CVE-2026-98695 USB: serial: fix ioctl hangup race

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

CVE-2026-98695 USB: serial: fix ioctl hangup race

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

CVE-2026-98695

The Linux kernel contains a race condition involving tty ioctls and the hangup operation for USB serial devices. The vulnerability occurs when a device is disconnected or powered down during lengthy break signaling, potentially causing the kernel to call into a tty driver for a non-existent devic...

CVE-2026-98676 iio: adc: ade9000: fix NULL pointer dereference in clkout registration

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

EUVD-2026-103930

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

CVE-2026-98676 iio: adc: ade9000: fix NULL pointer dereference in clkout registration

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

CVE-2026-98676

The Linux kernel contains a vulnerability in the iio: adc: ade9000 driver. The function ade9000_setup_clkout() incorrectly passes a NULL register address when registering a divider clock. During this process, the common clock framework calls clk_divider_recalc_rate(), which attempts to dereferenc...

CVE-2026-98676

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

EUVD-2026-103565

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...

CVE-2026-98651 KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...

CVE-2026-98651

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...

CVE-2026-98651 KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...

CVE-2026-98651

The Linux kernel contains a vulnerability in the KVM s390 component where the function page_cond_set_storage_key() improperly handles a NULL pointer passed as oldkey by certain callers. This improper handling leads to a NULL pointer dereference , which can cause system crashes. The issue is resol...

EUVD-2026-103555

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

CVE-2026-98641

The Linux kernel contains a vulnerability affecting BPF on arm64 architectures. The issue arises when a program acts as an exception boundary and saves all callee-saved registers, causing the kernel to fail to correctly set the frame pointer (BPF_REG_FP) for the exception callback. Because the ca...

CVE-2026-98641 bpf, arm64: set up the frame pointer for the exception callback

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

CVE-2026-98641

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

CVE-2026-98637

The Linux kernel contains a vulnerability in the KVM subsystem for arm64 architecture. During vCPU initialization , the function pkvm_vcpu_init_sve() incorrectly clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features upon failure, while leaving KVM_ARCH_FLAG_GUEST_HAS_SVE set. This causes subseque...

CVE-2026-98637 KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvmvcpuinitsve clears KVMARMVCPUSVE in kvm-arch.vcpufeatures when it fails, but vcpuhassve tests KVMARCHFLAGGUESTHASSVE, which is left set. Later vCPUs on that VM...

CVE-2026-98637 KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvmvcpuinitsve clears KVMARMVCPUSVE in kvm-arch.vcpufeatures when it fails, but vcpuhassve tests KVMARCHFLAGGUESTHASSVE, which is left set. Later vCPUs on that VM...