CVE-2026-98368 medium kernel: esp: downgrade zerocopy managed frags before mutating skb frags since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98367 medium kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98366 medium kernel: RDMA/rxe: validate access flags before swapping the MR's PD since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98365 medium kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98361 medium kernel: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98360 medium kernel: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98358 medium kernel: IB/iser: reject a remote invalidation of an unregistered direction since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98357 medium kernel: IB/isert: wait for deferred control PDU completions before releasing the connection since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98355 medium kernel: RDMA/rtrs: guard against null kobj name since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98354 medium kernel: RDMA/mad: Fix receive buffer leak when PKey enforcement fails since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98353 medium kernel: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98352 medium kernel: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98351 medium kernel: wifi: virt_wifi: free skb when disconnected since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98350 medium kernel: wifi: brcmfmac: cyw: pass PMKID to firmware if present since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98349 medium kernel: wifi: libipw: reject too-short beacon and probe responses since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98348 medium kernel: wifi: libipw: reject too-short association responses since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98347 medium kernel: IB/IPoIB: Avoid restoring OPER_UP after multicast flush since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98343 medium kernel: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98342 medium kernel: dmaengine: wait for RCU readers before releasing dma_device since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98341 medium kernel: wifi: cfg80211: don't free driver-owned scan requests since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98340 medium kernel: wifi: cfg80211: only group hidden BSSes with beacon entries since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98339 medium kernel: wifi: cfg80211: don't filter by BSS type when removing stale entries since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98336 medium kernel: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98335 medium kernel: wifi: mac80211: abort chanswitch when leaving a mesh since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98333 medium kernel: wifi: mac80211: reset the LED state when ifup fails since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98331 medium kernel: wifi: mac80211: unlist vifs when their netdev is unregistered since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98330 medium kernel: wifi: cfg80211: get the wiphy out of a dying network namespace since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98327 medium kernel: wifi: mac80211: mesh: reset the CSA state when leaving since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98324 medium kernel: dmaengine: pxa: fix double counting of the hw descriptors since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98322 medium kernel: netfilter: nft_nat: fully initialise new_addr in netmap setup since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98316 medium In the Linux kernel, the following vulnerability has been resolved: A ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98314 medium kernel: ALSA: pcm: set timer->private_data before registering the PCM timer since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98313 medium kernel: drm/msm/dp: skip PUSH_IDLE when the link was never enabled since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98312 medium kernel: ALSA: 6fire: fix OOB write from device-reported iso length since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98311 medium kernel: wifi: virt_wifi: don't transfer operstate before register since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98310 medium kernel: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98309 medium kernel: drm/vc4: Use managed KMS polling to fix UAF on unbind since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98306 medium kernel: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98305 medium kernel: net: dsa: mxl862xx: disable the stats poll on teardown since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98303 medium kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98302 medium kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while down since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98301 medium kernel: net: bridge: mst: move switchdev call outside rcu since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98300 medium kernel: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98299 medium kernel: tcp: do not let tcp_rmem be set below 4096 since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98298 medium kernel: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98296 medium kernel: Bluetooth: btintel_pcie: validate TX skb length in send_sync since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98295 medium kernel: Bluetooth: coredump: Quiesce dump work on unregister since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98294 medium kernel: Bluetooth: hci_qca: Do not write to the serial port after it is closed since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98293 medium kernel: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98292 medium kernel: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 