CVE-2026-98862 media kernel: audit: fix exe mark UAF in kill_rules() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98861 media kernel: kernel: Denial of Service via fprobe use-after-free 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98858 media kernel: io_uring: fix task_work add use-after-free with SQPOLL 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98856 media kernel: kprobes: Skip disarmed probes when checking optkprobe overlap 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98855 media kernel: of/overlay: put property on deadprops only after changeset add succeeds 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98854 media kernel: of/overlay: only treat a positive changeset id as registered 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98848 media kernel: rtc: ac100: Assign .num before accessing .hws 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98846 media kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98845 media kernel: tpm: Disable TPM on null key name mismatch 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98842 media kernel: module: fix lost error code from codetag_load_module() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98841 media kernel: virt: vmgenid: set driver_data before registering notification handlers 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98839 media kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98837 media kernel: ALSA: caiaq: unregister the input device when probe fails 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98836 media kernel: ALSA: line6: reject oversized playback packets 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98835 media kernel: iio: accel: kionix-kx022a: Fix array boundary check 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98834 media kernel: mtd: core: avoid double-free of OTP NVMEM device 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98833 media kernel: mtd: core: call _get_device() with the master MTD 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98832 media kernel: blk-cgroup: save IRQ state in blkg_tryget_closest() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98829 media kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98827 media kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98826 media kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98825 media kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98824 media kernel: wifi: mac80211: validate TX status rate metadata 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98823 media kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98820 media kernel: blk-mq: set RQF_USE_SCHED when the operation is known 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98819 media kernel: Bluetooth: btintel: validate DDC record lengths 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98818 media kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98815 media kernel: nvme: fix cdev lifetime 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98814 media kernel: nvme: fix command effects log lifetime for multipath heads 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98813 media kernel: bpf: Hold map BTF for the memory allocator destructor record 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98809 media kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98807 media kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98804 media kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98803 media kernel: net: stmmac: fix rx Scatter-Gather support 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98800 media kernel: kernel: Denial of Service via use-after-free in BPF trampoline 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98799 media kernel: bpf: Skip detached progs in trampoline images that are still in use 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98798 media kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98797 media kernel: net: cap skb->queue_mapping when the tx queue is picked 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98796 media kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98795 media kernel: net: sparx5: skip ptp deinit if init was skipped 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98794 media kernel: ipvs: filter some flags received in the backup server 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98793 media kernel: netfilter: bpf: reject invalid NAT manipulation types 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98792 media kernel: netfilter: flowtable: generalize pending status bit 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98791 media kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98790 media kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98788 media kernel: kernel: Privilege escalation via use-after-free during futex hash resizing 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98787 media kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98786 media kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98783 media kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98776 media kernel: kernel: Privilege escalation via binderfs use-after-free 27 oct 2026 build de las 01:25 UTC 18 oct 2026 