CLSA-2025-1764151168 kernel: Fix of 40 CVEs

perf/aux: Fix AUX buffer serialization CVE-2024-46713 - block: fix uaf for flush rq while iterating tags CVE-2024-53170 - zram: fix potential UAF of zram table CVE-2025-21671 - sched: schcake: add bounds checks to host bulk flow fairness counts CVE-2025-21647 - bpf: Fix UAF via mismatching...

CVE-2026-98563

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

UBUNTU-CVE-2026-98563

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

UBUNTU-CVE-2026-98594

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98594

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

DEBIAN-CVE-2026-98594

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

AZL-109211 CVE-2026-98594 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98594

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98563

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

EUVD-2026-103639

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98594

The Linux kernel contains a vulnerability where the tg3 driver fails to properly clean up PHYLIB resources during a probe failure. Specifically, if tg3_get_invariants() registers an MDIO bus and connects a PHY for USE_PHYLIB devices, but tg3_init_one() subsequently fails, the common error path re...

CVE-2026-98594 tg3: clean up PHYLIB resources on probe failure

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98594 tg3: clean up PHYLIB resources on probe failure

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3getinvariants can register an MDIO bus and connect a PHY for USEPHYLIB devices. If tg3initone later fails, its common error path releases the mappings and netdev without undoing...

CVE-2026-98564

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq mt7530removecommon disposes the per-PHY interrupt mappings from .remove, but the regmap-irq chip that owns the domain is devm-registered, so its parent interrupt is only...

CVE-2026-98563

A vulnerability in the Linux kernel networking stack's phylink component allows for a use-after-free scenario. The issue occurs because phylink_bringup_phy() stores a PHY in pl->phydev before a fallible step (like phy_eee_rx_clock_stop()). If that step fails, the system unwinds using phy_detac...

EUVD-2026-103608

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

CVE-2026-98563 net: phylink: record the PHY only once bringup cannot fail

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

CVE-2026-98563 net: phylink: record the PHY only once bringup cannot fail

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...

PT-2026-116813

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3 get invariants can register an MDIO bus and connect a PHY for USE PHYLIB devices. If tg3 init one later fails, its common error path releases the mappings and netdev without...

PT-2026-116782

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylink bringup phy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phy eee rx clock stop can fail with a real MDIO...