CVE-2026-89602

CVE-2026-89602 affects the erofs filesystem driver in the Linux kernel . The flaw is in the global buffer resize path: z_erofs_gbuf_nrpages is advanced only after all buffers have been grown, so a retry after a partial resize failure revisits already-enlarged buffers. Retrying the same size cause...

CVE-2025-38638

CVE-2025-38638: In the Linux kernel IPv6 stack, inet6_rt_notify() could be invoked under RCU protection, allowing concurrent route changes and rt6_fill_node() returning -EMSGSIZE. The fix adds retry logic: when this situation is detected, the skb is resized and the operation retried, and a previo...