CVE-2026-80916

In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPTRT syzbot is reporting KCOV state corruption on PREEMPTRT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the per-CP...

CVE-2026-80915

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added...

CVE-2026-80914

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from it...

CVE-2026-87613: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-20500

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...

CVE-2026-20501

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:19+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveo63c33z2p...

CVE-2026-20502

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveptqaout2u...

CVE-2026-20503

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:05+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...

CVE-2026-20504

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...

CVE-2026-80913

In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...

CVE-2026-80908

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...

CVE-2026-80912

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

UBUNTU-CVE-2026-80912

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80911

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sofwidgetsetupunlocked If either tplgops-daiconfig or widgetkcontrolsetup fail during widget setup we would double decrement the usecount of the widget because the sofwidgetfreeunlocked wou...

UBUNTU-CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

UBUNTU-CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

UBUNTU-CVE-2026-80908

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...

CVE-2026-80905

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...

CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...