CVE-2026-98084

In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks When processing calls to bpfloop verifier marks R1 and R4 as precise. R1 tracks loop iterations number and because of the 'callbackdepth R1' mechanics in...

CVE-2026-98042 bpf: Don't resurrect a scalar id dropped by collect_linked_regs()

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...

EUVD-2026-86693

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check checkcondjmpop accepts "if rA rB" as a NULL check for a nullable pointer rA when rB is a scalar known to be zero, lifts PTRMAYBENULL from rA in the corresponding...

CVE-2026-98040

The Linux kernel contains a vulnerability in the BPF verifier where check_cond_jmp_op() incorrectly handles register-form NULL checks . When a nullable pointer rA is compared against a scalar rB known to be zero, the verifier lifts PTR_MAYBE_NULL from rA but fails to mark rB as precise. This allo...

CVE-2026-98040 bpf: Mark the zero register precise for a register-form NULL check

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check checkcondjmpop accepts "if rA rB" as a NULL check for a nullable pointer rA when rB is a scalar known to be zero, lifts PTRMAYBENULL from rA in the corresponding...

CVE-2026-98040 bpf: Mark the zero register precise for a register-form NULL check

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check checkcondjmpop accepts "if rA rB" as a NULL check for a nullable pointer rA when rB is a scalar known to be zero, lifts PTRMAYBENULL from rA in the corresponding...

CVE-2026-98040

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check checkcondjmpop accepts "if rA rB" as a NULL check for a nullable pointer rA when rB is a scalar known to be zero, lifts PTRMAYBENULL from rA in the corresponding...

CVE-2026-98040: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check checkcondjmpop accepts "if rA rB" as a NULL check for a nullable pointer rA when rB is a scalar known to be zero, lifts PTRMAYBENULL from rA in the corresponding...

PT-2026-98813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where a register invariants violation occurs during speculative pointer arithmetic. When processing instructions in adjust ptr...

CVE-2026-98034

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise checkmapkptraccess permits a scalar store into an untrusted kptr field only when the register is known to contain zero. Unlike other verifier checks whose outcome depends on a scalar value, it...

PT-2026-98636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the macb mii init function. The function retains a reference returned by of get child by name for use in macb mdiobus register but only releases it during error...

PT-2026-98703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check cond jmp op function incorrectly handles NULL checks for nullable pointers. When a comparison is made between a nullable pointer rA a...

SUSE CVE-2026-93259

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...

CVE-2026-97441

In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI controller is disabled in BIOS, its HOSTCAP register may contain a bogus value, e.g. 0xFFFFFFFF. Since CAP.NP Number of Ports is a zeroes based 5-bit register...

CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

AZL-103857 CVE-2026-97407 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

DEBIAN-CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

UBUNTU-CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

DEBIAN-CVE-2026-93259

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...

CVE-2026-93259

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...