CVE-2026-98291 medium kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98290 medium kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98288 medium kernel: net: stmmac: fix TSO header length truncation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98287 medium kernel: pppoatm: ensure a writable skb header and linear data since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98286 medium kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98284 medium kernel: netlink: do not free nlk->groups while lockless readers can use it since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98283 medium kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98282 medium kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98281 medium kernel: futex: Also allocate private hash on vfork() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98280 medium kernel: drm/xe/i2c: Disable IRQ on unbind since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98279 medium kernel: btrfs: handle lack of space when cleaning up verity items since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98277 medium kernel: eth: fbnic: ring the doorbell if a burst ends in a drop since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98276 medium kernel: net: lock the socket in sock_gettstamp() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98275 medium In the Linux kernel, the following vulnerability has been resolved: n ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98274 medium In the Linux kernel, the following vulnerability has been resolved: n ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98273 medium kernel: x86/kprobes: Fix crash when probing CS CALL instructions since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98272 medium kernel: net: mvpp2: prevent buffer overflow in page_pool allocation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98271 medium kernel: net: skbuff: do not leave stale header offsets after pskb_carve() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98269 medium kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinking since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98267 medium kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98266 medium kernel: ALSA: core: Fix potential UAF after asynchronous card release since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98265 medium kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98264 medium kernel: ALSA: virtio: reset device before deleting virtqueues since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98262 medium kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98261 medium kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98258 medium kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98257 medium kernel: rds: ib: use rds_conn_drop() on protocol version mismatch since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98255 medium kernel: tcp: exclude old ACKs from tcp fast path since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98254 medium kernel: swiotlb: use the adjusted address for the highmem page lookup since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98253 medium kernel: RDMA/ucma: Serialize join and leave on copy_to_user failure since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98252 medium kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98251 medium kernel: openvswitch: avoid reallocating confirmed conntrack labels since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98250 medium kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98249 medium kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98248 medium kernel: arm64: percpu: Fix LSE operations on {8,16}-bit types since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98247 medium kernel: Bluetooth: hci_codec: validate vendor codec count length since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98246 medium kernel: Bluetooth: hci_sync: Serialize local codec list cleanup since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98245 medium kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98244 medium kernel: btrfs: clear free space tree creation state on rebuild failure since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98243 medium kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98242 medium kernel: dma-buf: Fix silent overflow for phys vec to sgt since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98241 medium kernel: ipv6: xfrm: use full sockets in local error paths since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98239 medium kernel: net: lan743x: fix RX checksum use-after-free since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98238 medium kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98236 medium kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98232 medium In the Linux kernel, the following vulnerability has been resolved: s ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98231 medium kernel: xfrm: serialize state GC with device state flush since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98230 medium kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98229 medium kernel: xfrm: save input state data before secpath resets since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98228 medium kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 