USN-8842-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N. meshing protocol; - HSR network protocol; -...

USN-8816-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

CVE-2026-97584

A flaw was found in the Linux kernel's AFS Andrew File System subsystem. During server lookup operations, the candidate cleanup routine incorrectly frees memory associated with an existing server's endpoint state. A local user interacting with the filesystem could exploit this issue to trigger...

CVE-2026-97558

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem, which can lead to a Denial of Service DoS. Due to a timing issue during deferred file close operations, the kernel fails to properly release an internal file reference count when background cleanup work is already...

CVE-2026-98075

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...

CVE-2026-98070

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. Due to improper synchronization during TCP connection path resets, transmit operations can run concurrently while connection state is being modified. An attacker could exploit this timing window during connection...

CVE-2026-98068

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition during connection shutdown can lead to a Denial of Service DoS. When connection teardown coincides with a concurrent connection drop or incoming connection, the kernel may fail to complete socket...

CVE-2026-98065

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user can cause a Denial of Service DoS by creating a hash map lacking key type information and reading it through the BPF file system. Due to missing validation of BPF Type Format BTF metadata, the kernel attempt...

CVE-2026-98059

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This issue allows a local attacker to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the BPF verifier fails to recognize that process-wait tracepoint arguments can be null,...

CVE-2026-98058

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain internal helper functions that pause execution to perform blocking operations were not properly marked as sleepable. A local user with permissions to load BPF programs can invoke these functions within...

ROS-20260929-73-0163

The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20260929-73-0111

The vulnerability of the cs35l41hdareadacpi function in the sound/hda/codecs/side-codecs/cs35l41hda.c module of the Linux kernel’s sound subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260929-73-0110

The vulnerability of the wavefrontsendsample function in the sound subsystem of the Linux kernel lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260929-73-0063

The vulnerability of the cgwcsumcrc8rel function in the net/can/gw.c module of the Linux operating system’s CAN subsystem relates to access to a memory cell preceding the buffer’s start. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0002

The vulnerability of the trytodeltimersync function in the kernel/time/timer.c module of the Linux timer subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0112

The vulnerability of the detectstreamformats function in the sound/firewire/dice/dice-extension.c module of the Linux kernel’s sound subsystem is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ROS-20260929-73-0180

The vulnerability of the advanceperiodictargetexpiration function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker t...

ROS-20260929-73-0103

The vulnerability of the rawsockrelease function in the net/nfc/rawsock.c module of the NFC subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

ROS-20260929-73-0113

The vulnerability of the hwdepread function in the sound/firewire/motu/motu-hwdep.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker...

CVE-2026-97553

A flaw was found in the Linux kernel's XFS file system. When unmounting a file system, the health monitoring subsystem fails to acquire the necessary lock before inserting an unmount event into the event list. A local user with permissions to unmount file systems could trigger this race condition...