CVE-2026-53163

CVE-2026-53163 affects the Linux kernel rtmutex/futex path. The issue arises when task_blocks_on_rt_mutex() fails to arm the waiter on deadlock detection, leaving waiter->task nil, and the code path can reach remove_waiter() via rt_mutex_start_proxy_lock(). The root cause is tied to how the wa...

CVE-2026-43059

CVE-2026-43059 affects the Linux kernel Bluetooth MGMT path. A change introducing mgmt_pending_valid() caused completion handlers to unlink commands from the pending list, which could lead to list corruption and potential memory safety issues. The patch fixes two issues: (1) in mgmt_add_adv_patte...

CVE-2026-53390

The CVE-2026-53390 issue affects ksmbd in the Linux kernel, where an out-of-bounds heap read can be triggered by crafted ACEs in SMB DACLs. Root cause: smb_check_perm_dacl() validates ACE header and caps sid.num_subauth but did not ensure ace->size is large enough to contain num_subauth sub-au...

CVE-2026-64092

The CVE-2026-64092 issue affects the Linux kernel’s batman-adv module (tp_meter). The root cause is flawed coordination between receiver shutdown and batadv_tp_stop_all(), allowing a tp_vars reference leak when batadv_tp_receiver_shutdown() fails to release its reference if a timer had already ex...