CVE-2026-99055

A flaw was found in the Linux kernel's TCP networking subsystem. When handling zero-copy data reception involving certain device memory buffers, the kernel fails to properly validate memory fragment types before dereferencing them, resulting in a null pointer dereference. An attacker sending...

CVE-2025-39682

CVE-2025-39682 affects the Linux kernel TLS receive path . A zero-length record retrieved from the rx_list bypasses the intended recvmsg() record-type handling, causing subsequent TLS records to be processed with incorrect zero-copy and queuing assumptions. CISA rates it CVSS 9.8 (Critical, netwo...