CVE-2026-98533 media kernel: ipe: protect the dm-verity root hash with RCU 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98530 media kernel: kprobes: Fix permanent hang when flushing the kprobe optimizer 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98523 media kernel: drm/client: fix restore of partially initialized client 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98520 media kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98504 media kernel: PCI: of_property: Omit bus properties without a subordinate bus 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98503 media kernel: packet: use ubuf_info completion for TX_RING packets 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98500 media kernel: HID: hid-oxp: use cancel_delayed_work_sync() in remove 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98496 media kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98493 media kernel: net: ipconfig: bound DHCP option construction 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98491 media kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98483 media kernel: nfc: fix use-after-free in nfc_get_local_general_bytes 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98474 media kernel: s390/pci: Fix missing device lock in zpci_report_status() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98463 media kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98462 media kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98459 media kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98457 media kernel: Bluetooth: L2CAP: validate frame length before control and FCS access 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98456 media kernel: Bluetooth: mgmt: fix race in read_unconf_index_list() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98449 media kernel: smb: client: delete compound mids on send failure before unlock 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98447 media kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98446 media kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98444 media kernel: xfs: drop dquot flush lock when we can't find a buffer to flush 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98441 media kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98440 media kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98439 media kernel: smb/server: cancel async requests when closing connection 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-98435 media kernel: EDAC/altera: Use parent device for devres in altr_portb_setup() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-112058 media libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTT 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-112057 media libdvdnav: libdvdnav: Denial of Service via crafted disc image 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-112008 media libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr() 27 oct 2026 build de las 01:25 UTC 18 oct 2026 CVE-2026-89096 media nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110759 media perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110758 media perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110757 media perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110756 media perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110755 media perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110754 media perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsing 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-110753 media perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-85977 media libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-85231 media libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decoding 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-89098 media nfs-utils: nfs-utils: Denial of Service via assertion failure in fsidd 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-46471 media gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsing 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-111555 media luksmeta: Missing slot-range validation permits out-of-gap device I/O 27 oct 2026 build de las 01:25 UTC 16 oct 2026 CVE-2026-111269 media libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string() 27 oct 2026 build de las 01:25 UTC 15 oct 2026 CVE-2026-111157 media sox: sox: Denial of Service via crafted WAV file 27 oct 2026 build de las 01:25 UTC 15 oct 2026 CVE-2026-111141 media zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing 27 oct 2026 build de las 01:25 UTC 15 oct 2026 CVE-2026-111137 media libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString() 27 oct 2026 build de las 01:25 UTC 15 oct 2026 CVE-2026-111132 media libgxps: libgxps: Denial of Service via crafted XPS document 27 oct 2026 build de las 01:25 UTC 15 oct 2026 CVE-2026-110602 media libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_open 27 oct 2026 build de las 01:25 UTC 14 oct 2026 CVE-2026-98430 media kernel: RDMA/efa: Keep admin queues alive while IRQ is registered 27 oct 2026 build de las 01:25 UTC 14 oct 2026 CVE-2026-98405 media kernel: smb: client: fix missing iov bounds check in parse_posix_sids() 27 oct 2026 build de las 01:25 UTC 14 oct 2026 CVE-2026-100231 media gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP characters 27 oct 2026 build de las 01:25 UTC 14 oct 2026 