CVE-2026-98770 media kernel: usb: gadget: midi2: Fix the jack descriptor array sizes 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98767 media kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98766 media kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98765 media kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98764 media kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98763 media kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98762 media kernel: kernel: Denial of Service via use-after-free in USB DWC2 driver 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98758 media kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98757 media kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98756 media kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98754 media kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98752 media kernel: tty: port: fix tty_port_tty_vhangup() race 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98751 media kernel: tty: abort break signalling on hangup 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98749 media kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driver 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98748 media kernel: kernel: Denial of Service via use-after-free in Broadcom serial driver 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98747 media kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98740 media kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98738 media kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handling 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98737 media kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-free 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98735 media kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98734 media kernel: kernel: Denial of Service via use-after-free in Bluetooth connection scheduling 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98730 media kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98722 media kernel: mtd: block2mtd: Fix divide error when erase_size is zero 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98721 media kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98720 media kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98714 media kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98713 media kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98712 media kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98711 media kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmission 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98708 media kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacement 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98707 media kernel: wifi: mac80211: shut down RX BA session timer on teardown 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98706 media kernel: wifi: mac80211: drain PS delivery work during station teardown 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98704 media kernel: wifi: mac80211: keep fallback association elements alive 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98703 media kernel: wifi: mac80211: minstrel_ht: validate fixed rate index 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98702 media kernel: kernel: Denial of Service via invalid channel switch frame in mac80211 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98701 media kernel: wifi: mac80211: release mesh path quota on failed additions 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98699 media kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98687 media kernel: thunderbolt: Reject oversized XDomain properties responses 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98678 media kernel: iio: adc: ad4030: fix invalid oversampling_ratio validation 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98677 media kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbind 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98676 media kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registration 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98674 media kernel: iio: adc: adi-axi-adc: Initialize state mutex 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98673 media kernel: iio: adc: pac1934: check ACPI label duplication 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98670 media kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98669 media kernel: iio: buffer: serialize buffer teardown with mode claims 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98667 media kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98666 media kernel: iio: gyro: adis16136: fix unprotected debugfs reads 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98665 media kernel: iio: health: max30102: fix NULL dereference in interrupt handler 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98664 media kernel: iio: imu: adis16400: fix unprotected debugfs reads 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98663 media kernel: iio: imu: adis16480: fix unprotected debugfs reads 27 oct 2026 build de las 01:25 UTC 18 oct 2026 