CVE-2026-98227 medium kernel: memstick: ms_block: destroy io_queue workqueue on removal since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98226 medium kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98225 medium kernel: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98221 medium kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary check since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98220 medium kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98219 medium kernel: sched_ext: Close the pre-enable ops error claim window since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98218 medium kernel: i2c: atr: fix dangling adapter pointer on add failure since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98217 medium kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failure since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98216 medium kernel: IB/hfi1: Fix the PIO_CRED credit-return mmap since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98215 medium kernel: selinux: preserve user SID across nested backing files since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98214 medium kernel: selinux: recheck intermediate backing files on mprotect() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98213 medium kernel: mmc: core: Cancel SDIO IRQ work before freeing host since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98212 medium kernel: mmc: hsq: Fix use-after-free in retry work since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98211 medium kernel: mmc: mmci: Fix use-after-free in busy-timeout work since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98210 medium kernel: mmc: mxcmmc: cancel data work and watchdog on remove since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98209 medium kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98207 medium kernel: mmc: spi: reset bytes_xfered before retrying CRC failures since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98206 medium kernel: Input: cyttsp5 - clamp the HID report size before memcpy since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98205 medium kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABS since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98204 medium kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98201 medium kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_user since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98200 medium kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98199 medium kernel: hwmon: (pmbus/core) increase number of phases and add new mask since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98198 medium kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach data since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98197 medium kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98196 medium kernel: wifi: brcmsmac: fix UAF in brcms_free_timer() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98195 medium kernel: wifi: iwlegacy: fix broadcast stations deallocation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98194 medium kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98193 medium kernel: wifi: libipw: reject TKIP frames without a full MIC since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98192 medium kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98190 medium kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action frames since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98189 medium kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98188 medium kernel: wifi: p54: validate curve data length in the calibration curve converters since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98187 medium kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98186 medium kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98185 medium kernel: wifi: mwifiex: validate scan response extents since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98184 medium kernel: wifi: mwifiex: prevent authentication frame length truncation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98183 medium kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98181 medium kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98180 medium kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98175 medium kernel: smb: client: cancel reconnect work in clean_demultiplex_info() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98174 medium kernel: smb: client: fix rlist race and missing initialization since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98173 medium kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98172 medium kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98170 medium kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98168 medium kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98167 medium kernel: smb: client: fix server->total_read for compound encrypted PDUs since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98166 medium kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move range since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105305 medium keycloak-services: keycloak-services: Device Authorization Grant bypasses per-client minimum.acr.value enforcement since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105775 medium vllm: vLLM: Denial of Service via out-of-bounds read in completions request handler since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 