CVE-2026-98660 media kernel: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98658 media kernel: iio: proximity: aw96103: validate firmware data length 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98657 media kernel: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98656 media kernel: iio: trigger: cancel reenable_work before freeing trigger 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98652 media kernel: KVM: s390: Add missing srcu in kvm_s390_set_irq_state() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98647 media kernel: bpf: Fix divide-by-zero in btf_struct_walk() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98645 media kernel: HID: winwing: fix use-after-free in force feedback teardown 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98642 media kernel: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98641 media kernel: bpf, arm64: set up the frame pointer for the exception callback 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98638 media kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98636 media kernel: squashfs: Add dictionary size range check to prevent shift-out-of-bounds 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98632 media kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98627 media kernel: bpf: Preserve packet pointer class displacement in regsafe() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98626 media kernel: bpf: Restrict CO-RE poisoning to relocatable instructions 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98625 media kernel: netfilter: flowtable: publish HW_DEAD after worker is done 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98624 media kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifier 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98623 media kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98620 media kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98619 media kernel: net: ethtool: keep rtnl_lock for the ioctl self test 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98618 media kernel: eth: fbnic: Handle maximum standalone channels 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98617 media kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vector 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98616 media kernel: eth: fbnic: reset num_napi when the napi vectors are freed 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98615 media kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98602 media kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98600 media kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98599 media kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98593 media kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98590 media kernel: bpf: Fix bpf_sock context code generation 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98589 media kernel: bpf: Reject pkt arguments in mutating subprogs 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98587 media kernel: firewire: cdev: fix back-transition for iso_resource_auto client resource 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98586 media kernel: sctp: hold asoc or transport before mod_timer() in timer handlers 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98583 media kernel: nfc: nfcmrvl: validate helper command length before pull 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98578 media kernel: nfc: st21nfca: validate ISO15693 inventory length 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98576 media kernel: nfc: llcp: fix slab-out-of-bounds reads when logging service names 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98574 media kernel: net: bcmgenet: stop Tx NAPI before disabling the queues 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98572 media kernel: bpf: Fix immediate JMP JEQ/JNE on MIPS32 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98571 media kernel: net: stmmac: clear stale buf->page after recycling on skb build failure 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98570 media kernel: net: ipv6: keep room for the mac header in dst_dev_overhead() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98568 media kernel: vxlan: use one headroom snapshot for neighbour replies 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98566 media kernel: drm/imagination: clamp freelist reconstruction requests 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98565 media kernel: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98564 media kernel: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98563 media kernel: net: phylink: record the PHY only once bringup cannot fail 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98562 media kernel: net: libwx: fix races in Tx timestamp handling 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98559 media kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98557 media kernel: gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98544 media kernel: bna: prevent IOC timer rearm during teardown 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98540 media kernel: fprobe: Terminate the fgraph_data list when the reservation is not filled 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98539 media kernel: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98534 media kernel: ipe: fix use-after-free when auditing a newly loaded policy 27 oct 2026 build de las 01:25 UTC 18 oct 2026 