling debug features are active. A local user accessing files on a network file system can trigger repeated kernel warning messages, which may lead to a...

CVE-2026-98912

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem. An inverted buffer size check in the OSS Open Sound System sequencer read handler allows a local user to cause memory corruption. Because the kernel checks buffer bounds incorrectly, it copies event data into...

CVE-2026-98916

A flaw was found in the Linux kernel's nl80211 wireless subsystem. A local user with network administration privileges could cause a Denial of Service DoS by requesting a Basic Service Set BSS color change on an inactive or non-beaconing wireless link. Because the interface fails to verify that t...

CVE-2026-98093

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture fslmicfil audio driver. A local user can cause a Denial of Service DoS or system instability by repeatedly configuring or freeing audio stream parameters. Because the driver enables and disables the master audio clock...

CVE-2026-98914

A flaw was found in the Linux kernel's amdgpu graphics driver. The driver fails to limit the nesting depth during the execution of ATOM command tables, allowing unbounded recursion. A local user could trigger excessive recursion to cause a kernel stack overflow, leading to a system crash and Deni...

CVE-2026-98919

A flaw was found in the Linux kernel's Intel Xe graphics driver. Improper calculation handling and missing zero-value checks during graphics idle delay configuration can lead to integer overflows or a division-by-zero error. Under certain hardware initialization states or driver operations, this...

CVE-2026-98918

A flaw was found in the Linux kernel's DAMON Data Access Monitoring subsystem. A local user could cause a Denial of Service DoS or memory corruption on ARM64 systems due to improper handling of unaligned memory addresses during page table operations. When the kernel samples memory access, an...

CVE-2026-98990

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or unexpected system behavior by unmounting filesystem submounts that are still actively in use. During the removal of propagating mount trees, the kernel fails to verify that a submount is free of active...

CVE-2026-98946

A flaw was found in the Linux kernel's drm/vc4 graphics driver. During runtime power suspend transitions, the driver does not properly disable hardware interrupts before powering down the device. A local user triggering power transitions could cause interrupt handlers to execute while the hardwar...

CVE-2026-98944

A flaw was found in the Linux kernel's Steam Controller HID Human Interface Device driver. This issue allows a local user to cause a Denial of Service DoS by triggering a device registration failure. During an unsuccessful registration sequence, the driver fails to properly unregister the battery...

CVE-2026-98941

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a denial of service DoS and system crash by writing encrypted data to an ext4 filesystem when encryption is enabled after mounting. This occurs because the filesystem bypasses compatibility checks for large memory bloc...

CVE-2026-98940

A flaw was found in the Linux kernel's Qualcomm audio driver LPASS CPU. When configuring digital audio interfaces on certain platforms, the driver uses a hardware port identifier instead of the table index to update playback constraints. This issue causes an out-of-bounds memory write, which can...