CVE-2026-74614

A flaw in the Linux kernel's vsock/virtio driver allows a stale pointer to a deleted virtqueue to be retained by RX, TX, or event workers during suspend/resume cycles. The root cause is a lock ordering issue introduced by commit bd50c5dc182b (device suspend/resume support): workers read their vir...

EUVD-2026-48949

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

CVE-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...