CVE-2026-97921

A flaw was found in the Linux kernel's tracing subsystem. When configuring event histogram triggers, specifying an unpermitted modifier for a value or variable fails to release previously allocated memory on error. A local user with tracing access can exploit this flaw by repeatedly submitting...

CVE-2026-97479

A flaw was found in the Linux kernel's driver core subsystem. This issue may allow a local privileged user to cause a Denial of Service DoS by initiating device driver removal under specific dependency conditions. When a device is detached while its dependent supplier device is actively unbinding...

CVE-2026-97919

A flaw was found in the Linux kernel's tracing subsystem. When creating a named histogram trigger, the kernel registers the trigger before completing its setup. If initialization fails, the object is freed without being removed from the global tracking list. A local attacker can exploit this flaw...

CVE-2026-97918

A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...

CVE-2026-97909

A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request IRQ before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains...

CVE-2026-97900

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user could exploit this flaw to cause a Denial of Service DoS by triggering an infinite loop during graphics buffer locking operations. When processing locking requests that include an empty object list, the...

CVE-2026-97616

A flaw was found in the Linux kernel's traffic control action subsystem. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. When processing a batched request to replace traffic control actions, an initialization failure causes the cleanup routine to abort...

CVE-2026-97443

A flaw was found in the Linux kernel's perf subsystem. During error handling for failed performance event allocation, the kernel unconditionally attempts to unregister a function tracer that was never successfully enabled. A local user can exploit this flaw to trigger a kernel warning, which may...

CVE-2026-97615

A flaw was found in the Linux kernel's network bridge subsystem, which can lead to a Denial of Service DoS due to list corruption. When Connectivity Fault Management CFM or Media Redundancy Protocol MRP handlers are enabled across multiple network bridges, a shared data structure is improperly...

CVE-2026-97617

A flaw was found in the Linux kernel's ring buffer subsystem. A race condition occurs when updating the buffer configuration concurrently with memory mapping operations. Because the kernel applies the new buffer order before verifying that resizing is permitted across all processors, the system c...

CVE-2026-97597

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 subsystem. A local unprivileged user can cause a Denial of Service DoS by repeatedly requesting leases for a shared network flow label. Because the kernel fails to enforce per-socket lease limits during label reuse, memory is...

CVE-2026-97424

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. A local user could cause a Denial of Service DoS by triggering a system suspend followed by unloading the driver. Due to missing suspend handling and improper cleanup logic in the Reliability, Availability, and Serviceability RAS...

CVE-2026-97598

A flaw was found in the Linux kernel's IPv4 routing subsystem. This vulnerability allows a local user with network configuration privileges to cause a Denial of Service DoS. When automatic routing table identifier allocation is requested, the kernel searches through table identifiers without an...

CVE-2026-97596

A flaw was found in the Linux kernel's IP Virtual Server IPVS subsystem. An attacker capable of sending network synchronization messages can transmit connection template records containing invalid protocol states, which the sync receiver stores rather than rejects. When the system subsequently...

CVE-2026-97423

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. This vulnerability allows a local user to cause a Denial of Service DoS or system instability through an out-of-bounds memory access. During CXL region configuration, the kernel fails to validate that the partition index i...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

CVE-2026-97413

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A malicious client can trigger an integer underflow by sending a specially crafted message with an oversized length field during read or write operations. This improper validation leads to an out-of-bounds memory...

CVE-2026-97588

A flaw was found in the Linux kernel's s390 cryptographic subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by executing cryptographic operations when underlying hardware repeatedly reports a busy state. Because the subsystem fails to properly translate persistent...

CVE-2026-97408

A flaw was found in the Linux kernel's Bluetooth subsystem. The Logical Link Control and Adaptation Protocol L2CAP implementation fails to properly validate the payload length of connectionless frames before reading the Protocol/Service Multiplexer PSM field. An adjacent attacker within Bluetooth...

USN-8842-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N. meshing protocol; - HSR network protocol; -...