CVE-2026-98543 medium kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98541 medium kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98538 medium kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98537 medium kernel: workqueue: Fix NULL current_pwq deref in flush dependency check since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98536 medium kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain pass since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98526 medium kernel: llc: reserve device headroom for allocated frames since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98525 medium kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98522 medium kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98521 medium kernel: drm/i915: fix incorrect RCU teardown order since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98518 medium kernel: drm/nouveau/dmem: pin VRAM for the whole registered range since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98517 medium kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98515 medium kernel: drm/nouveau: fix double-free in nvif_vmm_dtor since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98512 medium kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_sched since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98511 medium kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98510 medium kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAs since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98508 medium kernel: drm/virtio: fix NULL pointer dereference on fence allocation failure since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98507 medium kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98506 medium kernel: mm/hugetlb: do not dissolve gigantic pages without runtime support since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98501 medium kernel: HID: alps: fix use-after-free on input2 registration failure since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98499 medium kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98497 medium kernel: net/mlx5e: fix swapped IPv6 IPsec policy masks since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98495 medium kernel: net: arp: terminate device name before lookup since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98494 medium kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98489 medium kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons read since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98488 medium kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98487 medium kernel: net: bridge: mdb: restart port group walk after deletion since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98485 medium kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98482 medium kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98481 medium kernel: nfc: port100: reject frames whose declared length exceeds the received data since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98479 medium kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98478 medium kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98477 medium kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98476 medium kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98475 medium kernel: s390/cmf: Fix virtual vs physical address confusion since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98471 medium kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migration since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98470 medium kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98469 medium kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handling since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98467 medium kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98465 medium kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98464 medium kernel: RISC-V: KVM: Synchronize hrtimer callback during teardown since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98461 medium kernel: Bluetooth: hci_sock: validate event length before filtering since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98460 medium kernel: Bluetooth: hci_sock: reject out-of-range OCF values since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98455 medium kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98454 medium kernel: smb: client: fix create context out-of-bounds reads since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98453 medium kernel: smb: client: close handle after create-context parsing failure since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98452 medium kernel: smb: client: clean up failed cached directory opens since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98445 medium kernel: xfs: don't let memory failures leak blocks and kill repairs since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98443 medium kernel: xfs: fix cursor and pointer handling when recovering iunlink buckets since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98436 medium In the Linux kernel, the following vulnerability has been resolved: a ... since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 CVE-2026-98434 medium kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmax since at least 24 Oct 2026 07:11 UTC build 18 Oct 2026 