{ "generated_utc": "2026-09-16T12:27:33.003940+00:00", "as_of": "2026-09-16", "year": "2026", "corpus": "/nas4/data/workspace-infosec/linux-security-paper/data/kernel_vulns_git/cve/published/2026", "kernel_trees": [ "/home/mjbommar/src/linux-mainline", "/nas4/data/workspace-infosec/agentic-security-bot/local/kg-cache/linux-mainline-stable" ], "kernel_tree_heads": { "/home/mjbommar/src/linux-mainline": "2c7c88a412aa6d09cd04b414211b4ef8553b5309", "/nas4/data/workspace-infosec/agentic-security-bot/local/kg-cache/linux-mainline-stable": "1c4326fc340216d8ae8fe6a0d2f6d975b61b0084" }, "method": "fix-commit author, object-addressed via git cat-file --batch; first (mainline) SHA per CVE; backports preserve author", "field_notes": { "author_name/author_email/fix_sha/subject": "ground truth from the commit object and the CNA record.", "cvss_*": "indicative only. The Linux kernel CNA does not assign CVSS; these come from the corpus record and may be research-augmented." }, "total_cves": 5417, "resolved_cves": 5405, "unresolved_cves": [ "CVE-2026-64325", "CVE-2026-64506", "CVE-2026-74325", "CVE-2026-74326", "CVE-2026-74409", "CVE-2026-74410", "CVE-2026-74411", "CVE-2026-74412", "CVE-2026-74413", "CVE-2026-80632", "CVE-2026-80725", "CVE-2026-80926" ], "distinct_authors": 1587, "authors": [ { "author": "Michael Bommarito", "email": "michael.bommarito@gmail.com", "cve_count": 106, "critical": 31, "high": 48, "scored": 79, "cvss_sum_indicative": 676.5, "cves": [ "CVE-2026-31706", "CVE-2026-31707", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43350", "CVE-2026-46114", "CVE-2026-46123", "CVE-2026-46124", "CVE-2026-46133", "CVE-2026-46186", "CVE-2026-46193", "CVE-2026-46195", "CVE-2026-46303", "CVE-2026-52995", "CVE-2026-53004", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53176", "CVE-2026-53186", "CVE-2026-53208", "CVE-2026-53225", "CVE-2026-53369", "CVE-2026-53391", "CVE-2026-53392", "CVE-2026-63808", "CVE-2026-63880", "CVE-2026-63887", "CVE-2026-63888", "CVE-2026-63889", "CVE-2026-63890", "CVE-2026-63891", "CVE-2026-63892", "CVE-2026-63893", "CVE-2026-63894", "CVE-2026-63895", "CVE-2026-63905", "CVE-2026-63918", "CVE-2026-63923", "CVE-2026-64102", "CVE-2026-64103", "CVE-2026-64105", "CVE-2026-64106", "CVE-2026-64113", "CVE-2026-64114", "CVE-2026-64119", "CVE-2026-64121", "CVE-2026-64123", "CVE-2026-64126", "CVE-2026-64127", "CVE-2026-64137", "CVE-2026-64223", "CVE-2026-64268", "CVE-2026-64324", "CVE-2026-64401", "CVE-2026-64439", "CVE-2026-64456", "CVE-2026-64459", "CVE-2026-64532", "CVE-2026-68127", "CVE-2026-68302", "CVE-2026-68425", "CVE-2026-72014", "CVE-2026-72049", "CVE-2026-72071", "CVE-2026-72085", "CVE-2026-72086", "CVE-2026-72130", "CVE-2026-72139", "CVE-2026-72151", "CVE-2026-72159", "CVE-2026-72160", "CVE-2026-72191", "CVE-2026-72192", "CVE-2026-72193", "CVE-2026-72194", "CVE-2026-72196", "CVE-2026-72298", "CVE-2026-72369", "CVE-2026-72380", "CVE-2026-72430", "CVE-2026-72445", "CVE-2026-72446", "CVE-2026-74281", "CVE-2026-74282", "CVE-2026-74283", "CVE-2026-74439", "CVE-2026-74478", "CVE-2026-74566", "CVE-2026-74567", "CVE-2026-74575", "CVE-2026-80693", "CVE-2026-80765", "CVE-2026-80892", "CVE-2026-89485", "CVE-2026-89648", "CVE-2026-89649", "CVE-2026-89650", "CVE-2026-89651", "CVE-2026-89652", "CVE-2026-89657", "CVE-2026-89712" ], "rank": 1 }, { "author": "Eric Dumazet", "email": "edumazet@google.com", "cve_count": 78, "critical": 21, "high": 30, "scored": 51, "cvss_sum_indicative": 434.5, "cves": [ "CVE-2026-22978", "CVE-2026-22988", "CVE-2026-22999", "CVE-2026-23001", "CVE-2026-23003", "CVE-2026-23004", "CVE-2026-23011", "CVE-2026-23048", "CVE-2026-23064", "CVE-2026-23099", "CVE-2026-23119", "CVE-2026-23120", "CVE-2026-23121", "CVE-2026-23124", "CVE-2026-23169", "CVE-2026-23204", "CVE-2026-23209", "CVE-2026-23212", "CVE-2026-23247", "CVE-2026-23255", "CVE-2026-23273", "CVE-2026-23302", "CVE-2026-23451", "CVE-2026-23459", "CVE-2026-31415", "CVE-2026-31515", "CVE-2026-43037", "CVE-2026-43038", "CVE-2026-43101", "CVE-2026-43103", "CVE-2026-43198", "CVE-2026-43208", "CVE-2026-46266", "CVE-2026-52909", "CVE-2026-52975", "CVE-2026-53006", "CVE-2026-53091", "CVE-2026-53132", "CVE-2026-53221", "CVE-2026-53236", "CVE-2026-53249", "CVE-2026-63870", "CVE-2026-63992", "CVE-2026-63993", "CVE-2026-63994", "CVE-2026-64002", "CVE-2026-64024", "CVE-2026-68286", "CVE-2026-68287", "CVE-2026-68301", "CVE-2026-68379", "CVE-2026-72321", "CVE-2026-72322", "CVE-2026-72323", "CVE-2026-72404", "CVE-2026-72405", "CVE-2026-72450", "CVE-2026-72493", "CVE-2026-72502", "CVE-2026-74255", "CVE-2026-74264", "CVE-2026-74473", "CVE-2026-74474", "CVE-2026-74475", "CVE-2026-74543", "CVE-2026-74550", "CVE-2026-74689", "CVE-2026-74695", "CVE-2026-74735", "CVE-2026-74743", "CVE-2026-74744", "CVE-2026-80613", "CVE-2026-80646", "CVE-2026-80681", "CVE-2026-80733", "CVE-2026-80742", "CVE-2026-80866", "CVE-2026-80925" ], "rank": 2 }, { "author": "Bryam Vargas", "email": "hexlabsecurity@proton.me", "cve_count": 67, "critical": 13, "high": 30, "scored": 43, "cvss_sum_indicative": 364.7, "cves": [ "CVE-2026-63815", "CVE-2026-63828", "CVE-2026-64270", "CVE-2026-64271", "CVE-2026-64273", "CVE-2026-64274", "CVE-2026-64276", "CVE-2026-64277", "CVE-2026-64296", "CVE-2026-64317", "CVE-2026-64318", "CVE-2026-64320", "CVE-2026-64322", "CVE-2026-64323", "CVE-2026-64504", "CVE-2026-68140", "CVE-2026-68160", "CVE-2026-68255", "CVE-2026-68397", "CVE-2026-68411", "CVE-2026-72030", "CVE-2026-72031", "CVE-2026-72033", "CVE-2026-72035", "CVE-2026-72036", "CVE-2026-72083", "CVE-2026-72084", "CVE-2026-72129", "CVE-2026-72183", "CVE-2026-74336", "CVE-2026-74585", "CVE-2026-80569", "CVE-2026-80672", "CVE-2026-80673", "CVE-2026-80674", "CVE-2026-80755", "CVE-2026-80756", "CVE-2026-80757", "CVE-2026-80791", "CVE-2026-80796", "CVE-2026-80802", "CVE-2026-80836", "CVE-2026-80869", "CVE-2026-80912", "CVE-2026-80913", "CVE-2026-80935", "CVE-2026-80937", "CVE-2026-80956", "CVE-2026-80957", "CVE-2026-80958", "CVE-2026-80959", "CVE-2026-80960", "CVE-2026-80961", "CVE-2026-80962", "CVE-2026-80979", "CVE-2026-80984", "CVE-2026-81017", "CVE-2026-89471", "CVE-2026-89494", "CVE-2026-89495", "CVE-2026-89559", "CVE-2026-89573", "CVE-2026-89574", "CVE-2026-89614", "CVE-2026-89630", "CVE-2026-89631", "CVE-2026-89743" ], "rank": 3 }, { "author": "David Howells", "email": "dhowells@redhat.com", "cve_count": 61, "critical": 16, "high": 20, "scored": 36, "cvss_sum_indicative": 311.7, "cves": [ "CVE-2026-23066", "CVE-2026-23118", "CVE-2026-31435", "CVE-2026-31631", "CVE-2026-31632", "CVE-2026-31633", "CVE-2026-31642", "CVE-2026-31643", "CVE-2026-45988", "CVE-2026-45998", "CVE-2026-46000", "CVE-2026-46010", "CVE-2026-46012", "CVE-2026-46039", "CVE-2026-46085", "CVE-2026-53151", "CVE-2026-64026", "CVE-2026-64057", "CVE-2026-64058", "CVE-2026-64059", "CVE-2026-64060", "CVE-2026-64061", "CVE-2026-64062", "CVE-2026-64063", "CVE-2026-64064", "CVE-2026-64066", "CVE-2026-64067", "CVE-2026-64068", "CVE-2026-64069", "CVE-2026-64156", "CVE-2026-64157", "CVE-2026-64159", "CVE-2026-64160", "CVE-2026-64208", "CVE-2026-64216", "CVE-2026-64217", "CVE-2026-68168", "CVE-2026-72355", "CVE-2026-72356", "CVE-2026-72363", "CVE-2026-72364", "CVE-2026-72365", "CVE-2026-72366", "CVE-2026-72371", "CVE-2026-72372", "CVE-2026-72373", "CVE-2026-72374", "CVE-2026-72375", "CVE-2026-72376", "CVE-2026-72377", "CVE-2026-74427", "CVE-2026-74428", "CVE-2026-74429", "CVE-2026-74431", "CVE-2026-74432", "CVE-2026-74433", "CVE-2026-74506", "CVE-2026-74542", "CVE-2026-80877", "CVE-2026-80878", "CVE-2026-80885" ], "rank": 4 }, { "author": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "cve_count": 58, "critical": 1, "high": 9, "scored": 10, "cvss_sum_indicative": 80.6, "cves": [ "CVE-2026-23236", "CVE-2026-23290", "CVE-2026-23291", "CVE-2026-23298", "CVE-2026-23307", "CVE-2026-23312", "CVE-2026-23324", "CVE-2026-23334", "CVE-2026-23347", "CVE-2026-23365", "CVE-2026-23382", "CVE-2026-31483", "CVE-2026-31605", "CVE-2026-31610", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31614", "CVE-2026-31615", "CVE-2026-31616", "CVE-2026-31617", "CVE-2026-31618", "CVE-2026-31619", "CVE-2026-31620", "CVE-2026-31621", "CVE-2026-31622", "CVE-2026-31623", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31627", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31716", "CVE-2026-31781", "CVE-2026-43072", "CVE-2026-43089", "CVE-2026-43387", "CVE-2026-43501", "CVE-2026-45993", "CVE-2026-46006", "CVE-2026-46149", "CVE-2026-46151", "CVE-2026-46167", "CVE-2026-46286", "CVE-2026-53286", "CVE-2026-63958", "CVE-2026-63959", "CVE-2026-63960", "CVE-2026-63961", "CVE-2026-63962", "CVE-2026-63963", "CVE-2026-63964", "CVE-2026-63965", "CVE-2026-63966", "CVE-2026-63967", "CVE-2026-64014", "CVE-2026-64185", "CVE-2026-80788" ], "rank": 5 }, { "author": "Johan Hovold", "email": "johan@kernel.org", "cve_count": 58, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.0, "cves": [ "CVE-2026-23090", "CVE-2026-23091", "CVE-2026-23170", "CVE-2026-23475", "CVE-2026-31389", "CVE-2026-31549", "CVE-2026-31604", "CVE-2026-31650", "CVE-2026-31651", "CVE-2026-31672", "CVE-2026-31760", "CVE-2026-43155", "CVE-2026-43242", "CVE-2026-43317", "CVE-2026-43375", "CVE-2026-45996", "CVE-2026-46074", "CVE-2026-46083", "CVE-2026-46103", "CVE-2026-46200", "CVE-2026-46203", "CVE-2026-46219", "CVE-2026-46225", "CVE-2026-46226", "CVE-2026-46228", "CVE-2026-46241", "CVE-2026-46296", "CVE-2026-46301", "CVE-2026-53279", "CVE-2026-53400", "CVE-2026-63897", "CVE-2026-63898", "CVE-2026-63899", "CVE-2026-63900", "CVE-2026-63901", "CVE-2026-63928", "CVE-2026-63956", "CVE-2026-63957", "CVE-2026-64168", "CVE-2026-64169", "CVE-2026-64170", "CVE-2026-64221", "CVE-2026-64279", "CVE-2026-64332", "CVE-2026-64333", "CVE-2026-64334", "CVE-2026-64335", "CVE-2026-64336", "CVE-2026-64340", "CVE-2026-64341", "CVE-2026-64342", "CVE-2026-64343", "CVE-2026-64344", "CVE-2026-64470", "CVE-2026-64471", "CVE-2026-64589", "CVE-2026-68227", "CVE-2026-89512" ], "rank": 5 }, { "author": "Xiang Mei", "email": "xmei5@asu.edu", "cve_count": 54, "critical": 5, "high": 31, "scored": 36, "cvss_sum_indicative": 290.4, "cves": [ "CVE-2026-22976", "CVE-2026-23396", "CVE-2026-23439", "CVE-2026-31419", "CVE-2026-31420", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31546", "CVE-2026-43085", "CVE-2026-45841", "CVE-2026-52940", "CVE-2026-52941", "CVE-2026-52942", "CVE-2026-64048", "CVE-2026-64189", "CVE-2026-64411", "CVE-2026-64537", "CVE-2026-64538", "CVE-2026-64540", "CVE-2026-64541", "CVE-2026-64545", "CVE-2026-64546", "CVE-2026-64547", "CVE-2026-64550", "CVE-2026-64552", "CVE-2026-64554", "CVE-2026-64567", "CVE-2026-64568", "CVE-2026-64570", "CVE-2026-64571", "CVE-2026-64573", "CVE-2026-64574", "CVE-2026-64575", "CVE-2026-64576", "CVE-2026-64577", "CVE-2026-64578", "CVE-2026-64579", "CVE-2026-64580", "CVE-2026-64581", "CVE-2026-68159", "CVE-2026-72250", "CVE-2026-72407", "CVE-2026-72408", "CVE-2026-74561", "CVE-2026-74562", "CVE-2026-74563", "CVE-2026-74569", "CVE-2026-74579", "CVE-2026-74726", "CVE-2026-74748", "CVE-2026-80537", "CVE-2026-80946", "CVE-2026-89617" ], "rank": 7 }, { "author": "Weiming Shi", "email": "bestswngs@gmail.com", "cve_count": 45, "critical": 3, "high": 16, "scored": 19, "cvss_sum_indicative": 152.4, "cves": [ "CVE-2026-22977", "CVE-2026-23276", "CVE-2026-23277", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-31425", "CVE-2026-31426", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-43086", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45845", "CVE-2026-45846", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-52937", "CVE-2026-52938", "CVE-2026-52939", "CVE-2026-53349", "CVE-2026-64187", "CVE-2026-64188", "CVE-2026-64190", "CVE-2026-64191", "CVE-2026-64539", "CVE-2026-64542", "CVE-2026-64543", "CVE-2026-64544", "CVE-2026-64548", "CVE-2026-64549", "CVE-2026-64551", "CVE-2026-64555", "CVE-2026-64569", "CVE-2026-64572", "CVE-2026-68323", "CVE-2026-74517", "CVE-2026-74613", "CVE-2026-74614", "CVE-2026-80631", "CVE-2026-81002", "CVE-2026-89477" ], "rank": 8 }, { "author": "Jeff Layton", "email": "jlayton@kernel.org", "cve_count": 42, "critical": 11, "high": 21, "scored": 32, "cvss_sum_indicative": 267.7, "cves": [ "CVE-2026-31400", "CVE-2026-31402", "CVE-2026-43193", "CVE-2026-53393", "CVE-2026-53394", "CVE-2026-53395", "CVE-2026-53396", "CVE-2026-53397", "CVE-2026-89545", "CVE-2026-89548", "CVE-2026-89549", "CVE-2026-89663", "CVE-2026-89664", "CVE-2026-89667", "CVE-2026-89668", "CVE-2026-89669", "CVE-2026-89673", "CVE-2026-89674", "CVE-2026-89675", "CVE-2026-89676", "CVE-2026-89680", "CVE-2026-89681", "CVE-2026-89682", "CVE-2026-89683", "CVE-2026-89685", "CVE-2026-89686", "CVE-2026-89688", "CVE-2026-89689", "CVE-2026-89690", "CVE-2026-89691", "CVE-2026-89692", "CVE-2026-89693", "CVE-2026-89694", "CVE-2026-89696", "CVE-2026-89697", "CVE-2026-89698", "CVE-2026-89699", "CVE-2026-89700", "CVE-2026-89701", "CVE-2026-89705", "CVE-2026-89708", "CVE-2026-89709" ], "rank": 9 }, { "author": "Guangshuo Li", "email": "lgs201920130244@gmail.com", "cve_count": 37, "critical": 2, "high": 10, "scored": 12, "cvss_sum_indicative": 98.9, "cves": [ "CVE-2026-23266", "CVE-2026-31475", "CVE-2026-31745", "CVE-2026-31753", "CVE-2026-31759", "CVE-2026-43056", "CVE-2026-43148", "CVE-2026-43328", "CVE-2026-46129", "CVE-2026-46162", "CVE-2026-46164", "CVE-2026-53265", "CVE-2026-63907", "CVE-2026-64033", "CVE-2026-64242", "CVE-2026-64376", "CVE-2026-64377", "CVE-2026-64499", "CVE-2026-68180", "CVE-2026-68203", "CVE-2026-68311", "CVE-2026-68331", "CVE-2026-68333", "CVE-2026-68345", "CVE-2026-68346", "CVE-2026-68371", "CVE-2026-72073", "CVE-2026-72240", "CVE-2026-72245", "CVE-2026-72310", "CVE-2026-72311", "CVE-2026-72318", "CVE-2026-72452", "CVE-2026-72484", "CVE-2026-72492", "CVE-2026-74459", "CVE-2026-80750" ], "rank": 10 }, { "author": "Chuck Lever", "email": "chuck.lever@oracle.com", "cve_count": 36, "critical": 14, "high": 14, "scored": 28, "cvss_sum_indicative": 243.2, "cves": [ "CVE-2026-23414", "CVE-2026-31403", "CVE-2026-45870", "CVE-2026-63978", "CVE-2026-63979", "CVE-2026-63980", "CVE-2026-64281", "CVE-2026-64519", "CVE-2026-64523", "CVE-2026-72217", "CVE-2026-72218", "CVE-2026-72219", "CVE-2026-72221", "CVE-2026-72317", "CVE-2026-72464", "CVE-2026-72465", "CVE-2026-72467", "CVE-2026-72473", "CVE-2026-74270", "CVE-2026-74315", "CVE-2026-74316", "CVE-2026-89526", "CVE-2026-89527", "CVE-2026-89528", "CVE-2026-89529", "CVE-2026-89531", "CVE-2026-89534", "CVE-2026-89535", "CVE-2026-89537", "CVE-2026-89538", "CVE-2026-89546", "CVE-2026-89547", "CVE-2026-89672", "CVE-2026-89704", "CVE-2026-89706", "CVE-2026-89713" ], "rank": 11 }, { "author": "Sean Christopherson", "email": "seanjc@google.com", "cve_count": 35, "critical": 4, "high": 14, "scored": 18, "cvss_sum_indicative": 147.6, "cves": [ "CVE-2026-23005", "CVE-2026-23198", "CVE-2026-23401", "CVE-2026-23402", "CVE-2026-31588", "CVE-2026-31590", "CVE-2026-31591", "CVE-2026-31592", "CVE-2026-31593", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-43265", "CVE-2026-43315", "CVE-2026-43483", "CVE-2026-46113", "CVE-2026-53345", "CVE-2026-63806", "CVE-2026-63807", "CVE-2026-63937", "CVE-2026-63938", "CVE-2026-63939", "CVE-2026-63940", "CVE-2026-64283", "CVE-2026-64284", "CVE-2026-64285", "CVE-2026-64561", "CVE-2026-64604", "CVE-2026-68081", "CVE-2026-72284", "CVE-2026-72287", "CVE-2026-74516", "CVE-2026-80652", "CVE-2026-80726", "CVE-2026-80853" ], "rank": 12 }, { "author": "Sven Eckelmann", "email": "sven@narfation.org", "cve_count": 35, "critical": 6, "high": 15, "scored": 21, "cvss_sum_indicative": 183.1, "cves": [ "CVE-2026-43382", "CVE-2026-46212", "CVE-2026-46231", "CVE-2026-46233", "CVE-2026-52913", "CVE-2026-52916", "CVE-2026-52922", "CVE-2026-52931", "CVE-2026-52934", "CVE-2026-63834", "CVE-2026-63835", "CVE-2026-63836", "CVE-2026-64088", "CVE-2026-64089", "CVE-2026-64090", "CVE-2026-64091", "CVE-2026-64092", "CVE-2026-64093", "CVE-2026-64094", "CVE-2026-64095", "CVE-2026-64096", "CVE-2026-64218", "CVE-2026-72226", "CVE-2026-72227", "CVE-2026-72228", "CVE-2026-72229", "CVE-2026-72230", "CVE-2026-72231", "CVE-2026-72232", "CVE-2026-72233", "CVE-2026-72234", "CVE-2026-72235", "CVE-2026-80599", "CVE-2026-80600", "CVE-2026-80601" ], "rank": 12 }, { "author": "Hyunwoo Kim", "email": "imv4bel@gmail.com", "cve_count": 34, "critical": 9, "high": 18, "scored": 27, "cvss_sum_indicative": 236.4, "cves": [ "CVE-2026-23239", "CVE-2026-23240", "CVE-2026-23393", "CVE-2026-23427", "CVE-2026-23428", "CVE-2026-23458", "CVE-2026-31406", "CVE-2026-31408", "CVE-2026-31476", "CVE-2026-31498", "CVE-2026-31499", "CVE-2026-31512", "CVE-2026-43450", "CVE-2026-43451", "CVE-2026-43500", "CVE-2026-43503", "CVE-2026-46316", "CVE-2026-46317", "CVE-2026-52911", "CVE-2026-53175", "CVE-2026-53277", "CVE-2026-64247", "CVE-2026-64286", "CVE-2026-64287", "CVE-2026-64467", "CVE-2026-64562", "CVE-2026-72289", "CVE-2026-74434", "CVE-2026-80775", "CVE-2026-80849", "CVE-2026-89478", "CVE-2026-89479", "CVE-2026-89754", "CVE-2026-89761" ], "rank": 14 }, { "author": "Florian Westphal", "email": "fw@strlen.de", "cve_count": 33, "critical": 6, "high": 21, "scored": 27, "cvss_sum_indicative": 219.3, "cves": [ "CVE-2026-23016", "CVE-2026-23278", "CVE-2026-23351", "CVE-2026-23412", "CVE-2026-31407", "CVE-2026-31416", "CVE-2026-43028", "CVE-2026-43084", "CVE-2026-43114", "CVE-2026-43190", "CVE-2026-45859", "CVE-2026-46324", "CVE-2026-52927", "CVE-2026-52981", "CVE-2026-52986", "CVE-2026-53002", "CVE-2026-53218", "CVE-2026-53220", "CVE-2026-53268", "CVE-2026-63860", "CVE-2026-64076", "CVE-2026-64077", "CVE-2026-64078", "CVE-2026-64079", "CVE-2026-64150", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64414", "CVE-2026-68476", "CVE-2026-72251", "CVE-2026-72252", "CVE-2026-72416", "CVE-2026-72433" ], "rank": 15 }, { "author": "Wentao Liang", "email": "vulab@iscas.ac.cn", "cve_count": 31, "critical": 1, "high": 8, "scored": 9, "cvss_sum_indicative": 73.6, "cves": [ "CVE-2026-23030", "CVE-2026-23033", "CVE-2026-43196", "CVE-2026-45875", "CVE-2026-45969", "CVE-2026-45989", "CVE-2026-46288", "CVE-2026-46308", "CVE-2026-53190", "CVE-2026-63800", "CVE-2026-63906", "CVE-2026-64246", "CVE-2026-64249", "CVE-2026-64251", "CVE-2026-64301", "CVE-2026-64321", "CVE-2026-64370", "CVE-2026-64601", "CVE-2026-68236", "CVE-2026-68256", "CVE-2026-72040", "CVE-2026-72082", "CVE-2026-72093", "CVE-2026-72128", "CVE-2026-72138", "CVE-2026-72179", "CVE-2026-72182", "CVE-2026-72307", "CVE-2026-72308", "CVE-2026-89504", "CVE-2026-89769" ], "rank": 16 }, { "author": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "cve_count": 30, "critical": 5, "high": 15, "scored": 20, "cvss_sum_indicative": 163.8, "cves": [ "CVE-2026-23272", "CVE-2026-23385", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23399", "CVE-2026-31414", "CVE-2026-31424", "CVE-2026-31496", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43060", "CVE-2026-43116", "CVE-2026-43329", "CVE-2026-45844", "CVE-2026-45847", "CVE-2026-45873", "CVE-2026-52988", "CVE-2026-53000", "CVE-2026-53001", "CVE-2026-63858", "CVE-2026-64410", "CVE-2026-72248", "CVE-2026-72249", "CVE-2026-72253", "CVE-2026-74260", "CVE-2026-74347", "CVE-2026-74564", "CVE-2026-74565", "CVE-2026-80636", "CVE-2026-80668" ], "rank": 17 }, { "author": "Pengpeng Hou", "email": "pengpeng@iscas.ac.cn", "cve_count": 30, "critical": 1, "high": 11, "scored": 12, "cvss_sum_indicative": 97.3, "cves": [ "CVE-2026-31497", "CVE-2026-31630", "CVE-2026-31660", "CVE-2026-43032", "CVE-2026-43034", "CVE-2026-43098", "CVE-2026-43110", "CVE-2026-43113", "CVE-2026-43341", "CVE-2026-46332", "CVE-2026-53022", "CVE-2026-53023", "CVE-2026-63932", "CVE-2026-68206", "CVE-2026-68229", "CVE-2026-68325", "CVE-2026-68339", "CVE-2026-68340", "CVE-2026-68348", "CVE-2026-68466", "CVE-2026-68467", "CVE-2026-74391", "CVE-2026-74399", "CVE-2026-74455", "CVE-2026-74458", "CVE-2026-74460", "CVE-2026-74693", "CVE-2026-80573", "CVE-2026-80706", "CVE-2026-80801" ], "rank": 17 }, { "author": "Jakub Kicinski", "email": "kuba@kernel.org", "cve_count": 29, "critical": 4, "high": 10, "scored": 14, "cvss_sum_indicative": 115.6, "cves": [ "CVE-2026-23304", "CVE-2026-23330", "CVE-2026-23339", "CVE-2026-23372", "CVE-2026-23436", "CVE-2026-23437", "CVE-2026-31509", "CVE-2026-43194", "CVE-2026-43197", "CVE-2026-52974", "CVE-2026-52978", "CVE-2026-52979", "CVE-2026-53233", "CVE-2026-63985", "CVE-2026-63986", "CVE-2026-63987", "CVE-2026-63995", "CVE-2026-63996", "CVE-2026-63997", "CVE-2026-63998", "CVE-2026-63999", "CVE-2026-64027", "CVE-2026-64046", "CVE-2026-64047", "CVE-2026-64054", "CVE-2026-64526", "CVE-2026-64553", "CVE-2026-72393", "CVE-2026-74745" ], "rank": 19 }, { "author": "Junrui Luo", "email": "moonafterrain@outlook.com", "cve_count": 29, "critical": 2, "high": 15, "scored": 17, "cvss_sum_indicative": 137.3, "cves": [ "CVE-2026-23180", "CVE-2026-23206", "CVE-2026-31395", "CVE-2026-31603", "CVE-2026-31766", "CVE-2026-43205", "CVE-2026-45999", "CVE-2026-46023", "CVE-2026-46070", "CVE-2026-46161", "CVE-2026-46176", "CVE-2026-52968", "CVE-2026-53021", "CVE-2026-53043", "CVE-2026-53059", "CVE-2026-53159", "CVE-2026-53309", "CVE-2026-63925", "CVE-2026-64255", "CVE-2026-64402", "CVE-2026-64474", "CVE-2026-68271", "CVE-2026-68474", "CVE-2026-72045", "CVE-2026-72225", "CVE-2026-74646", "CVE-2026-80539", "CVE-2026-89710", "CVE-2026-89724" ], "rank": 19 }, { "author": "Abdun Nihaal", "email": "nihaal@cse.iitm.ac.in", "cve_count": 28, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23015", "CVE-2026-23087", "CVE-2026-43218", "CVE-2026-43246", "CVE-2026-64179", "CVE-2026-68413", "CVE-2026-72039", "CVE-2026-72087", "CVE-2026-72223", "CVE-2026-72224", "CVE-2026-72264", "CVE-2026-72265", "CVE-2026-72266", "CVE-2026-72267", "CVE-2026-72268", "CVE-2026-72269", "CVE-2026-72270", "CVE-2026-72271", "CVE-2026-72272", "CVE-2026-72273", "CVE-2026-72274", "CVE-2026-72275", "CVE-2026-72276", "CVE-2026-80941", "CVE-2026-80942", "CVE-2026-80949", "CVE-2026-80974", "CVE-2026-89437" ], "rank": 21 }, { "author": "Fan Wu", "email": "fanwu01@zju.edu.cn", "cve_count": 28, "critical": 0, "high": 19, "scored": 19, "cvss_sum_indicative": 150.6, "cves": [ "CVE-2026-31584", "CVE-2026-43426", "CVE-2026-46011", "CVE-2026-63803", "CVE-2026-64329", "CVE-2026-64583", "CVE-2026-64584", "CVE-2026-64585", "CVE-2026-64586", "CVE-2026-64587", "CVE-2026-68135", "CVE-2026-68192", "CVE-2026-74652", "CVE-2026-80737", "CVE-2026-80947", "CVE-2026-89440", "CVE-2026-89441", "CVE-2026-89463", "CVE-2026-89465", "CVE-2026-89467", "CVE-2026-89468", "CVE-2026-89469", "CVE-2026-89472", "CVE-2026-89474", "CVE-2026-89475", "CVE-2026-89510", "CVE-2026-89737", "CVE-2026-89738" ], "rank": 21 }, { "author": "Kuniyuki Iwashima", "email": "kuniyu@google.com", "cve_count": 28, "critical": 3, "high": 13, "scored": 16, "cvss_sum_indicative": 130.7, "cves": [ "CVE-2026-23010", "CVE-2026-23072", "CVE-2026-23083", "CVE-2026-23095", "CVE-2026-23150", "CVE-2026-23167", "CVE-2026-23297", "CVE-2026-23331", "CVE-2026-23394", "CVE-2026-31551", "CVE-2026-43016", "CVE-2026-43164", "CVE-2026-43394", "CVE-2026-45887", "CVE-2026-46260", "CVE-2026-52910", "CVE-2026-53005", "CVE-2026-53260", "CVE-2026-53353", "CVE-2026-53361", "CVE-2026-63917", "CVE-2026-64518", "CVE-2026-72421", "CVE-2026-74257", "CVE-2026-74288", "CVE-2026-74289", "CVE-2026-74406", "CVE-2026-80521" ], "rank": 21 }, { "author": "Maoyi Xie", "email": "maoyixie.tju@gmail.com", "cve_count": 28, "critical": 0, "high": 17, "scored": 17, "cvss_sum_indicative": 145.1, "cves": [ "CVE-2026-46120", "CVE-2026-63829", "CVE-2026-63914", "CVE-2026-63921", "CVE-2026-64347", "CVE-2026-64351", "CVE-2026-64362", "CVE-2026-64407", "CVE-2026-64483", "CVE-2026-64487", "CVE-2026-68409", "CVE-2026-68478", "CVE-2026-72003", "CVE-2026-72029", "CVE-2026-72051", "CVE-2026-72052", "CVE-2026-72053", "CVE-2026-72054", "CVE-2026-72055", "CVE-2026-72061", "CVE-2026-72070", "CVE-2026-72127", "CVE-2026-72136", "CVE-2026-72157", "CVE-2026-74456", "CVE-2026-80931", "CVE-2026-80951", "CVE-2026-89464" ], "rank": 21 }, { "author": "Namjae Jeon", "email": "linkinjeon@kernel.org", "cve_count": 28, "critical": 15, "high": 10, "scored": 25, "cvss_sum_indicative": 228.6, "cves": [ "CVE-2026-23220", "CVE-2026-23226", "CVE-2026-31409", "CVE-2026-31410", "CVE-2026-31433", "CVE-2026-31478", "CVE-2026-31717", "CVE-2026-31718", "CVE-2026-43376", "CVE-2026-43379", "CVE-2026-64390", "CVE-2026-64391", "CVE-2026-64392", "CVE-2026-64393", "CVE-2026-64395", "CVE-2026-64397", "CVE-2026-64400", "CVE-2026-68097", "CVE-2026-68098", "CVE-2026-68431", "CVE-2026-68457", "CVE-2026-72185", "CVE-2026-72186", "CVE-2026-72188", "CVE-2026-74494", "CVE-2026-74521", "CVE-2026-74522", "CVE-2026-74570" ], "rank": 21 }, { "author": "Chris Mason", "email": "clm@meta.com", "cve_count": 27, "critical": 12, "high": 10, "scored": 22, "cvss_sum_indicative": 193.7, "cves": [ "CVE-2026-53399", "CVE-2026-64007", "CVE-2026-64262", "CVE-2026-64264", "CVE-2026-64588", "CVE-2026-68458", "CVE-2026-72222", "CVE-2026-72466", "CVE-2026-72468", "CVE-2026-72469", "CVE-2026-89532", "CVE-2026-89533", "CVE-2026-89539", "CVE-2026-89540", "CVE-2026-89541", "CVE-2026-89542", "CVE-2026-89544", "CVE-2026-89550", "CVE-2026-89551", "CVE-2026-89670", "CVE-2026-89671", "CVE-2026-89678", "CVE-2026-89684", "CVE-2026-89695", "CVE-2026-89702", "CVE-2026-89707", "CVE-2026-89715" ], "rank": 26 }, { "author": "David Carlier", "email": "devnexen@gmail.com", "cve_count": 27, "critical": 3, "high": 9, "scored": 12, "cvss_sum_indicative": 102.2, "cves": [ "CVE-2026-31495", "CVE-2026-31501", "CVE-2026-31644", "CVE-2026-31645", "CVE-2026-31646", "CVE-2026-31658", "CVE-2026-43039", "CVE-2026-46106", "CVE-2026-46111", "CVE-2026-46188", "CVE-2026-46196", "CVE-2026-52904", "CVE-2026-53096", "CVE-2026-53154", "CVE-2026-63910", "CVE-2026-63934", "CVE-2026-64028", "CVE-2026-64044", "CVE-2026-64045", "CVE-2026-64053", "CVE-2026-64124", "CVE-2026-64128", "CVE-2026-64228", "CVE-2026-68221", "CVE-2026-68283", "CVE-2026-80634", "CVE-2026-80715" ], "rank": 26 }, { "author": "Deepanshu Kartikey", "email": "kartikey406@gmail.com", "cve_count": 27, "critical": 0, "high": 7, "scored": 7, "cvss_sum_indicative": 53.7, "cves": [ "CVE-2026-23238", "CVE-2026-23375", "CVE-2026-23390", "CVE-2026-31437", "CVE-2026-31438", "CVE-2026-31452", "CVE-2026-31577", "CVE-2026-31751", "CVE-2026-43050", "CVE-2026-43052", "CVE-2026-43076", "CVE-2026-43292", "CVE-2026-45961", "CVE-2026-45984", "CVE-2026-46048", "CVE-2026-46094", "CVE-2026-46169", "CVE-2026-53027", "CVE-2026-53320", "CVE-2026-63869", "CVE-2026-64098", "CVE-2026-64359", "CVE-2026-68214", "CVE-2026-72213", "CVE-2026-74363", "CVE-2026-89618", "CVE-2026-89747" ], "rank": 26 }, { "author": "Felix Gu", "email": "ustc.gu@gmail.com", "cve_count": 27, "critical": 2, "high": 2, "scored": 4, "cvss_sum_indicative": 35.6, "cves": [ "CVE-2026-23182", "CVE-2026-23283", "CVE-2026-23314", "CVE-2026-23337", "CVE-2026-23387", "CVE-2026-23426", "CVE-2026-23431", "CVE-2026-31489", "CVE-2026-31757", "CVE-2026-31783", "CVE-2026-43004", "CVE-2026-43008", "CVE-2026-43460", "CVE-2026-43461", "CVE-2026-45925", "CVE-2026-45954", "CVE-2026-46030", "CVE-2026-46109", "CVE-2026-46261", "CVE-2026-53030", "CVE-2026-63930", "CVE-2026-64154", "CVE-2026-64498", "CVE-2026-68208", "CVE-2026-74279", "CVE-2026-74280", "CVE-2026-74415" ], "rank": 26 }, { "author": "Zilin Guan", "email": "zilin@seu.edu.cn", "cve_count": 27, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.0, "cves": [ "CVE-2026-23038", "CVE-2026-23065", "CVE-2026-23137", "CVE-2026-23160", "CVE-2026-23256", "CVE-2026-23257", "CVE-2026-23258", "CVE-2026-23389", "CVE-2026-23464", "CVE-2026-43162", "CVE-2026-43432", "CVE-2026-45853", "CVE-2026-45863", "CVE-2026-45872", "CVE-2026-45881", "CVE-2026-45888", "CVE-2026-45921", "CVE-2026-45922", "CVE-2026-45928", "CVE-2026-45939", "CVE-2026-45947", "CVE-2026-45948", "CVE-2026-45950", "CVE-2026-45976", "CVE-2026-46299", "CVE-2026-53102", "CVE-2026-53113" ], "rank": 26 }, { "author": "Pauli Virtanen", "email": "pav@iki.fi", "cve_count": 25, "critical": 0, "high": 22, "scored": 22, "cvss_sum_indicative": 187.2, "cves": [ "CVE-2026-43018", "CVE-2026-43019", "CVE-2026-43021", "CVE-2026-43022", "CVE-2026-53072", "CVE-2026-68085", "CVE-2026-68390", "CVE-2026-68391", "CVE-2026-68392", "CVE-2026-68393", "CVE-2026-72334", "CVE-2026-74528", "CVE-2026-74529", "CVE-2026-74530", "CVE-2026-74531", "CVE-2026-74533", "CVE-2026-74534", "CVE-2026-74535", "CVE-2026-74536", "CVE-2026-74537", "CVE-2026-74538", "CVE-2026-74539", "CVE-2026-74541", "CVE-2026-80692", "CVE-2026-80721" ], "rank": 31 }, { "author": "SeongJae Park", "email": "sj@kernel.org", "cve_count": 25, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23012", "CVE-2026-23142", "CVE-2026-23144", "CVE-2026-31445", "CVE-2026-31652", "CVE-2026-31653", "CVE-2026-46008", "CVE-2026-46020", "CVE-2026-46025", "CVE-2026-46067", "CVE-2026-46121", "CVE-2026-46183", "CVE-2026-52905", "CVE-2026-53334", "CVE-2026-53335", "CVE-2026-64184", "CVE-2026-64239", "CVE-2026-64458", "CVE-2026-68164", "CVE-2026-68165", "CVE-2026-72176", "CVE-2026-72177", "CVE-2026-72178", "CVE-2026-74643", "CVE-2026-74645" ], "rank": 31 }, { "author": "Takashi Iwai", "email": "tiwai@suse.de", "cve_count": 25, "critical": 0, "high": 9, "scored": 9, "cvss_sum_indicative": 70.2, "cves": [ "CVE-2026-23076", "CVE-2026-23191", "CVE-2026-31775", "CVE-2026-31776", "CVE-2026-31777", "CVE-2026-43126", "CVE-2026-43279", "CVE-2026-43436", "CVE-2026-46004", "CVE-2026-46146", "CVE-2026-46157", "CVE-2026-53192", "CVE-2026-53193", "CVE-2026-64133", "CVE-2026-64134", "CVE-2026-74388", "CVE-2026-74505", "CVE-2026-74642", "CVE-2026-80812", "CVE-2026-80964", "CVE-2026-80965", "CVE-2026-80966", "CVE-2026-80968", "CVE-2026-80969", "CVE-2026-80972" ], "rank": 31 }, { "author": "Guenter Roeck", "email": "linux@roeck-us.net", "cve_count": 24, "critical": 0, "high": 7, "scored": 7, "cvss_sum_indicative": 53.5, "cves": [ "CVE-2026-23052", "CVE-2026-23309", "CVE-2026-23323", "CVE-2026-23422", "CVE-2026-31486", "CVE-2026-31552", "CVE-2026-45914", "CVE-2026-64038", "CVE-2026-64165", "CVE-2026-64213", "CVE-2026-68358", "CVE-2026-68359", "CVE-2026-68360", "CVE-2026-68443", "CVE-2026-72394", "CVE-2026-72395", "CVE-2026-74549", "CVE-2026-74551", "CVE-2026-74552", "CVE-2026-74553", "CVE-2026-74685", "CVE-2026-74711", "CVE-2026-80695", "CVE-2026-80696" ], "rank": 34 }, { "author": "Jason Gunthorpe", "email": "jgg@nvidia.com", "cve_count": 24, "critical": 0, "high": 13, "scored": 13, "cvss_sum_indicative": 105.0, "cves": [ "CVE-2026-23289", "CVE-2026-23335", "CVE-2026-23384", "CVE-2026-31735", "CVE-2026-46112", "CVE-2026-46117", "CVE-2026-46126", "CVE-2026-46127", "CVE-2026-46144", "CVE-2026-46145", "CVE-2026-46178", "CVE-2026-46181", "CVE-2026-46189", "CVE-2026-52908", "CVE-2026-53133", "CVE-2026-53164", "CVE-2026-53188", "CVE-2026-53312", "CVE-2026-64151", "CVE-2026-64152", "CVE-2026-74328", "CVE-2026-74334", "CVE-2026-80880", "CVE-2026-89506" ], "rank": 34 }, { "author": "Lorenzo Bianconi", "email": "lorenzo@kernel.org", "cve_count": 22, "critical": 4, "high": 4, "scored": 8, "cvss_sum_indicative": 73.1, "cves": [ "CVE-2026-23284", "CVE-2026-23315", "CVE-2026-23325", "CVE-2026-23363", "CVE-2026-43102", "CVE-2026-52983", "CVE-2026-53104", "CVE-2026-53247", "CVE-2026-53248", "CVE-2026-53298", "CVE-2026-53299", "CVE-2026-63857", "CVE-2026-63859", "CVE-2026-63866", "CVE-2026-68306", "CVE-2026-68308", "CVE-2026-68309", "CVE-2026-68439", "CVE-2026-72417", "CVE-2026-72442", "CVE-2026-74322", "CVE-2026-74323" ], "rank": 36 }, { "author": "Tristan Madani", "email": "tristan@talencesecurity.com", "cve_count": 22, "critical": 1, "high": 12, "scored": 13, "cvss_sum_indicative": 109.2, "cves": [ "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-46122", "CVE-2026-46140", "CVE-2026-46163", "CVE-2026-53212", "CVE-2026-63804", "CVE-2026-64360", "CVE-2026-64361", "CVE-2026-68199", "CVE-2026-68349", "CVE-2026-68350", "CVE-2026-68351", "CVE-2026-68352", "CVE-2026-68353", "CVE-2026-72111", "CVE-2026-72242", "CVE-2026-74340", "CVE-2026-74341", "CVE-2026-74408", "CVE-2026-80598", "CVE-2026-80635" ], "rank": 36 }, { "author": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "cve_count": 21, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.6, "cves": [ "CVE-2026-46097", "CVE-2026-63908", "CVE-2026-63943", "CVE-2026-64237", "CVE-2026-64272", "CVE-2026-72074", "CVE-2026-72075", "CVE-2026-72076", "CVE-2026-72077", "CVE-2026-72078", "CVE-2026-72079", "CVE-2026-74673", "CVE-2026-74683", "CVE-2026-80559", "CVE-2026-80567", "CVE-2026-80568", "CVE-2026-80570", "CVE-2026-80594", "CVE-2026-80595", "CVE-2026-80596", "CVE-2026-80754" ], "rank": 38 }, { "author": "HyeongJun An", "email": "sammiee5311@gmail.com", "cve_count": 21, "critical": 1, "high": 15, "scored": 16, "cvss_sum_indicative": 124.0, "cves": [ "CVE-2026-53194", "CVE-2026-64427", "CVE-2026-64479", "CVE-2026-64491", "CVE-2026-64603", "CVE-2026-72415", "CVE-2026-74292", "CVE-2026-74293", "CVE-2026-74294", "CVE-2026-74295", "CVE-2026-74556", "CVE-2026-74557", "CVE-2026-80575", "CVE-2026-80593", "CVE-2026-89442", "CVE-2026-89443", "CVE-2026-89444", "CVE-2026-89466", "CVE-2026-89583", "CVE-2026-89619", "CVE-2026-89620" ], "rank": 38 }, { "author": "Muhammad Bilal", "email": "meatuni001@gmail.com", "cve_count": 21, "critical": 1, "high": 11, "scored": 12, "cvss_sum_indicative": 98.4, "cves": [ "CVE-2026-53144", "CVE-2026-53169", "CVE-2026-53170", "CVE-2026-53171", "CVE-2026-53172", "CVE-2026-53173", "CVE-2026-63945", "CVE-2026-63946", "CVE-2026-63947", "CVE-2026-64403", "CVE-2026-64404", "CVE-2026-68366", "CVE-2026-74650", "CVE-2026-74651", "CVE-2026-80603", "CVE-2026-80799", "CVE-2026-81011", "CVE-2026-81012", "CVE-2026-81013", "CVE-2026-81014", "CVE-2026-89592" ], "rank": 38 }, { "author": "Doruk Tan Ozturk", "email": "doruk@0sec.ai", "cve_count": 20, "critical": 2, "high": 9, "scored": 11, "cvss_sum_indicative": 95.9, "cves": [ "CVE-2026-63801", "CVE-2026-63831", "CVE-2026-63944", "CVE-2026-68124", "CVE-2026-68125", "CVE-2026-68142", "CVE-2026-68197", "CVE-2026-68432", "CVE-2026-72072", "CVE-2026-72091", "CVE-2026-72092", "CVE-2026-74667", "CVE-2026-74677", "CVE-2026-80798", "CVE-2026-80800", "CVE-2026-80803", "CVE-2026-80823", "CVE-2026-89492", "CVE-2026-89524", "CVE-2026-89625" ], "rank": 41 }, { "author": "Eric Biggers", "email": "ebiggers@kernel.org", "cve_count": 19, "critical": 2, "high": 8, "scored": 10, "cvss_sum_indicative": 81.9, "cves": [ "CVE-2026-23364", "CVE-2026-31739", "CVE-2026-43132", "CVE-2026-43336", "CVE-2026-43383", "CVE-2026-43384", "CVE-2026-46130", "CVE-2026-64306", "CVE-2026-64311", "CVE-2026-68147", "CVE-2026-68148", "CVE-2026-74438", "CVE-2026-74590", "CVE-2026-80806", "CVE-2026-80833", "CVE-2026-80834", "CVE-2026-80835", "CVE-2026-80871", "CVE-2026-80922" ], "rank": 42 }, { "author": "Jamal Hadi Salim", "email": "jhs@mojatatu.com", "cve_count": 19, "critical": 1, "high": 12, "scored": 13, "cvss_sum_indicative": 103.4, "cves": [ "CVE-2026-23074", "CVE-2026-23105", "CVE-2026-23378", "CVE-2026-23449", "CVE-2026-43496", "CVE-2026-46319", "CVE-2026-53264", "CVE-2026-63982", "CVE-2026-63983", "CVE-2026-64530", "CVE-2026-68377", "CVE-2026-68441", "CVE-2026-72338", "CVE-2026-72390", "CVE-2026-74290", "CVE-2026-74583", "CVE-2026-74700", "CVE-2026-74736", "CVE-2026-74740" ], "rank": 42 }, { "author": "Lizhi Hou", "email": "lizhi.hou@amd.com", "cve_count": 19, "critical": 0, "high": 12, "scored": 12, "cvss_sum_indicative": 93.4, "cves": [ "CVE-2026-23280", "CVE-2026-23288", "CVE-2026-23295", "CVE-2026-23328", "CVE-2026-23341", "CVE-2026-23424", "CVE-2026-23429", "CVE-2026-43446", "CVE-2026-45931", "CVE-2026-45980", "CVE-2026-63873", "CVE-2026-68380", "CVE-2026-72328", "CVE-2026-72331", "CVE-2026-72332", "CVE-2026-74419", "CVE-2026-74716", "CVE-2026-74721", "CVE-2026-80608" ], "rank": 42 }, { "author": "Baul Lee", "email": "baul.lee@xbow.com", "cve_count": 18, "critical": 2, "high": 5, "scored": 7, "cvss_sum_indicative": 59.6, "cves": [ "CVE-2026-74499", "CVE-2026-74500", "CVE-2026-74501", "CVE-2026-74502", "CVE-2026-74588", "CVE-2026-74615", "CVE-2026-74628", "CVE-2026-74639", "CVE-2026-74640", "CVE-2026-74641", "CVE-2026-74659", "CVE-2026-74682", "CVE-2026-80780", "CVE-2026-80781", "CVE-2026-80970", "CVE-2026-80971", "CVE-2026-80973", "CVE-2026-89624" ], "rank": 45 }, { "author": "Cen Zhang", "email": "zzzccc427@gmail.com", "cve_count": 18, "critical": 0, "high": 9, "scored": 9, "cvss_sum_indicative": 71.9, "cves": [ "CVE-2026-31500", "CVE-2026-43023", "CVE-2026-43119", "CVE-2026-64453", "CVE-2026-68367", "CVE-2026-68394", "CVE-2026-68404", "CVE-2026-68405", "CVE-2026-68414", "CVE-2026-68415", "CVE-2026-72335", "CVE-2026-72336", "CVE-2026-72337", "CVE-2026-72353", "CVE-2026-72354", "CVE-2026-72443", "CVE-2026-74261", "CVE-2026-80628" ], "rank": 45 }, { "author": "Christian Brauner", "email": "brauner@kernel.org", "cve_count": 18, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 42.3, "cves": [ "CVE-2026-43390", "CVE-2026-43391", "CVE-2026-43402", "CVE-2026-43403", "CVE-2026-46242", "CVE-2026-68132", "CVE-2026-68151", "CVE-2026-68186", "CVE-2026-68187", "CVE-2026-72379", "CVE-2026-74342", "CVE-2026-74483", "CVE-2026-74484", "CVE-2026-74485", "CVE-2026-74486", "CVE-2026-74487", "CVE-2026-74618", "CVE-2026-74619" ], "rank": 45 }, { "author": "Jiayuan Chen", "email": "jiayuan.chen@shopee.com", "cve_count": 18, "critical": 1, "high": 6, "scored": 7, "cvss_sum_indicative": 56.6, "cves": [ "CVE-2026-23192", "CVE-2026-23286", "CVE-2026-23294", "CVE-2026-23300", "CVE-2026-23310", "CVE-2026-23342", "CVE-2026-23450", "CVE-2026-23460", "CVE-2026-23472", "CVE-2026-31411", "CVE-2026-31446", "CVE-2026-31502", "CVE-2026-43041", "CVE-2026-43139", "CVE-2026-43244", "CVE-2026-43456", "CVE-2026-45866", "CVE-2026-45905" ], "rank": 45 }, { "author": "Oliver Hartkopp", "email": "socketcan@hartkopp.net", "cve_count": 18, "critical": 0, "high": 13, "scored": 13, "cvss_sum_indicative": 102.5, "cves": [ "CVE-2026-23362", "CVE-2026-31474", "CVE-2026-63990", "CVE-2026-68387", "CVE-2026-72113", "CVE-2026-72114", "CVE-2026-72115", "CVE-2026-72116", "CVE-2026-72117", "CVE-2026-72118", "CVE-2026-72119", "CVE-2026-72120", "CVE-2026-72121", "CVE-2026-72122", "CVE-2026-72124", "CVE-2026-72125", "CVE-2026-72126", "CVE-2026-80889" ], "rank": 45 }, { "author": "Haoxiang Li", "email": "haoxiang_li2024@163.com", "cve_count": 17, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-43207", "CVE-2026-43270", "CVE-2026-64337", "CVE-2026-64350", "CVE-2026-64381", "CVE-2026-72026", "CVE-2026-72038", "CVE-2026-72050", "CVE-2026-72058", "CVE-2026-72059", "CVE-2026-72081", "CVE-2026-72088", "CVE-2026-72109", "CVE-2026-72290", "CVE-2026-80767", "CVE-2026-89572", "CVE-2026-89626" ], "rank": 50 }, { "author": "Runyu Xiao", "email": "runyu.xiao@seu.edu.cn", "cve_count": 17, "critical": 0, "high": 8, "scored": 8, "cvss_sum_indicative": 65.6, "cves": [ "CVE-2026-64206", "CVE-2026-64425", "CVE-2026-64428", "CVE-2026-64429", "CVE-2026-64454", "CVE-2026-68179", "CVE-2026-68403", "CVE-2026-72005", "CVE-2026-72063", "CVE-2026-74262", "CVE-2026-80659", "CVE-2026-80660", "CVE-2026-80938", "CVE-2026-80943", "CVE-2026-80953", "CVE-2026-80967", "CVE-2026-89599" ], "rank": 50 }, { "author": "Thorsten Blum", "email": "thorsten.blum@linux.dev", "cve_count": 17, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.9, "cves": [ "CVE-2026-23303", "CVE-2026-23370", "CVE-2026-31391", "CVE-2026-31543", "CVE-2026-43377", "CVE-2026-46019", "CVE-2026-46068", "CVE-2026-46075", "CVE-2026-46077", "CVE-2026-46284", "CVE-2026-46291", "CVE-2026-64315", "CVE-2026-64316", "CVE-2026-72238", "CVE-2026-80565", "CVE-2026-80831", "CVE-2026-81018" ], "rank": 50 }, { "author": "Yinjie Yao", "email": "yinjie.yao@amd.com", "cve_count": 17, "critical": 0, "high": 17, "scored": 17, "cvss_sum_indicative": 132.6, "cves": [ "CVE-2026-63840", "CVE-2026-63841", "CVE-2026-63842", "CVE-2026-63843", "CVE-2026-63844", "CVE-2026-63845", "CVE-2026-63846", "CVE-2026-63847", "CVE-2026-63848", "CVE-2026-63849", "CVE-2026-63850", "CVE-2026-63851", "CVE-2026-63852", "CVE-2026-63853", "CVE-2026-63854", "CVE-2026-63855", "CVE-2026-63856" ], "rank": 50 }, { "author": "Alex Deucher", "email": "alexander.deucher@amd.com", "cve_count": 16, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31460", "CVE-2026-68109", "CVE-2026-68110", "CVE-2026-68111", "CVE-2026-68112", "CVE-2026-68113", "CVE-2026-68114", "CVE-2026-68115", "CVE-2026-68246", "CVE-2026-68249", "CVE-2026-68250", "CVE-2026-68251", "CVE-2026-68252", "CVE-2026-68430", "CVE-2026-74353", "CVE-2026-80705" ], "rank": 54 }, { "author": "Breno Leitao", "email": "leitao@debian.org", "cve_count": 16, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 33.2, "cves": [ "CVE-2026-23041", "CVE-2026-23202", "CVE-2026-23207", "CVE-2026-23435", "CVE-2026-31586", "CVE-2026-45876", "CVE-2026-64004", "CVE-2026-64424", "CVE-2026-68144", "CVE-2026-72170", "CVE-2026-74477", "CVE-2026-80727", "CVE-2026-80861", "CVE-2026-89753", "CVE-2026-89756", "CVE-2026-89759" ], "rank": 54 }, { "author": "Darrick J. Wong", "email": "djwong@kernel.org", "cve_count": 16, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 49.2, "cves": [ "CVE-2026-23223", "CVE-2026-23249", "CVE-2026-23250", "CVE-2026-23251", "CVE-2026-23252", "CVE-2026-43063", "CVE-2026-43158", "CVE-2026-43187", "CVE-2026-43365", "CVE-2026-64256", "CVE-2026-64600", "CVE-2026-80531", "CVE-2026-80532", "CVE-2026-80533", "CVE-2026-80535", "CVE-2026-80820" ], "rank": 54 }, { "author": "Filipe Manana", "email": "fdmanana@suse.com", "cve_count": 16, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23018", "CVE-2026-23036", "CVE-2026-23465", "CVE-2026-43118", "CVE-2026-43308", "CVE-2026-43338", "CVE-2026-43359", "CVE-2026-43360", "CVE-2026-43361", "CVE-2026-45974", "CVE-2026-46160", "CVE-2026-53122", "CVE-2026-64164", "CVE-2026-68422", "CVE-2026-74318", "CVE-2026-74321" ], "rank": 54 }, { "author": "Jiayuan Chen", "email": "jiayuan.chen@linux.dev", "cve_count": 16, "critical": 2, "high": 8, "scored": 10, "cvss_sum_indicative": 82.1, "cves": [ "CVE-2026-31429", "CVE-2026-31669", "CVE-2026-53012", "CVE-2026-53069", "CVE-2026-53078", "CVE-2026-53089", "CVE-2026-53259", "CVE-2026-53267", "CVE-2026-63865", "CVE-2026-63968", "CVE-2026-63969", "CVE-2026-64073", "CVE-2026-72429", "CVE-2026-74382", "CVE-2026-74696", "CVE-2026-80852" ], "rank": 54 }, { "author": "Tejun Heo", "email": "tj@kernel.org", "cve_count": 16, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 45.5, "cves": [ "CVE-2026-43326", "CVE-2026-43392", "CVE-2026-43482", "CVE-2026-46154", "CVE-2026-46223", "CVE-2026-53328", "CVE-2026-64226", "CVE-2026-68421", "CVE-2026-74593", "CVE-2026-74594", "CVE-2026-74731", "CVE-2026-89517", "CVE-2026-89518", "CVE-2026-89519", "CVE-2026-89520", "CVE-2026-89521" ], "rank": 54 }, { "author": "Chengfeng Ye", "email": "nicoyip.dev@gmail.com", "cve_count": 15, "critical": 0, "high": 12, "scored": 12, "cvss_sum_indicative": 96.8, "cves": [ "CVE-2026-68188", "CVE-2026-68189", "CVE-2026-68284", "CVE-2026-74479", "CVE-2026-74509", "CVE-2026-74589", "CVE-2026-74656", "CVE-2026-74660", "CVE-2026-74715", "CVE-2026-80762", "CVE-2026-80764", "CVE-2026-80932", "CVE-2026-89569", "CVE-2026-89600", "CVE-2026-89763" ], "rank": 60 }, { "author": "C\u00e1ssio Gabriel", "email": "cassiogabrielcontato@gmail.com", "cve_count": 15, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 38.9, "cves": [ "CVE-2026-46018", "CVE-2026-46090", "CVE-2026-52963", "CVE-2026-52964", "CVE-2026-64001", "CVE-2026-64243", "CVE-2026-64481", "CVE-2026-64485", "CVE-2026-64490", "CVE-2026-72258", "CVE-2026-72259", "CVE-2026-72260", "CVE-2026-72300", "CVE-2026-74291", "CVE-2026-80872" ], "rank": 60 }, { "author": "Dawei Feng", "email": "dawei.feng@seu.edu.cn", "cve_count": 15, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.0, "cves": [ "CVE-2026-46079", "CVE-2026-63809", "CVE-2026-64118", "CVE-2026-64222", "CVE-2026-64224", "CVE-2026-64348", "CVE-2026-64356", "CVE-2026-64599", "CVE-2026-68410", "CVE-2026-72004", "CVE-2026-72023", "CVE-2026-72032", "CVE-2026-72056", "CVE-2026-80940", "CVE-2026-80948" ], "rank": 60 }, { "author": "Jann Horn", "email": "jannh@google.com", "cve_count": 15, "critical": 0, "high": 8, "scored": 8, "cvss_sum_indicative": 64.4, "cves": [ "CVE-2026-46173", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53341", "CVE-2026-64109", "CVE-2026-64178", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-72110", "CVE-2026-80769", "CVE-2026-80773", "CVE-2026-80774", "CVE-2026-80918", "CVE-2026-80928", "CVE-2026-89762" ], "rank": 60 }, { "author": "Kyle Zeng", "email": "kylebot@openai.com", "cve_count": 15, "critical": 3, "high": 4, "scored": 7, "cvss_sum_indicative": 59.9, "cves": [ "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53228", "CVE-2026-53241", "CVE-2026-68123", "CVE-2026-72164", "CVE-2026-74339", "CVE-2026-74630", "CVE-2026-74669", "CVE-2026-74753", "CVE-2026-80778", "CVE-2026-80838", "CVE-2026-80839", "CVE-2026-80840", "CVE-2026-80841" ], "rank": 60 }, { "author": "Zhiling Zou", "email": "zhilinz@nebusec.ai", "cve_count": 15, "critical": 6, "high": 7, "scored": 13, "cvss_sum_indicative": 113.1, "cves": [ "CVE-2026-74480", "CVE-2026-74581", "CVE-2026-74597", "CVE-2026-74600", "CVE-2026-74616", "CVE-2026-74625", "CVE-2026-74662", "CVE-2026-74664", "CVE-2026-74670", "CVE-2026-80976", "CVE-2026-80978", "CVE-2026-89497", "CVE-2026-89562", "CVE-2026-89563", "CVE-2026-89564" ], "rank": 60 }, { "author": "Mikulas Patocka", "email": "mpatocka@redhat.com", "cve_count": 14, "critical": 1, "high": 6, "scored": 7, "cvss_sum_indicative": 56.9, "cves": [ "CVE-2026-46107", "CVE-2026-46294", "CVE-2026-46327", "CVE-2026-63954", "CVE-2026-72096", "CVE-2026-72097", "CVE-2026-72098", "CVE-2026-72099", "CVE-2026-72100", "CVE-2026-72101", "CVE-2026-72102", "CVE-2026-72106", "CVE-2026-80963", "CVE-2026-89577" ], "rank": 66 }, { "author": "Norbert Szetei", "email": "norbert@doyensec.com", "cve_count": 14, "critical": 0, "high": 10, "scored": 10, "cvss_sum_indicative": 78.0, "cves": [ "CVE-2026-43043", "CVE-2026-46234", "CVE-2026-68200", "CVE-2026-68201", "CVE-2026-68202", "CVE-2026-68398", "CVE-2026-74503", "CVE-2026-74504", "CVE-2026-80716", "CVE-2026-80842", "CVE-2026-80977", "CVE-2026-89487", "CVE-2026-89507", "CVE-2026-89508" ], "rank": 66 }, { "author": "Shuicheng Lin", "email": "shuicheng.lin@intel.com", "cve_count": 14, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.0, "cves": [ "CVE-2026-23162", "CVE-2026-23418", "CVE-2026-23421", "CVE-2026-43395", "CVE-2026-43396", "CVE-2026-46201", "CVE-2026-46224", "CVE-2026-52976", "CVE-2026-53290", "CVE-2026-64021", "CVE-2026-64517", "CVE-2026-68298", "CVE-2026-72361", "CVE-2026-80606" ], "rank": 66 }, { "author": "Daniel Borkmann", "email": "daniel@iogearbox.net", "cve_count": 13, "critical": 0, "high": 11, "scored": 11, "cvss_sum_indicative": 86.4, "cves": [ "CVE-2026-23413", "CVE-2026-43009", "CVE-2026-52945", "CVE-2026-53036", "CVE-2026-53081", "CVE-2026-53090", "CVE-2026-53092", "CVE-2026-63864", "CVE-2026-68337", "CVE-2026-74285", "CVE-2026-74305", "CVE-2026-74360", "CVE-2026-74364" ], "rank": 69 }, { "author": "Edward Adam Davis", "email": "eadavis@qq.com", "cve_count": 13, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 32.1, "cves": [ "CVE-2026-23181", "CVE-2026-23208", "CVE-2026-31448", "CVE-2026-31750", "CVE-2026-43474", "CVE-2026-45864", "CVE-2026-52966", "CVE-2026-52991", "CVE-2026-53029", "CVE-2026-68361", "CVE-2026-72471", "CVE-2026-74414", "CVE-2026-80656" ], "rank": 69 }, { "author": "Fernando Fernandez Mancera", "email": "fmancera@suse.de", "cve_count": 13, "critical": 1, "high": 5, "scored": 6, "cvss_sum_indicative": 46.6, "cves": [ "CVE-2026-23139", "CVE-2026-23293", "CVE-2026-23381", "CVE-2026-31517", "CVE-2026-31531", "CVE-2026-45860", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53079", "CVE-2026-53269", "CVE-2026-64006", "CVE-2026-72418", "CVE-2026-80637" ], "rank": 69 }, { "author": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "cve_count": 13, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.0, "cves": [ "CVE-2026-23176", "CVE-2026-23186", "CVE-2026-23237", "CVE-2026-23443", "CVE-2026-31731", "CVE-2026-43332", "CVE-2026-46021", "CVE-2026-64013", "CVE-2026-64227", "CVE-2026-64510", "CVE-2026-64511", "CVE-2026-72432", "CVE-2026-74604" ], "rank": 69 }, { "author": "Raphael Zimmer", "email": "raphael.zimmer@tu-ilmenau.de", "cve_count": 13, "critical": 6, "high": 7, "scored": 13, "cvss_sum_indicative": 109.2, "cves": [ "CVE-2026-43405", "CVE-2026-43407", "CVE-2026-46024", "CVE-2026-46119", "CVE-2026-52954", "CVE-2026-52955", "CVE-2026-52956", "CVE-2026-52957", "CVE-2026-52958", "CVE-2026-68131", "CVE-2026-68155", "CVE-2026-68158", "CVE-2026-80558" ], "rank": 69 }, { "author": "Waqar Hameed", "email": "waqar.hameed@axis.com", "cve_count": 13, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-45867", "CVE-2026-45869", "CVE-2026-45879", "CVE-2026-45882", "CVE-2026-45885", "CVE-2026-45902", "CVE-2026-45906", "CVE-2026-45916", "CVE-2026-45936", "CVE-2026-45938", "CVE-2026-45946", "CVE-2026-46246", "CVE-2026-46270" ], "rank": 69 }, { "author": "Zhang Cen", "email": "rollkingzzc@gmail.com", "cve_count": 13, "critical": 1, "high": 7, "scored": 8, "cvss_sum_indicative": 64.2, "cves": [ "CVE-2026-53253", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-63796", "CVE-2026-63814", "CVE-2026-63902", "CVE-2026-63903", "CVE-2026-64029", "CVE-2026-74348", "CVE-2026-74349", "CVE-2026-74350", "CVE-2026-74351", "CVE-2026-74387" ], "rank": 69 }, { "author": "Alexandru Hossu", "email": "hossu.alexandru@gmail.com", "cve_count": 12, "critical": 1, "high": 10, "scored": 11, "cvss_sum_indicative": 92.9, "cves": [ "CVE-2026-63886", "CVE-2026-64030", "CVE-2026-64440", "CVE-2026-64441", "CVE-2026-64442", "CVE-2026-64443", "CVE-2026-64444", "CVE-2026-64445", "CVE-2026-64446", "CVE-2026-64447", "CVE-2026-64536", "CVE-2026-72489" ], "rank": 76 }, { "author": "Danilo Krummrich", "email": "dakr@kernel.org", "cve_count": 12, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31487", "CVE-2026-31527", "CVE-2026-31687", "CVE-2026-53115", "CVE-2026-53116", "CVE-2026-53117", "CVE-2026-53118", "CVE-2026-53119", "CVE-2026-53120", "CVE-2026-80676", "CVE-2026-80677", "CVE-2026-89764" ], "rank": 76 }, { "author": "Xin Long", "email": "lucien.xin@gmail.com", "cve_count": 12, "critical": 6, "high": 3, "scored": 9, "cvss_sum_indicative": 80.8, "cves": [ "CVE-2026-23125", "CVE-2026-52924", "CVE-2026-53070", "CVE-2026-53224", "CVE-2026-53246", "CVE-2026-68376", "CVE-2026-72383", "CVE-2026-72398", "CVE-2026-72413", "CVE-2026-72447", "CVE-2026-74287", "CVE-2026-74688" ], "rank": 76 }, { "author": "Yizhou Zhao", "email": "zhaoyz24@mails.tsinghua.edu.cn", "cve_count": 12, "critical": 4, "high": 4, "scored": 8, "cvss_sum_indicative": 69.0, "cves": [ "CVE-2026-46244", "CVE-2026-53245", "CVE-2026-53263", "CVE-2026-63795", "CVE-2026-63868", "CVE-2026-64452", "CVE-2026-68119", "CVE-2026-72020", "CVE-2026-72021", "CVE-2026-72247", "CVE-2026-72491", "CVE-2026-80875" ], "rank": 76 }, { "author": "Joanne Koong", "email": "joannelkoong@gmail.com", "cve_count": 11, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 32.9, "cves": [ "CVE-2026-23109", "CVE-2026-31463", "CVE-2026-31465", "CVE-2026-53165", "CVE-2026-53388", "CVE-2026-64258", "CVE-2026-64263", "CVE-2026-64266", "CVE-2026-68095", "CVE-2026-80858", "CVE-2026-80859" ], "rank": 80 }, { "author": "Koichiro Den", "email": "den@valinux.co.jp", "cve_count": 11, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 30.3, "cves": [ "CVE-2026-23340", "CVE-2026-31594", "CVE-2026-31595", "CVE-2026-46009", "CVE-2026-53067", "CVE-2026-64254", "CVE-2026-64430", "CVE-2026-72147", "CVE-2026-74626", "CVE-2026-80987", "CVE-2026-80988" ], "rank": 80 }, { "author": "Ruoyu Wang", "email": "ruoyuw560@gmail.com", "cve_count": 11, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 48.1, "cves": [ "CVE-2026-68310", "CVE-2026-68327", "CVE-2026-68328", "CVE-2026-68354", "CVE-2026-68375", "CVE-2026-68389", "CVE-2026-68417", "CVE-2026-72171", "CVE-2026-72406", "CVE-2026-72460", "CVE-2026-74263" ], "rank": 80 }, { "author": "Srinivasan Shanmugam", "email": "srinivasan.shanmugam@amd.com", "cve_count": 11, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-23034", "CVE-2026-31566", "CVE-2026-43237", "CVE-2026-43337", "CVE-2026-45878", "CVE-2026-46245", "CVE-2026-46263", "CVE-2026-53313", "CVE-2026-53315", "CVE-2026-53316", "CVE-2026-80870" ], "rank": 80 }, { "author": "Chao Yu", "email": "chao@kernel.org", "cve_count": 10, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-23224", "CVE-2026-23232", "CVE-2026-23233", "CVE-2026-23234", "CVE-2026-23265", "CVE-2026-31714", "CVE-2026-43349", "CVE-2026-63816", "CVE-2026-63819", "CVE-2026-68459" ], "rank": 84 }, { "author": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "cve_count": 10, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.0, "cves": [ "CVE-2026-43154", "CVE-2026-43166", "CVE-2026-43179", "CVE-2026-45943", "CVE-2026-46078", "CVE-2026-46329", "CVE-2026-53015", "CVE-2026-53272", "CVE-2026-64031", "CVE-2026-80899" ], "rank": 84 }, { "author": "Henrique Carvalho", "email": "henrique.carvalho@suse.com", "cve_count": 10, "critical": 6, "high": 3, "scored": 9, "cvss_sum_indicative": 85.2, "cves": [ "CVE-2026-23228", "CVE-2026-23230", "CVE-2026-43239", "CVE-2026-64136", "CVE-2026-64382", "CVE-2026-64384", "CVE-2026-64385", "CVE-2026-64386", "CVE-2026-64387", "CVE-2026-64597" ], "rank": 84 }, { "author": "Hyunchul Lee", "email": "hyc.lee@gmail.com", "cve_count": 10, "critical": 6, "high": 3, "scored": 9, "cvss_sum_indicative": 82.5, "cves": [ "CVE-2026-63793", "CVE-2026-72187", "CVE-2026-72201", "CVE-2026-72203", "CVE-2026-72204", "CVE-2026-72206", "CVE-2026-72207", "CVE-2026-72208", "CVE-2026-89612", "CVE-2026-89613" ], "rank": 84 }, { "author": "Ibrahim Hashimov", "email": "security@auditcode.ai", "cve_count": 10, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 32.7, "cves": [ "CVE-2026-68126", "CVE-2026-74470", "CVE-2026-80536", "CVE-2026-80766", "CVE-2026-80772", "CVE-2026-80789", "CVE-2026-80864", "CVE-2026-89493", "CVE-2026-89628", "CVE-2026-89720" ], "rank": 84 }, { "author": "John Johansen", "email": "john.johansen@canonical.com", "cve_count": 10, "critical": 0, "high": 7, "scored": 7, "cvss_sum_indicative": 55.1, "cves": [ "CVE-2026-23268", "CVE-2026-23405", "CVE-2026-23408", "CVE-2026-23409", "CVE-2026-23410", "CVE-2026-23411", "CVE-2026-45848", "CVE-2026-46328", "CVE-2026-72461", "CVE-2026-72462" ], "rank": 84 }, { "author": "J\u00e9r\u00e9my Jean", "email": "jeremy.jean@oss.cyber.gouv.fr", "cve_count": 10, "critical": 7, "high": 2, "scored": 9, "cvss_sum_indicative": 84.2, "cves": [ "CVE-2026-74611", "CVE-2026-74746", "CVE-2026-74752", "CVE-2026-89536", "CVE-2026-89579", "CVE-2026-89643", "CVE-2026-89653", "CVE-2026-89656", "CVE-2026-89750", "CVE-2026-89765" ], "rank": 84 }, { "author": "Lee Jones", "email": "lee@kernel.org", "cve_count": 10, "critical": 1, "high": 8, "scored": 9, "cvss_sum_indicative": 76.2, "cves": [ "CVE-2026-43047", "CVE-2026-43048", "CVE-2026-43049", "CVE-2026-52993", "CVE-2026-53262", "CVE-2026-63916", "CVE-2026-64010", "CVE-2026-64011", "CVE-2026-72123", "CVE-2026-80604" ], "rank": 84 }, { "author": "Mario Limonciello", "email": "mario.limonciello@amd.com", "cve_count": 10, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.3, "cves": [ "CVE-2026-23062", "CVE-2026-23131", "CVE-2026-43367", "CVE-2026-43369", "CVE-2026-68238", "CVE-2026-68272", "CVE-2026-68275", "CVE-2026-72449", "CVE-2026-81015", "CVE-2026-81016" ], "rank": 84 }, { "author": "Ma\u00edra Canal", "email": "mcanal@igalia.com", "cve_count": 10, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31550", "CVE-2026-43104", "CVE-2026-43105", "CVE-2026-53139", "CVE-2026-53140", "CVE-2026-53141", "CVE-2026-64099", "CVE-2026-72327", "CVE-2026-74453", "CVE-2026-74638" ], "rank": 84 }, { "author": "Myeonghun Pak", "email": "mhun512@gmail.com", "cve_count": 10, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 47.8, "cves": [ "CVE-2026-64338", "CVE-2026-64463", "CVE-2026-68091", "CVE-2026-68207", "CVE-2026-68210", "CVE-2026-68215", "CVE-2026-68314", "CVE-2026-80680", "CVE-2026-80930", "CVE-2026-89597" ], "rank": 84 }, { "author": "Peter Ujfalusi", "email": "peter.ujfalusi@linux.intel.com", "cve_count": 10, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 46.8, "cves": [ "CVE-2026-43478", "CVE-2026-72261", "CVE-2026-72262", "CVE-2026-72301", "CVE-2026-72302", "CVE-2026-72303", "CVE-2026-72304", "CVE-2026-80525", "CVE-2026-80581", "CVE-2026-80911" ], "rank": 84 }, { "author": "Thomas Gleixner", "email": "tglx@kernel.org", "cve_count": 10, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-23225", "CVE-2026-23313", "CVE-2026-31574", "CVE-2026-43417", "CVE-2026-43418", "CVE-2026-64560", "CVE-2026-68090", "CVE-2026-68092", "CVE-2026-72069", "CVE-2026-80777" ], "rank": 84 }, { "author": "Zhao Dongdong", "email": "zhaodongdong@kylinos.cn", "cve_count": 10, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63991", "CVE-2026-64480", "CVE-2026-64482", "CVE-2026-64484", "CVE-2026-64486", "CVE-2026-64488", "CVE-2026-64489", "CVE-2026-68475", "CVE-2026-72263", "CVE-2026-74301" ], "rank": 84 }, { "author": "Zhengchuan Liang", "email": "zcliangcn@gmail.com", "cve_count": 10, "critical": 3, "high": 4, "scored": 7, "cvss_sum_indicative": 59.4, "cves": [ "CVE-2026-31680", "CVE-2026-31685", "CVE-2026-43088", "CVE-2026-46086", "CVE-2026-46098", "CVE-2026-52915", "CVE-2026-53131", "CVE-2026-63919", "CVE-2026-63922", "CVE-2026-72297" ], "rank": 84 }, { "author": "Abd-Alrhman Masalkhi", "email": "abd.masalkhi@gmail.com", "cve_count": 9, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.1, "cves": [ "CVE-2026-43058", "CVE-2026-72437", "CVE-2026-72438", "CVE-2026-72439", "CVE-2026-72440", "CVE-2026-74372", "CVE-2026-74373", "CVE-2026-74374", "CVE-2026-74375" ], "rank": 99 }, { "author": "Eric Farman", "email": "farman@linux.ibm.com", "cve_count": 9, "critical": 2, "high": 7, "scored": 9, "cvss_sum_indicative": 77.0, "cves": [ "CVE-2026-80547", "CVE-2026-80548", "CVE-2026-80549", "CVE-2026-80550", "CVE-2026-80551", "CVE-2026-80552", "CVE-2026-80553", "CVE-2026-80554", "CVE-2026-80555" ], "rank": 99 }, { "author": "Frank Sorenson", "email": "sorenson@redhat.com", "cve_count": 9, "critical": 3, "high": 4, "scored": 7, "cvss_sum_indicative": 58.9, "cves": [ "CVE-2026-68312", "CVE-2026-89632", "CVE-2026-89633", "CVE-2026-89634", "CVE-2026-89637", "CVE-2026-89639", "CVE-2026-89640", "CVE-2026-89641", "CVE-2026-89642" ], "rank": 99 }, { "author": "Gil Portnoy", "email": "dddhkts1@gmail.com", "cve_count": 9, "critical": 3, "high": 5, "scored": 8, "cvss_sum_indicative": 71.4, "cves": [ "CVE-2026-53198", "CVE-2026-53271", "CVE-2026-53383", "CVE-2026-64394", "CVE-2026-64398", "CVE-2026-64399", "CVE-2026-64437", "CVE-2026-72381", "CVE-2026-72422" ], "rank": 99 }, { "author": "Harald Freudenberger", "email": "freude@linux.ibm.com", "cve_count": 9, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 38.3, "cves": [ "CVE-2026-31746", "CVE-2026-68453", "CVE-2026-74466", "CVE-2026-80543", "CVE-2026-80544", "CVE-2026-80545", "CVE-2026-80546", "CVE-2026-80708", "CVE-2026-80709" ], "rank": 99 }, { "author": "Harry Wentland", "email": "harry.wentland@amd.com", "cve_count": 9, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 21.8, "cves": [ "CVE-2026-53135", "CVE-2026-53136", "CVE-2026-53137", "CVE-2026-53138", "CVE-2026-53329", "CVE-2026-53330", "CVE-2026-53378", "CVE-2026-64097", "CVE-2026-64219" ], "rank": 99 }, { "author": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "cve_count": 9, "critical": 2, "high": 4, "scored": 6, "cvss_sum_indicative": 50.5, "cves": [ "CVE-2026-31431", "CVE-2026-43033", "CVE-2026-43077", "CVE-2026-43078", "CVE-2026-43493", "CVE-2026-52932", "CVE-2026-52972", "CVE-2026-72451", "CVE-2026-80882" ], "rank": 99 }, { "author": "Jacob Moroni", "email": "jmoroni@google.com", "cve_count": 9, "critical": 2, "high": 4, "scored": 6, "cvss_sum_indicative": 50.8, "cves": [ "CVE-2026-31492", "CVE-2026-43120", "CVE-2026-43128", "CVE-2026-45898", "CVE-2026-68418", "CVE-2026-68419", "CVE-2026-72494", "CVE-2026-74346", "CVE-2026-74390" ], "rank": 99 }, { "author": "Jiangshan Yi", "email": "yijiangshan@kylinos.cn", "cve_count": 9, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-68434", "CVE-2026-74681", "CVE-2026-80770", "CVE-2026-80771", "CVE-2026-89582", "CVE-2026-89621", "CVE-2026-89622", "CVE-2026-89623", "CVE-2026-89638" ], "rank": 99 }, { "author": "Kuen-Han Tsai", "email": "khtsai@google.com", "cve_count": 9, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31722", "CVE-2026-31723", "CVE-2026-31724", "CVE-2026-31725", "CVE-2026-31727", "CVE-2026-31728", "CVE-2026-43342", "CVE-2026-43343", "CVE-2026-43421" ], "rank": 99 }, { "author": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "cve_count": 9, "critical": 0, "high": 8, "scored": 8, "cvss_sum_indicative": 67.0, "cves": [ "CVE-2026-23395", "CVE-2026-23462", "CVE-2026-31511", "CVE-2026-43134", "CVE-2026-43322", "CVE-2026-46138", "CVE-2026-53251", "CVE-2026-53276", "CVE-2026-63975" ], "rank": 99 }, { "author": "Marc Kleine-Budde", "email": "mkl@pengutronix.de", "cve_count": 9, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23031", "CVE-2026-23058", "CVE-2026-23061", "CVE-2026-23075", "CVE-2026-23080", "CVE-2026-23082", "CVE-2026-23108", "CVE-2026-23155", "CVE-2026-31485" ], "rank": 99 }, { "author": "Max Kellermann", "email": "max.kellermann@ionos.com", "cve_count": 9, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 40.1, "cves": [ "CVE-2026-43408", "CVE-2026-43419", "CVE-2026-43420", "CVE-2026-46052", "CVE-2026-80527", "CVE-2026-80528", "CVE-2026-89566", "CVE-2026-89567", "CVE-2026-89647" ], "rank": 99 }, { "author": "Nicolin Chen", "email": "nicolinc@nvidia.com", "cve_count": 9, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 26.9, "cves": [ "CVE-2026-52952", "CVE-2026-53280", "CVE-2026-64289", "CVE-2026-64290", "CVE-2026-64291", "CVE-2026-64292", "CVE-2026-74573", "CVE-2026-80687", "CVE-2026-89450" ], "rank": 99 }, { "author": "Peiyang He", "email": "peiyang_he@smail.nju.edu.cn", "cve_count": 9, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-72184", "CVE-2026-72189", "CVE-2026-72190", "CVE-2026-74520", "CVE-2026-80817", "CVE-2026-80863", "CVE-2026-80894", "CVE-2026-89445", "CVE-2026-89449" ], "rank": 99 }, { "author": "Qu Wenruo", "email": "wqu@suse.com", "cve_count": 9, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-23141", "CVE-2026-23147", "CVE-2026-23157", "CVE-2026-23214", "CVE-2026-43299", "CVE-2026-53284", "CVE-2026-64593", "CVE-2026-68167", "CVE-2026-80734" ], "rank": 99 }, { "author": "Shuangpeng Bai", "email": "shuangpeng.kernel@gmail.com", "cve_count": 9, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 27.4, "cves": [ "CVE-2026-43458", "CVE-2026-68156", "CVE-2026-72022", "CVE-2026-74606", "CVE-2026-74608", "CVE-2026-80826", "CVE-2026-80854", "CVE-2026-89484", "CVE-2026-89644" ], "rank": 99 }, { "author": "Steven Rostedt", "email": "rostedt@goodmis.org", "cve_count": 9, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 30.9, "cves": [ "CVE-2026-23088", "CVE-2026-23138", "CVE-2026-23159", "CVE-2026-31541", "CVE-2026-64374", "CVE-2026-68176", "CVE-2026-68177", "CVE-2026-74605", "CVE-2026-80661" ], "rank": 99 }, { "author": "Wyatt Feng", "email": "bronzed_45_vested@icloud.com", "cve_count": 9, "critical": 1, "high": 7, "scored": 8, "cvss_sum_indicative": 61.7, "cves": [ "CVE-2026-52929", "CVE-2026-52935", "CVE-2026-64422", "CVE-2026-72256", "CVE-2026-72347", "CVE-2026-72350", "CVE-2026-74430", "CVE-2026-80585", "CVE-2026-80664" ], "rank": 99 }, { "author": "Yehyeong Lee", "email": "yhlee@isslab.korea.ac.kr", "cve_count": 9, "critical": 3, "high": 4, "scored": 7, "cvss_sum_indicative": 60.1, "cves": [ "CVE-2026-68288", "CVE-2026-74577", "CVE-2026-80981", "CVE-2026-80985", "CVE-2026-80986", "CVE-2026-89480", "CVE-2026-89481", "CVE-2026-89482", "CVE-2026-89483" ], "rank": 99 }, { "author": "Yuho Choi", "email": "dbgh9129@gmail.com", "cve_count": 9, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 41.1, "cves": [ "CVE-2026-63797", "CVE-2026-64372", "CVE-2026-72329", "CVE-2026-74329", "CVE-2026-74416", "CVE-2026-74574", "CVE-2026-80650", "CVE-2026-80698", "CVE-2026-81006" ], "rank": 99 }, { "author": "Zack Rusin", "email": "zack.rusin@broadcom.com", "cve_count": 9, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 32.2, "cves": [ "CVE-2026-74442", "CVE-2026-74443", "CVE-2026-74444", "CVE-2026-74445", "CVE-2026-80700", "CVE-2026-80701", "CVE-2026-80702", "CVE-2026-80887", "CVE-2026-80888" ], "rank": 99 }, { "author": "Zhao Li", "email": "enderaoelyther@gmail.com", "cve_count": 9, "critical": 0, "high": 7, "scored": 7, "cvss_sum_indicative": 61.6, "cves": [ "CVE-2026-46152", "CVE-2026-64117", "CVE-2026-68406", "CVE-2026-68407", "CVE-2026-68470", "CVE-2026-68471", "CVE-2026-74488", "CVE-2026-74489", "CVE-2026-80722" ], "rank": 99 }, { "author": "Bartosz Golaszewski", "email": "bartosz.golaszewski@oss.qualcomm.com", "cve_count": 8, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43138", "CVE-2026-43181", "CVE-2026-53156", "CVE-2026-64022", "CVE-2026-64023", "CVE-2026-64220", "CVE-2026-64238", "CVE-2026-68461" ], "rank": 122 }, { "author": "Chuck Lever", "email": "cel@kernel.org", "cve_count": 8, "critical": 5, "high": 1, "scored": 6, "cvss_sum_indicative": 56.5, "cves": [ "CVE-2026-72330", "CVE-2026-80904", "CVE-2026-89530", "CVE-2026-89658", "CVE-2026-89659", "CVE-2026-89660", "CVE-2026-89661", "CVE-2026-89662" ], "rank": 122 }, { "author": "DaeMyung Kang", "email": "charsyam@gmail.com", "cve_count": 8, "critical": 4, "high": 2, "scored": 6, "cvss_sum_indicative": 54.5, "cves": [ "CVE-2026-52996", "CVE-2026-64142", "CVE-2026-72198", "CVE-2026-72199", "CVE-2026-72202", "CVE-2026-72205", "CVE-2026-72209", "CVE-2026-72211" ], "rank": 122 }, { "author": "Ethan Tidmore", "email": "ethantidmore06@gmail.com", "cve_count": 8, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31761", "CVE-2026-31762", "CVE-2026-31763", "CVE-2026-43159", "CVE-2026-46313", "CVE-2026-53028", "CVE-2026-53066", "CVE-2026-53093" ], "rank": 122 }, { "author": "Hongling Zeng", "email": "zenghongling@kylinos.cn", "cve_count": 8, "critical": 2, "high": 2, "scored": 4, "cvss_sum_indicative": 35.2, "cves": [ "CVE-2026-53401", "CVE-2026-64040", "CVE-2026-72150", "CVE-2026-72368", "CVE-2026-80805", "CVE-2026-80902", "CVE-2026-89610", "CVE-2026-89611" ], "rank": 122 }, { "author": "Jeongjun Park", "email": "aha310510@gmail.com", "cve_count": 8, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.5, "cves": [ "CVE-2026-23098", "CVE-2026-23227", "CVE-2026-31576", "CVE-2026-31578", "CVE-2026-45956", "CVE-2026-45958", "CVE-2026-46187", "CVE-2026-64107" ], "rank": 122 }, { "author": "Julian Anastasov", "email": "ja@ssi.bg", "cve_count": 8, "critical": 2, "high": 3, "scored": 5, "cvss_sum_indicative": 43.0, "cves": [ "CVE-2026-45850", "CVE-2026-45917", "CVE-2026-53270", "CVE-2026-68477", "CVE-2026-72319", "CVE-2026-74724", "CVE-2026-74747", "CVE-2026-80901" ], "rank": 122 }, { "author": "Keith Busch", "email": "kbusch@kernel.org", "cve_count": 8, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.1, "cves": [ "CVE-2026-23174", "CVE-2026-31523", "CVE-2026-64017", "CVE-2026-64019", "CVE-2026-64020", "CVE-2026-64072", "CVE-2026-89578", "CVE-2026-89584" ], "rank": 122 }, { "author": "Kiryl Shutsemau (Meta)", "email": "kas@kernel.org", "cve_count": 8, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-45851", "CVE-2026-64514", "CVE-2026-72174", "CVE-2026-72175", "CVE-2026-72180", "CVE-2026-74482", "CVE-2026-80893", "CVE-2026-89751" ], "rank": 122 }, { "author": "Lorenzo Stoakes", "email": "ljs@kernel.org", "cve_count": 8, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-23416", "CVE-2026-46100", "CVE-2026-46318", "CVE-2026-53155", "CVE-2026-53373", "CVE-2026-74599", "CVE-2026-74632", "CVE-2026-74672" ], "rank": 122 }, { "author": "Luxiao Xu", "email": "rakukuip@gmail.com", "cve_count": 8, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 40.2, "cves": [ "CVE-2026-31634", "CVE-2026-46102", "CVE-2026-52919", "CVE-2026-72220", "CVE-2026-74512", "CVE-2026-80738", "CVE-2026-80792", "CVE-2026-89543" ], "rank": 122 }, { "author": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "cve_count": 8, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43210", "CVE-2026-43409", "CVE-2026-64075", "CVE-2026-64173", "CVE-2026-68174", "CVE-2026-74471", "CVE-2026-80607", "CVE-2026-80689" ], "rank": 122 }, { "author": "Matthew Brost", "email": "matthew.brost@intel.com", "cve_count": 8, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-23466", "CVE-2026-46277", "CVE-2026-68232", "CVE-2026-68239", "CVE-2026-68268", "CVE-2026-68384", "CVE-2026-74420", "CVE-2026-74440" ], "rank": 122 }, { "author": "Mingyu Wang", "email": "25181214217@stu.xidian.edu.cn", "cve_count": 8, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 37.5, "cves": [ "CVE-2026-46275", "CVE-2026-52946", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53325", "CVE-2026-53402", "CVE-2026-64205", "CVE-2026-80578" ], "rank": 122 }, { "author": "Thomas Fourier", "email": "fourier.thomas@gmail.com", "cve_count": 8, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23020", "CVE-2026-23093", "CVE-2026-23133", "CVE-2026-23135", "CVE-2026-31661", "CVE-2026-43149", "CVE-2026-43202", "CVE-2026-43283" ], "rank": 122 }, { "author": "Tycho Andersen (AMD)", "email": "tycho@kernel.org", "cve_count": 8, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 24.9, "cves": [ "CVE-2026-64307", "CVE-2026-64308", "CVE-2026-64309", "CVE-2026-64310", "CVE-2026-68347", "CVE-2026-72239", "CVE-2026-74403", "CVE-2026-74404" ], "rank": 122 }, { "author": "Vincent Donnefort", "email": "vdonnefort@google.com", "cve_count": 8, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.0, "cves": [ "CVE-2026-72309", "CVE-2026-74602", "CVE-2026-74634", "CVE-2026-89500", "CVE-2026-89501", "CVE-2026-89502", "CVE-2026-89503", "CVE-2026-89771" ], "rank": 122 }, { "author": "Xu Rao", "email": "raoxu@uniontech.com", "cve_count": 8, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-64345", "CVE-2026-64464", "CVE-2026-68178", "CVE-2026-68184", "CVE-2026-68468", "CVE-2026-80736", "CVE-2026-80797", "CVE-2026-89627" ], "rank": 122 }, { "author": "Yang Yang", "email": "n05ec@lzu.edu.cn", "cve_count": 8, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 38.9, "cves": [ "CVE-2026-31674", "CVE-2026-31678", "CVE-2026-31679", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31683", "CVE-2026-31738", "CVE-2026-31752" ], "rank": 122 }, { "author": "Yongpeng Yang", "email": "yangyongpeng@xiaomi.com", "cve_count": 8, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.0, "cves": [ "CVE-2026-23235", "CVE-2026-23267", "CVE-2026-31715", "CVE-2026-46175", "CVE-2026-53017", "CVE-2026-53303", "CVE-2026-53368", "CVE-2026-63812" ], "rank": 122 }, { "author": "Ziyi Guo", "email": "n7l8m4@u.northwestern.edu", "cve_count": 8, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43156", "CVE-2026-43180", "CVE-2026-43425", "CVE-2026-45849", "CVE-2026-45890", "CVE-2026-45923", "CVE-2026-46262", "CVE-2026-63878" ], "rank": 122 }, { "author": "Abdurrahman Hussain", "email": "abdurrahman@nexthop.ai", "cve_count": 7, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.7, "cves": [ "CVE-2026-64083", "CVE-2026-64084", "CVE-2026-64085", "CVE-2026-64086", "CVE-2026-64087", "CVE-2026-64135", "CVE-2026-72397" ], "rank": 143 }, { "author": "Ali Ahmet Memis", "email": "ali@iusegentoo.com", "cve_count": 7, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-80560", "CVE-2026-80760", "CVE-2026-80761", "CVE-2026-80810", "CVE-2026-80819", "CVE-2026-80975", "CVE-2026-89489" ], "rank": 143 }, { "author": "Antoniu Miclaus", "email": "antoniu.miclaus@analog.com", "cve_count": 7, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43355", "CVE-2026-43357", "CVE-2026-43476", "CVE-2026-46282", "CVE-2026-63931", "CVE-2026-63933", "CVE-2026-63935" ], "rank": 143 }, { "author": "Ashutosh Desai", "email": "ashutoshdesai993@gmail.com", "cve_count": 7, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-46209", "CVE-2026-46314", "CVE-2026-63794", "CVE-2026-63915", "CVE-2026-68277", "CVE-2026-68278", "CVE-2026-68279" ], "rank": 143 }, { "author": "Asim Viladi Oglu Manizada", "email": "manizada@pm.me", "cve_count": 7, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 48.1, "cves": [ "CVE-2026-31432", "CVE-2026-46243", "CVE-2026-64531", "CVE-2026-68121", "CVE-2026-74469", "CVE-2026-80844", "CVE-2026-81000" ], "rank": 143 }, { "author": "Cen Zhang (Microsoft)", "email": "blbllhy@gmail.com", "cve_count": 7, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 46.5, "cves": [ "CVE-2026-64563", "CVE-2026-68289", "CVE-2026-68290", "CVE-2026-68297", "CVE-2026-68315", "CVE-2026-74544", "CVE-2026-74701" ], "rank": 143 }, { "author": "Emil Tantilov", "email": "emil.s.tantilov@intel.com", "cve_count": 7, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-22981", "CVE-2026-23017", "CVE-2026-23022", "CVE-2026-23023", "CVE-2026-31647", "CVE-2026-64162", "CVE-2026-68291" ], "rank": 143 }, { "author": "G\u00fcnther Noack", "email": "gnoack@google.com", "cve_count": 7, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-31520", "CVE-2026-31522", "CVE-2026-31524", "CVE-2026-43136", "CVE-2026-43140", "CVE-2026-43251", "CVE-2026-89560" ], "rank": 143 }, { "author": "HanQuan", "email": "eilaimemedsnaimel@gmail.com", "cve_count": 7, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 46.0, "cves": [ "CVE-2026-53235", "CVE-2026-53242", "CVE-2026-53389", "CVE-2026-64265", "CVE-2026-68320", "CVE-2026-74278", "CVE-2026-89607" ], "rank": 143 }, { "author": "Haoxiang Li", "email": "lihaoxiang@isrc.iscas.ac.cn", "cve_count": 7, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43135", "CVE-2026-43183", "CVE-2026-43257", "CVE-2026-43295", "CVE-2026-45986", "CVE-2026-46005", "CVE-2026-72144" ], "rank": 143 }, { "author": "Hidayath Khan", "email": "hidayath@linux.ibm.com", "cve_count": 7, "critical": 2, "high": 4, "scored": 6, "cvss_sum_indicative": 51.1, "cves": [ "CVE-2026-68141", "CVE-2026-74513", "CVE-2026-74617", "CVE-2026-80584", "CVE-2026-80980", "CVE-2026-80982", "CVE-2026-80983" ], "rank": 143 }, { "author": "Ian Bridges", "email": "icb@fastmail.org", "cve_count": 7, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-53403", "CVE-2026-63826", "CVE-2026-72162", "CVE-2026-72163", "CVE-2026-74424", "CVE-2026-80638", "CVE-2026-80809" ], "rank": 143 }, { "author": "Ido Schimmel", "email": "idosch@nvidia.com", "cve_count": 7, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-52925", "CVE-2026-53214", "CVE-2026-53275", "CVE-2026-63988", "CVE-2026-63989", "CVE-2026-64032", "CVE-2026-72389" ], "rank": 143 }, { "author": "Jens Axboe", "email": "axboe@kernel.dk", "cve_count": 7, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-23113", "CVE-2026-23253", "CVE-2026-23259", "CVE-2026-23275", "CVE-2026-43366", "CVE-2026-53321", "CVE-2026-80920" ], "rank": 143 }, { "author": "Jiexun Wang", "email": "wangjiexun2025@gmail.com", "cve_count": 7, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 49.3, "cves": [ "CVE-2026-31673", "CVE-2026-46206", "CVE-2026-46208", "CVE-2026-46238", "CVE-2026-52918", "CVE-2026-52920", "CVE-2026-52928" ], "rank": 143 }, { "author": "Karl Mehltretter", "email": "kmehltretter@gmail.com", "cve_count": 7, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.6, "cves": [ "CVE-2026-53343", "CVE-2026-74519", "CVE-2026-74524", "CVE-2026-80751", "CVE-2026-89459", "CVE-2026-89727", "CVE-2026-89740" ], "rank": 143 }, { "author": "Kohei Enju", "email": "kohei@enjuk.jp", "cve_count": 7, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-23156", "CVE-2026-23359", "CVE-2026-31505", "CVE-2026-43346", "CVE-2026-53007", "CVE-2026-64035", "CVE-2026-64110" ], "rank": 143 }, { "author": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "cve_count": 7, "critical": 3, "high": 0, "scored": 3, "cvss_sum_indicative": 29.4, "cves": [ "CVE-2026-23321", "CVE-2026-43252", "CVE-2026-46137", "CVE-2026-46158", "CVE-2026-46170", "CVE-2026-80586", "CVE-2026-80587" ], "rank": 143 }, { "author": "Oliver Upton", "email": "oupton@kernel.org", "cve_count": 7, "critical": 3, "high": 3, "scored": 6, "cvss_sum_indicative": 50.6, "cves": [ "CVE-2026-53200", "CVE-2026-64282", "CVE-2026-72277", "CVE-2026-72278", "CVE-2026-72279", "CVE-2026-72280", "CVE-2026-80665" ], "rank": 143 }, { "author": "Qi Tang", "email": "tpluszz77@gmail.com", "cve_count": 7, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 29.8, "cves": [ "CVE-2026-31507", "CVE-2026-31663", "CVE-2026-43006", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43333", "CVE-2026-63920" ], "rank": 143 }, { "author": "Qihang Tang", "email": "q.h.hack.winter@gmail.com", "cve_count": 7, "critical": 2, "high": 5, "scored": 7, "cvss_sum_indicative": 59.6, "cves": [ "CVE-2026-68381", "CVE-2026-72351", "CVE-2026-74312", "CVE-2026-74313", "CVE-2026-74582", "CVE-2026-74668", "CVE-2026-80731" ], "rank": 143 }, { "author": "Qing Ming", "email": "a0yami@mailbox.org", "cve_count": 7, "critical": 3, "high": 1, "scored": 4, "cvss_sum_indicative": 36.7, "cves": [ "CVE-2026-64036", "CVE-2026-68342", "CVE-2026-74310", "CVE-2026-74586", "CVE-2026-80850", "CVE-2026-80851", "CVE-2026-89555" ], "rank": 143 }, { "author": "Samuel Moelius", "email": "sam.moelius@trailofbits.com", "cve_count": 7, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 27.4, "cves": [ "CVE-2026-64267", "CVE-2026-72104", "CVE-2026-72107", "CVE-2026-72200", "CVE-2026-72326", "CVE-2026-74286", "CVE-2026-74300" ], "rank": 143 }, { "author": "Samuel Page", "email": "sam@bynar.io", "cve_count": 7, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 32.2, "cves": [ "CVE-2026-31532", "CVE-2026-31694", "CVE-2026-64433", "CVE-2026-64450", "CVE-2026-80794", "CVE-2026-80795", "CVE-2026-89616" ], "rank": 143 }, { "author": "Sechang Lim", "email": "rhkrqnwk98@gmail.com", "cve_count": 7, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.7, "cves": [ "CVE-2026-31654", "CVE-2026-53083", "CVE-2026-53184", "CVE-2026-72385", "CVE-2026-74256", "CVE-2026-74268", "CVE-2026-74335" ], "rank": 143 }, { "author": "Selvin Xavier", "email": "selvin.xavier@broadcom.com", "cve_count": 7, "critical": 2, "high": 3, "scored": 5, "cvss_sum_indicative": 44.9, "cves": [ "CVE-2026-72495", "CVE-2026-72496", "CVE-2026-72497", "CVE-2026-72498", "CVE-2026-72499", "CVE-2026-72500", "CVE-2026-72501" ], "rank": 143 }, { "author": "Siwei Zhang", "email": "oss@fourdim.xyz", "cve_count": 7, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-53358", "CVE-2026-63948", "CVE-2026-64405", "CVE-2026-64557" ], "rank": 143 }, { "author": "Stefan Metzmacher", "email": "metze@samba.org", "cve_count": 7, "critical": 3, "high": 2, "scored": 5, "cvss_sum_indicative": 44.4, "cves": [ "CVE-2026-31535", "CVE-2026-31536", "CVE-2026-31537", "CVE-2026-31538", "CVE-2026-31539", "CVE-2026-31608", "CVE-2026-31609" ], "rank": 143 }, { "author": "Valery Borovsky", "email": "vebohr@gmail.com", "cve_count": 7, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-68209", "CVE-2026-68211", "CVE-2026-68213", "CVE-2026-68216", "CVE-2026-68217", "CVE-2026-68222", "CVE-2026-68231" ], "rank": 143 }, { "author": "Vinicius Costa Gomes", "email": "vinicius.gomes@intel.com", "cve_count": 7, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 24.7, "cves": [ "CVE-2026-31440", "CVE-2026-31441", "CVE-2026-31442", "CVE-2026-31443", "CVE-2026-43064", "CVE-2026-53011", "CVE-2026-80945" ], "rank": 143 }, { "author": "Xuanqiang Luo", "email": "luoxuanqiang@kylinos.cn", "cve_count": 7, "critical": 2, "high": 3, "scored": 5, "cvss_sum_indicative": 43.2, "cves": [ "CVE-2026-68334", "CVE-2026-72140", "CVE-2026-74493", "CVE-2026-74496", "CVE-2026-74705", "CVE-2026-80991", "CVE-2026-80992" ], "rank": 143 }, { "author": "Yichong Chen", "email": "chenyichong@uniontech.com", "cve_count": 7, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 39.6, "cves": [ "CVE-2026-68343", "CVE-2026-80897", "CVE-2026-80898", "CVE-2026-89605", "CVE-2026-89606", "CVE-2026-89608", "CVE-2026-89609" ], "rank": 143 }, { "author": "Yun Zhou", "email": "yun.zhou@windriver.com", "cve_count": 7, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-53237", "CVE-2026-68296", "CVE-2026-72409", "CVE-2026-72444", "CVE-2026-74307", "CVE-2026-74728", "CVE-2026-80804" ], "rank": 143 }, { "author": "Zhang Yi", "email": "yi.zhang@huawei.com", "cve_count": 7, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45858", "CVE-2026-45892", "CVE-2026-45899", "CVE-2026-45912", "CVE-2026-45985", "CVE-2026-46061", "CVE-2026-68145" ], "rank": 143 }, { "author": "Zihan Xi", "email": "zihanx@nebusec.ai", "cve_count": 7, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.9, "cves": [ "CVE-2026-74490", "CVE-2026-74624", "CVE-2026-74657", "CVE-2026-74661", "CVE-2026-74666", "CVE-2026-80843", "CVE-2026-80996" ], "rank": 143 }, { "author": "Aldo Ariel Panzardo", "email": "qwe.aldo@gmail.com", "cve_count": 6, "critical": 1, "high": 5, "scored": 6, "cvss_sum_indicative": 50.8, "cves": [ "CVE-2026-68138", "CVE-2026-68294", "CVE-2026-68335", "CVE-2026-80683", "CVE-2026-80995", "CVE-2026-89635" ], "rank": 178 }, { "author": "Aleksandr Nogikh", "email": "nogikh@google.com", "cve_count": 6, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43331", "CVE-2026-53352", "CVE-2026-72441", "CVE-2026-74680", "CVE-2026-74734", "CVE-2026-80879" ], "rank": 178 }, { "author": "Alex Williamson", "email": "alex.williamson@nvidia.com", "cve_count": 6, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-31468", "CVE-2026-46036", "CVE-2026-64472", "CVE-2026-64473", "CVE-2026-64475", "CVE-2026-64476" ], "rank": 178 }, { "author": "Alice Ryhl", "email": "aliceryhl@google.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23194", "CVE-2026-23400", "CVE-2026-43433", "CVE-2026-43434", "CVE-2026-53346", "CVE-2026-64466" ], "rank": 178 }, { "author": "Alper Ak", "email": "alperyasinak1@gmail.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23344", "CVE-2026-43256", "CVE-2026-43297", "CVE-2026-45871", "CVE-2026-45941", "CVE-2026-68224" ], "rank": 178 }, { "author": "Chenguang Zhao", "email": "zhaochenguang@kylinos.cn", "cve_count": 6, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-53238", "CVE-2026-68321", "CVE-2026-68440", "CVE-2026-74525", "CVE-2026-74548", "CVE-2026-80694" ], "rank": 178 }, { "author": "Corey Minyard", "email": "corey@minyard.net", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-23322", "CVE-2026-46044", "CVE-2026-46108", "CVE-2026-46128", "CVE-2026-46177", "CVE-2026-81004" ], "rank": 178 }, { "author": "David Lee", "email": "david.lee@trailofbits.com", "cve_count": 6, "critical": 2, "high": 3, "scored": 5, "cvss_sum_indicative": 43.6, "cves": [ "CVE-2026-68137", "CVE-2026-68338", "CVE-2026-72034", "CVE-2026-74492", "CVE-2026-74723", "CVE-2026-89525" ], "rank": 178 }, { "author": "Davidlohr Bueso", "email": "dave@stgolabs.net", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23327", "CVE-2026-31529", "CVE-2026-31555", "CVE-2026-52973", "CVE-2026-53163", "CVE-2026-74379" ], "rank": 178 }, { "author": "Dikshita Agarwal", "email": "dikshita.agarwal@oss.qualcomm.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43142", "CVE-2026-43146", "CVE-2026-43151", "CVE-2026-43217", "CVE-2026-43235", "CVE-2026-46240" ], "rank": 178 }, { "author": "Douya Le", "email": "ldy3087146292@gmail.com", "cve_count": 6, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 33.7, "cves": [ "CVE-2026-31638", "CVE-2026-31677", "CVE-2026-46028", "CVE-2026-68153", "CVE-2026-68154", "CVE-2026-68433" ], "rank": 178 }, { "author": "Fedor Pchelkin", "email": "pchelkin@ispras.ru", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31396", "CVE-2026-43014", "CVE-2026-43015", "CVE-2026-45924", "CVE-2026-46092", "CVE-2026-53258" ], "rank": 178 }, { "author": "Giovanni Cabiddu", "email": "giovanni.cabiddu@intel.com", "cve_count": 6, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 40.0, "cves": [ "CVE-2026-46060", "CVE-2026-46081", "CVE-2026-64304", "CVE-2026-64438", "CVE-2026-64529", "CVE-2026-74306" ], "rank": 178 }, { "author": "Griffin Kroah-Hartman", "email": "griffin@kroah.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64505", "CVE-2026-68088", "CVE-2026-68374", "CVE-2026-80814", "CVE-2026-80822", "CVE-2026-80830" ], "rank": 178 }, { "author": "Hui Su", "email": "sh_def@163.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-74633", "CVE-2026-80730", "CVE-2026-81010", "CVE-2026-89598", "CVE-2026-89746", "CVE-2026-89749" ], "rank": 178 }, { "author": "Ilya Dryomov", "email": "idryomov@gmail.com", "cve_count": 6, "critical": 2, "high": 3, "scored": 5, "cvss_sum_indicative": 41.7, "cves": [ "CVE-2026-22990", "CVE-2026-22992", "CVE-2026-23047", "CVE-2026-43304", "CVE-2026-43406", "CVE-2026-64112" ], "rank": 178 }, { "author": "Johannes Berg", "email": "johannes.berg@intel.com", "cve_count": 6, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 34.0, "cves": [ "CVE-2026-23367", "CVE-2026-43172", "CVE-2026-46125", "CVE-2026-53257", "CVE-2026-64176", "CVE-2026-64515" ], "rank": 178 }, { "author": "Joonas Lahtinen", "email": "joonas.lahtinen@linux.intel.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53356", "CVE-2026-68242", "CVE-2026-68243", "CVE-2026-68244", "CVE-2026-68248", "CVE-2026-68269" ], "rank": 178 }, { "author": "Keenan Dong", "email": "keenanat2000@gmail.com", "cve_count": 6, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-31635", "CVE-2026-31636", "CVE-2026-43017", "CVE-2026-43020", "CVE-2026-43107", "CVE-2026-43499" ], "rank": 178 }, { "author": "Konstantin Komarov", "email": "almaz.alexandrovich@paragon-software.com", "cve_count": 6, "critical": 0, "high": 6, "scored": 6, "cvss_sum_indicative": 47.9, "cves": [ "CVE-2026-63833", "CVE-2026-64533", "CVE-2026-72195", "CVE-2026-72197", "CVE-2026-72478", "CVE-2026-89615" ], "rank": 178 }, { "author": "Linmao Li", "email": "lilinmao@kylinos.cn", "cve_count": 6, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 33.8, "cves": [ "CVE-2026-68233", "CVE-2026-68445", "CVE-2026-74398", "CVE-2026-80572", "CVE-2026-80752", "CVE-2026-80903" ], "rank": 178 }, { "author": "Manivannan Sadhasivam", "email": "manivannan.sadhasivam@oss.qualcomm.com", "cve_count": 6, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43491", "CVE-2026-46003", "CVE-2026-46026", "CVE-2026-46038", "CVE-2026-46047", "CVE-2026-64461" ], "rank": 178 }, { "author": "Melbin K Mathew", "email": "mlbnkm1@gmail.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23069", "CVE-2026-23086", "CVE-2026-68369", "CVE-2026-80579", "CVE-2026-80580", "CVE-2026-80785" ], "rank": 178 }, { "author": "Ming-Hung Tsai", "email": "mtsai@redhat.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-53060", "CVE-2026-53061", "CVE-2026-53062", "CVE-2026-53063", "CVE-2026-53064", "CVE-2026-72108" ], "rank": 178 }, { "author": "Nikhil P. Rao", "email": "nikhil.rao@amd.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23326", "CVE-2026-64147", "CVE-2026-64148", "CVE-2026-68317", "CVE-2026-68318", "CVE-2026-68319" ], "rank": 178 }, { "author": "Oliver Neukum", "email": "oneukum@suse.com", "cve_count": 6, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43152", "CVE-2026-43427", "CVE-2026-43430", "CVE-2026-46091", "CVE-2026-46236", "CVE-2026-53037" ], "rank": 178 }, { "author": "Osama Abdelkader", "email": "osama.abdelkader@gmail.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23132", "CVE-2026-43397", "CVE-2026-46171", "CVE-2026-74451", "CVE-2026-74452", "CVE-2026-80577" ], "rank": 178 }, { "author": "Paolo Abeni", "email": "pabeni@redhat.com", "cve_count": 6, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.0, "cves": [ "CVE-2026-23254", "CVE-2026-43339", "CVE-2026-45889", "CVE-2026-53183", "CVE-2026-63867", "CVE-2026-80588" ], "rank": 178 }, { "author": "Pavitra Jha", "email": "jhapavitra98@gmail.com", "cve_count": 6, "critical": 3, "high": 1, "scored": 4, "cvss_sum_indicative": 38.2, "cves": [ "CVE-2026-43495", "CVE-2026-53364", "CVE-2026-68082", "CVE-2026-68122", "CVE-2026-80557", "CVE-2026-80561" ], "rank": 178 }, { "author": "Pratyush Yadav (Google)", "email": "pratyush@kernel.org", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-43389", "CVE-2026-43489", "CVE-2026-63952", "CVE-2026-68455", "CVE-2026-72169", "CVE-2026-89568" ], "rank": 178 }, { "author": "Ralf Lici", "email": "ralf@mandelbit.com", "cve_count": 6, "critical": 1, "high": 5, "scored": 6, "cvss_sum_indicative": 48.5, "cves": [ "CVE-2026-43254", "CVE-2026-45929", "CVE-2026-74750", "CVE-2026-80519", "CVE-2026-80520", "CVE-2026-80753" ], "rank": 178 }, { "author": "Ritesh Harjani (IBM)", "email": "ritesh.list@gmail.com", "cve_count": 6, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31686", "CVE-2026-46118", "CVE-2026-46182", "CVE-2026-46298", "CVE-2026-53108", "CVE-2026-53109" ], "rank": 178 }, { "author": "Rosen Penev", "email": "rosenp@gmail.com", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-53234", "CVE-2026-68395", "CVE-2026-68449", "CVE-2026-72324", "CVE-2026-80614", "CVE-2026-80743" ], "rank": 178 }, { "author": "Sanman Pradhan", "email": "psanman@juniper.net", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31582", "CVE-2026-31770", "CVE-2026-43005", "CVE-2026-43380", "CVE-2026-46001", "CVE-2026-46073" ], "rank": 178 }, { "author": "Sergey Senozhatsky", "email": "senozhatsky@chromium.org", "cve_count": 6, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23188", "CVE-2026-46089", "CVE-2026-64409", "CVE-2026-72486", "CVE-2026-89716", "CVE-2026-89717" ], "rank": 178 }, { "author": "Stepan Ionichev", "email": "sozdayvek@gmail.com", "cve_count": 6, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53384", "CVE-2026-63949", "CVE-2026-64492", "CVE-2026-64495", "CVE-2026-72424", "CVE-2026-80651" ], "rank": 178 }, { "author": "Tetsuo Handa", "email": "penguin-kernel@i-love.sakura.ne.jp", "cve_count": 6, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-22994", "CVE-2026-22997", "CVE-2026-43167", "CVE-2026-43234", "CVE-2026-43268", "CVE-2026-80916" ], "rank": 178 }, { "author": "Victor Nogueira", "email": "victor@mojatatu.com", "cve_count": 6, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 27.4, "cves": [ "CVE-2026-23270", "CVE-2026-64012", "CVE-2026-74266", "CVE-2026-74267", "CVE-2026-74284", "CVE-2026-80630" ], "rank": 178 }, { "author": "Zhenghang Xiao", "email": "kipreyyy@gmail.com", "cve_count": 6, "critical": 1, "high": 5, "scored": 6, "cvss_sum_indicative": 51.8, "cves": [ "CVE-2026-53160", "CVE-2026-53240", "CVE-2026-63885", "CVE-2026-63971", "CVE-2026-63976", "CVE-2026-89703" ], "rank": 178 }, { "author": "ZhengYuan Huang", "email": "gality369@gmail.com", "cve_count": 6, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.2, "cves": [ "CVE-2026-31596", "CVE-2026-43046", "CVE-2026-53039", "CVE-2026-53040", "CVE-2026-53041", "CVE-2026-80644" ], "rank": 178 }, { "author": "Adrian Hunter", "email": "adrian.hunter@intel.com", "cve_count": 5, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.0, "cves": [ "CVE-2026-43352", "CVE-2026-43353", "CVE-2026-72454", "CVE-2026-80952", "CVE-2026-80954" ], "rank": 218 }, { "author": "Alan Stern", "email": "stern@rowland.harvard.edu", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43324", "CVE-2026-43327", "CVE-2026-43428", "CVE-2026-43429", "CVE-2026-64455" ], "rank": 218 }, { "author": "Baokun Li", "email": "libaokun@linux.alibaba.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43066", "CVE-2026-64378", "CVE-2026-80855", "CVE-2026-80856", "CVE-2026-89768" ], "rank": 218 }, { "author": "Benjamin Cheng", "email": "benjamin.cheng@amd.com", "cve_count": 5, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 37.2, "cves": [ "CVE-2026-46199", "CVE-2026-46204", "CVE-2026-46218", "CVE-2026-46230", "CVE-2026-53375" ], "rank": 218 }, { "author": "Carlos Llamas", "email": "cmllamas@google.com", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-23184", "CVE-2026-43435", "CVE-2026-53099", "CVE-2026-64468", "CVE-2026-64469" ], "rank": 218 }, { "author": "Chen Ni", "email": "nichen@iscas.ac.cn", "cve_count": 5, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23218", "CVE-2026-43443", "CVE-2026-43480", "CVE-2026-64215", "CVE-2026-68282" ], "rank": 218 }, { "author": "Dan Carpenter", "email": "error27@gmail.com", "cve_count": 5, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 32.2, "cves": [ "CVE-2026-63927", "CVE-2026-64598", "CVE-2026-68089", "CVE-2026-72378", "CVE-2026-80645" ], "rank": 218 }, { "author": "Devin Wittmayer", "email": "lucid_duck@justthetip.ca", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68193", "CVE-2026-68194", "CVE-2026-68195", "CVE-2026-80825", "CVE-2026-80936" ], "rank": 218 }, { "author": "Dmitry Baryshkov", "email": "dmitry.baryshkov@oss.qualcomm.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.5, "cves": [ "CVE-2026-46247", "CVE-2026-64039", "CVE-2026-64049", "CVE-2026-64050", "CVE-2026-64231" ], "rank": 218 }, { "author": "Dragos Tatulea", "email": "dtatulea@nvidia.com", "cve_count": 5, "critical": 1, "high": 4, "scored": 5, "cvss_sum_indicative": 41.0, "cves": [ "CVE-2026-43464", "CVE-2026-43465", "CVE-2026-53229", "CVE-2026-53230", "CVE-2026-64210" ], "rank": 218 }, { "author": "Dudu Lu", "email": "phx0fer@gmail.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-31719", "CVE-2026-46214", "CVE-2026-53013", "CVE-2026-53014", "CVE-2026-53071" ], "rank": 218 }, { "author": "Duoming Zhou", "email": "duoming@zju.edu.cn", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-43203", "CVE-2026-43232", "CVE-2026-53097", "CVE-2026-53098", "CVE-2026-53112" ], "rank": 218 }, { "author": "Harshit Mogalapalli", "email": "harshit.m.mogalapalli@oracle.com", "cve_count": 5, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43129", "CVE-2026-43240", "CVE-2026-45883", "CVE-2026-68423", "CVE-2026-68424" ], "rank": 218 }, { "author": "Heitor Alves de Siqueira", "email": "halves@igalia.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-23299", "CVE-2026-31758", "CVE-2026-53107", "CVE-2026-63904", "CVE-2026-63974" ], "rank": 218 }, { "author": "Helen Koike", "email": "koike@igalia.com", "cve_count": 5, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-31447", "CVE-2026-31510", "CVE-2026-53327", "CVE-2026-68313", "CVE-2026-72477" ], "rank": 218 }, { "author": "Ian Abbott", "email": "abbotti@mev.co.uk", "cve_count": 5, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31747", "CVE-2026-31748", "CVE-2026-31749", "CVE-2026-43340", "CVE-2026-68182" ], "rank": 218 }, { "author": "Ilya Maximets", "email": "i.maximets@ovn.org", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.8, "cves": [ "CVE-2026-46165", "CVE-2026-74464", "CVE-2026-74465", "CVE-2026-80615", "CVE-2026-80994" ], "rank": 218 }, { "author": "Jani Nikula", "email": "jani.nikula@intel.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53142", "CVE-2026-68241", "CVE-2026-68247", "CVE-2026-68253", "CVE-2026-68254" ], "rank": 218 }, { "author": "Jiasheng Jiang", "email": "jiashengjiangcool@gmail.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23059", "CVE-2026-43271", "CVE-2026-43424", "CVE-2026-45852", "CVE-2026-45935" ], "rank": 218 }, { "author": "Kevin Hao", "email": "haokexin@gmail.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.5, "cves": [ "CVE-2026-23175", "CVE-2026-23203", "CVE-2026-31563", "CVE-2026-43219", "CVE-2026-43371" ], "rank": 218 }, { "author": "Laxman Acharya Padhya", "email": "acharyalaxman8848@gmail.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-68479", "CVE-2026-80759", "CVE-2026-80763", "CVE-2026-80933", "CVE-2026-81009" ], "rank": 218 }, { "author": "Massimiliano Pellizzer", "email": "massimiliano.pellizzer@canonical.com", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.7, "cves": [ "CVE-2026-23269", "CVE-2026-23403", "CVE-2026-23404", "CVE-2026-23406", "CVE-2026-23407" ], "rank": 218 }, { "author": "Matthew Auld", "email": "matthew.auld@intel.com", "cve_count": 5, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-31479", "CVE-2026-52950", "CVE-2026-52951", "CVE-2026-72358", "CVE-2026-72359" ], "rank": 218 }, { "author": "Michal Luczaj", "email": "mhal@rbox.co", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23057", "CVE-2026-53033", "CVE-2026-53034", "CVE-2026-53035", "CVE-2026-68386" ], "rank": 218 }, { "author": "Mikhail Gavrilov", "email": "mikhail.v.gavrilov@gmail.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31667", "CVE-2026-43303", "CVE-2026-53285", "CVE-2026-64590", "CVE-2026-80919" ], "rank": 218 }, { "author": "Mikko Perttunen", "email": "mperttunen@nvidia.com", "cve_count": 5, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 35.2, "cves": [ "CVE-2026-53045", "CVE-2026-64153", "CVE-2026-68427", "CVE-2026-74380", "CVE-2026-74381" ], "rank": 218 }, { "author": "Miklos Szeredi", "email": "mszeredi@redhat.com", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.7, "cves": [ "CVE-2026-31713", "CVE-2026-46150", "CVE-2026-53381", "CVE-2026-74343", "CVE-2026-80860" ], "rank": 218 }, { "author": "Nuoqi Gui", "email": "gnq25@mails.tsinghua.edu.cn", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.2, "cves": [ "CVE-2026-64353", "CVE-2026-72400", "CVE-2026-72402", "CVE-2026-72426", "CVE-2026-72428" ], "rank": 218 }, { "author": "Oleh Konko", "email": "security@1seal.org", "cve_count": 5, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 41.0, "cves": [ "CVE-2026-31641", "CVE-2026-31662", "CVE-2026-31771", "CVE-2026-31773", "CVE-2026-43334" ], "rank": 218 }, { "author": "Paul Moses", "email": "p@1g4.org", "cve_count": 5, "critical": 0, "high": 5, "scored": 5, "cvss_sum_indicative": 39.0, "cves": [ "CVE-2026-23245", "CVE-2026-31471", "CVE-2026-43481", "CVE-2026-53016", "CVE-2026-64354" ], "rank": 218 }, { "author": "Pavel Begunkov", "email": "asml.silence@gmail.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23263", "CVE-2026-43174", "CVE-2026-43224", "CVE-2026-45995", "CVE-2026-74627" ], "rank": 218 }, { "author": "Peter Zijlstra", "email": "peterz@infradead.org", "cve_count": 5, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-23014", "CVE-2026-23271", "CVE-2026-31528", "CVE-2026-31554", "CVE-2026-43323" ], "rank": 218 }, { "author": "Sabrina Dubroca", "email": "sd@queasysnail.net", "cve_count": 5, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 24.7, "cves": [ "CVE-2026-31518", "CVE-2026-43042", "CVE-2026-46323", "CVE-2026-72041", "CVE-2026-80848" ], "rank": 218 }, { "author": "Shay Drory", "email": "shayd@nvidia.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43013", "CVE-2026-72344", "CVE-2026-72345", "CVE-2026-80667", "CVE-2026-80739" ], "rank": 218 }, { "author": "Shuvam Pandey", "email": "shuvampandey1@gmail.com", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.7, "cves": [ "CVE-2026-46056", "CVE-2026-68262", "CVE-2026-72090", "CVE-2026-80621", "CVE-2026-89591" ], "rank": 218 }, { "author": "Sonali Pradhan", "email": "sonalipradhan@google.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.2, "cves": [ "CVE-2026-68368", "CVE-2026-74497", "CVE-2026-74498", "CVE-2026-74679", "CVE-2026-89736" ], "rank": 218 }, { "author": "Stanislav Fomichev", "email": "sdf.kernel@gmail.com", "cve_count": 5, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-53323", "CVE-2026-74707", "CVE-2026-74708", "CVE-2026-74709", "CVE-2026-74710" ], "rank": 218 }, { "author": "Stanislav Kinsburskii", "email": "skinsburskii@linux.microsoft.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23432", "CVE-2026-43045", "CVE-2026-43096", "CVE-2026-80895", "CVE-2026-80896" ], "rank": 218 }, { "author": "Sungwoo Kim", "email": "iam@sung-woo.kim", "cve_count": 5, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23244", "CVE-2026-43448", "CVE-2026-43449", "CVE-2026-64052", "CVE-2026-80666" ], "rank": 218 }, { "author": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46065", "CVE-2026-46191", "CVE-2026-68270", "CVE-2026-72313", "CVE-2026-80786" ], "rank": 218 }, { "author": "Tuo Li", "email": "islituo@gmail.com", "cve_count": 5, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-22991", "CVE-2026-31436", "CVE-2026-43300", "CVE-2026-43313", "CVE-2026-64245" ], "rank": 218 }, { "author": "Tvrtko Ursulin", "email": "tvrtko.ursulin@igalia.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23149", "CVE-2026-23338", "CVE-2026-43399", "CVE-2026-68273", "CVE-2026-74418" ], "rank": 218 }, { "author": "Tyllis Xu", "email": "livelycarpet87@gmail.com", "cve_count": 5, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.9, "cves": [ "CVE-2026-31464", "CVE-2026-31649", "CVE-2026-45994", "CVE-2026-46022", "CVE-2026-46064" ], "rank": 218 }, { "author": "Wei Fang", "email": "wei.fang@nxp.com", "cve_count": 5, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-53300", "CVE-2026-72399", "CVE-2026-80610", "CVE-2026-80905", "CVE-2026-80906" ], "rank": 218 }, { "author": "Yosry Ahmed", "email": "yosry@kernel.org", "cve_count": 5, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45987", "CVE-2026-46014", "CVE-2026-46032", "CVE-2026-46059", "CVE-2026-46071" ], "rank": 218 }, { "author": "Yu Kuai", "email": "yukuai@fnnas.com", "cve_count": 5, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-45953", "CVE-2026-45955", "CVE-2026-46045", "CVE-2026-46095", "CVE-2026-53123" ], "rank": 218 }, { "author": "Yuto Ohnuki", "email": "ytohnuki@amazon.com", "cve_count": 5, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31451", "CVE-2026-31453", "CVE-2026-31454", "CVE-2026-31455", "CVE-2026-53319" ], "rank": 218 }, { "author": "Aaron Ma", "email": "aaron.ma@canonical.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.8, "cves": [ "CVE-2026-23166", "CVE-2026-23210", "CVE-2026-74332", "CVE-2026-74333" ], "rank": 265 }, { "author": "Aboorva Devarajan", "email": "aboorvad@linux.ibm.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-45968", "CVE-2026-64070", "CVE-2026-80626", "CVE-2026-80685" ], "rank": 265 }, { "author": "Al Viro", "email": "viro@zeniv.linux.org.uk", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.1, "cves": [ "CVE-2026-43245", "CVE-2026-43472", "CVE-2026-74330", "CVE-2026-74359" ], "rank": 265 }, { "author": "Alessio Belle", "email": "alessio.belle@imgtec.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23469", "CVE-2026-23470", "CVE-2026-68281", "CVE-2026-68437" ], "rank": 265 }, { "author": "Alexandra Winter", "email": "wintera@linux.ibm.com", "cve_count": 4, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 33.1, "cves": [ "CVE-2026-64005", "CVE-2026-74629", "CVE-2026-74690", "CVE-2026-81003" ], "rank": 265 }, { "author": "Andreas Gruenbacher", "email": "agruenba@redhat.com", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-43262", "CVE-2026-45861", "CVE-2026-53048", "CVE-2026-53049" ], "rank": 265 }, { "author": "Andrzej Kacprowski", "email": "andrzej.kacprowski@linux.intel.com", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.0, "cves": [ "CVE-2026-53202", "CVE-2026-53203", "CVE-2026-53205", "CVE-2026-53206" ], "rank": 265 }, { "author": "Antonio Quartulli", "email": "antonio@openvpn.net", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.1, "cves": [ "CVE-2026-45918", "CVE-2026-64043", "CVE-2026-74727", "CVE-2026-80735" ], "rank": 265 }, { "author": "Bart Van Assche", "email": "bvanassche@acm.org", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23420", "CVE-2026-23452", "CVE-2026-43358", "CVE-2026-53128" ], "rank": 265 }, { "author": "Berk Cem Goksel", "email": "berkcgoksel@gmail.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23089", "CVE-2026-31581", "CVE-2026-31701", "CVE-2026-31778" ], "rank": 265 }, { "author": "Boris Burkov", "email": "boris@bur.io", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-31519", "CVE-2026-45934", "CVE-2026-46251", "CVE-2026-89772" ], "rank": 265 }, { "author": "Borislav Petkov (AMD)", "email": "bp@alien8.de", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31561", "CVE-2026-31628", "CVE-2026-31689", "CVE-2026-68480" ], "rank": 265 }, { "author": "Bradley Morgan", "email": "include@grrlz.net", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-72066", "CVE-2026-72067", "CVE-2026-72281", "CVE-2026-80669" ], "rank": 265 }, { "author": "Carlos L\u00f3pez", "email": "clopez@suse.de", "cve_count": 4, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.8, "cves": [ "CVE-2026-52959", "CVE-2026-64104", "CVE-2026-64513", "CVE-2026-74568" ], "rank": 265 }, { "author": "Carlos Song", "email": "carlos.song@nxp.com", "cve_count": 4, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53340", "CVE-2026-64278", "CVE-2026-64303", "CVE-2026-74462" ], "rank": 265 }, { "author": "Chaitanya Kulkarni", "email": "kch@nvidia.com", "cve_count": 4, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 24.8, "cves": [ "CVE-2026-23374", "CVE-2026-31557", "CVE-2026-46135", "CVE-2026-46304" ], "rank": 265 }, { "author": "Charles Keepax", "email": "ckeepax@opensource.cirrus.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23301", "CVE-2026-43095", "CVE-2026-80624", "CVE-2026-80900" ], "rank": 265 }, { "author": "Cristian Ciocaltea", "email": "cristian.ciocaltea@collabora.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45963", "CVE-2026-74421", "CVE-2026-74422", "CVE-2026-80658" ], "rank": 265 }, { "author": "Dan Williams", "email": "djbw@kernel.org", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74272", "CVE-2026-74273", "CVE-2026-80639", "CVE-2026-80640" ], "rank": 265 }, { "author": "Daniel Hodges", "email": "git@danielhodges.dev", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23281", "CVE-2026-45964", "CVE-2026-46069", "CVE-2026-68198" ], "rank": 265 }, { "author": "David Hildenbrand (Arm)", "email": "david@kernel.org", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23100", "CVE-2026-64130", "CVE-2026-64181", "CVE-2026-64302" ], "rank": 265 }, { "author": "David Rosca", "email": "david.rosca@amd.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80540", "CVE-2026-80907", "CVE-2026-80908", "CVE-2026-80909" ], "rank": 265 }, { "author": "Davide Ornaghi", "email": "d.ornaghi97@gmail.com", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.9, "cves": [ "CVE-2026-53134", "CVE-2026-53211", "CVE-2026-64396", "CVE-2026-68083" ], "rank": 265 }, { "author": "Dev Jain", "email": "dev.jain@arm.com", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 22.7, "cves": [ "CVE-2026-31398", "CVE-2026-63950", "CVE-2026-68172", "CVE-2026-72173" ], "rank": 265 }, { "author": "Dipayaan Roy", "email": "dipayanroy@linux.microsoft.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23454", "CVE-2026-43276", "CVE-2026-63972", "CVE-2026-63973" ], "rank": 265 }, { "author": "Farhan Ali", "email": "alifm@linux.ibm.com", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.1, "cves": [ "CVE-2026-74514", "CVE-2026-74515", "CVE-2026-80684", "CVE-2026-80891" ], "rank": 265 }, { "author": "Francesco Lavra", "email": "flavra@baylibre.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31764", "CVE-2026-43087", "CVE-2026-43307", "CVE-2026-72453" ], "rank": 265 }, { "author": "Fuad Tabba", "email": "tabba@google.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-23383", "CVE-2026-23425", "CVE-2026-46147", "CVE-2026-80873" ], "rank": 265 }, { "author": "Haofeng Li", "email": "lihaofeng@kylinos.cn", "cve_count": 4, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 33.2, "cves": [ "CVE-2026-64389", "CVE-2026-68100", "CVE-2026-68472", "CVE-2026-72382" ], "rank": 265 }, { "author": "Haoze Xie", "email": "royenheart@gmail.com", "cve_count": 4, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-31657", "CVE-2026-52912", "CVE-2026-64509", "CVE-2026-72255" ], "rank": 265 }, { "author": "Holger Dengler", "email": "dengler@linux.ibm.com", "cve_count": 4, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-64558", "CVE-2026-64559", "CVE-2026-68451", "CVE-2026-68452" ], "rank": 265 }, { "author": "Hongyan Xu", "email": "getshell@seu.edu.cn", "cve_count": 4, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.2, "cves": [ "CVE-2026-52987", "CVE-2026-74687", "CVE-2026-80732", "CVE-2026-89585" ], "rank": 265 }, { "author": "Ian Forbes", "email": "ian.forbes@broadcom.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23008", "CVE-2026-23317", "CVE-2026-23430", "CVE-2026-68446" ], "rank": 265 }, { "author": "Jackie Liu", "email": "liuyun01@kylinos.cn", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46042", "CVE-2026-46087", "CVE-2026-53126", "CVE-2026-53127" ], "rank": 265 }, { "author": "Jan Kara", "email": "jack@suse.cz", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-23168", "CVE-2026-31703", "CVE-2026-53050", "CVE-2026-89601" ], "rank": 265 }, { "author": "Jenny Guanni Qu", "email": "qguanni@gmail.com", "cve_count": 4, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.1, "cves": [ "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-31525", "CVE-2026-43453" ], "rank": 265 }, { "author": "Jianing Li", "email": "m13940358460@163.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80566", "CVE-2026-80711", "CVE-2026-89461", "CVE-2026-89462" ], "rank": 265 }, { "author": "Jiawen Wu", "email": "jiawenwu@trustnetic.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-46142", "CVE-2026-46287", "CVE-2026-46297", "CVE-2026-74741" ], "rank": 265 }, { "author": "Joseph Qi", "email": "joseph.qi@linux.alibaba.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-31598", "CVE-2026-43075", "CVE-2026-72161", "CVE-2026-89491" ], "rank": 265 }, { "author": "Jun Yang", "email": "junvyyang@tencent.com", "cve_count": 4, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 33.9, "cves": [ "CVE-2026-64564", "CVE-2026-74580", "CVE-2026-74609", "CVE-2026-89476" ], "rank": 265 }, { "author": "Justin Chen", "email": "justin.chen@broadcom.com", "cve_count": 4, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 27.1, "cves": [ "CVE-2026-31506", "CVE-2026-53086", "CVE-2026-53087", "CVE-2026-53088" ], "rank": 265 }, { "author": "Justin Iurman", "email": "justin.iurman@gmail.com", "cve_count": 4, "critical": 3, "high": 1, "scored": 4, "cvss_sum_indicative": 36.2, "cves": [ "CVE-2026-43083", "CVE-2026-63924", "CVE-2026-64116", "CVE-2026-64132" ], "rank": 265 }, { "author": "Kai Zen", "email": "kai.aizen.dev@gmail.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46132", "CVE-2026-53371", "CVE-2026-64233", "CVE-2026-64293" ], "rank": 265 }, { "author": "Krzysztof Kozlowski", "email": "krzysztof.kozlowski@oss.qualcomm.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23115", "CVE-2026-53308", "CVE-2026-68218", "CVE-2026-80746" ], "rank": 265 }, { "author": "Larysa Zaremba", "email": "larysa.zaremba@intel.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23042", "CVE-2026-23343", "CVE-2026-23377", "CVE-2026-74317" ], "rank": 265 }, { "author": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-43073", "CVE-2026-43109", "CVE-2026-46333", "CVE-2026-64015" ], "rank": 265 }, { "author": "Lu Baolu", "email": "baolu.lu@linux.intel.com", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.1, "cves": [ "CVE-2026-45894", "CVE-2026-45944", "CVE-2026-45945", "CVE-2026-64591" ], "rank": 265 }, { "author": "Maciej W. Rozycki", "email": "macro@orcam.me.uk", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63876", "CVE-2026-63877", "CVE-2026-64252", "CVE-2026-72215" ], "rank": 265 }, { "author": "Marc Zyngier", "email": "maz@kernel.org", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.1, "cves": [ "CVE-2026-43351", "CVE-2026-64288", "CVE-2026-72282", "CVE-2026-72288" ], "rank": 265 }, { "author": "Mark Rutland", "email": "mark.rutland@arm.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23102", "CVE-2026-23107", "CVE-2026-23114", "CVE-2026-53354" ], "rank": 265 }, { "author": "Matt Fleming", "email": "mfleming@cloudflare.com", "cve_count": 4, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 26.7, "cves": [ "CVE-2026-64122", "CVE-2026-72042", "CVE-2026-74476", "CVE-2026-80729" ], "rank": 265 }, { "author": "Mauro Carvalho Chehab", "email": "mchehab+huawei@kernel.org", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43171", "CVE-2026-43201", "CVE-2026-43266", "CVE-2026-43277" ], "rank": 265 }, { "author": "Mehul Rao", "email": "mehulrao@gmail.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43364", "CVE-2026-43374", "CVE-2026-43411", "CVE-2026-43437" ], "rank": 265 }, { "author": "Ming Qian", "email": "ming.qian@oss.nxp.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23116", "CVE-2026-31573", "CVE-2026-43310", "CVE-2026-46058" ], "rank": 265 }, { "author": "Muchun Song", "email": "songmuchun@bytedance.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64180", "CVE-2026-64182", "CVE-2026-72172", "CVE-2026-72212" ], "rank": 265 }, { "author": "Nicholas Carlini", "email": "nicholas@carlini.com", "cve_count": 4, "critical": 1, "high": 3, "scored": 4, "cvss_sum_indicative": 32.5, "cves": [ "CVE-2026-31484", "CVE-2026-43074", "CVE-2026-43185", "CVE-2026-46274" ], "rank": 265 }, { "author": "Paolo Bonzini", "email": "pbonzini@redhat.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-46131", "CVE-2026-46295", "CVE-2026-53359", "CVE-2026-74607" ], "rank": 265 }, { "author": "Paul Greenwalt", "email": "paul.greenwalt@intel.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23104", "CVE-2026-23117", "CVE-2026-68133", "CVE-2026-68292" ], "rank": 265 }, { "author": "Paulo Alcantara", "email": "pc@manguebit.org", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.9, "cves": [ "CVE-2026-23282", "CVE-2026-31392", "CVE-2026-31710", "CVE-2026-45972" ], "rank": 265 }, { "author": "Prasanna Kumar T S M", "email": "ptsm@linux.microsoft.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46034", "CVE-2026-46221", "CVE-2026-80654", "CVE-2026-80655" ], "rank": 265 }, { "author": "Prathamesh Deshpande", "email": "prathameshdeshpande7@gmail.com", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.1, "cves": [ "CVE-2026-64522", "CVE-2026-74395", "CVE-2026-74396", "CVE-2026-74397" ], "rank": 265 }, { "author": "Puranjay Mohan", "email": "puranjay@kernel.org", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-45933", "CVE-2026-53031", "CVE-2026-53084", "CVE-2026-53085" ], "rank": 265 }, { "author": "Ruide Cao", "email": "caoruide123@gmail.com", "cve_count": 4, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 27.8, "cves": [ "CVE-2026-31659", "CVE-2026-31684", "CVE-2026-46037", "CVE-2026-52914" ], "rank": 265 }, { "author": "Ruslan Valiyev", "email": "linuxoid@gmail.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31585", "CVE-2026-31599", "CVE-2026-53382", "CVE-2026-63827" ], "rank": 265 }, { "author": "Saeed Mahameed", "email": "saeedm@nvidia.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22996", "CVE-2026-23000", "CVE-2026-23035", "CVE-2026-43012" ], "rank": 265 }, { "author": "Sam Edwards", "email": "cfsworks@gmail.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.0, "cves": [ "CVE-2026-23136", "CVE-2026-43188", "CVE-2026-46066", "CVE-2026-46110" ], "rank": 265 }, { "author": "Shakeel Butt", "email": "shakeel.butt@linux.dev", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-23002", "CVE-2026-53153", "CVE-2026-53162", "CVE-2026-64419" ], "rank": 265 }, { "author": "Shitalkumar Gandhi", "email": "shital.gandhi45@gmail.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64145", "CVE-2026-64161", "CVE-2026-72047", "CVE-2026-72048" ], "rank": 265 }, { "author": "Shuai Xue", "email": "xueshuai@linux.alibaba.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89446", "CVE-2026-89447", "CVE-2026-89451", "CVE-2026-89453" ], "rank": 265 }, { "author": "Srinivas Kandagatla", "email": "srinivas.kandagatla@oss.qualcomm.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31587", "CVE-2026-46143", "CVE-2026-53052", "CVE-2026-72257" ], "rank": 265 }, { "author": "Stefan Haberland", "email": "sth@linux.ibm.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.8, "cves": [ "CVE-2026-80710", "CVE-2026-89456", "CVE-2026-89457", "CVE-2026-89458" ], "rank": 265 }, { "author": "Stephen Smalley", "email": "stephen.smalley.work@gmail.com", "cve_count": 4, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.5, "cves": [ "CVE-2026-46302", "CVE-2026-53367", "CVE-2026-64111", "CVE-2026-72243" ], "rank": 265 }, { "author": "Sudeep Holla", "email": "sudeep.holla@kernel.org", "cve_count": 4, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 26.1, "cves": [ "CVE-2026-64080", "CVE-2026-64081", "CVE-2026-64166", "CVE-2026-64520" ], "rank": 265 }, { "author": "Sun Jian", "email": "sun.jian.kdev@gmail.com", "cve_count": 4, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 26.9, "cves": [ "CVE-2026-53074", "CVE-2026-68462", "CVE-2026-74612", "CVE-2026-74665" ], "rank": 265 }, { "author": "Sunil Khatri", "email": "sunil.khatri@amd.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43398", "CVE-2026-43400", "CVE-2026-45979", "CVE-2026-46311" ], "rank": 265 }, { "author": "Tobi Gaertner", "email": "tob.gaertner@me.com", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23447", "CVE-2026-23448", "CVE-2026-46062", "CVE-2026-46072" ], "rank": 265 }, { "author": "Tzung-Bi Shih", "email": "tzungbi@kernel.org", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23079", "CVE-2026-31732", "CVE-2026-46134", "CVE-2026-68357" ], "rank": 265 }, { "author": "Usama Arif", "email": "usama.arif@linux.dev", "cve_count": 4, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53333", "CVE-2026-64253", "CVE-2026-64525", "CVE-2026-89758" ], "rank": 265 }, { "author": "Viacheslav Dubeyko", "email": "slava.dubeyko@ibm.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23189", "CVE-2026-52961", "CVE-2026-52962", "CVE-2026-64065" ], "rank": 265 }, { "author": "Wayen Yan", "email": "win847@gmail.com", "cve_count": 4, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-68330", "CVE-2026-68332", "CVE-2026-68356", "CVE-2026-80617" ], "rank": 265 }, { "author": "Xiaolei Wang", "email": "xiaolei.wang@windriver.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43302", "CVE-2026-46239", "CVE-2026-64421", "CVE-2026-68220" ], "rank": 265 }, { "author": "Yousef Alhouseen", "email": "alhouseenyousef@gmail.com", "cve_count": 4, "critical": 0, "high": 4, "scored": 4, "cvss_sum_indicative": 31.7, "cves": [ "CVE-2026-64406", "CVE-2026-64408", "CVE-2026-72024", "CVE-2026-81007" ], "rank": 265 }, { "author": "Zhao Zhang", "email": "zzhan461@ucr.edu", "cve_count": 4, "critical": 2, "high": 2, "scored": 4, "cvss_sum_indicative": 34.2, "cves": [ "CVE-2026-52917", "CVE-2026-64355", "CVE-2026-64383", "CVE-2026-68157" ], "rank": 265 }, { "author": "ZhaoJinming", "email": "zhaojinming@uniontech.com", "cve_count": 4, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53337", "CVE-2026-53338", "CVE-2026-72145", "CVE-2026-89590" ], "rank": 265 }, { "author": "Zhiling Zou", "email": "roxy520tt@gmail.com", "cve_count": 4, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 27.4, "cves": [ "CVE-2026-68161", "CVE-2026-68162", "CVE-2026-80714", "CVE-2026-80846" ], "rank": 265 }, { "author": "Zihan Xi", "email": "xizh2024@lzu.edu.cn", "cve_count": 4, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.2, "cves": [ "CVE-2026-64380", "CVE-2026-72057", "CVE-2026-74510", "CVE-2026-80845" ], "rank": 265 }, { "author": "Aditya Garg", "email": "gargaditya@linux.microsoft.com", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.3, "cves": [ "CVE-2026-23054", "CVE-2026-64018", "CVE-2026-74265" ], "rank": 351 }, { "author": "Aleksander Jan Bajkowski", "email": "olek2@wp.pl", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45854", "CVE-2026-45937", "CVE-2026-53302" ], "rank": 351 }, { "author": "Alexander Koskovich", "email": "akoskovich@pm.me", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43081", "CVE-2026-43345", "CVE-2026-53379" ], "rank": 351 }, { "author": "Alexei Starovoitov", "email": "ast@kernel.org", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43030", "CVE-2026-45837", "CVE-2026-74354" ], "rank": 351 }, { "author": "Alistair Popple", "email": "apopple@nvidia.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46280", "CVE-2026-53342", "CVE-2026-64131" ], "rank": 351 }, { "author": "Alok Tiwari", "email": "alok.a.tiwari@oracle.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23019", "CVE-2026-31640", "CVE-2026-74706" ], "rank": 351 }, { "author": "Alysa Liu", "email": "alysa.liu@amd.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43370", "CVE-2026-46197", "CVE-2026-53376" ], "rank": 351 }, { "author": "Amir Goldstein", "email": "amir73il@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-52990", "CVE-2026-68149", "CVE-2026-68448" ], "rank": 351 }, { "author": "Andrea Mayer", "email": "andrea.mayer@uniroma2.it", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-31668", "CVE-2026-46099", "CVE-2026-89561" ], "rank": 351 }, { "author": "Andrea Righi", "email": "arighi@nvidia.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31733", "CVE-2026-68094", "CVE-2026-72037" ], "rank": 351 }, { "author": "Ankit Soni", "email": "ankit.soni@amd.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-43220", "CVE-2026-43253", "CVE-2026-80633" ], "rank": 351 }, { "author": "Anton Protopopov", "email": "a.s.protopopov@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43321", "CVE-2026-45951", "CVE-2026-45967" ], "rank": 351 }, { "author": "Arvind Yadav", "email": "arvind.yadav@intel.com", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-68382", "CVE-2026-68383", "CVE-2026-89755" ], "rank": 351 }, { "author": "Asad Kamal", "email": "asad.kamal@amd.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68102", "CVE-2026-68276", "CVE-2026-80728" ], "rank": 351 }, { "author": "Baochen Qiang", "email": "baochen.qiang@oss.qualcomm.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-23130", "CVE-2026-46271", "CVE-2026-74554" ], "rank": 351 }, { "author": "Benjamin Berg", "email": "benjamin.berg@intel.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23040", "CVE-2026-23152", "CVE-2026-46166" ], "rank": 351 }, { "author": "Bernd Schubert", "email": "bernd@bsbernd.com", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.4, "cves": [ "CVE-2026-64259", "CVE-2026-64260", "CVE-2026-64261" ], "rank": 351 }, { "author": "Bibo Mao", "email": "maobibo@loongson.cn", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23229", "CVE-2026-31564", "CVE-2026-72294" ], "rank": 351 }, { "author": "Biren Pandya", "email": "birenpandya@gmail.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64493", "CVE-2026-64494", "CVE-2026-64503" ], "rank": 351 }, { "author": "Boris Brezillon", "email": "boris.brezillon@collabora.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72386", "CVE-2026-72387", "CVE-2026-72388" ], "rank": 351 }, { "author": "Boyuan Zhang", "email": "boyuan.zhang@amd.com", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-68106", "CVE-2026-68107", "CVE-2026-68108" ], "rank": 351 }, { "author": "Christian Borntraeger", "email": "borntraeger@linux.ibm.com", "cve_count": 3, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.1, "cves": [ "CVE-2026-72292", "CVE-2026-74712", "CVE-2026-80921" ], "rank": 351 }, { "author": "Christoph Hellwig", "email": "hch@lst.de", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-43153", "CVE-2026-80720", "CVE-2026-89770" ], "rank": 351 }, { "author": "Claudio Imbrenda", "email": "imbrenda@linux.ibm.com", "cve_count": 3, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 18.6, "cves": [ "CVE-2026-72291", "CVE-2026-72293", "CVE-2026-72412" ], "rank": 351 }, { "author": "Claudiu Beznea", "email": "claudiu.beznea.uj@bp.renesas.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.2, "cves": [ "CVE-2026-72146", "CVE-2026-80950", "CVE-2026-89728" ], "rank": 351 }, { "author": "Conor Dooley", "email": "conor.dooley@microchip.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46148", "CVE-2026-46192", "CVE-2026-46293" ], "rank": 351 }, { "author": "Dave Airlie", "email": "airlied@redhat.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43381", "CVE-2026-43485", "CVE-2026-89553" ], "rank": 351 }, { "author": "David Francis", "email": "david.francis@amd.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-46215", "CVE-2026-68258", "CVE-2026-68259" ], "rank": 351 }, { "author": "David Jeffery", "email": "djeffery@redhat.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23110", "CVE-2026-64003", "CVE-2026-68396" ], "rank": 351 }, { "author": "Dmitry Antipov", "email": "dmantipov@yandex.ru", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74722", "CVE-2026-80881", "CVE-2026-89496" ], "rank": 351 }, { "author": "Eric Huang", "email": "jinhuieric.huang@amd.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31462", "CVE-2026-63881", "CVE-2026-63882" ], "rank": 351 }, { "author": "Erni Sri Satya Vennela", "email": "ernis@linux.microsoft.com", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.3, "cves": [ "CVE-2026-53297", "CVE-2026-53324", "CVE-2026-64034" ], "rank": 351 }, { "author": "Felix Fietkau", "email": "nbd@nbd.name", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23444", "CVE-2026-31394", "CVE-2026-80934" ], "rank": 351 }, { "author": "Feng Liu", "email": "feliu@nvidia.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.8, "cves": [ "CVE-2026-72341", "CVE-2026-72342", "CVE-2026-72343" ], "rank": 351 }, { "author": "Geliang Tang", "email": "tanggeliang@kylinos.cn", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-68169", "CVE-2026-74385", "CVE-2026-74386" ], "rank": 351 }, { "author": "Guanghui Yang", "email": "3497809730@qq.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-68450", "CVE-2026-80538", "CVE-2026-89645" ], "rank": 351 }, { "author": "Hao Ge", "email": "hao.ge@linux.dev", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23219", "CVE-2026-46279", "CVE-2026-72431" ], "rank": 351 }, { "author": "Harry Yoo (Oracle)", "email": "harry@kernel.org", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.5, "cves": [ "CVE-2026-46029", "CVE-2026-46035", "CVE-2026-74576" ], "rank": 351 }, { "author": "HE WEI (\u30ae\u30ab\u30af)", "email": "skyexpoc@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-64339", "CVE-2026-68326", "CVE-2026-68402" ], "rank": 351 }, { "author": "Huacai Chen", "email": "chenhuacai@loongson.cn", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.1, "cves": [ "CVE-2026-31558", "CVE-2026-31569", "CVE-2026-64250" ], "rank": 351 }, { "author": "Huihui Huang", "email": "hhhuang@smu.edu.sg", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.5, "cves": [ "CVE-2026-64299", "CVE-2026-68196", "CVE-2026-68373" ], "rank": 351 }, { "author": "Ivan Vecera", "email": "ivecera@redhat.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23129", "CVE-2026-63977", "CVE-2026-68378" ], "rank": 351 }, { "author": "James Kim", "email": "james010kim@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-46285", "CVE-2026-80622", "CVE-2026-89742" ], "rank": 351 }, { "author": "Jason Xing", "email": "kernelxing@tencent.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53250", "CVE-2026-74559", "CVE-2026-74560" ], "rank": 351 }, { "author": "Jesse.Zhang", "email": "jesse.zhang@amd.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23468", "CVE-2026-43195", "CVE-2026-68237" ], "rank": 351 }, { "author": "Jianbo Liu", "email": "jianbol@nvidia.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.0, "cves": [ "CVE-2026-23440", "CVE-2026-23441", "CVE-2026-43199" ], "rank": 351 }, { "author": "Jianpeng Chang", "email": "jianpeng.chang.cn@windriver.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23151", "CVE-2026-45900", "CVE-2026-64149" ], "rank": 351 }, { "author": "Jinhui Guo", "email": "guojinhui.liam@bytedance.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43130", "CVE-2026-43161", "CVE-2026-43211" ], "rank": 351 }, { "author": "Jiri Olsa", "email": "jolsa@kernel.org", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-72357", "CVE-2026-74258", "CVE-2026-80865" ], "rank": 351 }, { "author": "Jose Fernandez (Anthropic)", "email": "jose.fernandez@linux.dev", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53283", "CVE-2026-64416", "CVE-2026-74714" ], "rank": 351 }, { "author": "Josh Law", "email": "objecting@objecting.org", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31457", "CVE-2026-31458", "CVE-2026-31459" ], "rank": 351 }, { "author": "Jozsef Kadlecsik", "email": "kadlec@netfilter.org", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-72434", "CVE-2026-72435", "CVE-2026-72436" ], "rank": 351 }, { "author": "Juergen Gross", "email": "jgross@suse.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.0, "cves": [ "CVE-2026-31786", "CVE-2026-31787", "CVE-2026-31788" ], "rank": 351 }, { "author": "Junxi Qian", "email": "qjx1298677004@gmail.com", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.7, "cves": [ "CVE-2026-31629", "CVE-2026-31774", "CVE-2026-43186" ], "rank": 351 }, { "author": "Kairui Song", "email": "kasong@tencent.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-23161", "CVE-2026-23177", "CVE-2026-89757" ], "rank": 351 }, { "author": "Kery Qi", "email": "qikeyu2017@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.4, "cves": [ "CVE-2026-23013", "CVE-2026-23164", "CVE-2026-23172" ], "rank": 351 }, { "author": "KP Singh", "email": "kpsingh@kernel.org", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-45927", "CVE-2026-45971", "CVE-2026-80675" ], "rank": 351 }, { "author": "Li Chen", "email": "me@linux.beauty", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-31450", "CVE-2026-43289", "CVE-2026-74358" ], "rank": 351 }, { "author": "Li RongQing", "email": "lirongqing@baidu.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68324", "CVE-2026-74277", "CVE-2026-80611" ], "rank": 351 }, { "author": "Li Xiasong", "email": "lixiasong1@huawei.com", "cve_count": 3, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-43029", "CVE-2026-52970", "CVE-2026-72299" ], "rank": 351 }, { "author": "Linus Walleij", "email": "linusw@kernel.org", "cve_count": 3, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 19.6, "cves": [ "CVE-2026-43173", "CVE-2026-64055", "CVE-2026-64056" ], "rank": 351 }, { "author": "Long Li", "email": "leo.lilong@huawei.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43053", "CVE-2026-80529", "CVE-2026-80534" ], "rank": 351 }, { "author": "Luka Gejak", "email": "luka.gejak@linux.dev", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43386", "CVE-2026-63821", "CVE-2026-64000" ], "rank": 351 }, { "author": "Lukas Johannes M\u00f6ller", "email": "research@johannes-moeller.dev", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.8, "cves": [ "CVE-2026-23457", "CVE-2026-31393", "CVE-2026-43062" ], "rank": 351 }, { "author": "Luke Wang", "email": "ziniu.wang_1@nxp.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68463", "CVE-2026-68464", "CVE-2026-68465" ], "rank": 351 }, { "author": "Maciej Fijalkowski", "email": "maciej.fijalkowski@intel.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43092", "CVE-2026-43093", "CVE-2026-74558" ], "rank": 351 }, { "author": "Manish Khadka", "email": "maskmemanish@gmail.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64363", "CVE-2026-64365", "CVE-2026-64595" ], "rank": 351 }, { "author": "Marco Elver", "email": "elver@google.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-45990", "CVE-2026-46281", "CVE-2026-64434" ], "rank": 351 }, { "author": "Marek Vasut", "email": "marex@nabladev.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23049", "CVE-2026-23073", "CVE-2026-46031" ], "rank": 351 }, { "author": "Mark Brown", "email": "broonie@kernel.org", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-46179", "CVE-2026-63941", "CVE-2026-80526" ], "rank": 351 }, { "author": "Martin Kaiser", "email": "martin@kaiser.cx", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23217", "CVE-2026-64163", "CVE-2026-72028" ], "rank": 351 }, { "author": "Matt Bobrowski", "email": "mattbobrowski@google.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64192", "CVE-2026-68399", "CVE-2026-74400" ], "rank": 351 }, { "author": "Maurizio Lombardi", "email": "mlombard@redhat.com", "cve_count": 3, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.6, "cves": [ "CVE-2026-23193", "CVE-2026-23216", "CVE-2026-52989" ], "rank": 351 }, { "author": "Maxwell Doose", "email": "m32285159@gmail.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64497", "CVE-2026-64500", "CVE-2026-64602" ], "rank": 351 }, { "author": "Miaoqian Lin", "email": "linmq006@gmail.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23026", "CVE-2026-23092", "CVE-2026-43463" ], "rank": 351 }, { "author": "Michael Guralnik", "email": "michaelgur@nvidia.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74298", "CVE-2026-74299", "CVE-2026-74717" ], "rank": 351 }, { "author": "Michal Schmidt", "email": "mschmidt@redhat.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23353", "CVE-2026-43094", "CVE-2026-53009" ], "rank": 351 }, { "author": "Micha\u0142 Winiarski", "email": "michal.winiarski@intel.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31490", "CVE-2026-31601", "CVE-2026-74699" ], "rank": 351 }, { "author": "Ming Lei", "email": "ming.lei@redhat.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-22995", "CVE-2026-23148", "CVE-2026-23360" ], "rank": 351 }, { "author": "Mostafa Saleh", "email": "smostafa@google.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53305", "CVE-2026-68401", "CVE-2026-80524" ], "rank": 351 }, { "author": "Nan Li", "email": "tonanli66@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-43502", "CVE-2026-52921", "CVE-2026-74425" ], "rank": 351 }, { "author": "NeilBrown", "email": "neil@brown.name", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.1, "cves": [ "CVE-2026-22980", "CVE-2026-89677", "CVE-2026-89687" ], "rank": 351 }, { "author": "Niklas Cassel", "email": "cassel@kernel.org", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-23355", "CVE-2026-23361", "CVE-2026-89586" ], "rank": 351 }, { "author": "Nilay Shroff", "email": "nilay@linux.ibm.com", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23032", "CVE-2026-46141", "CVE-2026-74384" ], "rank": 351 }, { "author": "Nuno S\u00e1", "email": "nuno.sa@analog.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72474", "CVE-2026-72475", "CVE-2026-72476" ], "rank": 351 }, { "author": "Pei Xiao", "email": "xiaopei01@kylinos.cn", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63861", "CVE-2026-80556", "CVE-2026-89739" ], "rank": 351 }, { "author": "Qi Zheng", "email": "zhengqi.arch@bytedance.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64417", "CVE-2026-64418", "CVE-2026-80719" ], "rank": 351 }, { "author": "Qiang Ma", "email": "maqianga@uniontech.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23027", "CVE-2026-23028", "CVE-2026-23029" ], "rank": 351 }, { "author": "Radu Sabau", "email": "radu.sabau@analog.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-43356", "CVE-2026-64501", "CVE-2026-64502" ], "rank": 351 }, { "author": "Robbie Ko", "email": "robbieko@synology.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.0, "cves": [ "CVE-2026-31666", "CVE-2026-89665", "CVE-2026-89666" ], "rank": 351 }, { "author": "Ruijie Li", "email": "ruijieli51@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.0, "cves": [ "CVE-2026-46027", "CVE-2026-52926", "CVE-2026-64312" ], "rank": 351 }, { "author": "Sakari Ailus", "email": "sakari.ailus@linux.intel.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43182", "CVE-2026-43189", "CVE-2026-46205" ], "rank": 351 }, { "author": "Sam Daly", "email": "sam@samdaly.ie", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-53386", "CVE-2026-53387", "CVE-2026-64225" ], "rank": 351 }, { "author": "Sandipan Das", "email": "sandipan.das@amd.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72237", "CVE-2026-72325", "CVE-2026-80602" ], "rank": 351 }, { "author": "Sean Wang", "email": "sean.wang@mediatek.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53101", "CVE-2026-53103", "CVE-2026-68307" ], "rank": 351 }, { "author": "Sebastian Alba Vives", "email": "sebasjosue84@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-64280", "CVE-2026-72156", "CVE-2026-72158" ], "rank": 351 }, { "author": "Seungjin Bae", "email": "eeodqql09@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31412", "CVE-2026-64565", "CVE-2026-72483" ], "rank": 351 }, { "author": "SeungJu Cheon", "email": "suunj1331@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-46184", "CVE-2026-53254", "CVE-2026-63871" ], "rank": 351 }, { "author": "Shardul Bankar", "email": "shardul.b@mpiricsoftware.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31579", "CVE-2026-45960", "CVE-2026-80784" ], "rank": 351 }, { "author": "Sreedevi Joshi", "email": "sreedevi.joshi@intel.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22985", "CVE-2026-22993", "CVE-2026-23024" ], "rank": 351 }, { "author": "Srinivas Pandruvada", "email": "srinivas.pandruvada@linux.intel.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23332", "CVE-2026-89438", "CVE-2026-89439" ], "rank": 351 }, { "author": "Stefano Garzarella", "email": "sgarzare@redhat.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46207", "CVE-2026-52994", "CVE-2026-53365" ], "rank": 351 }, { "author": "Szymon Wilczek", "email": "swilczek.lx@gmail.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23037", "CVE-2026-43127", "CVE-2026-43255" ], "rank": 351 }, { "author": "Terry Bowman", "email": "terry.bowman@amd.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.2, "cves": [ "CVE-2026-80662", "CVE-2026-89589", "CVE-2026-89731" ], "rank": 351 }, { "author": "Thomas Hellstr\u00f6m", "email": "thomas.hellstrom@linux.intel.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43404", "CVE-2026-52949", "CVE-2026-52965" ], "rank": 351 }, { "author": "Til Kaiser", "email": "mail@tk154.de", "cve_count": 3, "critical": 2, "high": 1, "scored": 3, "cvss_sum_indicative": 28.2, "cves": [ "CVE-2026-53215", "CVE-2026-53216", "CVE-2026-53217" ], "rank": 351 }, { "author": "Tristan Madani", "email": "tristmd@gmail.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-53197", "CVE-2026-74377", "CVE-2026-74378" ], "rank": 351 }, { "author": "Vasiliy Kovalev", "email": "kovalev@altlinux.org", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43214", "CVE-2026-46002", "CVE-2026-72166" ], "rank": 351 }, { "author": "Ville Syrj\u00e4l\u00e4", "email": "ville.syrjala@linux.intel.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31571", "CVE-2026-31767", "CVE-2026-43477" ], "rank": 351 }, { "author": "Wei Zhang", "email": "wei.zhang@oss.qualcomm.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-74366", "CVE-2026-74367", "CVE-2026-74407" ], "rank": 351 }, { "author": "Weigang He", "email": "geoffreyhe2@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43264", "CVE-2026-46041", "CVE-2026-89725" ], "rank": 351 }, { "author": "Wentao Guan", "email": "guanwentao@uniontech.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46156", "CVE-2026-68099", "CVE-2026-89523" ], "rank": 351 }, { "author": "William Palacek", "email": "william.palacek@amd.com", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 23.6, "cves": [ "CVE-2026-74446", "CVE-2026-74447", "CVE-2026-80747" ], "rank": 351 }, { "author": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53294", "CVE-2026-53295", "CVE-2026-53296" ], "rank": 351 }, { "author": "Xu Yang", "email": "xu.yang_2@nxp.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-23187", "CVE-2026-43259", "CVE-2026-89744" ], "rank": 351 }, { "author": "Xulin Sun", "email": "xulin.sun@windriver.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43229", "CVE-2026-43293", "CVE-2026-43301" ], "rank": 351 }, { "author": "Yang Erkun", "email": "yangerkun@huawei.com", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23145", "CVE-2026-53304", "CVE-2026-72472" ], "rank": 351 }, { "author": "Yasuaki Torimaru", "email": "yasuakitorimaru@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31664", "CVE-2026-31780", "CVE-2026-46211" ], "rank": 351 }, { "author": "Yifei Gao", "email": "gyf161023@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80821", "CVE-2026-89486", "CVE-2026-89498" ], "rank": 351 }, { "author": "Yiyang Chen", "email": "chenyy23@mails.tsinghua.edu.cn", "cve_count": 3, "critical": 0, "high": 3, "scored": 3, "cvss_sum_indicative": 24.4, "cves": [ "CVE-2026-72352", "CVE-2026-72423", "CVE-2026-74720" ], "rank": 351 }, { "author": "Yochai Eisenrich", "email": "echelonh@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31504", "CVE-2026-43035", "CVE-2026-43040" ], "rank": 351 }, { "author": "Yong Wang", "email": "edragain@163.com", "cve_count": 3, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.1, "cves": [ "CVE-2026-72296", "CVE-2026-80793", "CVE-2026-80847" ], "rank": 351 }, { "author": "YunJe Shin", "email": "yjshin0438@gmail.com", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.1, "cves": [ "CVE-2026-23112", "CVE-2026-23242", "CVE-2026-23243" ], "rank": 351 }, { "author": "Yuqi Xu", "email": "xuyuqiabc@gmail.com", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 25.4, "cves": [ "CVE-2026-31637", "CVE-2026-53182", "CVE-2026-89488" ], "rank": 351 }, { "author": "Yuqi Xu", "email": "xuyq21@lenovo.com", "cve_count": 3, "critical": 1, "high": 2, "scored": 3, "cvss_sum_indicative": 26.0, "cves": [ "CVE-2026-53209", "CVE-2026-53355", "CVE-2026-63926" ], "rank": 351 }, { "author": "Yuxiang Yang", "email": "yangyx22@mails.tsinghua.edu.cn", "cve_count": 3, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.0, "cves": [ "CVE-2026-68118", "CVE-2026-74587", "CVE-2026-80890" ], "rank": 351 }, { "author": "Zhaoyang Huang", "email": "zhaoyang.huang@unisoc.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23128", "CVE-2026-53288", "CVE-2026-63813" ], "rank": 351 }, { "author": "Zhenzhong Duan", "email": "zhenzhong.duan@intel.com", "cve_count": 3, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-52953", "CVE-2026-53281", "CVE-2026-53372" ], "rank": 351 }, { "author": "Zijing Yin", "email": "yzjaurora@gmail.com", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-43100", "CVE-2026-64177", "CVE-2026-64436" ], "rank": 351 }, { "author": "Zijun Hu", "email": "zijun.hu@oss.qualcomm.com", "cve_count": 3, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74303", "CVE-2026-74304", "CVE-2026-74532" ], "rank": 351 }, { "author": "Zygmunt Krynicki", "email": "me@zygoon.pl", "cve_count": 3, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72456", "CVE-2026-72457", "CVE-2026-72459" ], "rank": 351 }, { "author": "Adam Crosser", "email": "adam.crosser@praetorian.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31769", "CVE-2026-72482" ], "rank": 482 }, { "author": "Adrian Korwel", "email": "adriank20047@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53195", "CVE-2026-53196" ], "rank": 482 }, { "author": "Alexander A. Klimov", "email": "grandmaster@al2klimov.de", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53213", "CVE-2026-64041" ], "rank": 482 }, { "author": "Alexander Usyskin", "email": "alexander.usyskin@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45896", "CVE-2026-68181" ], "rank": 482 }, { "author": "Alexey Velichayshiy", "email": "a.velichayshiy@ispras.ru", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-31779", "CVE-2026-80744" ], "rank": 482 }, { "author": "Ali Tariq", "email": "alitariq45892@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89454", "CVE-2026-89455" ], "rank": 482 }, { "author": "Alison Schofield", "email": "alison.schofield@intel.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-31530", "CVE-2026-74365" ], "rank": 482 }, { "author": "Allison Henderson", "email": "achender@kernel.org", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-23419", "CVE-2026-43494" ], "rank": 482 }, { "author": "Amery Hung", "email": "ameryhung@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53106", "CVE-2026-72427" ], "rank": 482 }, { "author": "Anderson Nascimento", "email": "anderson@allelesecurity.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31639", "CVE-2026-31696" ], "rank": 482 }, { "author": "Andrei Kuchynski", "email": "akuchynski@chromium.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.0, "cves": [ "CVE-2026-64420", "CVE-2026-74441" ], "rank": 482 }, { "author": "Andrey Vatoropin", "email": "a.vatoropin@crpt.ru", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23084", "CVE-2026-43123" ], "rank": 482 }, { "author": "Andrii Nakryiko", "email": "andrii@kernel.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23199", "CVE-2026-43178" ], "rank": 482 }, { "author": "Ankit Garg", "email": "nktgrg@google.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23386", "CVE-2026-72046" ], "rank": 482 }, { "author": "Ard Biesheuvel", "email": "ardb@kernel.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64183", "CVE-2026-89604" ], "rank": 482 }, { "author": "Ariel Silver", "email": "arielsilver77@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.6, "cves": [ "CVE-2026-23246", "CVE-2026-31405" ], "rank": 482 }, { "author": "Armin Wolf", "email": "w_armin@gmx.de", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64143", "CVE-2026-72241" ], "rank": 482 }, { "author": "Arnaldo Carvalho de Melo", "email": "acme@redhat.com", "cve_count": 2, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 18.4, "cves": [ "CVE-2026-80670", "CVE-2026-80671" ], "rank": 482 }, { "author": "Arthur Kiyanovski", "email": "akiyano@amazon.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-52971", "CVE-2026-63837" ], "rank": 482 }, { "author": "Bastien Curutchet (Schneider Electric)", "email": "bastien.curutchet@bootlin.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43372", "CVE-2026-72167" ], "rank": 482 }, { "author": "Benjamin Coddington", "email": "ben.coddington@hammerspace.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-64298", "CVE-2026-72132" ], "rank": 482 }, { "author": "Benjamin Marzinski", "email": "bmarzins@redhat.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43192", "CVE-2026-72105" ], "rank": 482 }, { "author": "Beno\u00eet Sevens", "email": "bsevens@google.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-43051", "CVE-2026-43111" ], "rank": 482 }, { "author": "Berkant Koc", "email": "me@berkoc.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.7, "cves": [ "CVE-2026-64524", "CVE-2026-64527" ], "rank": 482 }, { "author": "Bjorn Andersson", "email": "bjorn.andersson@oss.qualcomm.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53331", "CVE-2026-53332" ], "rank": 482 }, { "author": "Brajesh Gupta", "email": "brajesh.gupta@imgtec.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46278", "CVE-2026-68263" ], "rank": 482 }, { "author": "Brian Witte", "email": "brianwitte@mailfence.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45897", "CVE-2026-45901" ], "rank": 482 }, { "author": "Caleb Sander Mateos", "email": "csander@purestorage.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23007", "CVE-2026-45975" ], "rank": 482 }, { "author": "Candice Li", "email": "candice.li@amd.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-80541", "CVE-2026-80576" ], "rank": 482 }, { "author": "Chaitanya Kulkarni", "email": "ckulkarnilinux@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23067", "CVE-2026-23261" ], "rank": 482 }, { "author": "Changwoo Min", "email": "changwoo@igalia.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31734", "CVE-2026-31744" ], "rank": 482 }, { "author": "Chao Shi", "email": "coshi036@gmail.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64326", "CVE-2026-80589" ], "rank": 482 }, { "author": "Chen Cheng", "email": "chencheng@fnnas.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.6, "cves": [ "CVE-2026-72420", "CVE-2026-74376" ], "rank": 482 }, { "author": "Chen Ridong", "email": "chenridong@huawei.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.0, "cves": [ "CVE-2026-23183", "CVE-2026-23195" ], "rank": 482 }, { "author": "Chengfeng Ye", "email": "dg573847474@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43455", "CVE-2026-45977" ], "rank": 482 }, { "author": "Chenghai Huang", "email": "huangchenghai2@huawei.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23063", "CVE-2026-23094" ], "rank": 482 }, { "author": "Chia-Lin Kao (AceLan)", "email": "acelan.kao@canonical.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64071", "CVE-2026-68372" ], "rank": 482 }, { "author": "Chia-Ming Chang", "email": "chiamingc@synology.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46040", "CVE-2026-46051" ], "rank": 482 }, { "author": "Christian A. Ehrhardt", "email": "lk@c--e.de", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-46289", "CVE-2026-80582" ], "rank": 482 }, { "author": "Christian K\u00f6nig", "email": "christian.koenig@amd.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53293", "CVE-2026-63879" ], "rank": 482 }, { "author": "Cosmin Ratiu", "email": "cratiu@nvidia.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43468", "CVE-2026-45907" ], "rank": 482 }, { "author": "Cosmin Tanislav", "email": "cosmin-gabriel.tanislav.xa@renesas.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31740", "CVE-2026-31741" ], "rank": 482 }, { "author": "Daehyeon Ko", "email": "4ncienth@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.1, "cves": [ "CVE-2026-68117", "CVE-2026-72019" ], "rank": 482 }, { "author": "Damien Ri\u00e9gel", "email": "damien.riegel@silabs.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-53024", "CVE-2026-53025" ], "rank": 482 }, { "author": "Daniel Golle", "email": "daniel@makrotopia.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23081", "CVE-2026-72411" ], "rank": 482 }, { "author": "Daniel J Blueman", "email": "daniel@quora.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-46055", "CVE-2026-64100" ], "rank": 482 }, { "author": "Daniil Dulov", "email": "d.dulov@aladdin.ru", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23336", "CVE-2026-43272" ], "rank": 482 }, { "author": "Dave Jiang", "email": "dave.jiang@intel.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23348", "CVE-2026-89570" ], "rank": 482 }, { "author": "Davide Caratti", "email": "dcaratti@redhat.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23379", "CVE-2026-53080" ], "rank": 482 }, { "author": "Dawid Wro\u0301bel", "email": "me@dawidwrobel.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80583", "CVE-2026-80910" ], "rank": 482 }, { "author": "Dexuan Cui", "email": "decui@microsoft.com", "cve_count": 2, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 19.6, "cves": [ "CVE-2026-72064", "CVE-2026-72065" ], "rank": 482 }, { "author": "Douglas Anderson", "email": "dianders@chromium.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43143", "CVE-2026-46258" ], "rank": 482 }, { "author": "Fan Ye", "email": "fy15309206903@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-80989", "CVE-2026-80990" ], "rank": 482 }, { "author": "Felix Gu", "email": "gu_0233@qq.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23068", "CVE-2026-43165" ], "rank": 482 }, { "author": "Fengnan Chang", "email": "changfengnan@bytedance.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72370", "CVE-2026-74392" ], "rank": 482 }, { "author": "Florian Fuchs", "email": "fuchsfl@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72168", "CVE-2026-80597" ], "rank": 482 }, { "author": "Gal Pressman", "email": "gal@nvidia.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-43466", "CVE-2026-68293" ], "rank": 482 }, { "author": "Geoffrey D. Bennett", "email": "g@b4.vu", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80815", "CVE-2026-80816" ], "rank": 482 }, { "author": "Georgia Garcia", "email": "georgia.garcia@canonical.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45965", "CVE-2026-72458" ], "rank": 482 }, { "author": "Georgiy Osokin", "email": "g.osokin@auroraos.dev", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53210", "CVE-2026-80605" ], "rank": 482 }, { "author": "Guixin Liu", "email": "kanie@linux.alibaba.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.7, "cves": [ "CVE-2026-72487", "CVE-2026-80813" ], "rank": 482 }, { "author": "Gunnar Kudrjavets", "email": "gunnarku@amazon.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46096", "CVE-2026-46283" ], "rank": 482 }, { "author": "Hans Verkuil", "email": "hverkuil+cisco@kernel.org", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-68204", "CVE-2026-89741" ], "rank": 482 }, { "author": "Harin Lee", "email": "me@harin.net", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31602", "CVE-2026-46049" ], "rank": 482 }, { "author": "Hariprasad Kelam", "email": "hkelam@marvell.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23070", "CVE-2026-74527" ], "rank": 482 }, { "author": "Heechan Kang", "email": "gganji11@naver.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46315", "CVE-2026-64101" ], "rank": 482 }, { "author": "Heiko Carstens", "email": "hca@linux.ibm.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64369", "CVE-2026-72011" ], "rank": 482 }, { "author": "Helge Deller", "email": "deller@kernel.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45893", "CVE-2026-46254" ], "rank": 482 }, { "author": "Heming Zhao", "email": "heming.zhao@suse.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43168", "CVE-2026-46080" ], "rank": 482 }, { "author": "hkbinbin", "email": "hkbinbinbin@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 16.9, "cves": [ "CVE-2026-31772", "CVE-2026-46043" ], "rank": 482 }, { "author": "Honglei Huang", "email": "honghuan@amd.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68240", "CVE-2026-68436" ], "rank": 482 }, { "author": "Horia Geant\u0103", "email": "horia.geanta@nxp.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43044", "CVE-2026-43330" ], "rank": 482 }, { "author": "Hou Tao", "email": "houtao1@huawei.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45880", "CVE-2026-46268" ], "rank": 482 }, { "author": "HyungJung Joo", "email": "jhj140711@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53129", "CVE-2026-53130" ], "rank": 482 }, { "author": "Hyunjung Ko", "email": "hj351016@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74620", "CVE-2026-74621" ], "rank": 482 }, { "author": "Ihor Solodrai", "email": "ihor.solodrai@linux.dev", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31521", "CVE-2026-31526" ], "rank": 482 }, { "author": "Ivan Immanuel Shaji", "email": "ivanimmanuel1234@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-89499", "CVE-2026-89748" ], "rank": 482 }, { "author": "Jackson Lee", "email": "jackson.lee@chipsnmedia.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43247", "CVE-2026-43263" ], "rank": 482 }, { "author": "Jan Sebastian G\u00f6tte", "email": "linux@jaseg.de", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-74655", "CVE-2026-80924" ], "rank": 482 }, { "author": "Janne Grunau", "email": "j@jannau.net", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43160", "CVE-2026-46312" ], "rank": 482 }, { "author": "Janusz Krzysztofik", "email": "janusz.krzysztofik@linux.intel.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-43368", "CVE-2026-63884" ], "rank": 482 }, { "author": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63824", "CVE-2026-72152" ], "rank": 482 }, { "author": "Jeffin Philip", "email": "jeffinphilip14@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89733", "CVE-2026-89734" ], "rank": 482 }, { "author": "Jeremy Kerr", "email": "jk@codeconstruct.com.au", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45930", "CVE-2026-63874" ], "rank": 482 }, { "author": "Jeremy Laratro", "email": "research@aradex.io", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.0, "cves": [ "CVE-2026-64140", "CVE-2026-64141" ], "rank": 482 }, { "author": "Jia Jia", "email": "physicalmtea@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-74311", "CVE-2026-74702" ], "rank": 482 }, { "author": "Jia Yao", "email": "jia.yao@intel.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-43280", "CVE-2026-46309" ], "rank": 482 }, { "author": "Jiajia Liu", "email": "liujiajia@kylinos.cn", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-63832", "CVE-2026-64144" ], "rank": 482 }, { "author": "Jiale Yao", "email": "yaojiale02@163.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-74540", "CVE-2026-80827" ], "rank": 482 }, { "author": "Jimmy Hu", "email": "hhhuuu@google.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31726", "CVE-2026-64346" ], "rank": 482 }, { "author": "Jingguo Tan", "email": "tanjingguo@huawei.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-63912", "CVE-2026-63970" ], "rank": 482 }, { "author": "Jinjie Ruan", "email": "ruanjinjie@huawei.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-72016", "CVE-2026-89603" ], "rank": 482 }, { "author": "Jinmo Yang", "email": "jinmo44.yang@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-64366", "CVE-2026-68087" ], "rank": 482 }, { "author": "Jiri Slaby (SUSE)", "email": "jirislaby@kernel.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.3, "cves": [ "CVE-2026-46307", "CVE-2026-80704" ], "rank": 482 }, { "author": "Joe Damato", "email": "joe@dama.to", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-74269", "CVE-2026-80998" ], "rank": 482 }, { "author": "Johannes Thumshirn", "email": "johannes.thumshirn@wdc.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74319", "CVE-2026-74572" ], "rank": 482 }, { "author": "Jonathan Cavitt", "email": "jonathan.cavitt@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23366", "CVE-2026-31785" ], "rank": 482 }, { "author": "Jori Koolstra", "email": "jkoolstra@xs4all.nl", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43209", "CVE-2026-43228" ], "rank": 482 }, { "author": "Jose Ignacio Tornos Martinez", "email": "jtornosm@redhat.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63822", "CVE-2026-68191" ], "rank": 482 }, { "author": "Jose Villase\u00f1or Montfort", "email": "pepemontfort@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80782", "CVE-2026-80783" ], "rank": 482 }, { "author": "Joshua Crofts", "email": "joshua.crofts1@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72481", "CVE-2026-89735" ], "rank": 482 }, { "author": "Joshua Rogers", "email": "linux@joshua.hu", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74675", "CVE-2026-74676" ], "rank": 482 }, { "author": "Junjie Cao", "email": "junjie.cao@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74468", "CVE-2026-80562" ], "rank": 482 }, { "author": "Junyi Liu", "email": "moss80199@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.6, "cves": [ "CVE-2026-64016", "CVE-2026-64138" ], "rank": 482 }, { "author": "Kees Cook", "email": "kees@kernel.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23222", "CVE-2026-43316" ], "rank": 482 }, { "author": "Kevin Cheng", "email": "chengkev@google.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.9, "cves": [ "CVE-2026-46076", "CVE-2026-46082" ], "rank": 482 }, { "author": "Krzysztof Wilczy\u0144ski", "email": "kwilczynski@kernel.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80867", "CVE-2026-89722" ], "rank": 482 }, { "author": "Kyle Meyer", "email": "kyle.meyer@hpe.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31542", "CVE-2026-53177" ], "rank": 482 }, { "author": "Lang Xu", "email": "xulang@uniontech.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-23319", "CVE-2026-53076" ], "rank": 482 }, { "author": "Leon Romanovsky", "email": "leonro@nvidia.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74296", "CVE-2026-80884" ], "rank": 482 }, { "author": "Li Daming", "email": "d4n.for.sec@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.2, "cves": [ "CVE-2026-74436", "CVE-2026-74631" ], "rank": 482 }, { "author": "Li Ming", "email": "ming.li@zohomail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-74274", "CVE-2026-74275" ], "rank": 482 }, { "author": "Li Zhijian", "email": "lizhijian@fujitsu.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-45910", "CVE-2026-46325" ], "rank": 482 }, { "author": "Lianfa Weng", "email": "wenglianfa@huawei.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74389", "CVE-2026-80647" ], "rank": 482 }, { "author": "Liem", "email": "liem16213@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.8, "cves": [ "CVE-2026-74461", "CVE-2026-80678" ], "rank": 482 }, { "author": "Lijo Lazar", "email": "lijo.lazar@amd.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23358", "CVE-2026-43298" ], "rank": 482 }, { "author": "liyouhong", "email": "liyouhong@kylinos.cn", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74644", "CVE-2026-89576" ], "rank": 482 }, { "author": "Longlong Xia", "email": "xialonglong@kylinos.cn", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89718", "CVE-2026-89719" ], "rank": 482 }, { "author": "Longxuan Yu", "email": "ylong030@ucr.edu", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46153", "CVE-2026-52933" ], "rank": 482 }, { "author": "Ludovic Desroches", "email": "ludovic.desroches@microchip.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43236", "CVE-2026-43269" ], "rank": 482 }, { "author": "Luiz Angelo Daros de Luca", "email": "luizluca@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74546", "CVE-2026-74547" ], "rank": 482 }, { "author": "Lukas Wunner", "email": "lukas@wunner.de", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31430", "CVE-2026-43492" ], "rank": 482 }, { "author": "Ma Ke", "email": "make24@iscas.ac.cn", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68212", "CVE-2026-72214" ], "rank": 482 }, { "author": "Maciej Grochowski", "email": "maciej.grochowski@sony.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43141", "CVE-2026-43241" ], "rank": 482 }, { "author": "Manikanta Maddireddy", "email": "mmaddireddy@nvidia.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43200", "CVE-2026-53051" ], "rank": 482 }, { "author": "Marco Scardovi", "email": "scardracs@disroot.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53226", "CVE-2026-64241" ], "rank": 482 }, { "author": "Marek Szyprowski", "email": "m.szyprowski@samsung.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43144", "CVE-2026-46180" ], "rank": 482 }, { "author": "Marek Vasut", "email": "marek.vasut+renesas@mailbox.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43175", "CVE-2026-80874" ], "rank": 482 }, { "author": "Mark Bloch", "email": "mbloch@nvidia.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23173", "CVE-2026-53261" ], "rank": 482 }, { "author": "Martin Schiller", "email": "ms@dev.tdt.de", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-31417", "CVE-2026-43011" ], "rank": 482 }, { "author": "Mathias Nyman", "email": "mathias.nyman@linux.intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23009", "CVE-2026-43431" ], "rank": 482 }, { "author": "Matt Evans", "email": "mattev@meta.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 17.6, "cves": [ "CVE-2026-53322", "CVE-2026-64042" ], "rank": 482 }, { "author": "Matt Johnston", "email": "matt@codeconstruct.com.au", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43221", "CVE-2026-45865" ], "rank": 482 }, { "author": "Matt Vollrath", "email": "tactii@gmail.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43445", "CVE-2026-74495" ], "rank": 482 }, { "author": "Matthew Wilcox (Oracle)", "email": "willy@infradead.org", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23097", "CVE-2026-31589" ], "rank": 482 }, { "author": "Matvey Kovalev", "email": "matvey.kovalev@ispras.ru", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74426", "CVE-2026-80609" ], "rank": 482 }, { "author": "Max Zhen", "email": "max.zhen@amd.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74423", "CVE-2026-80657" ], "rank": 482 }, { "author": "Maxime Chevallier", "email": "maxime.chevallier@bootlin.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-53231", "CVE-2026-53232" ], "rank": 482 }, { "author": "Michael Neuling", "email": "mikey@neuling.org", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.2, "cves": [ "CVE-2026-64082", "CVE-2026-74751" ], "rank": 482 }, { "author": "Michael Zimmermann", "email": "sigmaepsilon92@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31606", "CVE-2026-31721" ], "rank": 482 }, { "author": "Michal Wajdeczko", "email": "michal.wajdeczko@intel.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 17.2, "cves": [ "CVE-2026-46264", "CVE-2026-72360" ], "rank": 482 }, { "author": "Mike Rapoport (Microsoft)", "email": "rppt@kernel.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23352", "CVE-2026-68166" ], "rank": 482 }, { "author": "Ming Lei", "email": "tom.leiming@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-68173", "CVE-2026-74472" ], "rank": 482 }, { "author": "Ming Yen Hsieh", "email": "mingyen.hsieh@mediatek.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53105", "CVE-2026-53318" ], "rank": 482 }, { "author": "Minh Nguyen", "email": "minhnguyen.080505@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-52943", "CVE-2026-64115" ], "rank": 482 }, { "author": "Miri Korenblit", "email": "miriam.rachel.korenblit@intel.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23185", "CVE-2026-64212" ], "rank": 482 }, { "author": "Morduan Zang", "email": "zhangdandan@uniontech.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-53292", "CVE-2026-72367" ], "rank": 482 }, { "author": "Mukesh Ojha", "email": "mukesh.ojha@oss.qualcomm.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43108", "CVE-2026-53158" ], "rank": 482 }, { "author": "Mykyta Yatsenko", "email": "yatsenko@meta.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53032", "CVE-2026-74337" ], "rank": 482 }, { "author": "Naman Jain", "email": "namjain@linux.microsoft.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43348", "CVE-2026-46115" ], "rank": 482 }, { "author": "Nathan Rebello", "email": "nathan.c.rebello@gmail.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-31607", "CVE-2026-31729" ], "rank": 482 }, { "author": "NeilBrown", "email": "neilb@ownmail.net", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-43106", "CVE-2026-53244" ], "rank": 482 }, { "author": "Neill Kapron", "email": "nkapron@google.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64327", "CVE-2026-89732" ], "rank": 482 }, { "author": "Nicholas Kazlauskas", "email": "nicholas.kazlauskas@amd.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43191", "CVE-2026-43305" ], "rank": 482 }, { "author": "Nikola Z. Ivanov", "email": "zlatistiv@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23446", "CVE-2026-52985" ], "rank": 482 }, { "author": "Oleksij Rempel", "email": "o.rempel@pengutronix.de", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43479", "CVE-2026-80707" ], "rank": 482 }, { "author": "Pasha Tatashin", "email": "pasha.tatashin@soleen.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74369", "CVE-2026-74370" ], "rank": 482 }, { "author": "Pawan Gupta", "email": "pawan.kumar.gupta@linux.intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64507", "CVE-2026-64508" ], "rank": 482 }, { "author": "Peddolla Harshavardhan Reddy", "email": "peddolla.reddy@oss.qualcomm.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31548", "CVE-2026-68408" ], "rank": 482 }, { "author": "Pedro Falcato", "email": "pfalcato@suse.de", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64294", "CVE-2026-68086" ], "rank": 482 }, { "author": "Peng Fan", "email": "peng.fan@nxp.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43145", "CVE-2026-72007" ], "rank": 482 }, { "author": "Petr Oros", "email": "poros@redhat.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43447", "CVE-2026-53289" ], "rank": 482 }, { "author": "Petr Wozniak", "email": "petr.wozniak@gmail.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-68426", "CVE-2026-72391" ], "rank": 482 }, { "author": "Philip Yang", "email": "philip.yang@amd.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43444", "CVE-2026-53374" ], "rank": 482 }, { "author": "Ping-Ke Shih", "email": "pkshih@realtek.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.3, "cves": [ "CVE-2026-43176", "CVE-2026-43213" ], "rank": 482 }, { "author": "Qing Wang", "email": "wangqing7171@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23380", "CVE-2026-53243" ], "rank": 482 }, { "author": "Qingfang Deng", "email": "qingfang.deng@linux.dev", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.0, "cves": [ "CVE-2026-46306", "CVE-2026-53003" ], "rank": 482 }, { "author": "Qingshuang Fu", "email": "fuqingshuang@kylinos.cn", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63798", "CVE-2026-72384" ], "rank": 482 }, { "author": "Ranjan Kumar", "email": "ranjan.kumar@broadcom.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43473", "CVE-2026-46105" ], "rank": 482 }, { "author": "Ratheesh Kannoth", "email": "rkannoth@marvell.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72448", "CVE-2026-80629" ], "rank": 482 }, { "author": "Ray Wu", "email": "ray.wu@amd.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68364", "CVE-2026-74732" ], "rank": 482 }, { "author": "Reinette Chatre", "email": "reinette.chatre@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64477", "CVE-2026-72015" ], "rank": 482 }, { "author": "Rik van Riel", "email": "riel@surriel.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-63799", "CVE-2026-74635" ], "rank": 482 }, { "author": "Ruipeng Qi", "email": "ruipengqi3@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43124", "CVE-2026-68460" ], "rank": 482 }, { "author": "Ryusuke Konishi", "email": "konishi.ryusuke@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80807", "CVE-2026-89723" ], "rank": 482 }, { "author": "Salah Triki", "email": "salah.triki@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45981", "CVE-2026-63936" ], "rank": 482 }, { "author": "Salman Alghamdi", "email": "me@cipherat.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-53178", "CVE-2026-53179" ], "rank": 482 }, { "author": "Sangho Lee", "email": "kudo3228@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-74507", "CVE-2026-74508" ], "rank": 482 }, { "author": "Sangyun Kim", "email": "sangyun.kim@snu.ac.kr", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46202", "CVE-2026-46213" ], "rank": 482 }, { "author": "Sanjay Yadav", "email": "sanjay.kumar.yadav@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31547", "CVE-2026-43169" ], "rank": 482 }, { "author": "Sebastian Andrzej Siewior", "email": "bigeasy@linutronix.de", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43216", "CVE-2026-52977" ], "rank": 482 }, { "author": "Shaomin Chen", "email": "eeesssooo020@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-63823", "CVE-2026-63911" ], "rank": 482 }, { "author": "Shaurya Rane", "email": "ssrane_b23@ee.vjti.ac.in", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-23461", "CVE-2026-43231" ], "rank": 482 }, { "author": "Shigeru Yoshida", "email": "syoshida@redhat.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23200", "CVE-2026-72339" ], "rank": 482 }, { "author": "Shin'ichiro Kawasaki", "email": "shinichiro.kawasaki@wdc.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31434", "CVE-2026-80787" ], "rank": 482 }, { "author": "Shivam Kumar", "email": "kumar.shivam43666@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-22998", "CVE-2026-64534" ], "rank": 482 }, { "author": "Shixiong Ou", "email": "oushixiong@kylinos.cn", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-80740", "CVE-2026-80741" ], "rank": 482 }, { "author": "Shoichiro Miyamoto", "email": "shoichiro.miyamoto@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-64257", "CVE-2026-64448" ], "rank": 482 }, { "author": "Shyam Prasad N", "email": "sprasad@microsoft.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.6, "cves": [ "CVE-2026-31693", "CVE-2026-43215" ], "rank": 482 }, { "author": "Sumit Gupta", "email": "sumitg@nvidia.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-53044", "CVE-2026-53310" ], "rank": 482 }, { "author": "Sunny Patel", "email": "nueralspacetech@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63953", "CVE-2026-64129" ], "rank": 482 }, { "author": "Taegu Ha", "email": "hataegu0826@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-31720", "CVE-2026-53075" ], "rank": 482 }, { "author": "Taeyang Lee", "email": "0wn@theori.io", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23060", "CVE-2026-64556" ], "rank": 482 }, { "author": "TanZheng", "email": "tanzheng@kylinos.cn", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.9, "cves": [ "CVE-2026-80691", "CVE-2026-89588" ], "rank": 482 }, { "author": "Tejas Bharambe", "email": "tejas.bharambe@outlook.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-31449", "CVE-2026-31597" ], "rank": 482 }, { "author": "Tengda Wu", "email": "wutengda@huaweicloud.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68146", "CVE-2026-74601" ], "rank": 482 }, { "author": "Theodore Ts'o", "email": "tytso@mit.edu", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43065", "CVE-2026-43067" ], "rank": 482 }, { "author": "Thomas Richard", "email": "thomas.richard@bootlin.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45874", "CVE-2026-45911" ], "rank": 482 }, { "author": "Thomas Wei\u00dfschuh", "email": "thomas.weissschuh@linutronix.de", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23106", "CVE-2026-80927" ], "rank": 482 }, { "author": "Tianchu Chen", "email": "flynnnchen@tencent.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 16.9, "cves": [ "CVE-2026-64319", "CVE-2026-64367" ], "rank": 482 }, { "author": "Toke H\u00f8iland-J\u00f8rgensen", "email": "toke@redhat.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23140", "CVE-2026-31508" ], "rank": 482 }, { "author": "Trond Myklebust", "email": "trond.myklebust@hammerspace.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23050", "CVE-2026-23053" ], "rank": 482 }, { "author": "Tudor Ambarus", "email": "tudor.ambarus@linaro.org", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-46190", "CVE-2026-64528" ], "rank": 482 }, { "author": "Uladzislau Rezki (Sony)", "email": "urezki@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.3, "cves": [ "CVE-2026-46093", "CVE-2026-63955" ], "rank": 482 }, { "author": "Vahagn Vardanian", "email": "vahagn@redrays.io", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-23279", "CVE-2026-43233" ], "rank": 482 }, { "author": "Vasily Gorbik", "email": "gor@linux.ibm.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-31482", "CVE-2026-68385" ], "rank": 482 }, { "author": "Vincent Jardin", "email": "vjardin@free.fr", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-72141", "CVE-2026-72142" ], "rank": 482 }, { "author": "Vivian Wang", "email": "wangruikang@iscas.ac.cn", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43462", "CVE-2026-64592" ], "rank": 482 }, { "author": "Vladimir Zapolskiy", "email": "vladimir.zapolskiy@linaro.org", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43335", "CVE-2026-53339" ], "rank": 482 }, { "author": "Wang Jun", "email": "1742789905@qq.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46235", "CVE-2026-68226" ], "rank": 482 }, { "author": "Wenjie Qi", "email": "qwjhust@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 16.2, "cves": [ "CVE-2026-63817", "CVE-2026-63818" ], "rank": 482 }, { "author": "Wenkai Lin", "email": "linwenkai6@hisilicon.com", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23096", "CVE-2026-53055" ], "rank": 482 }, { "author": "Werner Kasselman", "email": "werner@verivus.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 17.3, "cves": [ "CVE-2026-31444", "CVE-2026-31477" ], "rank": 482 }, { "author": "Willem de Bruijn", "email": "willemb@google.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-22983", "CVE-2026-43057" ], "rank": 482 }, { "author": "Wongi Lee", "email": "qw3rtyp0@gmail.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-53362", "CVE-2026-53366" ], "rank": 482 }, { "author": "Woraphat Khiaodaeng", "email": "worapat.kd2@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72112", "CVE-2026-80811" ], "rank": 482 }, { "author": "Xingui Yang", "email": "yangxingui@huawei.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43413", "CVE-2026-74555" ], "rank": 482 }, { "author": "Xiubo Li", "email": "xiubo.li@clyso.com", "cve_count": 2, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 19.6, "cves": [ "CVE-2026-89654", "CVE-2026-89655" ], "rank": 482 }, { "author": "Yangyu Chen", "email": "cyy@cyyself.name", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74622", "CVE-2026-74623" ], "rank": 482 }, { "author": "Yao Kai", "email": "yaokai34@huawei.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45957", "CVE-2026-80776" ], "rank": 482 }, { "author": "Ye Bin", "email": "yebin10@huawei.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-43068", "CVE-2026-52967" ], "rank": 482 }, { "author": "Yilin Zhu", "email": "zylzyl2333@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46172", "CVE-2026-52930" ], "rank": 482 }, { "author": "Yiming Qian", "email": "yimingqian591@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 18.2, "cves": [ "CVE-2026-53266", "CVE-2026-63830" ], "rank": 482 }, { "author": "Yongchao Wu", "email": "yongchao.wu@autochips.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31754", "CVE-2026-31755" ], "rank": 482 }, { "author": "Yongqiang Sun", "email": "yongqiang.sun@amd.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 14.9, "cves": [ "CVE-2026-68257", "CVE-2026-68447" ], "rank": 482 }, { "author": "Youngjun Park", "email": "youngjun.park@lge.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31567", "CVE-2026-89760" ], "rank": 482 }, { "author": "Yuanhe Shu", "email": "xiangzao@linux.alibaba.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64451", "CVE-2026-80620" ], "rank": 482 }, { "author": "Yucheng Lu", "email": "kanolyc@gmail.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31675", "CVE-2026-46033" ], "rank": 482 }, { "author": "Yun Lu", "email": "luyun@kylinos.cn", "cve_count": 2, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-23126", "CVE-2026-74545" ], "rank": 482 }, { "author": "Yuyang Huang", "email": "yuyanghuang@google.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-64423", "CVE-2026-74371" ], "rank": 482 }, { "author": "Zhan Xusheng", "email": "zhanxusheng1024@gmail.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72068", "CVE-2026-89490" ], "rank": 482 }, { "author": "Zhenhao Wan", "email": "whi4ed0g@gmail.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 16.2, "cves": [ "CVE-2026-64269", "CVE-2026-89571" ], "rank": 482 }, { "author": "Zhihao Cheng", "email": "chengzhihao1@huawei.com", "cve_count": 2, "critical": 1, "high": 1, "scored": 2, "cvss_sum_indicative": 16.9, "cves": [ "CVE-2026-43071", "CVE-2026-64108" ], "rank": 482 }, { "author": "Zhu Lingshan", "email": "lingshan.zhu@amd.com", "cve_count": 2, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-68103", "CVE-2026-68234" ], "rank": 482 }, { "author": "Zi Yan", "email": "ziy@nvidia.com", "cve_count": 2, "critical": 0, "high": 2, "scored": 2, "cvss_sum_indicative": 15.6, "cves": [ "CVE-2026-72027", "CVE-2026-80718" ], "rank": 482 }, { "author": "Zide Chen", "email": "zide.chen@intel.com", "cve_count": 2, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43079", "CVE-2026-43344" ], "rank": 482 }, { "author": "ziming zhang", "email": "ezrakiez@gmail.com", "cve_count": 2, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 19.6, "cves": [ "CVE-2026-22984", "CVE-2026-43125" ], "rank": 482 }, { "author": "Zisen Ye", "email": "zisenye@stu.xidian.edu.cn", "cve_count": 2, "critical": 2, "high": 0, "scored": 2, "cvss_sum_indicative": 18.2, "cves": [ "CVE-2026-46155", "CVE-2026-46185" ], "rank": 482 }, { "author": "Aaradhana Sahu", "email": "aaradhana.sahu@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46248" ], "rank": 720 }, { "author": "Aaron Sacks", "email": "contact@xchglabs.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52969" ], "rank": 720 }, { "author": "Aaron Tomlin", "email": "atomlin@atomlin.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72181" ], "rank": 720 }, { "author": "Abdifatah Suruur", "email": "suruurism@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-80724" ], "rank": 720 }, { "author": "Abhijit Gangurde", "email": "abhijit.gangurde@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89509" ], "rank": 720 }, { "author": "Abhishek Bapat", "email": "abhishekbapat@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45895" ], "rank": 720 }, { "author": "Abhishek Kumar", "email": "abhishek_sts8@yahoo.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31583" ], "rank": 720 }, { "author": "Aditya Chillara", "email": "aditya.chillara@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74637" ], "rank": 720 }, { "author": "Aditya Prakash Srivastava", "email": "aditya.ansh182@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74308" ], "rank": 720 }, { "author": "Adrian Moreno", "email": "amorenoz@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53227" ], "rank": 720 }, { "author": "Ahmad Byagowi", "email": "ahmadexp@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74603" ], "rank": 720 }, { "author": "Ahmad Fatoum", "email": "a.fatoum@pengutronix.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80999" ], "rank": 720 }, { "author": "Ahsan Atta", "email": "ahsan.atta@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64305" ], "rank": 720 }, { "author": "Akif", "email": "akif.sait111@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53010" ], "rank": 720 }, { "author": "Alban Bedel", "email": "alban.bedel@lht.dlh.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23357" ], "rank": 720 }, { "author": "Aleksandr Khromov", "email": "haa@amicon.ru", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-81001" ], "rank": 720 }, { "author": "Aleksandr Loktionov", "email": "aleksandr.loktionov@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68128" ], "rank": 720 }, { "author": "Aleksandrova Alyona", "email": "aga@itb.spb.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72414" ], "rank": 720 }, { "author": "Alex Dvoretsky", "email": "advoretsky@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31691" ], "rank": 720 }, { "author": "Alex Hung", "email": "alex.hung@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31461" ], "rank": 720 }, { "author": "Alexander Aring", "email": "aahringo@redhat.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74401" ], "rank": 720 }, { "author": "Alexander Konyukhov", "email": "alexander.konyukhov@kaspersky.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-53068" ], "rank": 720 }, { "author": "Alexander Popov", "email": "alex.popov@linux.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31695" ], "rank": 720 }, { "author": "Alexander Stein", "email": "alexander.stein@ew.tq-group.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31439" ], "rank": 720 }, { "author": "Alexander Sverdlin", "email": "alexander.sverdlin@siemens.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64230" ], "rank": 720 }, { "author": "Alexey Simakov", "email": "bigalex934@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45982" ], "rank": 720 }, { "author": "Alexis Lothor\u00e9 (eBPF Foundation)", "email": "alexis.lothore@bootlin.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-64235" ], "rank": 720 }, { "author": "Ali Ahmet MEMIS", "email": "dev@unknownbbqr.xyz", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-80663" ], "rank": 720 }, { "author": "Ali Ganiyev", "email": "ali.qaniyev@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-63909" ], "rank": 720 }, { "author": "Ali Norouzi", "email": "ali.norouzi@keysight.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-31570" ], "rank": 720 }, { "author": "Alice Mikityanska", "email": "alice@isovalent.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43080" ], "rank": 720 }, { "author": "Amir Shetaia", "email": "amir.shetaia@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46229" ], "rank": 720 }, { "author": "Amirreza Zarrabi", "email": "amirreza.zarrabi@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53273" ], "rank": 720 }, { "author": "Amit Matityahu", "email": "amitmat@amazon.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-53180" ], "rank": 720 }, { "author": "Ammar Faizi", "email": "ammarfaizi2@openresty.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64457" ], "rank": 720 }, { "author": "Anand Khoje", "email": "anand.a.khoje@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80779" ], "rank": 720 }, { "author": "Anand Moon", "email": "linux.amoon@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68223" ], "rank": 720 }, { "author": "Anandu Krishnan E", "email": "anandu.e@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53161" ], "rank": 720 }, { "author": "Anas Iqbal", "email": "mohd.abd.6602@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43069" ], "rank": 720 }, { "author": "Anastasia Tishchenko", "email": "sv3iry@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-64313" ], "rank": 720 }, { "author": "Andre Heider", "email": "a.heider@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53336" ], "rank": 720 }, { "author": "Andreas Kemnade", "email": "andreas@kemnade.info", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80641" ], "rank": 720 }, { "author": "Andreas Schwab", "email": "schwab@suse.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53351" ], "rank": 720 }, { "author": "Andrew Cooper", "email": "andrew.cooper3@citrix.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23354" ], "rank": 720 }, { "author": "Andrew Fasano", "email": "andrew.fasano@nist.gov", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23111" ], "rank": 720 }, { "author": "Andrew Lunn", "email": "andrew@lunn.ch", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23368" ], "rank": 720 }, { "author": "Andrew Martin", "email": "andrew.martin@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53143" ], "rank": 720 }, { "author": "Andrey Albershteyn", "email": "aalbersh@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74596" ], "rank": 720 }, { "author": "Andrey Golovko", "email": "andrey.golovko@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74738" ], "rank": 720 }, { "author": "Andrii Kuchmenko", "email": "capyenglishlite@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64297" ], "rank": 720 }, { "author": "Andriy Korud", "email": "a.korud@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68235" ], "rank": 720 }, { "author": "Andr\u00e9 Draszik", "email": "andre.draszik@linaro.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46252" ], "rank": 720 }, { "author": "Andy Lutomirski", "email": "luto@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74674" ], "rank": 720 }, { "author": "Andy Shevchenko", "email": "andriy.shevchenko@linux.intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53307" ], "rank": 720 }, { "author": "AngeloGioacchino Del Regno", "email": "angelogioacchino.delregno@collabora.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72008" ], "rank": 720 }, { "author": "Anil Samal", "email": "anil.samal@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31565" ], "rank": 720 }, { "author": "Anirudh Prasad", "email": "icarus@a0rg.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89587" ], "rank": 720 }, { "author": "Anirudh Srinivasan", "email": "asrinivasan@oss.tenstorrent.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80688" ], "rank": 720 }, { "author": "Anna Maniscalco", "email": "anna.maniscalco2000@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53377" ], "rank": 720 }, { "author": "Anna Schumaker", "email": "anna.schumaker@hammerspace.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74730" ], "rank": 720 }, { "author": "Anshumali Gaur", "email": "agaur@marvell.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46249" ], "rank": 720 }, { "author": "Anthony Iliopoulos", "email": "ailiop@suse.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45983" ], "rank": 720 }, { "author": "Anton Danilov", "email": "littlesmilingcloud@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89565" ], "rank": 720 }, { "author": "Anton Leontev", "email": "leontyevantony@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-53199" ], "rank": 720 }, { "author": "Antony Antony", "email": "antony.antony@secunet.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-68420" ], "rank": 720 }, { "author": "Ao Sun", "email": "ao.sun@transsion.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80690" ], "rank": 720 }, { "author": "Ao Zhou", "email": "draw51280@163.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46053" ], "rank": 720 }, { "author": "Arjan van de Ven", "email": "arjan@linux.intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46276" ], "rank": 720 }, { "author": "Arnd Bergmann", "email": "arnd@arndb.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23085" ], "rank": 720 }, { "author": "Arseniy Krasnov", "email": "avkrasnov@rulkc.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72165" ], "rank": 720 }, { "author": "Arunpravin Paneer Selvam", "email": "arunpravin.paneerselvam@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72244" ], "rank": 720 }, { "author": "Ashutosh Dixit", "email": "ashutosh.dixit@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68267" ], "rank": 720 }, { "author": "Aswin Karuvally", "email": "aswin@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74467" ], "rank": 720 }, { "author": "Atish Patra", "email": "atishp@meta.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-72286" ], "rank": 720 }, { "author": "Aviel Zohar", "email": "avielzohar123@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74324" ], "rank": 720 }, { "author": "Badhri Jagan Sridharan", "email": "badhri@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64330" ], "rank": 720 }, { "author": "Bae Yeonju", "email": "iwasbaeyz@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52992" ], "rank": 720 }, { "author": "Baineng Shou", "email": "shoubaineng@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72095" ], "rank": 720 }, { "author": "Baokun Li", "email": "libaokun1@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43288" ], "rank": 720 }, { "author": "Baoli.Zhang", "email": "baoli.zhang@linux.intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72488" ], "rank": 720 }, { "author": "Baolin Wang", "email": "baolin.wang@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31648" ], "rank": 720 }, { "author": "Barnab\u00e1s P\u0151cze", "email": "barnabas.pocze+renesas@ideasonboard.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53380" ], "rank": 720 }, { "author": "Ben Dooks", "email": "ben.dooks@codethink.co.uk", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64349" ], "rank": 720 }, { "author": "Ben Horgan", "email": "ben.horgan@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23433" ], "rank": 720 }, { "author": "Ben Hutchings", "email": "benh@debian.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63942" ], "rank": 720 }, { "author": "Ben Levinsky", "email": "ben.levinsky@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46016" ], "rank": 720 }, { "author": "Ben Morris", "email": "bmorris@anthropic.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46227" ], "rank": 720 }, { "author": "Benjamin Gaignard", "email": "benjamin.gaignard@collabora.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43222" ], "rank": 720 }, { "author": "Benjamin Tissoires", "email": "bentiss@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31401" ], "rank": 720 }, { "author": "Beno\u00eet Monin", "email": "benoit.monin@bootlin.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63929" ], "rank": 720 }, { "author": "Bernard Metzler", "email": "bernard.metzler@linux.dev", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74345" ], "rank": 720 }, { "author": "Bert Karwatzki", "email": "spasswolf@web.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23264" ], "rank": 720 }, { "author": "Bharath Reddy", "email": "kbreddy.rpbc@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53252" ], "rank": 720 }, { "author": "Bharath SM", "email": "bharathsm@microsoft.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-43362" ], "rank": 720 }, { "author": "Bhargav Joshi", "email": "j.bhargav.u@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72153" ], "rank": 720 }, { "author": "Binbin Wu", "email": "binbin.wu@linux.intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72285" ], "rank": 720 }, { "author": "Binbin Zhou", "email": "zhoubinbin@loongson.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80748" ], "rank": 720 }, { "author": "Bingbu Cao", "email": "bingbu.cao@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43177" ], "rank": 720 }, { "author": "Bingquan Chen", "email": "patzilla007@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31700" ], "rank": 720 }, { "author": "Bjoern Doebel", "email": "doebel@amazon.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46139" ], "rank": 720 }, { "author": "Bo Sun", "email": "bo@mboxify.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43157" ], "rank": 720 }, { "author": "Bobby Eshleman", "email": "bobbyeshleman@meta.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74698" ], "rank": 720 }, { "author": "Brandon Brnich", "email": "b-brnich@ti.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68228" ], "rank": 720 }, { "author": "Brian Foster", "email": "bfoster@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45920" ], "rank": 720 }, { "author": "Cao Guanghui", "email": "caoguanghui@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72316" ], "rank": 720 }, { "author": "Carlo Caione", "email": "ccaione@baylibre.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74491" ], "rank": 720 }, { "author": "Casey Chen", "email": "cachen@purestorage.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64232" ], "rank": 720 }, { "author": "Catalin Marinas", "email": "catalin.marinas@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23345" ], "rank": 720 }, { "author": "Ce Sun", "email": "cesun102@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68104" ], "rank": 720 }, { "author": "Cengiz Can", "email": "cengiz.can@canonical.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80563" ], "rank": 720 }, { "author": "Chad Monroe", "email": "chad@monroe.io", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53100" ], "rank": 720 }, { "author": "Chaitanya Mishra", "email": "chaitanyamishra.ai@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45978" ], "rank": 720 }, { "author": "Chaitanya Sabnis", "email": "chaitanya.msabnis@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64236" ], "rank": 720 }, { "author": "Chandrakanth Patil", "email": "chandrakanth.patil@broadcom.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74526" ], "rank": 720 }, { "author": "chanyoung", "email": "ppoo1220@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74610" ], "rank": 720 }, { "author": "Charlene Liu", "email": "charlene.liu@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43320" ], "rank": 720 }, { "author": "Charles Haithcock", "email": "chaithco@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23369" ], "rank": 720 }, { "author": "Charles Vosburgh", "email": "trilobyte777@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-80717" ], "rank": 720 }, { "author": "Chen Changcheng", "email": "chenchangcheng@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68150" ], "rank": 720 }, { "author": "Chen Jinghuang", "email": "chenjinghuang2@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45919" ], "rank": 720 }, { "author": "Chen Linxuan", "email": "me@black-desk.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89766" ], "rank": 720 }, { "author": "Chen YanJun", "email": "moomichen@tencent.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64566" ], "rank": 720 }, { "author": "Chen-Yu Tsai", "email": "wenst@chromium.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63862" ], "rank": 720 }, { "author": "Cheng Yongkang", "email": "teel4res@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68363" ], "rank": 720 }, { "author": "Cheng-Yang Chou", "email": "yphbchou0911@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43438" ], "rank": 720 }, { "author": "Cheng-Yu Lee", "email": "cylee12@realtek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23071" ], "rank": 720 }, { "author": "Chengchang Tang", "email": "tangchengchang@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-46265" ], "rank": 720 }, { "author": "Chenghao Duan", "email": "duanchenghao@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46013" ], "rank": 720 }, { "author": "ChenXiaoSong", "email": "chenxiaosong@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23205" ], "rank": 720 }, { "author": "Chi Wang", "email": "wangchi@kylinos.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-64435" ], "rank": 720 }, { "author": "Chia-Yu Chang", "email": "chia-yu.chang@nokia-bell-labs.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52997" ], "rank": 720 }, { "author": "Chiara Meiohas", "email": "cmeiohas@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45973" ], "rank": 720 }, { "author": "Chris Bainbridge", "email": "chris.bainbridge@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23190" ], "rank": 720 }, { "author": "Chris Down", "email": "chris@chrisdown.name", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31397" ], "rank": 720 }, { "author": "Christian Marangi", "email": "ansuelsmth@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80993" ], "rank": 720 }, { "author": "Christoph B\u00f6hmwalder", "email": "christoph.boehmwalder@linbit.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23285" ], "rank": 720 }, { "author": "Christophe JAILLET", "email": "christophe.jaillet@wanadoo.fr", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68412" ], "rank": 720 }, { "author": "Chun-Yi Lee", "email": "jlee@suse.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89745" ], "rank": 720 }, { "author": "Chuyi Zhou", "email": "zhouchuyi@bytedance.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68438" ], "rank": 720 }, { "author": "Chwee-Lin Choong", "email": "chwee.lin.choong@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23122" ], "rank": 720 }, { "author": "Cl\u00e9ment L\u00e9ger", "email": "cleger@meta.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53191" ], "rank": 720 }, { "author": "Cole Leavitt", "email": "cole@unwrap.rs", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64037" ], "rank": 720 }, { "author": "Colin Ian King", "email": "colin.i.king@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45857" ], "rank": 720 }, { "author": "Coly Li", "email": "colyli@fygo.io", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89557" ], "rank": 720 }, { "author": "Cong Nguyen", "email": "congnt264@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89522" ], "rank": 720 }, { "author": "Cristian Marussi", "email": "cristian.marussi@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31544" ], "rank": 720 }, { "author": "Crystal Wood", "email": "crwood@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72012" ], "rank": 720 }, { "author": "Cunhao Lu", "email": "1579567540@qq.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74654" ], "rank": 720 }, { "author": "Cunlong Li", "email": "shenxiaogll@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53185" ], "rank": 720 }, { "author": "C\u00e9dric Bellegarde", "email": "cedric.bellegarde@adishatz.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43204" ], "rank": 720 }, { "author": "D Scott Phillips", "email": "scott@os.amperecomputing.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80699" ], "rank": 720 }, { "author": "D. Wythe", "email": "alibuda@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46330" ], "rank": 720 }, { "author": "Dai Ngo", "email": "dai.ngo@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-53026" ], "rank": 720 }, { "author": "Daisuke Matsuda", "email": "matsuda@preferred.jp", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89730" ], "rank": 720 }, { "author": "Damien Le Moal", "email": "dlemoal@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45855" ], "rank": 720 }, { "author": "Dan Carpenter", "email": "dan.carpenter@linaro.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-52907" ], "rank": 720 }, { "author": "Dang Huynh", "email": "dang.huynh@mainlining.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46222" ], "rank": 720 }, { "author": "Daniel Borkmann", "email": "borkmann@iogearbox.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89580" ], "rank": 720 }, { "author": "Daniel Jordan", "email": "daniel.m.jordan@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53314" ], "rank": 720 }, { "author": "Daniel Vogelbacher", "email": "daniel@chaospixel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23201" ], "rank": 720 }, { "author": "Daniel Wade", "email": "danjwade95@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31413" ], "rank": 720 }, { "author": "Daniele Ceraolo Spurio", "email": "daniele.ceraolospurio@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31784" ], "rank": 720 }, { "author": "Danila Chernetsov", "email": "listdansp@mail.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74362" ], "rank": 720 }, { "author": "Dapeng Mi", "email": "dapeng1.mi@linux.intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53370" ], "rank": 720 }, { "author": "Darvell Long", "email": "contact@darvell.me", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64478" ], "rank": 720 }, { "author": "David Ahern", "email": "dahern@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64009" ], "rank": 720 }, { "author": "David Arcari", "email": "darcari@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43401" ], "rank": 720 }, { "author": "David Dull", "email": "monderasdor@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-43452" ], "rank": 720 }, { "author": "David Laight", "email": "david.laight.linux@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74320" ], "rank": 720 }, { "author": "David Lechner", "email": "dlechner@baylibre.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31768" ], "rank": 720 }, { "author": "David Matlack", "email": "dmatlack@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80642" ], "rank": 720 }, { "author": "David Windsor", "email": "dwindsor@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74338" ], "rank": 720 }, { "author": "David Woodhouse", "email": "dwmw@amazon.co.uk", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53282" ], "rank": 720 }, { "author": "Dawid Osuchowski", "email": "dawid.osuchowski@linux.intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-72425" ], "rank": 720 }, { "author": "Dayu Jiang", "email": "jiangdayu@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43488" ], "rank": 720 }, { "author": "Debarghya Kundu", "email": "debarghyak@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23262" ], "rank": 720 }, { "author": "deepakraog", "email": "gaikwad.dcg@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68175" ], "rank": 720 }, { "author": "Denis Arefev", "email": "arefev@swemel.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63810" ], "rank": 720 }, { "author": "Denis Rastyogin", "email": "gerben@altlinux.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63838" ], "rank": 720 }, { "author": "Denis V. Lunev", "email": "den@openvz.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74523" ], "rank": 720 }, { "author": "Dhabaleshwar Das", "email": "dhabal123@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64008" ], "rank": 720 }, { "author": "Di Shen", "email": "di.shen@unisoc.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74405" ], "rank": 720 }, { "author": "Diego Fernando Mancera Gomez", "email": "diegomancera.dev@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68344" ], "rank": 720 }, { "author": "Diksha Kumari", "email": "dikshakdevgan@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43225" ], "rank": 720 }, { "author": "Dimitri Daskalakis", "email": "dimitri.daskalakis1@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45952" ], "rank": 720 }, { "author": "Ding Hui", "email": "dinghui@sangfor.com.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43314" ], "rank": 720 }, { "author": "Dinh Nguyen", "email": "dinguyen@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53204" ], "rank": 720 }, { "author": "Dmitry Bogdanov", "email": "d.bogdanov@yadro.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80862" ], "rank": 720 }, { "author": "Dmitry Morgun", "email": "d.morgun@ispras.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68355" ], "rank": 720 }, { "author": "Dmitry Osipenko", "email": "dmitry.osipenko@collabora.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53347" ], "rank": 720 }, { "author": "Dmitry Safonov", "email": "dima@arista.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53038" ], "rank": 720 }, { "author": "Dmitry Skorodumov", "email": "dskr99@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23103" ], "rank": 720 }, { "author": "Dmitry Vyukov", "email": "dvyukov@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74331" ], "rank": 720 }, { "author": "Dmytro Laktyushkin", "email": "dmytro.laktyushkin@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43243" ], "rank": 720 }, { "author": "Dmytro Maluka", "email": "dmaluka@chromium.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45862" ], "rank": 720 }, { "author": "Donet Tom", "email": "donettom@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31765" ], "rank": 720 }, { "author": "Dong Chenchen", "email": "dongchenchen2@huawei.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-72463" ], "rank": 720 }, { "author": "Dongjiang Zhu", "email": "zhudongjiang@fnnas.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74571" ], "rank": 720 }, { "author": "Dongli Zhang", "email": "dongli.zhang@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74684" ], "rank": 720 }, { "author": "Dust Li", "email": "dust.li@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72018" ], "rank": 720 }, { "author": "Eddie Phillips", "email": "eddiephillips@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-68129" ], "rank": 720 }, { "author": "Eder Zulian", "email": "ezulian@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64186" ], "rank": 720 }, { "author": "Edward Cree", "email": "ecree.xilinx@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23165" ], "rank": 720 }, { "author": "Ekansh Gupta", "email": "ekansh.gupta@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74647" ], "rank": 720 }, { "author": "Ella Ma", "email": "alansnape3058@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45959" ], "rank": 720 }, { "author": "Emil Svendsen", "email": "emas@bang-olufsen.dk", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23006" ], "rank": 720 }, { "author": "Emmanuel Grumbach", "email": "emmanuel.grumbach@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43325" ], "rank": 720 }, { "author": "Eric Badger", "email": "ebadger@purestorage.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43469" ], "rank": 720 }, { "author": "Ethan Nelson-Moore", "email": "enelsonmoore@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68473" ], "rank": 720 }, { "author": "ethanwu", "email": "ethanwu@synology.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43273" ], "rank": 720 }, { "author": "Eugenio P\u00e9rez", "email": "eperezma@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43248" ], "rank": 720 }, { "author": "Evangelos Petrongonas", "email": "epetron@amazon.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64167" ], "rank": 720 }, { "author": "Even Xu", "email": "even.xu@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23196" ], "rank": 720 }, { "author": "Fabian Godehardt", "email": "fg@emlix.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43319" ], "rank": 720 }, { "author": "Fabio Baltieri", "email": "fabio.baltieri@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43082" ], "rank": 720 }, { "author": "Fabio Estevam", "email": "festevam@nabladev.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80944" ], "rank": 720 }, { "author": "Fan XinRan", "email": "shinjiangjiang@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-74691" ], "rank": 720 }, { "author": "Fangyu Yu", "email": "fangyu.yu@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-53057" ], "rank": 720 }, { "author": "Fangzhi Zuo", "email": "jerry.zuo@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89773" ], "rank": 720 }, { "author": "Farhad Alemi", "email": "farhad.alemi@berkeley.edu", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72010" ], "rank": 720 }, { "author": "Felix Hoffmann", "email": "f3lix.dev@gmx.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80758" ], "rank": 720 }, { "author": "Feng Wu", "email": "wufengwufengwufeng@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72349" ], "rank": 720 }, { "author": "Feng Yang", "email": "yangfeng@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53111" ], "rank": 720 }, { "author": "Ferry Meng", "email": "mengferry@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64139" ], "rank": 720 }, { "author": "Finn Thain", "email": "fthain@linux-m68k.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23474" ], "rank": 720 }, { "author": "Florian Eckert", "email": "fe@dev.tdt.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23308" ], "rank": 720 }, { "author": "Fourie Zhang", "email": "littleddfu@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80837" ], "rank": 720 }, { "author": "Francois Dugast", "email": "francois.dugast@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72362" ], "rank": 720 }, { "author": "Frank Li", "email": "frank.li@nxp.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-72148" ], "rank": 720 }, { "author": "Frank Liang", "email": "xiliang@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23045" ], "rank": 720 }, { "author": "Fredric Cover", "email": "fredthedude@proton.me", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43112" ], "rank": 720 }, { "author": "Fredric Cover", "email": "fredric.cover.lkernel@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-89636" ], "rank": 720 }, { "author": "Gang Ba", "email": "gang.ba@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80703" ], "rank": 720 }, { "author": "Gang Yan", "email": "yangang@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46168" ], "rank": 720 }, { "author": "Gao Xiang", "email": "xiang@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80697" ], "rank": 720 }, { "author": "Gaole Zhang", "email": "gaole.zhang@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68362" ], "rank": 720 }, { "author": "Gautham R. Shenoy", "email": "gautham.shenoy@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53121" ], "rank": 720 }, { "author": "Geert Uytterhoeven", "email": "geert+renesas@glider.be", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80649" ], "rank": 720 }, { "author": "Geetha sowjanya", "email": "gakula@marvell.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43296" ], "rank": 720 }, { "author": "George Guo", "email": "guodongtai@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68435" ], "rank": 720 }, { "author": "George Saad", "email": "geoo115@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31702" ], "rank": 720 }, { "author": "George Wilson", "email": "gcwilson@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80571" ], "rank": 720 }, { "author": "George Zhang", "email": "george.zhang@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74449" ], "rank": 720 }, { "author": "Georgi Djakov", "email": "djakov@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23123" ], "rank": 720 }, { "author": "Georgi Djakov", "email": "georgi.djakov@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64244" ], "rank": 720 }, { "author": "Gerald Schaefer", "email": "gerald.schaefer@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72025" ], "rank": 720 }, { "author": "Gerd Rausch", "email": "gerd.rausch@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43226" ], "rank": 720 }, { "author": "Goldwyn Rodrigues", "email": "rgoldwyn@suse.de", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.1, "cves": [ "CVE-2026-43117" ], "rank": 720 }, { "author": "Govindarajulu Varadarajan", "email": "govind.varadar@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45962" ], "rank": 720 }, { "author": "Greg Jumper", "email": "greg.jumper@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53077" ], "rank": 720 }, { "author": "Gregor Herburger", "email": "gregor.herburger@linutronix.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68303" ], "rank": 720 }, { "author": "Guanghui Feng", "email": "guanghuifeng@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68329" ], "rank": 720 }, { "author": "Guannan Wang", "email": "wgnbuaa@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53398" ], "rank": 720 }, { "author": "Gui-Dong Han", "email": "hanguidong02@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23221" ], "rank": 720 }, { "author": "Guidong Han", "email": "2045gemini@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-89513" ], "rank": 720 }, { "author": "Guilherme Ivo Bozi", "email": "guilherme.bozi@usp.br", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72480" ], "rank": 720 }, { "author": "Guillaume Gonnet", "email": "ggonnet.linux@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-45932" ], "rank": 720 }, { "author": "Guillaume Morin", "email": "guillaume@morinfr.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-89593" ], "rank": 720 }, { "author": "Guoniu Zhou", "email": "guoniu.zhou@nxp.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68219" ], "rank": 720 }, { "author": "Guoniu Zhou", "email": "guoniu.zhou@oss.nxp.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72009" ], "rank": 720 }, { "author": "Guopeng Zhang", "email": "zhangguopeng@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89752" ], "rank": 720 }, { "author": "Guoyu Su", "email": "yss2813483011xxl@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43036" ], "rank": 720 }, { "author": "Gustavo A. R. Silva", "email": "gustavoars@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23143" ], "rank": 720 }, { "author": "Gustavo Sousa", "email": "gustavo.sousa@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46216" ], "rank": 720 }, { "author": "H. Nikolaus Schaller", "email": "hns@goldelico.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74463" ], "rank": 720 }, { "author": "Haixin Xu", "email": "jerryxucs@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52936" ], "rank": 720 }, { "author": "Haiyue Wang", "email": "haiyuewa@163.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43457" ], "rank": 720 }, { "author": "Hamza Mahfooz", "email": "hamzamahfooz@linux.microsoft.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-63913" ], "rank": 720 }, { "author": "Han Gao", "email": "gaohan@iscas.ac.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80648" ], "rank": 720 }, { "author": "Hang Nan", "email": "2122295973@qq.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-80914" ], "rank": 720 }, { "author": "Hangbin Liu", "email": "liuhangbin@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45970" ], "rank": 720 }, { "author": "Hannes Reinecke", "email": "hare@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23179" ], "rank": 720 }, { "author": "Hans de Goede", "email": "johannes.goede@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23101" ], "rank": 720 }, { "author": "Hao-Qun Huang", "email": "alvinhuang0603@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68084" ], "rank": 720 }, { "author": "Hao-Yu Yang", "email": "naup96721@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23415" ], "rank": 720 }, { "author": "Haocheng Yu", "email": "yuhaocheng035@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23248" ], "rank": 720 }, { "author": "Harish Kasiviswanathan", "email": "harish.kasiviswanathan@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68105" ], "rank": 720 }, { "author": "Harman Kalra", "email": "hkalra@marvell.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.9, "cves": [ "CVE-2026-72312" ], "rank": 720 }, { "author": "Harry Yoo", "email": "harry.yoo@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43285" ], "rank": 720 }, { "author": "Harshaka Narayana", "email": "harshaka.narayana@broadcom.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-68299" ], "rank": 720 }, { "author": "Harshit Varu", "email": "harshitvaru666@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-89554" ], "rank": 720 }, { "author": "Heiko Stuebner", "email": "heiko@sntech.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53152" ], "rank": 720 }, { "author": "Heinz Mauelshagen", "email": "heinzm@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43309" ], "rank": 720 }, { "author": "Hem Parekh", "email": "hemparekh1596@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-53390" ], "rank": 720 }, { "author": "Henri A", "email": "contact@henrialfonso.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64240" ], "rank": 720 }, { "author": "Henry Martin", "email": "bsdhenrymartin@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74694" ], "rank": 720 }, { "author": "Hilgad Montelo", "email": "hilgad.montelo@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89436" ], "rank": 720 }, { "author": "Himal Prasad Ghimiray", "email": "himal.prasad.ghimiray@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-68265" ], "rank": 720 }, { "author": "hongao", "email": "hongao@uniontech.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31556" ], "rank": 720 }, { "author": "Hongchen Zhang", "email": "zhanghongchen@loongson.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-72043" ], "rank": 720 }, { "author": "Hongjie Fang", "email": "hongjiefang@asrmicro.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74754" ], "rank": 720 }, { "author": "Hristo Venev", "email": "hristo@venev.name", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-52960" ], "rank": 720 }, { "author": "Hugh Dickins", "email": "hughd@google.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74591" ], "rank": 720 }, { "author": "Hugo Villeneuve", "email": "hvilleneuve@dimonoff.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43294" ], "rank": 720 }, { "author": "Hui Wang", "email": "hui.wang@canonical.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80876" ], "rank": 720 }, { "author": "Hui Zhu", "email": "zhuhui@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74327" ], "rank": 720 }, { "author": "Huiwen He", "email": "hehuiwen@kylinos.cn", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-68388" ], "rank": 720 }, { "author": "H\u00e5kon Bugge", "email": "haakon.bugge@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43230" ], "rank": 720 }, { "author": "Ian Ray", "email": "ian.ray@gehealthcare.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31545" ], "rank": 720 }, { "author": "Ian Rogers", "email": "irogers@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31782" ], "rank": 720 }, { "author": "Icenowy Zheng", "email": "zhengxingda@iscas.ac.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68260" ], "rank": 720 }, { "author": "Ilia Gavrilov", "email": "ilia.gavrilov@infotecs.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68322" ], "rank": 720 }, { "author": "Ilya Krutskih", "email": "devsec@tpz.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89575" ], "rank": 720 }, { "author": "Ilya Leoshkevich", "email": "iii@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53110" ], "rank": 720 }, { "author": "Imre Deak", "email": "imre.deak@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23467" ], "rank": 720 }, { "author": "Ingo Blechschmidt", "email": "iblech@speicherleck.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-72103" ], "rank": 720 }, { "author": "Inseo An", "email": "y0un9sa@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23231" ], "rank": 720 }, { "author": "Ira Weiny", "email": "ira.weiny@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31399" ], "rank": 720 }, { "author": "Ivan Abramov", "email": "i.abramov@mt-integration.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80616" ], "rank": 720 }, { "author": "Ivan Hu", "email": "ivan.hu@canonical.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46290" ], "rank": 720 }, { "author": "Ivan Vera", "email": "ivanverasantos@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31743" ], "rank": 720 }, { "author": "Ivaylo Dimitrov", "email": "ivo.g.dimitrov.75@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89594" ], "rank": 720 }, { "author": "Jack Wang", "email": "jinpu.wang@ionos.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43163" ], "rank": 720 }, { "author": "Jacky Bai", "email": "ping.bai@nxp.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31655" ], "rank": 720 }, { "author": "Jaewon Yang", "email": "yong010301@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72135" ], "rank": 720 }, { "author": "Jai Luthra", "email": "jai.luthra@ideasonboard.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43312" ], "rank": 720 }, { "author": "Jakub Sitnicki", "email": "jakub@cloudflare.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-80612" ], "rank": 720 }, { "author": "James Clark", "email": "james.clark@linaro.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80623" ], "rank": 720 }, { "author": "James Gao", "email": "jamesgao5@outlook.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74457" ], "rank": 720 }, { "author": "James Montgomery", "email": "james_montgomery@disroot.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68130" ], "rank": 720 }, { "author": "James Morse", "email": "james.morse@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53278" ], "rank": 720 }, { "author": "James Raphael Tiovalen", "email": "jamestiotio@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.9, "cves": [ "CVE-2026-68116" ], "rank": 720 }, { "author": "Jameson Thies", "email": "jthies@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-89470" ], "rank": 720 }, { "author": "Jamie Nguyen", "email": "jamien@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72470" ], "rank": 720 }, { "author": "Jan H\u00f6ppner", "email": "hoeppner@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80679" ], "rank": 720 }, { "author": "Jan Kiszka", "email": "jan.kiszka@siemens.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43475" ], "rank": 720 }, { "author": "Janosch Frank", "email": "frankja@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31568" ], "rank": 720 }, { "author": "Jared Kangas", "email": "jkangas@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46255" ], "rank": 720 }, { "author": "Jason Wang", "email": "jasowang@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72305" ], "rank": 720 }, { "author": "Jason Yang", "email": "jason98166@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89721" ], "rank": 720 }, { "author": "Javier Fernandez Pastrana", "email": "javier.pastrana@linutronix.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72134" ], "rank": 720 }, { "author": "Jayesh Choudhary", "email": "j-choudhary@ti.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53058" ], "rank": 720 }, { "author": "Jeffrey Altman", "email": "jaltman@auristor.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74435" ], "rank": 720 }, { "author": "Jeffrey Bencteux", "email": "jeff@bencteux.fr", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23241" ], "rank": 720 }, { "author": "Jens Emil Schulz \u00d8stergaard", "email": "jensemil.schulzostergaard@microchip.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72340" ], "rank": 720 }, { "author": "Jeremy Erazo", "email": "mendozayt13@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63896" ], "rank": 720 }, { "author": "Jeremy Linton", "email": "jeremy.linton@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64512" ], "rank": 720 }, { "author": "Jerry Wu", "email": "w.7erry@foxmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22982" ], "rank": 720 }, { "author": "Jhonraushan", "email": "raushan.jhon@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-72089" ], "rank": 720 }, { "author": "Jia Zhu", "email": "zhujia.zj@bytedance.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64146" ], "rank": 720 }, { "author": "Jia-Hong Su", "email": "s11242586@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23146" ], "rank": 720 }, { "author": "Jiacheng Yu", "email": "yujiacheng3@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89552" ], "rank": 720 }, { "author": "Jiakai Xu", "email": "xujiakai2025@iscas.ac.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80682" ], "rank": 720 }, { "author": "Jiaming Zhang", "email": "r772577952@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72403" ], "rank": 720 }, { "author": "Jian Shen", "email": "shenjian15@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45891" ], "rank": 720 }, { "author": "Jian Zhang", "email": "zhangjian.3032@bytedance.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43373" ], "rank": 720 }, { "author": "Jian Zhang", "email": "zhangjian496@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-74259" ], "rank": 720 }, { "author": "Jianan Huang", "email": "huangjianan@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53018" ], "rank": 720 }, { "author": "Jiang HongHui", "email": "jiang_hh2019@163.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80790" ], "rank": 720 }, { "author": "Jianhui Zhou", "email": "jianhuizzzzz@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31575" ], "rank": 720 }, { "author": "Jianyun Gao", "email": "jianyungao89@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80955" ], "rank": 720 }, { "author": "Jiayu Du", "email": "jiayu.riscv@isrc.iscas.ac.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46269" ], "rank": 720 }, { "author": "Jibin Zhang", "email": "jibin.zhang@mediatek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23154" ], "rank": 720 }, { "author": "Jie Gan", "email": "jie.gan@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72485" ], "rank": 720 }, { "author": "Jie Zhang", "email": "jzhang918@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45940" ], "rank": 720 }, { "author": "Jinchao Wang", "email": "wangjinchao600@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68370" ], "rank": 720 }, { "author": "Jinjiang Tu", "email": "tujinjiang@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31466" ], "rank": 720 }, { "author": "Jinliang Zheng", "email": "alexjlzheng@tencent.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46259" ], "rank": 720 }, { "author": "Jinqian Yang", "email": "yangjinqian1@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43261" ], "rank": 720 }, { "author": "Jinzhou Su", "email": "jinzhou.su@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43131" ], "rank": 720 }, { "author": "Jiucheng Xu", "email": "jiucheng.xu@amlogic.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-31467" ], "rank": 720 }, { "author": "Joel Fernandes", "email": "joelagnelf@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43115" ], "rank": 720 }, { "author": "John B. Moore", "email": "jbmoore61@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46220" ], "rank": 720 }, { "author": "John Garry", "email": "john.g.garry@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43212" ], "rank": 720 }, { "author": "John Harrison", "email": "john.harrison@igalia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-80749" ], "rank": 720 }, { "author": "John Hubbard", "email": "jhubbard@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64596" ], "rank": 720 }, { "author": "John Walker", "email": "johnwalker0@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64174" ], "rank": 720 }, { "author": "Jon Doron", "email": "jond@wiz.io", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23163" ], "rank": 720 }, { "author": "Jonas Jelonek", "email": "jelonek.jonas@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64248" ], "rank": 720 }, { "author": "Jonas K\u00f6ppeler", "email": "j.koeppeler@tu-berlin.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74742" ], "rank": 720 }, { "author": "Jonathan Rissanen", "email": "jonathan.rissanen@axis.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53073" ], "rank": 720 }, { "author": "Joonwon Kang", "email": "joonwonkang@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43281" ], "rank": 720 }, { "author": "Jordan Rhee", "email": "jordanrhee@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80564" ], "rank": 720 }, { "author": "Jordan Walters", "email": "jaggyaur@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74302" ], "rank": 720 }, { "author": "Jorijn van der Graaf", "email": "jorijnvdgraaf@catcrafts.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-80997" ], "rank": 720 }, { "author": "Jose Maria Casanova Crespo", "email": "jmcasanova@igalia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74454" ], "rank": 720 }, { "author": "Josef Bacik", "email": "josef@toxicpanda.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43054" ], "rank": 720 }, { "author": "Josh Hunt", "email": "johunt@akamai.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46050" ], "rank": 720 }, { "author": "Josh Poimboeuf", "email": "jpoimboe@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23215" ], "rank": 720 }, { "author": "Joshua Hahn", "email": "joshua.hahnjy@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43286" ], "rank": 720 }, { "author": "Joshua Klinesmith", "email": "joshuaklinesmith@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53046" ], "rank": 720 }, { "author": "Judith Mendez", "email": "jm@ti.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53344" ], "rank": 720 }, { "author": "Jun Seo", "email": "jun.seo.93@proton.me", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23318" ], "rank": 720 }, { "author": "Juno Choi", "email": "juno.choi@lge.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31756" ], "rank": 720 }, { "author": "Junxian Huang", "email": "huangjunxian6@hisilicon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80625" ], "rank": 720 }, { "author": "Junxiao Bi", "email": "junxiao.bi@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23296" ], "rank": 720 }, { "author": "Junyoung Jang", "email": "graypanda.inzag@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64074" ], "rank": 720 }, { "author": "Juri Lelli", "email": "juri.lelli@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23371" ], "rank": 720 }, { "author": "Justin Lai", "email": "justinlai0215@realtek.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-68120" ], "rank": 720 }, { "author": "Justin Suess", "email": "utilityemal77@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74314" ], "rank": 720 }, { "author": "Justin Tee", "email": "justintee8345@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23376" ], "rank": 720 }, { "author": "KaFai Wan", "email": "kafai.wan@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72401" ], "rank": 720 }, { "author": "Kai Aizen", "email": "kai@snailsploit.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43121" ], "rank": 720 }, { "author": "Kai Ma", "email": "k4729.23098@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46101" ], "rank": 720 }, { "author": "Kaitao Cheng", "email": "chengkaitao@kylinos.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74344" ], "rank": 720 }, { "author": "Kalpan Jani", "email": "kalpan.jani@mpiricsoftware.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-68170" ], "rank": 720 }, { "author": "Kamal Dasu", "email": "kamal.dasu@broadcom.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-23434" ], "rank": 720 }, { "author": "Kamal Heib", "email": "kheib@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43282" ], "rank": 720 }, { "author": "Kanglong Wang", "email": "wangkanglong@loongson.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68185" ], "rank": 720 }, { "author": "Kari Argillander", "email": "kari.argillander@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45926" ], "rank": 720 }, { "author": "Karol Wachowski", "email": "karol.wachowski@linux.intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43498" ], "rank": 720 }, { "author": "Karthikeyan KS", "email": "karthiproffesional@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74729" ], "rank": 720 }, { "author": "Kartik Rajput", "email": "kkartik@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-72149" ], "rank": 720 }, { "author": "Kaushlendra Kumar", "email": "kaushlendra.kumar@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23260" ], "rank": 720 }, { "author": "Kean Ren", "email": "rh_king@163.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53348" ], "rank": 720 }, { "author": "Kefeng Wang", "email": "wangkefeng.wang@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80686" ], "rank": 720 }, { "author": "Keita Morisaki", "email": "kmta1236@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53008" ], "rank": 720 }, { "author": "Keno Fischer", "email": "keno@juliacomputing.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74658" ], "rank": 720 }, { "author": "Keshav Verma", "email": "iganschel@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80591" ], "rank": 720 }, { "author": "Ketan", "email": "ketan.kishore@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64295" ], "rank": 720 }, { "author": "Kevin Tian", "email": "kevin.tian@intel.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.3, "cves": [ "CVE-2026-89448" ], "rank": 720 }, { "author": "Kito Xu (veritas501)", "email": "hxzene@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63981" ], "rank": 720 }, { "author": "Kommula Shiva Shankar", "email": "kshankar@marvell.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23046" ], "rank": 720 }, { "author": "Konstantin Khorenko", "email": "khorenko@virtuozzo.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-63825" ], "rank": 720 }, { "author": "Kotlyarov Mihail", "email": "mihailkotlyarow@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43090" ], "rank": 720 }, { "author": "Kuan-Chung Chen", "email": "damon.chen@realtek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43267" ], "rank": 720 }, { "author": "Kuan-Ting Chen", "email": "h3xrabbit@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43284" ], "rank": 720 }, { "author": "Kuan-Wei Chiu", "email": "visitorckw@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-81008" ], "rank": 720 }, { "author": "Kumar Kartikeya Dwivedi", "email": "memxor@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74686" ], "rank": 720 }, { "author": "Kunihiko Hayashi", "email": "hayashi.kunihiko@socionext.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-72133" ], "rank": 720 }, { "author": "Kwok Kin Ming", "email": "kenkinming2002@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23178" ], "rank": 720 }, { "author": "Kyumin Lee", "email": "fyonglkm@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80713" ], "rank": 720 }, { "author": "Lance Yang", "email": "lance.yang@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46017" ], "rank": 720 }, { "author": "Lars Ellenberg", "email": "lars.ellenberg@linbit.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23356" ], "rank": 720 }, { "author": "Lars P\u00f6schel", "email": "lars.poeschel@edag.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74276" ], "rank": 720 }, { "author": "Lars-Peter Clausen", "email": "lars@metafoo.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-64496" ], "rank": 720 }, { "author": "Lee Jia Jie", "email": "jiajie.lee@starlabs.sg", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64300" ], "rank": 720 }, { "author": "leixiang", "email": "leixiang@kylinos.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-72283" ], "rank": 720 }, { "author": "Leo Martins", "email": "loemra.dev@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68442" ], "rank": 720 }, { "author": "Leon Hwang", "email": "leon.hwang@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53095" ], "rank": 720 }, { "author": "Leon Yen", "email": "leon.yen@mediatek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46136" ], "rank": 720 }, { "author": "Li Jun", "email": "lijun01@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31559" ], "rank": 720 }, { "author": "LI Qingwu", "email": "qing-wu.li@leica-geosystems.com.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23197" ], "rank": 720 }, { "author": "Lianjie Wang", "email": "karin0.zst@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45949" ], "rank": 720 }, { "author": "Liav Mordouch", "email": "liavmordouch@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31742" ], "rank": 720 }, { "author": "Lin Jiapeng", "email": "ljp1205831794@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-80530" ], "rank": 720 }, { "author": "Lin YuChen", "email": "starpt.official@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-31626" ], "rank": 720 }, { "author": "Lincoln Wallace", "email": "locnnil0@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74671" ], "rank": 720 }, { "author": "Linfeng Sun", "email": "slf@hdu.edu.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74703" ], "rank": 720 }, { "author": "Linfeng Sun", "email": "linfeng.sun.dev@gamil.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74713" ], "rank": 720 }, { "author": "Link Lin", "email": "linkl@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74481" ], "rank": 720 }, { "author": "Linkai Gong", "email": "gonglinkai@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89514" ], "rank": 720 }, { "author": "Linpu Yu", "email": "linpu5433@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-52923" ], "rank": 720 }, { "author": "liuxixin", "email": "gliuxen@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74361" ], "rank": 720 }, { "author": "Liviu Dudau", "email": "liviu.dudau@arm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74393" ], "rank": 720 }, { "author": "Liwei Song", "email": "liwei.song@windriver.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43410" ], "rank": 720 }, { "author": "Loic Poulain", "email": "loic.poulain@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43347" ], "rank": 720 }, { "author": "Long Li", "email": "longli@microsoft.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46084" ], "rank": 720 }, { "author": "Lord Ulf Henrik Holmberg", "email": "henrik.holmberg@defensify.se", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74584" ], "rank": 720 }, { "author": "Lorenzo Stoakes", "email": "lorenzo.stoakes@oracle.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23077" ], "rank": 720 }, { "author": "Lothar Rubusch", "email": "l.rubusch@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74402" ], "rank": 720 }, { "author": "Louis-Alexis Eyraud", "email": "louisalexis.eyraud@collabora.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64358" ], "rank": 720 }, { "author": "Lu Yao", "email": "yaolu@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23051" ], "rank": 720 }, { "author": "Luca Coelho", "email": "luciano.coelho@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68429" ], "rank": 720 }, { "author": "Luca Leonardo Scorcia", "email": "l.scorcia@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31562" ], "rank": 720 }, { "author": "Lucas De Marchi", "email": "ldemarchi@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80923" ], "rank": 720 }, { "author": "Lucas Tsai", "email": "lucas_tsai@richtek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74271" ], "rank": 720 }, { "author": "Luigi Santivetti", "email": "luigi.santivetti@imgtec.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68261" ], "rank": 720 }, { "author": "Luis Henriques", "email": "luis@igalia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53311" ], "rank": 720 }, { "author": "Luo Haiyang", "email": "luo.haiyang@zte.com.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31480" ], "rank": 720 }, { "author": "Lyes Bourennani", "email": "lbourennani@fuzzinglabs.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-46198" ], "rank": 720 }, { "author": "Ma Ke", "email": "make_ruc2021@163.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89473" ], "rank": 720 }, { "author": "Maarten Lankhorst", "email": "dev@lankhorst.se", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80915" ], "rank": 720 }, { "author": "Maciej Patelczyk", "email": "maciej.patelczyk@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-63863" ], "rank": 720 }, { "author": "Maciek Borzecki", "email": "maciek.borzecki@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-72455" ], "rank": 720 }, { "author": "Magnus Lindholm", "email": "linmag7@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43258" ], "rank": 720 }, { "author": "Mahanta Jambigi", "email": "mjambigi@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74719" ], "rank": 720 }, { "author": "Maher Sanalla", "email": "msanalla@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74297" ], "rank": 720 }, { "author": "Mahesh Vaidya", "email": "mahesh.vaidya@altera.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64462" ], "rank": 720 }, { "author": "Maksym Pikhotskyi", "email": "mpikhotskyi@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72490" ], "rank": 720 }, { "author": "Malaya Kumar Rout", "email": "mrout@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23044" ], "rank": 720 }, { "author": "Manjunath Patil", "email": "manjunath.b.patil@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68139" ], "rank": 720 }, { "author": "Marco Baffo", "email": "marco@mandelbit.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68341" ], "rank": 720 }, { "author": "Marco Nenciarini", "email": "mnencia@kcore.it", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.0, "cves": [ "CVE-2026-64460" ], "rank": 720 }, { "author": "Marek Czernohous", "email": "marek@czernohous.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-89596" ], "rank": 720 }, { "author": "Mariano Baragiola", "email": "mbaragiola@linux.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74648" ], "rank": 720 }, { "author": "Mario Peter", "email": "mario.peter@leica-geosystems.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43250" ], "rank": 720 }, { "author": "Marios Makassikis", "email": "mmakassikis@freebox.fr", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43378" ], "rank": 720 }, { "author": "Mark Harmstone", "email": "mark@harmstone.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43393" ], "rank": 720 }, { "author": "Mark Tomlinson", "email": "mark.tomlinson@alliedtelesis.co.nz", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74733" ], "rank": 720 }, { "author": "Marouane El Moufid", "email": "eun0us@espilon.net", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80829" ], "rank": 720 }, { "author": "Martin Hecht", "email": "mhecht73@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68225" ], "rank": 720 }, { "author": "Martin KaFai Lau", "email": "martin.lau@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31503" ], "rank": 720 }, { "author": "Mashiro Chen", "email": "mashiro.chen@mailbox.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53082" ], "rank": 720 }, { "author": "Mateusz Nowicki", "email": "mateusz.nowicki@posteo.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-74383" ], "rank": 720 }, { "author": "Mathias Krause", "email": "minipli@grsecurity.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72419" ], "rank": 720 }, { "author": "matteo.cotifava", "email": "cotifavamatteo@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-43459" ], "rank": 720 }, { "author": "Matthew Brown", "email": "matthew@bargrove.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89646" ], "rank": 720 }, { "author": "Matthew Rosato", "email": "mjrosato@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-68454" ], "rank": 720 }, { "author": "Matthias Goergens", "email": "matthias.goergens@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80808" ], "rank": 720 }, { "author": "Matti Vaittinen", "email": "mazziesaccount@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72396" ], "rank": 720 }, { "author": "Mauricio Faria de Oliveira", "email": "mfo@igalia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68456" ], "rank": 720 }, { "author": "Max Boone", "email": "mboone@akamai.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31456" ], "rank": 720 }, { "author": "Maxime B\u00e9lair", "email": "maxime.belair@canonical.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80619" ], "rank": 720 }, { "author": "Maximilian Pezzullo", "email": "maximilianpezzullo@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43487" ], "rank": 720 }, { "author": "Md Haris Iqbal", "email": "haris.iqbal@ionos.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43184" ], "rank": 720 }, { "author": "Md Sadre Alam", "email": "md.alam@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80832" ], "rank": 720 }, { "author": "Meghana Malladi", "email": "m-malladi@ti.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-23453" ], "rank": 720 }, { "author": "Miaoqing Pan", "email": "miaoqing.pan@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74368" ], "rank": 720 }, { "author": "Michael Chan", "email": "michael.chan@broadcom.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-74697" ], "rank": 720 }, { "author": "Michael Liang", "email": "mliang@purestorage.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43278" ], "rank": 720 }, { "author": "Michael Roth", "email": "michael.roth@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-53360" ], "rank": 720 }, { "author": "Michael S. Tsirkin", "email": "mst@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.4, "cves": [ "CVE-2026-74356" ], "rank": 720 }, { "author": "Michael Tautschnig", "email": "tautschn@amazon.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64449" ], "rank": 720 }, { "author": "Michael Thalmeier", "email": "michael.thalmeier@hale.at", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.3, "cves": [ "CVE-2026-43291" ], "rank": 720 }, { "author": "Michael Wu", "email": "michael@allwinnertech.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74636" ], "rank": 720 }, { "author": "Michal Kosiorek", "email": "mkosiorek121@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46116" ], "rank": 720 }, { "author": "Michal Koutn\u00fd", "email": "mkoutny@suse.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63802" ], "rank": 720 }, { "author": "Michal Pecio", "email": "michal.pecio@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43290" ], "rank": 720 }, { "author": "Michal Swiatkowski", "email": "michal.swiatkowski@linux.intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23329" ], "rank": 720 }, { "author": "Michal Wilczynski", "email": "m.wilczynski@samsung.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31690" ], "rank": 720 }, { "author": "Micka\u00ebl Sala\u00fcn", "email": "mic@digikod.net", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46057" ], "rank": 720 }, { "author": "Miguel Pe\u00f1aranda", "email": "mig.penaranda07@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80824" ], "rank": 720 }, { "author": "Mihai Brodschi", "email": "m.brodschi@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80868" ], "rank": 720 }, { "author": "Mike Snitzer", "email": "snitzer@hammerspace.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46256" ], "rank": 720 }, { "author": "Mike Snitzer", "email": "snitzer@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-89711" ], "rank": 720 }, { "author": "Mikhail Lobanov", "email": "m.lobanov@rosa.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63811" ], "rank": 720 }, { "author": "Mimi Zohar", "email": "zohar@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-74592" ], "rank": 720 }, { "author": "Mingming Cao", "email": "mmc@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.6, "cves": [ "CVE-2026-46273" ], "rank": 720 }, { "author": "MingTao Huang", "email": "mintaohuang@tencent.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53094" ], "rank": 720 }, { "author": "Mingyou Chen", "email": "qby140326@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72346" ], "rank": 720 }, { "author": "Mingzhe Zou", "email": "mingzhe.zou@easystack.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31580" ], "rank": 720 }, { "author": "Minhong He", "email": "heminhong@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23442" ], "rank": 720 }, { "author": "Minseo Park", "email": "jacob.park.9436@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-31513" ], "rank": 720 }, { "author": "Minwoo Ra", "email": "raminwo0202@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31516" ], "rank": 720 }, { "author": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72155" ], "rank": 720 }, { "author": "Miquel Sabat\u00e9 Sol\u00e0", "email": "mssola@mssola.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23423" ], "rank": 720 }, { "author": "Mirela Rabulea", "email": "mirela.rabulea@nxp.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68205" ], "rank": 720 }, { "author": "Mohammad Heib", "email": "mheib@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22979" ], "rank": 720 }, { "author": "Moksh Panicker", "email": "mokshpanicker.7@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68190" ], "rank": 720 }, { "author": "Muhammad Alifa Ramdhan", "email": "ramdhan@starlabs.sg", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-31533" ], "rank": 720 }, { "author": "Muhammad Hammad Ijaz", "email": "mhijaz@amazon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23438" ], "rank": 720 }, { "author": "Muhammet Kaan KILIN\u00c7", "email": "muhammetkaankilinc@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-74578" ], "rank": 720 }, { "author": "Nam Cao", "email": "namcao@linutronix.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23287" ], "rank": 720 }, { "author": "Namhyung Kim", "email": "namhyung@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23311" ], "rank": 720 }, { "author": "Narayana Murty N", "email": "nnmlinux@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45904" ], "rank": 720 }, { "author": "Nate Prodromou", "email": "nate@prodromou.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89714" ], "rank": 720 }, { "author": "Nicholas Dudar", "email": "main.kalliope@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68295" ], "rank": 720 }, { "author": "Nick Chan", "email": "towinchenmi@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72131" ], "rank": 720 }, { "author": "Nicolai Buchwitz", "email": "nb@tipi-net.de", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64125" ], "rank": 720 }, { "author": "Nicolas Escande", "email": "nico.escande@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64155" ], "rank": 720 }, { "author": "Nicol\u00f2 Coccia", "email": "n.coccia96@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53274" ], "rank": 720 }, { "author": "Niels Pressel", "email": "npressel@ethz.ch", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74749" ], "rank": 720 }, { "author": "Nikhil Gurudasani", "email": "nikhilgurudasani314@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89602" ], "rank": 720 }, { "author": "Niklas Schnelle", "email": "schnelle@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43147" ], "rank": 720 }, { "author": "Niklas S\u00f6derlund", "email": "niklas.soderlund+renesas@ragnatech.se", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43227" ], "rank": 720 }, { "author": "Nikol Kuklev", "email": "nikolk202@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-89679" ], "rank": 720 }, { "author": "Nikolaos Gkarlis", "email": "nickgarlis@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31692" ], "rank": 720 }, { "author": "Nikolay Aleksandrov", "email": "razor@blackwall.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23171" ], "rank": 720 }, { "author": "Nikolay Aleksandrov", "email": "nikolay@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45913" ], "rank": 720 }, { "author": "Nikunj A Dadhania", "email": "nikunj@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68093" ], "rank": 720 }, { "author": "Nirmoy Das", "email": "nirmoyd@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53174" ], "rank": 720 }, { "author": "Nitin Gote", "email": "nitin.r.gote@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68266" ], "rank": 720 }, { "author": "Norbert Manthey", "email": "nmanthey@amazon.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-64379" ], "rank": 720 }, { "author": "Oleg Nesterov", "email": "oleg@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80929" ], "rank": 720 }, { "author": "Olga Kornievskaia", "email": "okorniev@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22989" ], "rank": 720 }, { "author": "Or Har-Toov", "email": "ohartoov@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74718" ], "rank": 720 }, { "author": "Panagiotis Petrakopoulos", "email": "npetrakopoulos2003@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-74649" ], "rank": 720 }, { "author": "Paolo Valerio", "email": "pvalerio@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31494" ], "rank": 720 }, { "author": "Patrisious Haddad", "email": "phaddad@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43467" ], "rank": 720 }, { "author": "Paul Cercueil", "email": "paul@crapouillou.net", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64328" ], "rank": 720 }, { "author": "Paul Chaignon", "email": "paul.chaignon@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45886" ], "rank": 720 }, { "author": "Paul E. McKenney", "email": "paulmck@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64211" ], "rank": 720 }, { "author": "Paul Moore", "email": "paul@paul-moore.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-46054" ], "rank": 720 }, { "author": "Pavan Chebbi", "email": "pavan.chebbi@broadcom.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43260" ], "rank": 720 }, { "author": "Pawe\u0142 Narewski", "email": "pawel.narewski@nokia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22986" ], "rank": 720 }, { "author": "Pengfei Zhang", "email": "zhangfeionline@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72392" ], "rank": 720 }, { "author": "Penghe Geng", "email": "pgeng@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43484" ], "rank": 720 }, { "author": "Perry Yuan", "email": "perry.yuan@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23213" ], "rank": 720 }, { "author": "Peter Wang", "email": "peter.wang@mediatek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43471" ], "rank": 720 }, { "author": "Petko Manolov", "email": "petkan@nucleusys.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23021" ], "rank": 720 }, { "author": "Petr Vaganov", "email": "p.vaganov@ideco.ru", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89515" ], "rank": 720 }, { "author": "Petre Rodan", "email": "petre.rodan@subdimension.ro", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-46326" ], "rank": 720 }, { "author": "Phil Rosenthal", "email": "phil@phil.gs", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68428" ], "rank": 720 }, { "author": "Phil Sutter", "email": "phil@nwl.cc", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43454" ], "rank": 720 }, { "author": "Philipp Stanner", "email": "phasta@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72094" ], "rank": 720 }, { "author": "Philippe Schenker", "email": "philippe.schenker@impulsing.ch", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72060" ], "rank": 720 }, { "author": "Phillip Lougher", "email": "phillip@squashfs.org.uk", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23388" ], "rank": 720 }, { "author": "Pierre Barre", "email": "pierre@barre.sh", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.7, "cves": [ "CVE-2026-52906" ], "rank": 720 }, { "author": "Pierre-Eric Pelloux-Prayer", "email": "pierre-eric.pelloux-prayer@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43318" ], "rank": 720 }, { "author": "Piotr Jaroszynski", "email": "pjaroszynski@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43486" ], "rank": 720 }, { "author": "Pranjal Shrivastava", "email": "praan@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-74355" ], "rank": 720 }, { "author": "Prashanth K", "email": "prashanth.k@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43170" ], "rank": 720 }, { "author": "Pratap Nirujogi", "email": "pratap.nirujogi@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31572" ], "rank": 720 }, { "author": "Prathamesh Shete", "email": "pshete@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43311" ], "rank": 720 }, { "author": "Prathyushi Nangia", "email": "prathyushi.nangia@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-46174" ], "rank": 720 }, { "author": "Prithvi Tambewagh", "email": "activprithvi@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23292" ], "rank": 720 }, { "author": "Pu Lehui", "email": "pulehui@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68285" ], "rank": 720 }, { "author": "Qianyu Luo", "email": "qianyuluo3@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-72137" ], "rank": 720 }, { "author": "Qing Luo", "email": "luoqing@kylinos.cn", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-68300" ], "rank": 720 }, { "author": "Qingye Zhao", "email": "zhaoqingye@honor.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43439" ], "rank": 720 }, { "author": "Qiuxu Zhuo", "email": "qiuxu.zhuo@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80643" ], "rank": 720 }, { "author": "Quan Sun", "email": "2022090917019@std.uestc.edu.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64120" ], "rank": 720 }, { "author": "Quentin Schulz", "email": "quentin.schulz@cherry.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23305" ], "rank": 720 }, { "author": "Raf Dickson", "email": "rafdog35@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53181" ], "rank": 720 }, { "author": "Rafael Beims", "email": "rafael.beims@toradex.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68469" ], "rank": 720 }, { "author": "Rahul Bukte", "email": "rahul.bukte@sony.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31540" ], "rank": 720 }, { "author": "Rahul Chandelkar", "email": "rc@rexion.ai", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-63984" ], "rank": 720 }, { "author": "Rajat Gupta", "email": "rajgupt@qti.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-43497" ], "rank": 720 }, { "author": "Rajat Gupta", "email": "rajat.gupta@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46331" ], "rank": 720 }, { "author": "Ralph Boehme", "email": "slow@samba.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64388" ], "rank": 720 }, { "author": "Raman Varabets", "email": "kernel-linux-20260610-80b7ab08@raman.v1.sg", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80768" ], "rank": 720 }, { "author": "Randy Dunlap", "email": "rdunlap@infradead.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53306" ], "rank": 720 }, { "author": "Ranjan Kumar", "email": "kumarranja@chromium.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64275" ], "rank": 720 }, { "author": "Ranjani Sridharan", "email": "ranjani.sridharan@linux.intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43137" ], "rank": 720 }, { "author": "Raul E Rangel", "email": "rrangel@chromium.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43061" ], "rank": 720 }, { "author": "Raul Pazemecxas De Andrade", "email": "raul_pazemecxas@hotmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43388" ], "rank": 720 }, { "author": "Ravi Bangoria", "email": "ravi.bangoria@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53114" ], "rank": 720 }, { "author": "Ravi Hothi", "email": "ravi.hothi@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43412" ], "rank": 720 }, { "author": "Ricardo B. Marli\u00e8re", "email": "rbm@suse.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43441" ], "rank": 720 }, { "author": "Ricardo Ribalda", "email": "ribalda@chromium.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-68230" ], "rank": 720 }, { "author": "Ricardo Robaina", "email": "rrobaina@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-68096" ], "rank": 720 }, { "author": "Richard Chang", "email": "richardycc@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63951" ], "rank": 720 }, { "author": "Richard Cheng", "email": "icheng@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53042" ], "rank": 720 }, { "author": "Richard Davies", "email": "richard@arachsys.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80574" ], "rank": 720 }, { "author": "Richard Fitzgerald", "email": "rf@opensource.cirrus.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53350" ], "rank": 720 }, { "author": "Richard Genoud", "email": "richard.genoud@bootlin.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23463" ], "rank": 720 }, { "author": "Rick Edgecombe", "email": "rick.p.edgecombe@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46063" ], "rank": 720 }, { "author": "Rob Clark", "email": "robin.clark@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53054" ], "rank": 720 }, { "author": "Rob Herring (Arm)", "email": "robh@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68316" ], "rank": 720 }, { "author": "Robby Cai", "email": "robby.cai@nxp.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80745" ], "rank": 720 }, { "author": "Roberto Bergantinos Corpas", "email": "rbergant@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43470" ], "rank": 720 }, { "author": "Robin Murphy", "email": "robin.murphy@arm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43150" ], "rank": 720 }, { "author": "robin.kuo", "email": "robin.kuo@mediatek.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23211" ], "rank": 720 }, { "author": "Rochan Avlur", "email": "rochan.avlur@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80857" ], "rank": 720 }, { "author": "Ron de Bruijn", "email": "rmbruijn@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-72210" ], "rank": 720 }, { "author": "Ronald Claveau", "email": "linux-kernel-dev@aliel.fr", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53301" ], "rank": 720 }, { "author": "Rong Zhang", "email": "i@rong.moe", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63839" ], "rank": 720 }, { "author": "Rory Little", "email": "rory@candelatech.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53317" ], "rank": 720 }, { "author": "Roshan Kumar", "email": "roshaen09@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31472" ], "rank": 720 }, { "author": "Ruitong Liu", "email": "cnitlrt@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43238" ], "rank": 720 }, { "author": "Ryan Lin", "email": "ryan.lin@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45877" ], "rank": 720 }, { "author": "Ryan Roberts", "email": "ryan.roberts@arm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-31600" ], "rank": 720 }, { "author": "Ryan Wilbur", "email": "rwilbur633@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74653" ], "rank": 720 }, { "author": "Sachin Kumar", "email": "xcyfun@protonmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23417" ], "rank": 720 }, { "author": "Safa Karaku\u015f", "email": "safa.karakus@secunnix.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.0, "cves": [ "CVE-2026-53357" ], "rank": 720 }, { "author": "Sagi Grimberg", "email": "sagi@grimberg.me", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64535" ], "rank": 720 }, { "author": "Sahil Chandna", "email": "sahilchandna@linux.microsoft.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43097" ], "rank": 720 }, { "author": "Sai Ritvik Tanksalkar", "email": "stanksal@purdue.edu", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46253" ], "rank": 720 }, { "author": "Salomon Dushimirimana", "email": "salomondush@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23306" ], "rank": 720 }, { "author": "Sam Day", "email": "me@samcday.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64331" ], "rank": 720 }, { "author": "Sam James", "email": "sam@gentoo.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63805" ], "rank": 720 }, { "author": "Samasth Norway Ananda", "email": "samasth.norway.ananda@oracle.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23078" ], "rank": 720 }, { "author": "Sami Tolvanen", "email": "samitolvanen@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43306" ], "rank": 720 }, { "author": "Samuel Pitoiset", "email": "samuel.pitoiset@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80542" ], "rank": 720 }, { "author": "Sander Vanheule", "email": "sander@svanheule.net", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53065" ], "rank": 720 }, { "author": "Sang-Heon Jeon", "email": "ekffu200098@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80723" ], "rank": 720 }, { "author": "Sanghyun Park", "email": "sanghyun.park.cnu@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53239" ], "rank": 720 }, { "author": "Sanjay Chitroda", "email": "sanjayembeddedse@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72479" ], "rank": 720 }, { "author": "Santosh Kalluri", "email": "santosh.kalluri129@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53157" ], "rank": 720 }, { "author": "Sara Venkatesh", "email": "sarajvenkatesh@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74394" ], "rank": 720 }, { "author": "Satish Kharat", "email": "satishkh@cisco.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74725" ], "rank": 720 }, { "author": "Satyanarayana K V P", "email": "satyanarayana.k.v.p@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68305" ], "rank": 720 }, { "author": "Saurav Sachidanand", "email": "sauravsc@amazon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64171" ], "rank": 720 }, { "author": "Sayali Patil", "email": "sayalip@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64214" ], "rank": 720 }, { "author": "Sean Anderson", "email": "sean.anderson@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74437" ], "rank": 720 }, { "author": "Sean Shen", "email": "grayhat@foxmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52944" ], "rank": 720 }, { "author": "Sebastian Brzezinka", "email": "sebastian.brzezinka@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31656" ], "rank": 720 }, { "author": "Sebastian Ene", "email": "sebastianene@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68400" ], "rank": 720 }, { "author": "Sebastian Krzyszkowiak", "email": "sebastian.krzyszkowiak@puri.sm", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23373" ], "rank": 720 }, { "author": "Seiji Nishikawa", "email": "snishika@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-81005" ], "rank": 720 }, { "author": "Seohyeon Maeng", "email": "bioloidgp@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45991" ], "rank": 720 }, { "author": "Sergio Correia", "email": "scorreia@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53287" ], "rank": 720 }, { "author": "Sergio Paracuellos", "email": "sergio.paracuellos@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72062" ], "rank": 720 }, { "author": "Shahyan Soltani", "email": "shahyan.soltani@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68245" ], "rank": 720 }, { "author": "Shameer Kolothum", "email": "skolothumtho@nvidia.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80818" ], "rank": 720 }, { "author": "Shashank Balaji", "email": "shashank.mahadasyam@sony.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43363" ], "rank": 720 }, { "author": "Shelley Yang", "email": "shelley.yang@infineon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68304" ], "rank": 720 }, { "author": "Sheng Yong", "email": "shengyong1@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31514" ], "rank": 720 }, { "author": "Shenghao Yang", "email": "me@shenghaoyang.info", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23039" ], "rank": 720 }, { "author": "Sheroz Juraev", "email": "goodmartiandev@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-64175" ], "rank": 720 }, { "author": "Shihuang Liu", "email": "shlomojune6@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68152" ], "rank": 720 }, { "author": "Shiming Cheng", "email": "shiming.cheng@mediatek.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-68136" ], "rank": 720 }, { "author": "Shiraz Saleem", "email": "shiraz.saleem@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31491" ], "rank": 720 }, { "author": "Shiraz Saleem", "email": "shirazsaleem@microsoft.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43440" ], "rank": 720 }, { "author": "Shivani Gupta", "email": "shivani07g@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-22987" ], "rank": 720 }, { "author": "Shota Zaizen", "email": "s@zaizen.me", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43490" ], "rank": 720 }, { "author": "Shuwei Wu", "email": "shuwei.wu@mailbox.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53019" ], "rank": 720 }, { "author": "Shyam Sunder Reddy Padira", "email": "shyamsunderreddypadira@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46305" ], "rank": 720 }, { "author": "Siddharth Vadapalli", "email": "s-vadapalli@ti.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-74737" ], "rank": 720 }, { "author": "Sidraya Jayagond", "email": "sidraya@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74692" ], "rank": 720 }, { "author": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53145" ], "rank": 720 }, { "author": "Sjoerd Simons", "email": "sjoerd@collabora.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45909" ], "rank": 720 }, { "author": "Sohei Koyama", "email": "skoyama@ddn.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46046" ], "rank": 720 }, { "author": "Srinivas Pandruvada", "email": "srinivas.pandruvada@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-72143" ], "rank": 720 }, { "author": "Srujana Challa", "email": "schalla@marvell.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 10.0, "cves": [ "CVE-2026-74309" ], "rank": 720 }, { "author": "Stafford Horne", "email": "shorne@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72154" ], "rank": 720 }, { "author": "Stanislaw Pal", "email": "kuncy7@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80712" ], "rank": 720 }, { "author": "Stefano Stabellini", "email": "stefano.stabellini@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-43249" ], "rank": 720 }, { "author": "Steffen Klassert", "email": "steffen.klassert@secunet.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43091" ], "rank": 720 }, { "author": "Steffen Persvold", "email": "spersvold@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80917" ], "rank": 720 }, { "author": "Stephan Gerhold", "email": "stephan.gerhold@linaro.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80886" ], "rank": 720 }, { "author": "Stephen Eta Zhou", "email": "stephen.eta.zhou@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46257" ], "rank": 720 }, { "author": "Stephen Hemminger", "email": "stephen@networkplumber.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52984" ], "rank": 720 }, { "author": "Stig Hornang", "email": "stig@hornang.me", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72333" ], "rank": 720 }, { "author": "Stuart Hayhurst", "email": "stuart.a.hayhurst@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89629" ], "rank": 720 }, { "author": "Subbaraya Sundeep", "email": "sbhatta@marvell.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72410" ], "rank": 720 }, { "author": "Suchit Karunakaran", "email": "suchitkarunakaran@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23043" ], "rank": 720 }, { "author": "Sumanth Korikkar", "email": "sumanthk@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72236" ], "rank": 720 }, { "author": "Sunday Clement", "email": "sunday.clement@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43206" ], "rank": 720 }, { "author": "Sungmin Kang", "email": "726ksm@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68143" ], "rank": 720 }, { "author": "Sunho Park", "email": "shpark061104@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68365" ], "rank": 720 }, { "author": "Suraj Gupta", "email": "suraj.gupta2@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43031" ], "rank": 720 }, { "author": "Sven Eckelmann (Plasma Cloud)", "email": "se@simonwunderlich.de", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31736" ], "rank": 720 }, { "author": "Sven Schnelle", "email": "svens@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-68134" ], "rank": 720 }, { "author": "Svyatoslav Ryhel", "email": "clamor95@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80883" ], "rank": 720 }, { "author": "Swaraj Gaikwad", "email": "swarajgaikwad1925@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23134" ], "rank": 720 }, { "author": "System Administrator", "email": "root@localhost", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45966" ], "rank": 720 }, { "author": "Szymon Wilczek", "email": "szymonwilczek@gmx.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43223" ], "rank": 720 }, { "author": "T.J. Mercier", "email": "tjmercier@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-46232" ], "rank": 720 }, { "author": "Takao Sato", "email": "takaosato1997@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-53363" ], "rank": 720 }, { "author": "Takashi Sakamoto", "email": "o-takashi@sakamocchi.jp", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23153" ], "rank": 720 }, { "author": "Tamaki Yanagawa", "email": "ty@000ty.net", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.1, "cves": [ "CVE-2026-72320" ], "rank": 720 }, { "author": "Tangudu Tilak Tirumalesh", "email": "tilak.tirumalesh.tangudu@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53201" ], "rank": 720 }, { "author": "Tao Cui", "email": "cuitao@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89516" ], "rank": 720 }, { "author": "Tao Liu", "email": "ltao@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72013" ], "rank": 720 }, { "author": "Tejas Upadhyay", "email": "tejas.upadhyay@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68274" ], "rank": 720 }, { "author": "Theodor Arsenij Larionov-Trichkine", "email": "theodorlarionov@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-72254" ], "rank": 720 }, { "author": "Thinh Nguyen", "email": "thinh.nguyen@synopsys.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43055" ], "rank": 720 }, { "author": "Thi\u00e9baud Weksteen", "email": "tweek@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89556" ], "rank": 720 }, { "author": "Thomas Gleixner", "email": "tglx@linutronix.de", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-17523" ], "rank": 720 }, { "author": "Thomas Huth", "email": "thuth@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53047" ], "rank": 720 }, { "author": "Thomas Richter", "email": "tmricht@linux.ibm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89460" ], "rank": 720 }, { "author": "Thomas Wei\u00dfschuh", "email": "linux@weissschuh.net", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46007" ], "rank": 720 }, { "author": "Thomas Yen", "email": "thomasyen@google.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43275" ], "rank": 720 }, { "author": "Th\u00e9o Lebrun", "email": "theo.lebrun@bootlin.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72017" ], "rank": 720 }, { "author": "Tianxiang Chen", "email": "nanmu@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64373" ], "rank": 720 }, { "author": "Timur Krist\u00f3f", "email": "timur.kristof@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-64516" ], "rank": 720 }, { "author": "Timur Tabi", "email": "ttabi@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72314" ], "rank": 720 }, { "author": "Tina Zhang", "email": "zhang_wei@open-hieco.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-64172" ], "rank": 720 }, { "author": "Tiwei Bie", "email": "tiwei.btw@antgroup.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53020" ], "rank": 720 }, { "author": "Toke H\u00f8iland-J\u00f8rgensen", "email": "toke@toke.dk", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.2, "cves": [ "CVE-2026-74704" ], "rank": 720 }, { "author": "Tom Lendacky", "email": "thomas.lendacky@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64229" ], "rank": 720 }, { "author": "Tom Ryan", "email": "ryan36005@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-43442" ], "rank": 720 }, { "author": "Tomasz Lis", "email": "tomasz.lis@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23350" ], "rank": 720 }, { "author": "Tomasz Paku\u0142a", "email": "tomasz.pakula.oficjalny@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23349" ], "rank": 720 }, { "author": "Tomi Valkeinen", "email": "tomi.valkeinen+renesas@ideasonboard.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46310" ], "rank": 720 }, { "author": "Tommaso Merciai", "email": "tommaso.merciai.xr@bp.renesas.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23055" ], "rank": 720 }, { "author": "Tony Luck", "email": "tony.luck@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72080" ], "rank": 720 }, { "author": "Trung Nguyen", "email": "trungnh@cystack.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-64364" ], "rank": 720 }, { "author": "Tuan Do", "email": "tuan@calif.io", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31665" ], "rank": 720 }, { "author": "Tyler Baker", "email": "tyler.baker@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64594" ], "rank": 720 }, { "author": "Tze Yee Ng", "email": "tze.yee.ng@altera.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68183" ], "rank": 720 }, { "author": "Uday Shankar", "email": "ushankar@purestorage.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53124" ], "rank": 720 }, { "author": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46292" ], "rank": 720 }, { "author": "Unnathi Chalicheemala", "email": "unnathi.chalicheemala@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68444" ], "rank": 720 }, { "author": "Vadim Fedorenko", "email": "vadim.fedorenko@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53222" ], "rank": 720 }, { "author": "Vaibhav Nagare", "email": "nagarevaibhav@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-89511" ], "rank": 720 }, { "author": "Valentina Fernandez", "email": "valentina.fernandezalanis@microchip.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-43274" ], "rank": 720 }, { "author": "Valeriy Yashnikov", "email": "yashnikov.valeriy@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64431" ], "rank": 720 }, { "author": "Varun Gupta", "email": "varun.gupta@intel.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31390" ], "rank": 720 }, { "author": "Varun R Mallya", "email": "varunrmallya@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43010" ], "rank": 720 }, { "author": "Vasant Hegde", "email": "vasant.hegde@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-53053" ], "rank": 720 }, { "author": "Vasileios Almpanis", "email": "vasilisalmpanis@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64426" ], "rank": 720 }, { "author": "Viken Dadhaniya", "email": "viken.dadhaniya@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-63883" ], "rank": 720 }, { "author": "Viktor Malik", "email": "vmalik@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43416" ], "rank": 720 }, { "author": "Vincent Mailhol", "email": "mailhol@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89726" ], "rank": 720 }, { "author": "Vineet Gupta", "email": "vineet.gupta@linux.dev", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89581" ], "rank": 720 }, { "author": "Vishnu Reddy", "email": "busanna.reddy@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46210" ], "rank": 720 }, { "author": "Vitaly Prosyak", "email": "vitaly.prosyak@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74357" ], "rank": 720 }, { "author": "Vitor Soares", "email": "vitor.soares@toradex.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68280" ], "rank": 720 }, { "author": "Vivek Parikh", "email": "vivek.parikh@breachx.ai", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-89767" ], "rank": 720 }, { "author": "Vlad Poenaru", "email": "vlad.wing@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64352" ], "rank": 720 }, { "author": "Vladimir Marioukhine", "email": "vladimir.marioukhine@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74448" ], "rank": 720 }, { "author": "Vladimir Riabchun", "email": "ferr.lambarginio@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-43414" ], "rank": 720 }, { "author": "Vladimir Yakovlev", "email": "vovchkir@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31560" ], "rank": 720 }, { "author": "Vladislav Dronov", "email": "vdronov@redhat.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-80522" ], "rank": 720 }, { "author": "Vlastimil Babka", "email": "vbabka@suse.cz", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23025" ], "rank": 720 }, { "author": "Vlastimil Babka (SUSE)", "email": "vbabka@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.1, "cves": [ "CVE-2026-64368" ], "rank": 720 }, { "author": "Votokina Victoria", "email": "victoria.votokina@kaspersky.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46267" ], "rank": 720 }, { "author": "Waiman Long", "email": "longman@redhat.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53326" ], "rank": 720 }, { "author": "Wandun Chen", "email": "chenwandun@lixiang.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-74352" ], "rank": 720 }, { "author": "Wang Jie", "email": "jiewang2024@lzu.edu.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-31676" ], "rank": 720 }, { "author": "Wang Shuaiwei", "email": "wangshuaiwei1@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43415" ], "rank": 720 }, { "author": "Wang Tao", "email": "wangtao554@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43059" ], "rank": 720 }, { "author": "wangdicheng", "email": "wangdicheng@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53291" ], "rank": 720 }, { "author": "Wasim Nazir", "email": "wasim.nazir@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72216" ], "rank": 720 }, { "author": "Wei Li", "email": "unsw.weili@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45868" ], "rank": 720 }, { "author": "Wei Yang", "email": "richard.weiyang@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68163" ], "rank": 720 }, { "author": "Weimin Xiong", "email": "xiongwm2026@163.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-89452" ], "rank": 720 }, { "author": "Wenjie Qi", "email": "qiwenjie@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-63820" ], "rank": 720 }, { "author": "Werner Kasselman", "email": "werner@verivus.ai", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74417" ], "rank": 720 }, { "author": "Wesley Atwell", "email": "atwellwea@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31481" ], "rank": 720 }, { "author": "Will Deacon", "email": "will@kernel.org", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23346" ], "rank": 720 }, { "author": "Will Porter", "email": "mrwillporter@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80828" ], "rank": 720 }, { "author": "Will Rosenberg", "email": "whrosenb@asu.edu", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23127" ], "rank": 720 }, { "author": "William Bowling", "email": "vakzz@zellic.io", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46300" ], "rank": 720 }, { "author": "Wupeng Ma", "email": "mawupeng1@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53207" ], "rank": 720 }, { "author": "Xiangfeng Cai", "email": "caixiangfeng@bytedance.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74518" ], "rank": 720 }, { "author": "Xiangxu Yin", "email": "xiangxu.yin@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64209" ], "rank": 720 }, { "author": "Xianwei Zhao", "email": "xianwei.zhao@amlogic.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64521" ], "rank": 720 }, { "author": "Xiao Kan", "email": "814091656@qq.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43287" ], "rank": 720 }, { "author": "Xiaonan Zhao", "email": "ngochuongbui67@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64314" ], "rank": 720 }, { "author": "xietangxin", "email": "xietangxin@yeah.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31469" ], "rank": 720 }, { "author": "Xingjing Deng", "email": "micro6947@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31730" ], "rank": 720 }, { "author": "Xingquan Liu", "email": "b1n@b1n.io", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64207" ], "rank": 720 }, { "author": "Xingrui Li", "email": "baka9@bakabaka9.tech", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-89729" ], "rank": 720 }, { "author": "Xingwang Xiang", "email": "v3rdant.xiang@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-64025" ], "rank": 720 }, { "author": "Xinyang Ge", "email": "xinyang@anthropic.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.6, "cves": [ "CVE-2026-80590" ], "rank": 720 }, { "author": "Xue Lei", "email": "xue.lei@windriver.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68416" ], "rank": 720 }, { "author": "Yadan Fan", "email": "ydfan@suse.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80627" ], "rank": 720 }, { "author": "Yanfei Xu", "email": "yanfei.xu@bytedance.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-72295" ], "rank": 720 }, { "author": "Yang Shen", "email": "shenyang39@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23056" ], "rank": 720 }, { "author": "Yang Wang", "email": "kevinyang.wang@amd.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74450" ], "rank": 720 }, { "author": "Yang Xiuwei", "email": "yangxiuwei@kylinos.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45997" ], "rank": 720 }, { "author": "Yao Zi", "email": "me@ziyao.cc", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.3, "cves": [ "CVE-2026-46250" ], "rank": 720 }, { "author": "Yasin Lee", "email": "yasin.lee.x@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43354" ], "rank": 720 }, { "author": "Yazhou Tang", "email": "tangyazhou518@outlook.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-43070" ], "rank": 720 }, { "author": "Yi Cong", "email": "yicong@kylinos.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74678" ], "rank": 720 }, { "author": "Yi Liu", "email": "liuy22@mails.tsinghua.edu.cn", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-45856" ], "rank": 720 }, { "author": "Yi Yang", "email": "yiyang13@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53385" ], "rank": 720 }, { "author": "Yicong Yang", "email": "yangyicong@hisilicon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46272" ], "rank": 720 }, { "author": "Yifan Wu", "email": "yifanwucs@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31418" ], "rank": 720 }, { "author": "YiFei Zhu", "email": "zhuyifei@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43385" ], "rank": 720 }, { "author": "Yihang Li", "email": "liyihang9@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.4, "cves": [ "CVE-2026-80653" ], "rank": 720 }, { "author": "Yin Tirui", "email": "yintirui@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-53189" ], "rank": 720 }, { "author": "Yingjie Gao", "email": "gaoyingjie@uniontech.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64357" ], "rank": 720 }, { "author": "Yiqi Sun", "email": "sunyiqixm@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-43099" ], "rank": 720 }, { "author": "Yishai Hadas", "email": "yishaih@nvidia.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-53187" ], "rank": 720 }, { "author": "Yixun Lan", "email": "dlan@kernel.org", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-80523" ], "rank": 720 }, { "author": "Yochai Eisenrich", "email": "yochaie@sweet.security", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46159" ], "rank": 720 }, { "author": "Yonatan Nachum", "email": "ynachum@amazon.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31493" ], "rank": 720 }, { "author": "Yongjian Sun", "email": "sunyongjian1@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-45942" ], "rank": 720 }, { "author": "Yosry Ahmed", "email": "yosry.ahmed@linux.dev", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.9, "cves": [ "CVE-2026-43133" ], "rank": 720 }, { "author": "Youngjae Kwon", "email": "yjkwon0026@snu.ac.kr", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89595" ], "rank": 720 }, { "author": "Youssef Samir", "email": "youssef.abdulrahman@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-43007" ], "rank": 720 }, { "author": "Yu Kuai", "email": "yukuai3@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53125" ], "rank": 720 }, { "author": "Yuan Tan", "email": "tanyuan98@outlook.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23274" ], "rank": 720 }, { "author": "Yuanjie Yang", "email": "yuanjie.yang@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-53056" ], "rank": 720 }, { "author": "Yuchan Nam", "email": "entropy1110@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31473" ], "rank": 720 }, { "author": "Yuejie Shi", "email": "syjcnss@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.5, "cves": [ "CVE-2026-74598" ], "rank": 720 }, { "author": "Yufan Chen", "email": "yufan.chen@linux.dev", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-31737" ], "rank": 720 }, { "author": "Yuhang Pan", "email": "242270054@hdu.edu.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-89505" ], "rank": 720 }, { "author": "Yuhang.chen", "email": "yhchen312@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80939" ], "rank": 720 }, { "author": "Yuhao Huang", "email": "nekowong743@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23158" ], "rank": 720 }, { "author": "Yung Chih Su", "email": "yuuchihsu@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-23316" ], "rank": 720 }, { "author": "Yunpeng Tian", "email": "shionthanatos@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64432" ], "rank": 720 }, { "author": "Yunxiang Li", "email": "yunxiang.li@amd.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80618" ], "rank": 720 }, { "author": "Yunye Zhao", "email": "yunye.zhao@linux.alibaba.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-89558" ], "rank": 720 }, { "author": "Yussuf Khalil", "email": "dev@pp3345.net", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-31488" ], "rank": 720 }, { "author": "Zack McKevitt", "email": "zachary.mckevitt@oss.qualcomm.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64051" ], "rank": 720 }, { "author": "Zdenek Bouska", "email": "zdenek.bouska@siemens.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-23445" ], "rank": 720 }, { "author": "Zeng Heng", "email": "zengheng4@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-63875" ], "rank": 720 }, { "author": "Zenghui Yu", "email": "yuzenghui@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-80592" ], "rank": 720 }, { "author": "Zenghui Yu (Huawei)", "email": "zenghui.yu@linux.dev", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 8.8, "cves": [ "CVE-2026-31553" ], "rank": 720 }, { "author": "Zesen Liu", "email": "ftyghome@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45903" ], "rank": 720 }, { "author": "Zhan Jun", "email": "zhanjun@uniontech.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.8, "cves": [ "CVE-2026-52982" ], "rank": 720 }, { "author": "Zhan Xusheng", "email": "zhanxusheng@xiaomi.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74595" ], "rank": 720 }, { "author": "Zhang Changzhong", "email": "zhangchangzhong@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74739" ], "rank": 720 }, { "author": "Zhang Tianci", "email": "zhangtianci.1997@bytedance.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72306" ], "rank": 720 }, { "author": "Zhaolong Zhang", "email": "zhangzl68@chinatelecom.cn", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-68336" ], "rank": 720 }, { "author": "Zhaoyang Yu", "email": "2426767509@qq.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64234" ], "rank": 720 }, { "author": "Zhengmian Hu", "email": "huzhengmian@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45884" ], "rank": 720 }, { "author": "Zhenzhong Wu", "email": "jt26wzz@gmail.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-46015" ], "rank": 720 }, { "author": "Zhiping Zhang", "email": "zhipingz@meta.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-72006" ], "rank": 720 }, { "author": "Zhixing Chen", "email": "running910@gmail.com", "cve_count": 1, "critical": 1, "high": 0, "scored": 1, "cvss_sum_indicative": 9.1, "cves": [ "CVE-2026-72348" ], "rank": 720 }, { "author": "Zhiyu Zhang", "email": "zhiyuzhang999@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45915" ], "rank": 720 }, { "author": "Zhu Yanjun", "email": "yanjun.zhu@linux.dev", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-64582" ], "rank": 720 }, { "author": "Zicheng Qu", "email": "quzicheng@huawei.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-52980" ], "rank": 720 }, { "author": "Zijiang Huang", "email": "huangzjsmile@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64415" ], "rank": 720 }, { "author": "Zijie Huang", "email": "milkory@outlook.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-74663" ], "rank": 720 }, { "author": "Ziqing Chen", "email": "chenziqing@xiaomi.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46088" ], "rank": 720 }, { "author": "Zishun Yi", "email": "zishun.yi.dev@gmail.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-45908" ], "rank": 720 }, { "author": "Zizhi Wo", "email": "wozizhi@huawei.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-72315" ], "rank": 720 }, { "author": "Zongyao Bai", "email": "zongyao.bai@intel.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.8, "cves": [ "CVE-2026-68264" ], "rank": 720 }, { "author": "Zongyao Chen", "email": "zongyao.chen@linux.alibaba.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-46104" ], "rank": 720 }, { "author": "Zubin Mithra", "email": "zsm@google.com", "cve_count": 1, "critical": 0, "high": 1, "scored": 1, "cvss_sum_indicative": 7.1, "cves": [ "CVE-2026-31470" ], "rank": 720 }, { "author": "\u80e1\u8fde\u52e4", "email": "hulianqin@vivo.com", "cve_count": 1, "critical": 0, "high": 0, "scored": 0, "cvss_sum_indicative": 0.0, "cves": [ "CVE-2026-64465" ], "rank": 720 } ], "cves": [ { "cve": "CVE-2026-17523", "author_name": "Thomas Gleixner", "author_email": "tglx@linutronix.de", "fix_sha": "bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68", "subject": "can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17523", "commit_url": "https://git.kernel.org/stable/c/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68" }, { "cve": "CVE-2026-22976", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "c1d73b1480235731e35c81df70b08f4714a7d095", "subject": "net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22976", "commit_url": "https://git.kernel.org/stable/c/c1d73b1480235731e35c81df70b08f4714a7d095" }, { "cve": "CVE-2026-22977", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20", "subject": "net: sock: fix hardened usercopy panic in sock_recv_errqueue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22977", "commit_url": "https://git.kernel.org/stable/c/2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20" }, { "cve": "CVE-2026-22978", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "21cbf883d073abbfe09e3924466aa5e0449e7261", "subject": "wifi: avoid kernel-infoleak from struct iw_point", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22978", "commit_url": "https://git.kernel.org/stable/c/21cbf883d073abbfe09e3924466aa5e0449e7261" }, { "cve": "CVE-2026-22979", "author_name": "Mohammad Heib", "author_email": "mheib@redhat.com", "fix_sha": "238e03d0466239410b72294b79494e43d4fabe77", "subject": "net: fix memory leak in skb_segment_list for GRO packets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22979", "commit_url": "https://git.kernel.org/stable/c/238e03d0466239410b72294b79494e43d4fabe77" }, { "cve": "CVE-2026-22980", "author_name": "NeilBrown", "author_email": "neil@brown.name", "fix_sha": "2857bd59feb63fcf40fe4baf55401baea6b4feb4", "subject": "nfsd: provide locking for v4_end_grace", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22980", "commit_url": "https://git.kernel.org/stable/c/2857bd59feb63fcf40fe4baf55401baea6b4feb4" }, { "cve": "CVE-2026-22981", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "2e281e1155fc476c571c0bd2ffbfe28ab829a5c3", "subject": "idpf: detach and close netdevs while handling a reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22981", "commit_url": "https://git.kernel.org/stable/c/2e281e1155fc476c571c0bd2ffbfe28ab829a5c3" }, { "cve": "CVE-2026-22982", "author_name": "Jerry Wu", "author_email": "w.7erry@foxmail.com", "fix_sha": "34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95", "subject": "net: mscc: ocelot: Fix crash when adding interface under a lag", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22982", "commit_url": "https://git.kernel.org/stable/c/34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95" }, { "cve": "CVE-2026-22983", "author_name": "Willem de Bruijn", "author_email": "willemb@google.com", "fix_sha": "7d11e047eda5f98514ae62507065ac961981c025", "subject": "net: do not write to msg_get_inq in callee", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22983", "commit_url": "https://git.kernel.org/stable/c/7d11e047eda5f98514ae62507065ac961981c025" }, { "cve": "CVE-2026-22984", "author_name": "ziming zhang", "author_email": "ezrakiez@gmail.com", "fix_sha": "818156caffbf55cb4d368f9c3cac64e458fb49c9", "subject": "libceph: prevent potential out-of-bounds reads in handle_auth_done()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22984", "commit_url": "https://git.kernel.org/stable/c/818156caffbf55cb4d368f9c3cac64e458fb49c9" }, { "cve": "CVE-2026-22985", "author_name": "Sreedevi Joshi", "author_email": "sreedevi.joshi@intel.com", "fix_sha": "83f38f210b85676f40ba8586b5a8edae19b56995", "subject": "idpf: Fix RSS LUT NULL pointer crash on early ethtool operations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22985", "commit_url": "https://git.kernel.org/stable/c/83f38f210b85676f40ba8586b5a8edae19b56995" }, { "cve": "CVE-2026-22986", "author_name": "Pawe\u0142 Narewski", "author_email": "pawel.narewski@nokia.com", "fix_sha": "a7ac22d53d0990152b108c3f4fe30df45fcb0181", "subject": "gpiolib: fix race condition for gdev->srcu", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22986", "commit_url": "https://git.kernel.org/stable/c/a7ac22d53d0990152b108c3f4fe30df45fcb0181" }, { "cve": "CVE-2026-22987", "author_name": "Shivani Gupta", "author_email": "shivani07g@gmail.com", "fix_sha": "adb25a46dc0a43173f5ea5f5f58fc8ba28970c7c", "subject": "net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22987", "commit_url": "https://git.kernel.org/stable/c/adb25a46dc0a43173f5ea5f5f58fc8ba28970c7c" }, { "cve": "CVE-2026-22988", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "c92510f5e3f82ba11c95991824a41e59a9c5ed81", "subject": "arp: do not assume dev_hard_header() does not change skb->head", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22988", "commit_url": "https://git.kernel.org/stable/c/c92510f5e3f82ba11c95991824a41e59a9c5ed81" }, { "cve": "CVE-2026-22989", "author_name": "Olga Kornievskaia", "author_email": "okorniev@redhat.com", "fix_sha": "d0424066fcd294977f310964bed6f2a487fa4515", "subject": "nfsd: check that server is running in unlock_filesystem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22989", "commit_url": "https://git.kernel.org/stable/c/d0424066fcd294977f310964bed6f2a487fa4515" }, { "cve": "CVE-2026-22990", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "e00c3f71b5cf75681dbd74ee3f982a99cb690c2b", "subject": "libceph: replace overzealous BUG_ON in osdmap_apply_incremental()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22990", "commit_url": "https://git.kernel.org/stable/c/e00c3f71b5cf75681dbd74ee3f982a99cb690c2b" }, { "cve": "CVE-2026-22991", "author_name": "Tuo Li", "author_email": "islituo@gmail.com", "fix_sha": "e3fe30e57649c551757a02e1cad073c47e1e075e", "subject": "libceph: make free_choose_arg_map() resilient to partial allocation", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22991", "commit_url": "https://git.kernel.org/stable/c/e3fe30e57649c551757a02e1cad073c47e1e075e" }, { "cve": "CVE-2026-22992", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "e84b48d31b5008932c0a0902982809fbaa1d3b70", "subject": "libceph: return the handler error from mon_handle_auth_done()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22992", "commit_url": "https://git.kernel.org/stable/c/e84b48d31b5008932c0a0902982809fbaa1d3b70" }, { "cve": "CVE-2026-22993", "author_name": "Sreedevi Joshi", "author_email": "sreedevi.joshi@intel.com", "fix_sha": "ebecca5b093895da801b3eba1a55b4ec4027d196", "subject": "idpf: Fix RSS LUT NULL ptr issue after soft reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22993", "commit_url": "https://git.kernel.org/stable/c/ebecca5b093895da801b3eba1a55b4ec4027d196" }, { "cve": "CVE-2026-22994", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "ec69daabe45256f98ac86c651b8ad1b2574489a7", "subject": "bpf: Fix reference count leak in bpf_prog_test_run_xdp()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22994", "commit_url": "https://git.kernel.org/stable/c/ec69daabe45256f98ac86c651b8ad1b2574489a7" }, { "cve": "CVE-2026-22995", "author_name": "Ming Lei", "author_email": "ming.lei@redhat.com", "fix_sha": "f0d385f6689f37a2828c686fb279121df006b4cb", "subject": "ublk: fix use-after-free in ublk_partition_scan_work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22995", "commit_url": "https://git.kernel.org/stable/c/f0d385f6689f37a2828c686fb279121df006b4cb" }, { "cve": "CVE-2026-22996", "author_name": "Saeed Mahameed", "author_email": "saeedm@nvidia.com", "fix_sha": "123eda2e5b1638e298e3a66bb1e64a8da92de5e1", "subject": "net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22996", "commit_url": "https://git.kernel.org/stable/c/123eda2e5b1638e298e3a66bb1e64a8da92de5e1" }, { "cve": "CVE-2026-22997", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "1809c82aa073a11b7d335ae932d81ce51a588a4a", "subject": "net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22997", "commit_url": "https://git.kernel.org/stable/c/1809c82aa073a11b7d335ae932d81ce51a588a4a" }, { "cve": "CVE-2026-22998", "author_name": "Shivam Kumar", "author_email": "kumar.shivam43666@gmail.com", "fix_sha": "32b63acd78f577b332d976aa06b56e70d054cbba", "subject": "nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22998", "commit_url": "https://git.kernel.org/stable/c/32b63acd78f577b332d976aa06b56e70d054cbba" }, { "cve": "CVE-2026-22999", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "3879cffd9d07aa0377c4b8835c4f64b4fb24ac78", "subject": "net/sched: sch_qfq: do not free existing class in qfq_change_class()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22999", "commit_url": "https://git.kernel.org/stable/c/3879cffd9d07aa0377c4b8835c4f64b4fb24ac78" }, { "cve": "CVE-2026-23000", "author_name": "Saeed Mahameed", "author_email": "saeedm@nvidia.com", "fix_sha": "4dadc4077e3f77d6d31e199a925fc7a705e7adeb", "subject": "net/mlx5e: Fix crash on profile change rollback failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23000", "commit_url": "https://git.kernel.org/stable/c/4dadc4077e3f77d6d31e199a925fc7a705e7adeb" }, { "cve": "CVE-2026-23001", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7470a7a63dc162f07c26dbf960e41ee1e248d80e", "subject": "macvlan: fix possible UAF in macvlan_forward_source()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23001", "commit_url": "https://git.kernel.org/stable/c/7470a7a63dc162f07c26dbf960e41ee1e248d80e" }, { "cve": "CVE-2026-23002", "author_name": "Shakeel Butt", "author_email": "shakeel.butt@linux.dev", "fix_sha": "777a8560fd29738350c5094d4166fe5499452409", "subject": "lib/buildid: use __kernel_read() for sleepable context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23002", "commit_url": "https://git.kernel.org/stable/c/777a8560fd29738350c5094d4166fe5499452409" }, { "cve": "CVE-2026-23003", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "81c734dae203757fb3c9eee6f9896386940776bd", "subject": "ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23003", "commit_url": "https://git.kernel.org/stable/c/81c734dae203757fb3c9eee6f9896386940776bd" }, { "cve": "CVE-2026-23004", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "9a6f0c4d5796ab89b5a28a890ce542344d58bd69", "subject": "dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23004", "commit_url": "https://git.kernel.org/stable/c/9a6f0c4d5796ab89b5a28a890ce542344d58bd69" }, { "cve": "CVE-2026-23005", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "b45f721775947a84996deb5c661602254ce25ce6", "subject": "x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23005", "commit_url": "https://git.kernel.org/stable/c/b45f721775947a84996deb5c661602254ce25ce6" }, { "cve": "CVE-2026-23006", "author_name": "Emil Svendsen", "author_email": "emas@bang-olufsen.dk", "fix_sha": "be7664c81d3129fc313ef62ff275fd3d33cfecd4", "subject": "ASoC: tlv320adcx140: fix null pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23006", "commit_url": "https://git.kernel.org/stable/c/be7664c81d3129fc313ef62ff275fd3d33cfecd4" }, { "cve": "CVE-2026-23007", "author_name": "Caleb Sander Mateos", "author_email": "csander@purestorage.com", "fix_sha": "ca22c566b89164f6e670af56ecc45f47ef3df819", "subject": "block: zero non-PI portion of auto integrity buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23007", "commit_url": "https://git.kernel.org/stable/c/ca22c566b89164f6e670af56ecc45f47ef3df819" }, { "cve": "CVE-2026-23008", "author_name": "Ian Forbes", "author_email": "ian.forbes@broadcom.com", "fix_sha": "d9186faeae6efb7d0841a5e8eb213ff4c7966614", "subject": "drm/vmwgfx: Fix KMS with 3D on HW version 10", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23008", "commit_url": "https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614" }, { "cve": "CVE-2026-23009", "author_name": "Mathias Nyman", "author_email": "mathias.nyman@linux.intel.com", "fix_sha": "dd83dc1249737b837ac5d57c81f2b0977c613d9f", "subject": "xhci: sideband: don't dereference freed ring when removing sideband endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23009", "commit_url": "https://git.kernel.org/stable/c/dd83dc1249737b837ac5d57c81f2b0977c613d9f" }, { "cve": "CVE-2026-23010", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "ddf96c393a33aef4887e2e406c76c2f8cda1419c", "subject": "ipv6: Fix use-after-free in inet6_addr_del().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23010", "commit_url": "https://git.kernel.org/stable/c/ddf96c393a33aef4887e2e406c76c2f8cda1419c" }, { "cve": "CVE-2026-23011", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "e67c577d89894811ce4dcd1a9ed29d8b63476667", "subject": "ipv4: ip_gre: make ipgre_header() robust", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23011", "commit_url": "https://git.kernel.org/stable/c/e67c577d89894811ce4dcd1a9ed29d8b63476667" }, { "cve": "CVE-2026-23012", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "f9132fbc2e83baf2c45a77043672a63a675c9394", "subject": "mm/damon/core: remove call_control in inactive contexts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23012", "commit_url": "https://git.kernel.org/stable/c/f9132fbc2e83baf2c45a77043672a63a675c9394" }, { "cve": "CVE-2026-23013", "author_name": "Kery Qi", "author_email": "qikeyu2017@gmail.com", "fix_sha": "f93fc5d12d69012788f82151bee55fce937e1432", "subject": "net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23013", "commit_url": "https://git.kernel.org/stable/c/f93fc5d12d69012788f82151bee55fce937e1432" }, { "cve": "CVE-2026-23014", "author_name": "Peter Zijlstra", "author_email": "peterz@infradead.org", "fix_sha": "ff5860f5088e9076ebcccf05a6ca709d5935cfa9", "subject": "perf: Ensure swevent hrtimer is properly destroyed", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23014", "commit_url": "https://git.kernel.org/stable/c/ff5860f5088e9076ebcccf05a6ca709d5935cfa9" }, { "cve": "CVE-2026-23015", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "1e876e5a0875e71e34148c9feb2eedd3bf6b2b43", "subject": "gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23015", "commit_url": "https://git.kernel.org/stable/c/1e876e5a0875e71e34148c9feb2eedd3bf6b2b43" }, { "cve": "CVE-2026-23016", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "2ef02ac38d3c17f34a00c4b267d961a8d4b45d1a", "subject": "inet: frags: drop fraglist conntrack references", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23016", "commit_url": "https://git.kernel.org/stable/c/2ef02ac38d3c17f34a00c4b267d961a8d4b45d1a" }, { "cve": "CVE-2026-23017", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "4d792219fe6f891b5b557a607ac8a0a14eda6e38", "subject": "idpf: fix error handling in the init_task on load", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23017", "commit_url": "https://git.kernel.org/stable/c/4d792219fe6f891b5b557a607ac8a0a14eda6e38" }, { "cve": "CVE-2026-23018", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "8731f2c50b0b1d2b58ed5b9671ef2c4bdc2f8347", "subject": "btrfs: release path before initializing extent tree in btrfs_read_locked_inode()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23018", "commit_url": "https://git.kernel.org/stable/c/8731f2c50b0b1d2b58ed5b9671ef2c4bdc2f8347" }, { "cve": "CVE-2026-23019", "author_name": "Alok Tiwari", "author_email": "alok.a.tiwari@oracle.com", "fix_sha": "a428e0da1248c353557970848994f35fd3f005e2", "subject": "net: marvell: prestera: fix NULL dereference on devlink_alloc() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23019", "commit_url": "https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2" }, { "cve": "CVE-2026-23020", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "a4e305ed60f7c41bbf9aabc16dd75267194e0de3", "subject": "net: 3com: 3c59x: fix possible null dereference in vortex_probe1()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23020", "commit_url": "https://git.kernel.org/stable/c/a4e305ed60f7c41bbf9aabc16dd75267194e0de3" }, { "cve": "CVE-2026-23021", "author_name": "Petko Manolov", "author_email": "petkan@nucleusys.com", "fix_sha": "afa27621a28af317523e0836dad430bec551eb54", "subject": "net: usb: pegasus: fix memory leak in update_eth_regs_async()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23021", "commit_url": "https://git.kernel.org/stable/c/afa27621a28af317523e0836dad430bec551eb54" }, { "cve": "CVE-2026-23022", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "e111cbc4adf9f9974eed040aeece7e17460f6bff", "subject": "idpf: fix memory leak in idpf_vc_core_deinit()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23022", "commit_url": "https://git.kernel.org/stable/c/e111cbc4adf9f9974eed040aeece7e17460f6bff" }, { "cve": "CVE-2026-23023", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "f6242b354605faff263ca45882b148200915a3f6", "subject": "idpf: fix memory leak in idpf_vport_rel()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23023", "commit_url": "https://git.kernel.org/stable/c/f6242b354605faff263ca45882b148200915a3f6" }, { "cve": "CVE-2026-23024", "author_name": "Sreedevi Joshi", "author_email": "sreedevi.joshi@intel.com", "fix_sha": "f9841bd28b600526ca4f6713b0ca49bf7bb98452", "subject": "idpf: fix memory leak of flow steer list on rmmod", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23024", "commit_url": "https://git.kernel.org/stable/c/f9841bd28b600526ca4f6713b0ca49bf7bb98452" }, { "cve": "CVE-2026-23025", "author_name": "Vlastimil Babka", "author_email": "vbabka@suse.cz", "fix_sha": "038a102535eb49e10e93eafac54352fcc5d78847", "subject": "mm/page_alloc: prevent pcp corruption with SMP=n", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23025", "commit_url": "https://git.kernel.org/stable/c/038a102535eb49e10e93eafac54352fcc5d78847" }, { "cve": "CVE-2026-23026", "author_name": "Miaoqian Lin", "author_email": "linmq006@gmail.com", "fix_sha": "3f747004bbd641131d9396d87b5d2d3d1e182728", "subject": "dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23026", "commit_url": "https://git.kernel.org/stable/c/3f747004bbd641131d9396d87b5d2d3d1e182728" }, { "cve": "CVE-2026-23027", "author_name": "Qiang Ma", "author_email": "maqianga@uniontech.com", "fix_sha": "1cf342a7c3adc5877837b53bbceb5cc9eff60bbf", "subject": "LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23027", "commit_url": "https://git.kernel.org/stable/c/1cf342a7c3adc5877837b53bbceb5cc9eff60bbf" }, { "cve": "CVE-2026-23028", "author_name": "Qiang Ma", "author_email": "maqianga@uniontech.com", "fix_sha": "0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21", "subject": "LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23028", "commit_url": "https://git.kernel.org/stable/c/0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21" }, { "cve": "CVE-2026-23029", "author_name": "Qiang Ma", "author_email": "maqianga@uniontech.com", "fix_sha": "7d8553fc75aefa7ec936af0cf8443ff90b51732e", "subject": "LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23029", "commit_url": "https://git.kernel.org/stable/c/7d8553fc75aefa7ec936af0cf8443ff90b51732e" }, { "cve": "CVE-2026-23030", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "e07dea3de508cd6950c937cec42de7603190e1ca", "subject": "phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23030", "commit_url": "https://git.kernel.org/stable/c/e07dea3de508cd6950c937cec42de7603190e1ca" }, { "cve": "CVE-2026-23031", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "7352e1d5932a0e777e39fa4b619801191f57e603", "subject": "can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23031", "commit_url": "https://git.kernel.org/stable/c/7352e1d5932a0e777e39fa4b619801191f57e603" }, { "cve": "CVE-2026-23032", "author_name": "Nilay Shroff", "author_email": "nilay@linux.ibm.com", "fix_sha": "40b94ec7edbbb867c4e26a1a43d2b898f04b93c5", "subject": "null_blk: fix kmemleak by releasing references to fault configfs items", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23032", "commit_url": "https://git.kernel.org/stable/c/40b94ec7edbbb867c4e26a1a43d2b898f04b93c5" }, { "cve": "CVE-2026-23033", "author_name": "Haotian Zhang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "2e1136acf8a8887c29f52e35a77b537309af321f", "subject": "dmaengine: omap-dma: fix dma_pool resource leak in error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23033", "commit_url": "https://git.kernel.org/stable/c/2e1136acf8a8887c29f52e35a77b537309af321f" }, { "cve": "CVE-2026-23034", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "b2426a211dba6432e32a2e70e9183c6e134475c6", "subject": "drm/amdgpu/userq: Fix fence reference leak on queue teardown v2", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23034", "commit_url": "https://git.kernel.org/stable/c/b2426a211dba6432e32a2e70e9183c6e134475c6" }, { "cve": "CVE-2026-23035", "author_name": "Saeed Mahameed", "author_email": "saeedm@nvidia.com", "fix_sha": "4ef8512e1427111f7ba92b4a847d181ff0aeec42", "subject": "net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23035", "commit_url": "https://git.kernel.org/stable/c/4ef8512e1427111f7ba92b4a847d181ff0aeec42" }, { "cve": "CVE-2026-23036", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "1e1f2055ad5a7a5d548789b334a4473a7665c418", "subject": "btrfs: release path before iget_failed() in btrfs_read_locked_inode()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23036", "commit_url": "https://git.kernel.org/stable/c/1e1f2055ad5a7a5d548789b334a4473a7665c418" }, { "cve": "CVE-2026-23037", "author_name": "Szymon Wilczek", "author_email": "swilczek.lx@gmail.com", "fix_sha": "b1979778e98569c1e78c2c7f16bb24d76541ab00", "subject": "can: etas_es58x: allow partial RX URB allocation to succeed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23037", "commit_url": "https://git.kernel.org/stable/c/b1979778e98569c1e78c2c7f16bb24d76541ab00" }, { "cve": "CVE-2026-23038", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "0c728083654f0066f5e10a1d2b0bd0907af19a58", "subject": "pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23038", "commit_url": "https://git.kernel.org/stable/c/0c728083654f0066f5e10a1d2b0bd0907af19a58" }, { "cve": "CVE-2026-23039", "author_name": "Shenghao Yang", "author_email": "me@shenghaoyang.info", "fix_sha": "dc2d5ddb193e363187bae2ad358245642d2721fb", "subject": "drm/gud: fix NULL fb and crtc dereferences on USB disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23039", "commit_url": "https://git.kernel.org/stable/c/dc2d5ddb193e363187bae2ad358245642d2721fb" }, { "cve": "CVE-2026-23040", "author_name": "Benjamin Berg", "author_email": "benjamin.berg@intel.com", "fix_sha": "333418872bfecf4843f1ded7a4151685dfcf07d5", "subject": "wifi: mac80211_hwsim: fix typo in frequency notification", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23040", "commit_url": "https://git.kernel.org/stable/c/333418872bfecf4843f1ded7a4151685dfcf07d5" }, { "cve": "CVE-2026-23041", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "3358995b1a7f9dcb52a56ec8251570d71024dad0", "subject": "bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23041", "commit_url": "https://git.kernel.org/stable/c/3358995b1a7f9dcb52a56ec8251570d71024dad0" }, { "cve": "CVE-2026-23042", "author_name": "Larysa Zaremba", "author_email": "larysa.zaremba@intel.com", "fix_sha": "4648fb2f2e7210c53b85220ee07d42d1e4bae3f9", "subject": "idpf: fix aux device unplugging when rdma is not supported by vport", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23042", "commit_url": "https://git.kernel.org/stable/c/4648fb2f2e7210c53b85220ee07d42d1e4bae3f9" }, { "cve": "CVE-2026-23043", "author_name": "Suchit Karunakaran", "author_email": "suchitkarunakaran@gmail.com", "fix_sha": "530e3d4af566ca44807d79359b90794dea24c4f3", "subject": "btrfs: fix NULL pointer dereference in do_abort_log_replay()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23043", "commit_url": "https://git.kernel.org/stable/c/530e3d4af566ca44807d79359b90794dea24c4f3" }, { "cve": "CVE-2026-23044", "author_name": "Malaya Kumar Rout", "author_email": "mrout@redhat.com", "fix_sha": "7966cf0ebe32c981bfa3db252cb5fc3bb1bf2e77", "subject": "PM: hibernate: Fix crash when freeing invalid crypto compressor", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23044", "commit_url": "https://git.kernel.org/stable/c/7966cf0ebe32c981bfa3db252cb5fc3bb1bf2e77" }, { "cve": "CVE-2026-23045", "author_name": "Frank Liang", "author_email": "xiliang@redhat.com", "fix_sha": "8da901ffe497a53fa4ecc3ceed0e6d771586f88e", "subject": "net/ena: fix missing lock when update devlink params", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23045", "commit_url": "https://git.kernel.org/stable/c/8da901ffe497a53fa4ecc3ceed0e6d771586f88e" }, { "cve": "CVE-2026-23046", "author_name": "Kommula Shiva Shankar", "author_email": "kshankar@marvell.com", "fix_sha": "acb4bc6e1ba34ae1a34a9334a1ce8474c909466e", "subject": "virtio_net: fix device mismatch in devm_kzalloc/devm_kfree", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23046", "commit_url": "https://git.kernel.org/stable/c/acb4bc6e1ba34ae1a34a9334a1ce8474c909466e" }, { "cve": "CVE-2026-23047", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "c0fe2994f9a9d0a2ec9e42441ea5ba74b6a16176", "subject": "libceph: make calc_target() set t->paused, not just clear it", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23047", "commit_url": "https://git.kernel.org/stable/c/c0fe2994f9a9d0a2ec9e42441ea5ba74b6a16176" }, { "cve": "CVE-2026-23048", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "e5c8eda39a9fc1547d1398d707aa06c1d080abdd", "subject": "udp: call skb_orphan() before skb_attempt_defer_free()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23048", "commit_url": "https://git.kernel.org/stable/c/e5c8eda39a9fc1547d1398d707aa06c1d080abdd" }, { "cve": "CVE-2026-23049", "author_name": "Marek Vasut", "author_email": "marex@nabladev.com", "fix_sha": "6ab3d4353bf75005eaa375677c9fed31148154d6", "subject": "drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23049", "commit_url": "https://git.kernel.org/stable/c/6ab3d4353bf75005eaa375677c9fed31148154d6" }, { "cve": "CVE-2026-23050", "author_name": "Trond Myklebust", "author_email": "trond.myklebust@hammerspace.com", "fix_sha": "857bf9056291a16785ae3be1d291026b2437fc48", "subject": "pNFS: Fix a deadlock when returning a delegation during open()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23050", "commit_url": "https://git.kernel.org/stable/c/857bf9056291a16785ae3be1d291026b2437fc48" }, { "cve": "CVE-2026-23051", "author_name": "Lu Yao", "author_email": "yaolu@kylinos.cn", "fix_sha": "9cb6278b44c38899961b36d303d7b18b38be2a6e", "subject": "drm/amdgpu: fix drm panic null pointer when driver not support atomic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23051", "commit_url": "https://git.kernel.org/stable/c/9cb6278b44c38899961b36d303d7b18b38be2a6e" }, { "cve": "CVE-2026-23052", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "be55257fab181b93af38f8c4b1b3cb453a78d742", "subject": "ftrace: Do not over-allocate ftrace memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23052", "commit_url": "https://git.kernel.org/stable/c/be55257fab181b93af38f8c4b1b3cb453a78d742" }, { "cve": "CVE-2026-23053", "author_name": "Trond Myklebust", "author_email": "trond.myklebust@hammerspace.com", "fix_sha": "cce0be6eb4971456b703aaeafd571650d314bcca", "subject": "NFS: Fix a deadlock involving nfs_release_folio()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23053", "commit_url": "https://git.kernel.org/stable/c/cce0be6eb4971456b703aaeafd571650d314bcca" }, { "cve": "CVE-2026-23054", "author_name": "Aditya Garg", "author_email": "gargaditya@linux.microsoft.com", "fix_sha": "d23564955811da493f34412d7de60fa268c8cb50", "subject": "net: hv_netvsc: reject RSS hash key programming without RX indirection table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23054", "commit_url": "https://git.kernel.org/stable/c/d23564955811da493f34412d7de60fa268c8cb50" }, { "cve": "CVE-2026-23055", "author_name": "Tommaso Merciai", "author_email": "tommaso.merciai.xr@bp.renesas.com", "fix_sha": "e383f0961422f983451ac4dd6aed1a3d3311f2be", "subject": "i2c: riic: Move suspend handling to NOIRQ phase", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23055", "commit_url": "https://git.kernel.org/stable/c/e383f0961422f983451ac4dd6aed1a3d3311f2be" }, { "cve": "CVE-2026-23056", "author_name": "Yang Shen", "author_email": "shenyang39@huawei.com", "fix_sha": "02695347be532b628f22488300d40c4eba48b9b7", "subject": "uacce: implement mremap in uacce_vm_ops to return -EPERM", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23056", "commit_url": "https://git.kernel.org/stable/c/02695347be532b628f22488300d40c4eba48b9b7" }, { "cve": "CVE-2026-23057", "author_name": "Michal Luczaj", "author_email": "mhal@rbox.co", "fix_sha": "0386bd321d0f95d041a7b3d7b07643411b044a96", "subject": "vsock/virtio: Coalesce only linear skb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23057", "commit_url": "https://git.kernel.org/stable/c/0386bd321d0f95d041a7b3d7b07643411b044a96" }, { "cve": "CVE-2026-23058", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "0ce73a0eb5a27070957b67fd74059b6da89cc516", "subject": "can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23058", "commit_url": "https://git.kernel.org/stable/c/0ce73a0eb5a27070957b67fd74059b6da89cc516" }, { "cve": "CVE-2026-23059", "author_name": "Jiasheng Jiang", "author_email": "jiashengjiangcool@gmail.com", "fix_sha": "19bc5f2a6962dfaa0e32d0e0bc2271993d85d414", "subject": "scsi: qla2xxx: Sanitize payload size to prevent member overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23059", "commit_url": "https://git.kernel.org/stable/c/19bc5f2a6962dfaa0e32d0e0bc2271993d85d414" }, { "cve": "CVE-2026-23060", "author_name": "Taeyang Lee", "author_email": "0wn@theori.io", "fix_sha": "2397e9264676be7794f8f7f1e9763d90bd3c7335", "subject": "crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23060", "commit_url": "https://git.kernel.org/stable/c/2397e9264676be7794f8f7f1e9763d90bd3c7335" }, { "cve": "CVE-2026-23061", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "248e8e1a125fa875158df521b30f2cc7e27eeeaa", "subject": "can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23061", "commit_url": "https://git.kernel.org/stable/c/248e8e1a125fa875158df521b30f2cc7e27eeeaa" }, { "cve": "CVE-2026-23062", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "25150715e0b049b99df664daf05dab12f41c3e13", "subject": "platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23062", "commit_url": "https://git.kernel.org/stable/c/25150715e0b049b99df664daf05dab12f41c3e13" }, { "cve": "CVE-2026-23063", "author_name": "Chenghai Huang", "author_email": "huangchenghai2@huawei.com", "fix_sha": "26c08dabe5475d99a13f353d8dd70e518de45663", "subject": "uacce: ensure safe queue release with state management", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23063", "commit_url": "https://git.kernel.org/stable/c/26c08dabe5475d99a13f353d8dd70e518de45663" }, { "cve": "CVE-2026-23064", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "27880b0b0d35ad1c98863d09788254e36f874968", "subject": "net/sched: act_ife: avoid possible NULL deref", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23064", "commit_url": "https://git.kernel.org/stable/c/27880b0b0d35ad1c98863d09788254e36f874968" }, { "cve": "CVE-2026-23065", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "2bf1877b7094c684e1d652cac6912cfbc507ad3e", "subject": "platform/x86/amd: Fix memory leak in wbrf_record()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23065", "commit_url": "https://git.kernel.org/stable/c/2bf1877b7094c684e1d652cac6912cfbc507ad3e" }, { "cve": "CVE-2026-23066", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "2c28769a51deb6022d7fbd499987e237a01dd63a", "subject": "rxrpc: Fix recvmsg() unconditional requeue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23066", "commit_url": "https://git.kernel.org/stable/c/2c28769a51deb6022d7fbd499987e237a01dd63a" }, { "cve": "CVE-2026-23067", "author_name": "Chaitanya Kulkarni", "author_email": "ckulkarnilinux@gmail.com", "fix_sha": "374e7af67d9d9d6103c2cfc8eb32abfecf3a2fd8", "subject": "iommu/io-pgtable-arm: fix size_t signedness bug in unmap path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23067", "commit_url": "https://git.kernel.org/stable/c/374e7af67d9d9d6103c2cfc8eb32abfecf3a2fd8" }, { "cve": "CVE-2026-23068", "author_name": "Felix Gu", "author_email": "gu_0233@qq.com", "fix_sha": "383d4f5cffcc8df930d95b06518a9d25a6d74aac", "subject": "spi: spi-sprd-adi: Fix double free in probe error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23068", "commit_url": "https://git.kernel.org/stable/c/383d4f5cffcc8df930d95b06518a9d25a6d74aac" }, { "cve": "CVE-2026-23069", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "3ef3d52a1a9860d094395c7a3e593f3aa26ff012", "subject": "vsock/virtio: fix potential underflow in virtio_transport_get_credit()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23069", "commit_url": "https://git.kernel.org/stable/c/3ef3d52a1a9860d094395c7a3e593f3aa26ff012" }, { "cve": "CVE-2026-23070", "author_name": "Hariprasad Kelam", "author_email": "hkelam@marvell.com", "fix_sha": "4a3dba48188208e4f66822800e042686784d29d1", "subject": "Octeontx2-af: Add proper checks for fwdata", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23070", "commit_url": "https://git.kernel.org/stable/c/4a3dba48188208e4f66822800e042686784d29d1" }, { "cve": "CVE-2026-23071", "author_name": "Cheng-Yu Lee", "author_email": "cylee12@realtek.com", "fix_sha": "4b58aac989c1e3fafb1c68a733811859df388250", "subject": "regmap: Fix race condition in hwspinlock irqsave routine", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23071", "commit_url": "https://git.kernel.org/stable/c/4b58aac989c1e3fafb1c68a733811859df388250" }, { "cve": "CVE-2026-23072", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "4d10edfd1475b69dbd4c47f34b61a3772ece83ca", "subject": "l2tp: Fix memleak in l2tp_udp_encap_recv().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23072", "commit_url": "https://git.kernel.org/stable/c/4d10edfd1475b69dbd4c47f34b61a3772ece83ca" }, { "cve": "CVE-2026-23073", "author_name": "Marek Vasut", "author_email": "marex@nabladev.com", "fix_sha": "4f431d88ea8093afc7ba55edf4652978c5a68f33", "subject": "wifi: rsi: Fix memory corruption due to not set vif driver data size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23073", "commit_url": "https://git.kernel.org/stable/c/4f431d88ea8093afc7ba55edf4652978c5a68f33" }, { "cve": "CVE-2026-23074", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "50da4b9d07a7a463e2cfb738f3ad4cff6b2c9c3b", "subject": "net/sched: Enforce that teql can only be used as root qdisc", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23074", "commit_url": "https://git.kernel.org/stable/c/50da4b9d07a7a463e2cfb738f3ad4cff6b2c9c3b" }, { "cve": "CVE-2026-23075", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "5a4391bdc6c8357242f62f22069c865b792406b3", "subject": "can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23075", "commit_url": "https://git.kernel.org/stable/c/5a4391bdc6c8357242f62f22069c865b792406b3" }, { "cve": "CVE-2026-23076", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "61006c540cbdedea83b05577dc7fb7fa18fe1276", "subject": "ALSA: ctxfi: Fix potential OOB access in audio mixer handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23076", "commit_url": "https://git.kernel.org/stable/c/61006c540cbdedea83b05577dc7fb7fa18fe1276" }, { "cve": "CVE-2026-23077", "author_name": "Lorenzo Stoakes", "author_email": "lorenzo.stoakes@oracle.com", "fix_sha": "61f67c230a5e7c741c352349ea80147fbe65bfae", "subject": "mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23077", "commit_url": "https://git.kernel.org/stable/c/61f67c230a5e7c741c352349ea80147fbe65bfae" }, { "cve": "CVE-2026-23078", "author_name": "Samasth Norway Ananda", "author_email": "samasth.norway.ananda@oracle.com", "fix_sha": "6f5c69f72e50d51be3a8c028ae7eda42c82902cb", "subject": "ALSA: scarlett2: Fix buffer overflow in config retrieval", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23078", "commit_url": "https://git.kernel.org/stable/c/6f5c69f72e50d51be3a8c028ae7eda42c82902cb" }, { "cve": "CVE-2026-23079", "author_name": "Tzung-Bi Shih", "author_email": "tzungbi@kernel.org", "fix_sha": "70b3c280533167749a8f740acaa8ef720f78f984", "subject": "gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23079", "commit_url": "https://git.kernel.org/stable/c/70b3c280533167749a8f740acaa8ef720f78f984" }, { "cve": "CVE-2026-23080", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "710a7529fb13c5a470258ff5508ed3c498d54729", "subject": "can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23080", "commit_url": "https://git.kernel.org/stable/c/710a7529fb13c5a470258ff5508ed3c498d54729" }, { "cve": "CVE-2026-23081", "author_name": "Daniel Golle", "author_email": "daniel@makrotopia.org", "fix_sha": "79912b256e14054e6ba177d7e7e631485ce23dbe", "subject": "net: phy: intel-xway: fix OF node refcount leakage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23081", "commit_url": "https://git.kernel.org/stable/c/79912b256e14054e6ba177d7e7e631485ce23dbe" }, { "cve": "CVE-2026-23082", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "79a6d1bfe1148bc921b8d7f3371a7fbce44e30f7", "subject": "can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23082", "commit_url": "https://git.kernel.org/stable/c/79a6d1bfe1148bc921b8d7f3371a7fbce44e30f7" }, { "cve": "CVE-2026-23083", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5", "subject": "fou: Don't allow 0 for FOU_ATTR_IPPROTO.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23083", "commit_url": "https://git.kernel.org/stable/c/7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5" }, { "cve": "CVE-2026-23084", "author_name": "Andrey Vatoropin", "author_email": "a.vatoropin@crpt.ru", "fix_sha": "8215794403d264739cc676668087512950b2ff31", "subject": "be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23084", "commit_url": "https://git.kernel.org/stable/c/8215794403d264739cc676668087512950b2ff31" }, { "cve": "CVE-2026-23085", "author_name": "Arnd Bergmann", "author_email": "arnd@arndb.de", "fix_sha": "8d76a7d89c12d08382b66e2f21f20d0627d14859", "subject": "irqchip/gic-v3-its: Avoid truncating memory addresses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23085", "commit_url": "https://git.kernel.org/stable/c/8d76a7d89c12d08382b66e2f21f20d0627d14859" }, { "cve": "CVE-2026-23086", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "8ee784fdf006cbe8739cfa093f54d326cbf54037", "subject": "vsock/virtio: cap TX credit to local buffer size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23086", "commit_url": "https://git.kernel.org/stable/c/8ee784fdf006cbe8739cfa093f54d326cbf54037" }, { "cve": "CVE-2026-23087", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "901a5f309daba412e2a30364d7ec1492fa11c32c", "subject": "scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23087", "commit_url": "https://git.kernel.org/stable/c/901a5f309daba412e2a30364d7ec1492fa11c32c" }, { "cve": "CVE-2026-23088", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "90f9f5d64cae4e72defd96a2a22760173cb3c9ec", "subject": "tracing: Fix crash on synthetic stacktrace field usage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23088", "commit_url": "https://git.kernel.org/stable/c/90f9f5d64cae4e72defd96a2a22760173cb3c9ec" }, { "cve": "CVE-2026-23089", "author_name": "Berk Cem Goksel", "author_email": "berkcgoksel@gmail.com", "fix_sha": "930e69757b74c3ae083b0c3c7419bfe7f0edc7b2", "subject": "ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23089", "commit_url": "https://git.kernel.org/stable/c/930e69757b74c3ae083b0c3c7419bfe7f0edc7b2" }, { "cve": "CVE-2026-23090", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "9391380eb91ea5ac792aae9273535c8da5b9aa01", "subject": "slimbus: core: fix device reference leak on report present", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23090", "commit_url": "https://git.kernel.org/stable/c/9391380eb91ea5ac792aae9273535c8da5b9aa01" }, { "cve": "CVE-2026-23091", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "95fc36a234da24bbc5f476f8104a5a15f99ed3e3", "subject": "intel_th: fix device leak on output open()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23091", "commit_url": "https://git.kernel.org/stable/c/95fc36a234da24bbc5f476f8104a5a15f99ed3e3" }, { "cve": "CVE-2026-23092", "author_name": "Miaoqian Lin", "author_email": "linmq006@gmail.com", "fix_sha": "978d28136c53df38f8f0b747191930e2f95e9084", "subject": "iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23092", "commit_url": "https://git.kernel.org/stable/c/978d28136c53df38f8f0b747191930e2f95e9084" }, { "cve": "CVE-2026-23093", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "98e3e2b561bc88f4dd218d1c05890672874692f6", "subject": "ksmbd: smbd: fix dma_unmap_sg() nents", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23093", "commit_url": "https://git.kernel.org/stable/c/98e3e2b561bc88f4dd218d1c05890672874692f6" }, { "cve": "CVE-2026-23094", "author_name": "Chenghai Huang", "author_email": "huangchenghai2@huawei.com", "fix_sha": "98eec349259b1fd876f350b1c600403bcef8f85d", "subject": "uacce: fix isolate sysfs check condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23094", "commit_url": "https://git.kernel.org/stable/c/98eec349259b1fd876f350b1c600403bcef8f85d" }, { "cve": "CVE-2026-23095", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "9a56796ad258786d3624eef5aefba394fc9bdded", "subject": "gue: Fix skb memleak with inner IP protocol 0.", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23095", "commit_url": "https://git.kernel.org/stable/c/9a56796ad258786d3624eef5aefba394fc9bdded" }, { "cve": "CVE-2026-23096", "author_name": "Wenkai Lin", "author_email": "linwenkai6@hisilicon.com", "fix_sha": "a3bece3678f6c88db1f44c602b2a63e84b4040ac", "subject": "uacce: fix cdev handling in the cleanup path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23096", "commit_url": "https://git.kernel.org/stable/c/a3bece3678f6c88db1f44c602b2a63e84b4040ac" }, { "cve": "CVE-2026-23097", "author_name": "Matthew Wilcox (Oracle)", "author_email": "willy@infradead.org", "fix_sha": "b7880cb166ab62c2409046b2347261abf701530e", "subject": "migrate: correct lock ordering for hugetlb file folios", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23097", "commit_url": "https://git.kernel.org/stable/c/b7880cb166ab62c2409046b2347261abf701530e" }, { "cve": "CVE-2026-23098", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "ba1096c315283ee3292765f6aea4cca15816c4f7", "subject": "netrom: fix double-free in nr_route_frame()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23098", "commit_url": "https://git.kernel.org/stable/c/ba1096c315283ee3292765f6aea4cca15816c4f7" }, { "cve": "CVE-2026-23099", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6", "subject": "bonding: limit BOND_MODE_8023AD to Ethernet devices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23099", "commit_url": "https://git.kernel.org/stable/c/c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6" }, { "cve": "CVE-2026-23100", "author_name": "David Hildenbrand (Red Hat)", "author_email": "david@kernel.org", "fix_sha": "ca1a47cd3f5f4c46ca188b1c9a27af87d1ab2216", "subject": "mm/hugetlb: fix hugetlb_pmd_shared()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23100", "commit_url": "https://git.kernel.org/stable/c/ca1a47cd3f5f4c46ca188b1c9a27af87d1ab2216" }, { "cve": "CVE-2026-23101", "author_name": "Hans de Goede", "author_email": "johannes.goede@oss.qualcomm.com", "fix_sha": "d1883cefd31752f0504b94c3bcfa1f6d511d6e87", "subject": "leds: led-class: Only Add LED to leds_list when it is fully ready", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23101", "commit_url": "https://git.kernel.org/stable/c/d1883cefd31752f0504b94c3bcfa1f6d511d6e87" }, { "cve": "CVE-2026-23102", "author_name": "Mark Rutland", "author_email": "mark.rutland@arm.com", "fix_sha": "d2907cbe9ea0a54cbe078076f9d089240ee1e2d9", "subject": "arm64/fpsimd: signal: Fix restoration of SVE context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23102", "commit_url": "https://git.kernel.org/stable/c/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9" }, { "cve": "CVE-2026-23103", "author_name": "Dmitry Skorodumov", "author_email": "dskr99@gmail.com", "fix_sha": "d3ba32162488283c0a4c5bedd8817aec91748802", "subject": "ipvlan: Make the addrs_lock be per port", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23103", "commit_url": "https://git.kernel.org/stable/c/d3ba32162488283c0a4c5bedd8817aec91748802" }, { "cve": "CVE-2026-23104", "author_name": "Paul Greenwalt", "author_email": "paul.greenwalt@intel.com", "fix_sha": "d3f867e7a04678640ebcbfb81893c59f4af48586", "subject": "ice: fix devlink reload call trace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23104", "commit_url": "https://git.kernel.org/stable/c/d3f867e7a04678640ebcbfb81893c59f4af48586" }, { "cve": "CVE-2026-23105", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "d837fbee92453fbb829f950c8e7cf76207d73f33", "subject": "net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23105", "commit_url": "https://git.kernel.org/stable/c/d837fbee92453fbb829f950c8e7cf76207d73f33" }, { "cve": "CVE-2026-23106", "author_name": "Thomas Wei\u00dfschuh", "author_email": "thomas.weissschuh@linutronix.de", "fix_sha": "e806f7dde8ba28bc72a7a0898589cac79f6362ac", "subject": "timekeeping: Adjust the leap state for the correct auxiliary timekeeper", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23106", "commit_url": "https://git.kernel.org/stable/c/e806f7dde8ba28bc72a7a0898589cac79f6362ac" }, { "cve": "CVE-2026-23107", "author_name": "Mark Rutland", "author_email": "mark.rutland@arm.com", "fix_sha": "ea8ccfddbce0bee6310da4f3fc560ad520f5e6b4", "subject": "arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23107", "commit_url": "https://git.kernel.org/stable/c/ea8ccfddbce0bee6310da4f3fc560ad520f5e6b4" }, { "cve": "CVE-2026-23108", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "f7a980b3b8f80fe367f679da376cf76e800f9480", "subject": "can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23108", "commit_url": "https://git.kernel.org/stable/c/f7a980b3b8f80fe367f679da376cf76e800f9480" }, { "cve": "CVE-2026-23109", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "f9a49aa302a05e91ca01f69031cb79a0ea33031f", "subject": "fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23109", "commit_url": "https://git.kernel.org/stable/c/f9a49aa302a05e91ca01f69031cb79a0ea33031f" }, { "cve": "CVE-2026-23110", "author_name": "David Jeffery", "author_email": "djeffery@redhat.com", "fix_sha": "fe2f8ad6f0999db3b318359a01ee0108c703a8c3", "subject": "scsi: core: Wake up the error handler when final completions race against each other", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23110", "commit_url": "https://git.kernel.org/stable/c/fe2f8ad6f0999db3b318359a01ee0108c703a8c3" }, { "cve": "CVE-2026-23111", "author_name": "Andrew Fasano", "author_email": "andrew.fasano@nist.gov", "fix_sha": "f41c5d151078c5348271ffaf8e7410d96f2d82f8", "subject": "netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23111", "commit_url": "https://git.kernel.org/stable/c/f41c5d151078c5348271ffaf8e7410d96f2d82f8" }, { "cve": "CVE-2026-23112", "author_name": "YunJe Shin", "author_email": "yjshin0438@gmail.com", "fix_sha": "52a0a98549344ca20ad81a4176d68d28e3c05a5c", "subject": "nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23112", "commit_url": "https://git.kernel.org/stable/c/52a0a98549344ca20ad81a4176d68d28e3c05a5c" }, { "cve": "CVE-2026-23113", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "10dc959398175736e495f71c771f8641e1ca1907", "subject": "io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23113", "commit_url": "https://git.kernel.org/stable/c/10dc959398175736e495f71c771f8641e1ca1907" }, { "cve": "CVE-2026-23114", "author_name": "Mark Rutland", "author_email": "mark.rutland@arm.com", "fix_sha": "128a7494a9f15aad60cc6b7e3546bf481ac54a13", "subject": "arm64/fpsimd: ptrace: Fix SVE writes on !SME systems", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23114", "commit_url": "https://git.kernel.org/stable/c/128a7494a9f15aad60cc6b7e3546bf481ac54a13" }, { "cve": "CVE-2026-23115", "author_name": "Krzysztof Kozlowski", "author_email": "krzysztof.kozlowski@oss.qualcomm.com", "fix_sha": "32f37e57583f869140cff445feedeea8a5fea986", "subject": "serial: Fix not set tty->port race condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23115", "commit_url": "https://git.kernel.org/stable/c/32f37e57583f869140cff445feedeea8a5fea986" }, { "cve": "CVE-2026-23116", "author_name": "Ming Qian", "author_email": "ming.qian@oss.nxp.com", "fix_sha": "3de49966499634454fd59e0e6fecd50baab7febd", "subject": "pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23116", "commit_url": "https://git.kernel.org/stable/c/3de49966499634454fd59e0e6fecd50baab7febd" }, { "cve": "CVE-2026-23117", "author_name": "Paul Greenwalt", "author_email": "paul.greenwalt@intel.com", "fix_sha": "42fb5f3deb582cb96440e4683745017dbabb83d6", "subject": "ice: add missing ice_deinit_hw() in devlink reinit path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23117", "commit_url": "https://git.kernel.org/stable/c/42fb5f3deb582cb96440e4683745017dbabb83d6" }, { "cve": "CVE-2026-23118", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "5d5fe8bcd331f1e34e0943ec7c18432edfcf0e8b", "subject": "rxrpc: Fix data-race warning and potential load/store tearing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23118", "commit_url": "https://git.kernel.org/stable/c/5d5fe8bcd331f1e34e0943ec7c18432edfcf0e8b" }, { "cve": "CVE-2026-23119", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "5f9b329096596b7e53e07d041d7fca4cbe1be752", "subject": "bonding: provide a net pointer to __skb_flow_dissect()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23119", "commit_url": "https://git.kernel.org/stable/c/5f9b329096596b7e53e07d041d7fca4cbe1be752" }, { "cve": "CVE-2026-23120", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7a29f6bf60f2590fe5e9c4decb451e19afad2bcf", "subject": "l2tp: avoid one data-race in l2tp_tunnel_del_work()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23120", "commit_url": "https://git.kernel.org/stable/c/7a29f6bf60f2590fe5e9c4decb451e19afad2bcf" }, { "cve": "CVE-2026-23121", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8175dbf174d487afab81e936a862a8d9b8a1ccb6", "subject": "mISDN: annotate data-race around dev->work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23121", "commit_url": "https://git.kernel.org/stable/c/8175dbf174d487afab81e936a862a8d9b8a1ccb6" }, { "cve": "CVE-2026-23122", "author_name": "Chwee-Lin Choong", "author_email": "chwee.lin.choong@intel.com", "fix_sha": "8ad1b6c1e63d25f5465b7a8aa403bdcee84b86f9", "subject": "igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23122", "commit_url": "https://git.kernel.org/stable/c/8ad1b6c1e63d25f5465b7a8aa403bdcee84b86f9" }, { "cve": "CVE-2026-23123", "author_name": "Georgi Djakov", "author_email": "djakov@kernel.org", "fix_sha": "8cc27f5c6dd17dd090f3a696683f04336c162ff5", "subject": "interconnect: debugfs: initialize src_node and dst_node to empty strings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23123", "commit_url": "https://git.kernel.org/stable/c/8cc27f5c6dd17dd090f3a696683f04336c162ff5" }, { "cve": "CVE-2026-23124", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "9a063f96d87efc3a6cc667f8de096a3d38d74bb5", "subject": "ipv6: annotate data-race in ndisc_router_discovery()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23124", "commit_url": "https://git.kernel.org/stable/c/9a063f96d87efc3a6cc667f8de096a3d38d74bb5" }, { "cve": "CVE-2026-23125", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "a80c9d945aef55b23b54838334345f20251dad83", "subject": "sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23125", "commit_url": "https://git.kernel.org/stable/c/a80c9d945aef55b23b54838334345f20251dad83" }, { "cve": "CVE-2026-23126", "author_name": "Yun Lu", "author_email": "luyun@kylinos.cn", "fix_sha": "b97d5eedf4976cc94321243be83b39efe81a0e15", "subject": "netdevsim: fix a race issue related to the operation on bpf_bound_progs list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23126", "commit_url": "https://git.kernel.org/stable/c/b97d5eedf4976cc94321243be83b39efe81a0e15" }, { "cve": "CVE-2026-23127", "author_name": "Will Rosenberg", "author_email": "whrosenb@asu.edu", "fix_sha": "d06bf78e55d5159c1b00072e606ab924ffbbad35", "subject": "perf: Fix refcount warning on event->mmap_count increment", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23127", "commit_url": "https://git.kernel.org/stable/c/d06bf78e55d5159c1b00072e606ab924ffbbad35" }, { "cve": "CVE-2026-23128", "author_name": "Zhaoyang Huang", "author_email": "zhaoyang.huang@unisoc.com", "fix_sha": "e2f8216ca2d8e61a23cb6ec355616339667e0ba6", "subject": "arm64: Set __nocfi on swsusp_arch_resume()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23128", "commit_url": "https://git.kernel.org/stable/c/e2f8216ca2d8e61a23cb6ec355616339667e0ba6" }, { "cve": "CVE-2026-23129", "author_name": "Ivan Vecera", "author_email": "ivecera@redhat.com", "fix_sha": "f3ddbaaaaf4d0633b40482f471753f9c71294a4a", "subject": "dpll: Prevent duplicate registrations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23129", "commit_url": "https://git.kernel.org/stable/c/f3ddbaaaaf4d0633b40482f471753f9c71294a4a" }, { "cve": "CVE-2026-23130", "author_name": "Baochen Qiang", "author_email": "baochen.qiang@oss.qualcomm.com", "fix_sha": "f88e9fc30a261d63946ddc6cc6a33405e6aa27c3", "subject": "wifi: ath12k: fix dead lock while flushing management frames", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23130", "commit_url": "https://git.kernel.org/stable/c/f88e9fc30a261d63946ddc6cc6a33405e6aa27c3" }, { "cve": "CVE-2026-23131", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "fdee1b09721605f532352628d0a24623e7062efb", "subject": "platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23131", "commit_url": "https://git.kernel.org/stable/c/fdee1b09721605f532352628d0a24623e7062efb" }, { "cve": "CVE-2026-23132", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "1a0f69e3c28477b97d3609569b7e8feb4b6162e8", "subject": "drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23132", "commit_url": "https://git.kernel.org/stable/c/1a0f69e3c28477b97d3609569b7e8feb4b6162e8" }, { "cve": "CVE-2026-23133", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "9282a1e171ad8d2205067e8ec3bbe4e3cef4f29f", "subject": "wifi: ath10k: fix dma_free_coherent() pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23133", "commit_url": "https://git.kernel.org/stable/c/9282a1e171ad8d2205067e8ec3bbe4e3cef4f29f" }, { "cve": "CVE-2026-23134", "author_name": "Swaraj Gaikwad", "author_email": "swarajgaikwad1925@gmail.com", "fix_sha": "99a3e3a1cfc93b8fe318c0a3a5cfb01f1d4ad53c", "subject": "slab: fix kmalloc_nolock() context check for PREEMPT_RT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23134", "commit_url": "https://git.kernel.org/stable/c/99a3e3a1cfc93b8fe318c0a3a5cfb01f1d4ad53c" }, { "cve": "CVE-2026-23135", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "bb97131fbf9b708dd9616ac2bdc793ad102b5c48", "subject": "wifi: ath12k: fix dma_free_coherent() pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23135", "commit_url": "https://git.kernel.org/stable/c/bb97131fbf9b708dd9616ac2bdc793ad102b5c48" }, { "cve": "CVE-2026-23136", "author_name": "Sam Edwards", "author_email": "cfsworks@gmail.com", "fix_sha": "11194b416ef95012c2cfe5f546d71af07b639e93", "subject": "libceph: reset sparse-read state in osd_fault()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23136", "commit_url": "https://git.kernel.org/stable/c/11194b416ef95012c2cfe5f546d71af07b639e93" }, { "cve": "CVE-2026-23137", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b", "subject": "of: unittest: Fix memory leak in unittest_data_add()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23137", "commit_url": "https://git.kernel.org/stable/c/235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b" }, { "cve": "CVE-2026-23138", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdb", "subject": "tracing: Add recursion protection in kernel stack trace recording", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23138", "commit_url": "https://git.kernel.org/stable/c/5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdb" }, { "cve": "CVE-2026-23139", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "7811ba452402d58628e68faedf38745b3d485e3c", "subject": "netfilter: nf_conncount: update last_gc only when GC has been performed", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23139", "commit_url": "https://git.kernel.org/stable/c/7811ba452402d58628e68faedf38745b3d485e3c" }, { "cve": "CVE-2026-23140", "author_name": "Toke H\u00f8iland-J\u00f8rgensen", "author_email": "toke@redhat.com", "fix_sha": "e558cca217790286e799a8baacd1610bda31b261", "subject": "bpf, test_run: Subtract size of xdp_frame from allowed metadata size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23140", "commit_url": "https://git.kernel.org/stable/c/e558cca217790286e799a8baacd1610bda31b261" }, { "cve": "CVE-2026-23141", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "08b096c1372cd69627f4f559fb47c9fb67a52b39", "subject": "btrfs: send: check for inline extents in range_is_hole_in_parent()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23141", "commit_url": "https://git.kernel.org/stable/c/08b096c1372cd69627f4f559fb47c9fb67a52b39" }, { "cve": "CVE-2026-23142", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "392b3d9d595f34877dd745b470c711e8ebcd225c", "subject": "mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23142", "commit_url": "https://git.kernel.org/stable/c/392b3d9d595f34877dd745b470c711e8ebcd225c" }, { "cve": "CVE-2026-23143", "author_name": "Gustavo A. R. Silva", "author_email": "gustavoars@kernel.org", "fix_sha": "4156c3745f06bc197094b9ee97a9584e69ed00bf", "subject": "virtio_net: Fix misalignment bug in struct virtnet_info", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23143", "commit_url": "https://git.kernel.org/stable/c/4156c3745f06bc197094b9ee97a9584e69ed00bf" }, { "cve": "CVE-2026-23144", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "9814cc832b88bd040fc2a1817c2b5469d0f7e862", "subject": "mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23144", "commit_url": "https://git.kernel.org/stable/c/9814cc832b88bd040fc2a1817c2b5469d0f7e862" }, { "cve": "CVE-2026-23145", "author_name": "Yang Erkun", "author_email": "yangerkun@huawei.com", "fix_sha": "d250bdf531d9cd4096fedbb9f172bb2ca660c868", "subject": "ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23145", "commit_url": "https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868" }, { "cve": "CVE-2026-23146", "author_name": "Jia-Hong Su", "author_email": "s11242586@gmail.com", "fix_sha": "0c3cd7a0b862c37acbee6d9502107146cc944398", "subject": "Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23146", "commit_url": "https://git.kernel.org/stable/c/0c3cd7a0b862c37acbee6d9502107146cc944398" }, { "cve": "CVE-2026-23147", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "0d0f1314e8f86f5205f71f9e31e272a1d008e40b", "subject": "btrfs: zlib: fix the folio leak on S390 hardware acceleration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23147", "commit_url": "https://git.kernel.org/stable/c/0d0f1314e8f86f5205f71f9e31e272a1d008e40b" }, { "cve": "CVE-2026-23148", "author_name": "Ming Lei", "author_email": "ming.lei@redhat.com", "fix_sha": "0fcee2cfc4b2e16e62ff8e0cc2cd8dd24efad65e", "subject": "nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23148", "commit_url": "https://git.kernel.org/stable/c/0fcee2cfc4b2e16e62ff8e0cc2cd8dd24efad65e" }, { "cve": "CVE-2026-23149", "author_name": "Tvrtko Ursulin", "author_email": "tvrtko.ursulin@igalia.com", "fix_sha": "12f15d52d38ac53f7c70ea3d4b3d76afed04e064", "subject": "drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23149", "commit_url": "https://git.kernel.org/stable/c/12f15d52d38ac53f7c70ea3d4b3d76afed04e064" }, { "cve": "CVE-2026-23150", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "165c34fb6068ff153e3fc99a932a80a9d5755709", "subject": "nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23150", "commit_url": "https://git.kernel.org/stable/c/165c34fb6068ff153e3fc99a932a80a9d5755709" }, { "cve": "CVE-2026-23151", "author_name": "Jianpeng Chang", "author_email": "jianpeng.chang.cn@windriver.com", "fix_sha": "1b9c17fd0a7fdcbe69ec5d6fe8e50bc5ed7f01f2", "subject": "Bluetooth: MGMT: Fix memory leak in set_ssp_complete", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23151", "commit_url": "https://git.kernel.org/stable/c/1b9c17fd0a7fdcbe69ec5d6fe8e50bc5ed7f01f2" }, { "cve": "CVE-2026-23152", "author_name": "Benjamin Berg", "author_email": "benjamin.berg@intel.com", "fix_sha": "1eab33aa63c993685dd341e03bd5b267dd7403fa", "subject": "wifi: mac80211: correctly decode TTLM with default link map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23152", "commit_url": "https://git.kernel.org/stable/c/1eab33aa63c993685dd341e03bd5b267dd7403fa" }, { "cve": "CVE-2026-23153", "author_name": "Takashi Sakamoto", "author_email": "o-takashi@sakamocchi.jp", "fix_sha": "20e01bba2ae4898ce65cdcacd1bd6bec5111abd9", "subject": "firewire: core: fix race condition against transaction list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23153", "commit_url": "https://git.kernel.org/stable/c/20e01bba2ae4898ce65cdcacd1bd6bec5111abd9" }, { "cve": "CVE-2026-23154", "author_name": "Jibin Zhang", "author_email": "jibin.zhang@mediatek.com", "fix_sha": "426ca15c7f6cb6562a081341ca88893a50c59fa2", "subject": "net: fix segmentation of forwarding fraglist GRO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23154", "commit_url": "https://git.kernel.org/stable/c/426ca15c7f6cb6562a081341ca88893a50c59fa2" }, { "cve": "CVE-2026-23155", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "494fc029f662c331e06b7c2031deff3c64200eed", "subject": "can: gs_usb: gs_usb_receive_bulk_callback(): fix error message", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23155", "commit_url": "https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed" }, { "cve": "CVE-2026-23156", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "4b22ec1685ce1fc0d862dcda3225d852fb107995", "subject": "efivarfs: fix error propagation in efivar_entry_get()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23156", "commit_url": "https://git.kernel.org/stable/c/4b22ec1685ce1fc0d862dcda3225d852fb107995" }, { "cve": "CVE-2026-23157", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "4e159150a9a56d66d247f4b5510bed46fe58aa1c", "subject": "btrfs: do not strictly require dirty metadata threshold for metadata writepages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23157", "commit_url": "https://git.kernel.org/stable/c/4e159150a9a56d66d247f4b5510bed46fe58aa1c" }, { "cve": "CVE-2026-23158", "author_name": "Yuhao Huang", "author_email": "nekowong743@gmail.com", "fix_sha": "53ad4a948a4586359b841d607c08fb16c5503230", "subject": "gpio: virtuser: fix UAF in configfs release path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23158", "commit_url": "https://git.kernel.org/stable/c/53ad4a948a4586359b841d607c08fb16c5503230" }, { "cve": "CVE-2026-23159", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "76ed27608f7dd235b727ebbb12163438c2fbb617", "subject": "perf: sched: Fix perf crash with new is_user_task() helper", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23159", "commit_url": "https://git.kernel.org/stable/c/76ed27608f7dd235b727ebbb12163438c2fbb617" }, { "cve": "CVE-2026-23160", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "8016dc5ee19a77678c264f8ba368b1e873fa705b", "subject": "octeon_ep: Fix memory leak in octep_device_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23160", "commit_url": "https://git.kernel.org/stable/c/8016dc5ee19a77678c264f8ba368b1e873fa705b" }, { "cve": "CVE-2026-23161", "author_name": "Kairui Song", "author_email": "kasong@tencent.com", "fix_sha": "8a1968bd997f45a9b11aefeabdd1232e1b6c7184", "subject": "mm/shmem, swap: fix race of truncate and swap entry split", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23161", "commit_url": "https://git.kernel.org/stable/c/8a1968bd997f45a9b11aefeabdd1232e1b6c7184" }, { "cve": "CVE-2026-23162", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "8a44241b0b83a6047c5448da1fff03fcc29496b5", "subject": "drm/xe/nvm: Fix double-free on aux add failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23162", "commit_url": "https://git.kernel.org/stable/c/8a44241b0b83a6047c5448da1fff03fcc29496b5" }, { "cve": "CVE-2026-23163", "author_name": "Jon Doron", "author_email": "jond@wiz.io", "fix_sha": "8b1ecc9377bc641533cd9e76dfa3aee3cd04a007", "subject": "drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23163", "commit_url": "https://git.kernel.org/stable/c/8b1ecc9377bc641533cd9e76dfa3aee3cd04a007" }, { "cve": "CVE-2026-23164", "author_name": "Kery Qi", "author_email": "qikeyu2017@gmail.com", "fix_sha": "8d7ba71e46216b8657a82ca2ec118bc93812a4d0", "subject": "rocker: fix memory leak in rocker_world_port_post_fini()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23164", "commit_url": "https://git.kernel.org/stable/c/8d7ba71e46216b8657a82ca2ec118bc93812a4d0" }, { "cve": "CVE-2026-23165", "author_name": "Edward Cree", "author_email": "ecree.xilinx@gmail.com", "fix_sha": "944c614b0a7afa5b87612c3fb557b95a50ad654c", "subject": "sfc: fix deadlock in RSS config read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23165", "commit_url": "https://git.kernel.org/stable/c/944c614b0a7afa5b87612c3fb557b95a50ad654c" }, { "cve": "CVE-2026-23166", "author_name": "Aaron Ma", "author_email": "aaron.ma@canonical.com", "fix_sha": "9bb30be4d89ff9a8d7ab1aa0eb2edaca83431f85", "subject": "ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23166", "commit_url": "https://git.kernel.org/stable/c/9bb30be4d89ff9a8d7ab1aa0eb2edaca83431f85" }, { "cve": "CVE-2026-23167", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "d2492688bb9fed6ab6e313682c387ae71a66ebae", "subject": "nfc: nci: Fix race between rfkill and nci_unregister_device().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23167", "commit_url": "https://git.kernel.org/stable/c/d2492688bb9fed6ab6e313682c387ae71a66ebae" }, { "cve": "CVE-2026-23168", "author_name": "Jan Kara", "author_email": "jack@suse.cz", "fix_sha": "dd9e2f5b38f1fdd49b1ab6d3a85f81c14369eacc", "subject": "flex_proportions: make fprop_new_period() hardirq safe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23168", "commit_url": "https://git.kernel.org/stable/c/dd9e2f5b38f1fdd49b1ab6d3a85f81c14369eacc" }, { "cve": "CVE-2026-23169", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "e2a9eeb69f7d4ca4cf4c70463af77664fdb6ab1d", "subject": "mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23169", "commit_url": "https://git.kernel.org/stable/c/e2a9eeb69f7d4ca4cf4c70463af77664fdb6ab1d" }, { "cve": "CVE-2026-23170", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "e535c23513c63f02f67e3e09e0787907029efeaf", "subject": "drm/imx/tve: fix probe device leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23170", "commit_url": "https://git.kernel.org/stable/c/e535c23513c63f02f67e3e09e0787907029efeaf" }, { "cve": "CVE-2026-23171", "author_name": "Nikolay Aleksandrov", "author_email": "razor@blackwall.org", "fix_sha": "e9acda52fd2ee0cdca332f996da7a95c5fd25294", "subject": "bonding: fix use-after-free due to enslave fail after slave array update", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23171", "commit_url": "https://git.kernel.org/stable/c/e9acda52fd2ee0cdca332f996da7a95c5fd25294" }, { "cve": "CVE-2026-23172", "author_name": "Kery Qi", "author_email": "qikeyu2017@gmail.com", "fix_sha": "f0813bcd2d9d97fdbdf2efb9532ab03ae92e99e6", "subject": "net: wwan: t7xx: fix potential skb->frags overflow in RX path", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23172", "commit_url": "https://git.kernel.org/stable/c/f0813bcd2d9d97fdbdf2efb9532ab03ae92e99e6" }, { "cve": "CVE-2026-23173", "author_name": "Mark Bloch", "author_email": "mbloch@nvidia.com", "fix_sha": "f67666938ae626cbda63fbf5176b3583c07e7124", "subject": "net/mlx5e: TC, delete flows only for existing peers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23173", "commit_url": "https://git.kernel.org/stable/c/f67666938ae626cbda63fbf5176b3583c07e7124" }, { "cve": "CVE-2026-23174", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "071be3b0b6575d45be9df9c5b612f5882bfc5e88", "subject": "nvme-pci: handle changing device dma map requirements", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23174", "commit_url": "https://git.kernel.org/stable/c/071be3b0b6575d45be9df9c5b612f5882bfc5e88" }, { "cve": "CVE-2026-23175", "author_name": "Kevin Hao", "author_email": "haokexin@gmail.com", "fix_sha": "0b8c878d117319f2be34c8391a77e0f4d5c94d79", "subject": "net: cpsw: Execute ndo_set_rx_mode callback in a work queue", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23175", "commit_url": "https://git.kernel.org/stable/c/0b8c878d117319f2be34c8391a77e0f4d5c94d79" }, { "cve": "CVE-2026-23176", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "128497456756e1b952bd5a912cd073836465109d", "subject": "platform/x86: toshiba_haps: Fix memory leaks in add/remove routines", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23176", "commit_url": "https://git.kernel.org/stable/c/128497456756e1b952bd5a912cd073836465109d" }, { "cve": "CVE-2026-23177", "author_name": "Kairui Song", "author_email": "kasong@tencent.com", "fix_sha": "2030dddf95451b4e7a389f052091e7c4b7b274c6", "subject": "mm, shmem: prevent infinite loop on truncate race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23177", "commit_url": "https://git.kernel.org/stable/c/2030dddf95451b4e7a389f052091e7c4b7b274c6" }, { "cve": "CVE-2026-23178", "author_name": "Kwok Kin Ming", "author_email": "kenkinming2002@gmail.com", "fix_sha": "2497ff38c530b1af0df5130ca9f5ab22c5e92f29", "subject": "HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23178", "commit_url": "https://git.kernel.org/stable/c/2497ff38c530b1af0df5130ca9f5ab22c5e92f29" }, { "cve": "CVE-2026-23179", "author_name": "Hannes Reinecke", "author_email": "hare@kernel.org", "fix_sha": "2fa8961d3a6a1c2395d8d560ffed2c782681bade", "subject": "nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23179", "commit_url": "https://git.kernel.org/stable/c/2fa8961d3a6a1c2395d8d560ffed2c782681bade" }, { "cve": "CVE-2026-23180", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "31a7a0bbeb006bac2d9c81a2874825025214b6d8", "subject": "dpaa2-switch: add bounds check for if_id in IRQ handler", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23180", "commit_url": "https://git.kernel.org/stable/c/31a7a0bbeb006bac2d9c81a2874825025214b6d8" }, { "cve": "CVE-2026-23181", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "3f29d661e5686f3aa14e6f11537ff5c49846f2e2", "subject": "btrfs: sync read disk super and set block size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23181", "commit_url": "https://git.kernel.org/stable/c/3f29d661e5686f3aa14e6f11537ff5c49846f2e2" }, { "cve": "CVE-2026-23182", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "41d9a6795b95d6ea28439ac1e9ce8c95bbca20fc", "subject": "spi: tegra: Fix a memory leak in tegra_slink_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23182", "commit_url": "https://git.kernel.org/stable/c/41d9a6795b95d6ea28439ac1e9ce8c95bbca20fc" }, { "cve": "CVE-2026-23183", "author_name": "Chen Ridong", "author_email": "chenridong@huawei.com", "fix_sha": "43151f812886be1855d2cba059f9c93e4729460b", "subject": "cgroup/dmem: fix NULL pointer dereference when setting max", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23183", "commit_url": "https://git.kernel.org/stable/c/43151f812886be1855d2cba059f9c93e4729460b" }, { "cve": "CVE-2026-23184", "author_name": "Carlos Llamas", "author_email": "cmllamas@google.com", "fix_sha": "5e8a3d01544282e50d887d76f30d1496a0a53562", "subject": "binder: fix UAF in binder_netlink_report()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23184", "commit_url": "https://git.kernel.org/stable/c/5e8a3d01544282e50d887d76f30d1496a0a53562" }, { "cve": "CVE-2026-23185", "author_name": "Miri Korenblit", "author_email": "miriam.rachel.korenblit@intel.com", "fix_sha": "5ff641011ab7fb63ea101251087745d9826e8ef5", "subject": "wifi: iwlwifi: mld: cancel mlo_scan_start_wk", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23185", "commit_url": "https://git.kernel.org/stable/c/5ff641011ab7fb63ea101251087745d9826e8ef5" }, { "cve": "CVE-2026-23186", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "615901b57b7ef8eb655f71358f7e956e42bcd16b", "subject": "hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23186", "commit_url": "https://git.kernel.org/stable/c/615901b57b7ef8eb655f71358f7e956e42bcd16b" }, { "cve": "CVE-2026-23187", "author_name": "Xu Yang", "author_email": "xu.yang_2@nxp.com", "fix_sha": "6bd8b4a92a901fae1a422e6f914801063c345e8d", "subject": "pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23187", "commit_url": "https://git.kernel.org/stable/c/6bd8b4a92a901fae1a422e6f914801063c345e8d" }, { "cve": "CVE-2026-23188", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "6d06bc83a5ae8777a5f7a81c32dd75b8d9b2fe04", "subject": "net: usb: r8152: fix resume reset deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23188", "commit_url": "https://git.kernel.org/stable/c/6d06bc83a5ae8777a5f7a81c32dd75b8d9b2fe04" }, { "cve": "CVE-2026-23189", "author_name": "Viacheslav Dubeyko", "author_email": "slava.dubeyko@ibm.com", "fix_sha": "7987cce375ac8ce98e170a77aa2399f2cf6eb99f", "subject": "ceph: fix NULL pointer dereference in ceph_mds_auth_match()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23189", "commit_url": "https://git.kernel.org/stable/c/7987cce375ac8ce98e170a77aa2399f2cf6eb99f" }, { "cve": "CVE-2026-23190", "author_name": "Chris Bainbridge", "author_email": "chris.bainbridge@gmail.com", "fix_sha": "7f67ba5413f98d93116a756e7f17cd2c1d6c2bd6", "subject": "ASoC: amd: fix memory leak in acp3x pdm dma ops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23190", "commit_url": "https://git.kernel.org/stable/c/7f67ba5413f98d93116a756e7f17cd2c1d6c2bd6" }, { "cve": "CVE-2026-23191", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "826af7fa62e347464b1b4e0ba2fe19a92438084f", "subject": "ALSA: aloop: Fix racy access at PCM trigger", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23191", "commit_url": "https://git.kernel.org/stable/c/826af7fa62e347464b1b4e0ba2fe19a92438084f" }, { "cve": "CVE-2026-23192", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "83b67cc9be9223183caf91826d9c194d7fb128fa", "subject": "linkwatch: use __dev_put() in callers to prevent UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23192", "commit_url": "https://git.kernel.org/stable/c/83b67cc9be9223183caf91826d9c194d7fb128fa" }, { "cve": "CVE-2026-23193", "author_name": "Maurizio Lombardi", "author_email": "mlombard@redhat.com", "fix_sha": "84dc6037390b8607c5551047d3970336cb51ba9a", "subject": "scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23193", "commit_url": "https://git.kernel.org/stable/c/84dc6037390b8607c5551047d3970336cb51ba9a" }, { "cve": "CVE-2026-23194", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "8f589c9c3be539d6c2b393c82940c3783831082f", "subject": "rust_binder: correctly handle FDA objects of length zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23194", "commit_url": "https://git.kernel.org/stable/c/8f589c9c3be539d6c2b393c82940c3783831082f" }, { "cve": "CVE-2026-23195", "author_name": "Chen Ridong", "author_email": "chenridong@huawei.com", "fix_sha": "99a2ef500906138ba58093b9893972a5c303c734", "subject": "cgroup/dmem: avoid pool UAF", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23195", "commit_url": "https://git.kernel.org/stable/c/99a2ef500906138ba58093b9893972a5c303c734" }, { "cve": "CVE-2026-23196", "author_name": "Even Xu", "author_email": "even.xu@intel.com", "fix_sha": "a9a917998d172ec117f9e9de1919174153c0ace4", "subject": "HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23196", "commit_url": "https://git.kernel.org/stable/c/a9a917998d172ec117f9e9de1919174153c0ace4" }, { "cve": "CVE-2026-23197", "author_name": "LI Qingwu", "author_email": "qing-wu.li@leica-geosystems.com.cn", "fix_sha": "b126097b0327437048bd045a0e4d273dea2910dd", "subject": "i2c: imx: preserve error state in block data length handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23197", "commit_url": "https://git.kernel.org/stable/c/b126097b0327437048bd045a0e4d273dea2910dd" }, { "cve": "CVE-2026-23198", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "b4d37cdb77a0015f51fee083598fa227cc07aaf1", "subject": "KVM: Don't clobber irqfd routing type when deassigning irqfd", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23198", "commit_url": "https://git.kernel.org/stable/c/b4d37cdb77a0015f51fee083598fa227cc07aaf1" }, { "cve": "CVE-2026-23199", "author_name": "Andrii Nakryiko", "author_email": "andrii@kernel.org", "fix_sha": "b5cbacd7f86f4f62b8813688c8e73be94e8e1951", "subject": "procfs: avoid fetching build ID while holding VMA lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23199", "commit_url": "https://git.kernel.org/stable/c/b5cbacd7f86f4f62b8813688c8e73be94e8e1951" }, { "cve": "CVE-2026-23200", "author_name": "Shigeru Yoshida", "author_email": "syoshida@redhat.com", "fix_sha": "bbf4a17ad9ffc4e3d7ec13d73ecd59dea149ed25", "subject": "ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23200", "commit_url": "https://git.kernel.org/stable/c/bbf4a17ad9ffc4e3d7ec13d73ecd59dea149ed25" }, { "cve": "CVE-2026-23201", "author_name": "Daniel Vogelbacher", "author_email": "daniel@chaospixel.com", "fix_sha": "bc8dedae022ce3058659c3addef3ec4b41d15e00", "subject": "ceph: fix oops due to invalid pointer for kfree() in parse_longname()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23201", "commit_url": "https://git.kernel.org/stable/c/bc8dedae022ce3058659c3addef3ec4b41d15e00" }, { "cve": "CVE-2026-23202", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "bf4528ab28e2bf112c3a2cdef44fd13f007781cd", "subject": "spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23202", "commit_url": "https://git.kernel.org/stable/c/bf4528ab28e2bf112c3a2cdef44fd13f007781cd" }, { "cve": "CVE-2026-23203", "author_name": "Kevin Hao", "author_email": "haokexin@gmail.com", "fix_sha": "c0b5dc73a38f954e780f93a549b8fe225235c07a", "subject": "net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23203", "commit_url": "https://git.kernel.org/stable/c/c0b5dc73a38f954e780f93a549b8fe225235c07a" }, { "cve": "CVE-2026-23204", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "cabd1a976375780dabab888784e356f574bbaed8", "subject": "net/sched: cls_u32: use skb_header_pointer_careful()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23204", "commit_url": "https://git.kernel.org/stable/c/cabd1a976375780dabab888784e356f574bbaed8" }, { "cve": "CVE-2026-23205", "author_name": "ChenXiaoSong", "author_email": "chenxiaosong@kylinos.cn", "fix_sha": "e3a43633023e3cacaca60d4b8972d084a2b06236", "subject": "smb/client: fix memory leak in smb2_open_file()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23205", "commit_url": "https://git.kernel.org/stable/c/e3a43633023e3cacaca60d4b8972d084a2b06236" }, { "cve": "CVE-2026-23206", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "ed48a84a72fefb20a82dd90a7caa7807e90c6f66", "subject": "dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23206", "commit_url": "https://git.kernel.org/stable/c/ed48a84a72fefb20a82dd90a7caa7807e90c6f66" }, { "cve": "CVE-2026-23207", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "edf9088b6e1d6d88982db7eb5e736a0e4fbcc09e", "subject": "spi: tegra210-quad: Protect curr_xfer check in IRQ handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23207", "commit_url": "https://git.kernel.org/stable/c/edf9088b6e1d6d88982db7eb5e736a0e4fbcc09e" }, { "cve": "CVE-2026-23208", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "ef5749ef8b307bf8717945701b1b79d036af0a15", "subject": "ALSA: usb-audio: Prevent excessive number of frames", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23208", "commit_url": "https://git.kernel.org/stable/c/ef5749ef8b307bf8717945701b1b79d036af0a15" }, { "cve": "CVE-2026-23209", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "f8db6475a83649689c087a8f52486fcc53e627e9", "subject": "macvlan: fix error recovery in macvlan_common_newlink()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23209", "commit_url": "https://git.kernel.org/stable/c/f8db6475a83649689c087a8f52486fcc53e627e9" }, { "cve": "CVE-2026-23210", "author_name": "Aaron Ma", "author_email": "aaron.ma@canonical.com", "fix_sha": "fc6f36eaaedcf4b81af6fe1a568f018ffd530660", "subject": "ice: Fix PTP NULL pointer dereference during VSI rebuild", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23210", "commit_url": "https://git.kernel.org/stable/c/fc6f36eaaedcf4b81af6fe1a568f018ffd530660" }, { "cve": "CVE-2026-23211", "author_name": "robin.kuo", "author_email": "robin.kuo@mediatek.com", "fix_sha": "a0f3c0845a4ff68d403c568266d17e9cc553e561", "subject": "mm, swap: restore swap_space attr aviod kernel panic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23211", "commit_url": "https://git.kernel.org/stable/c/a0f3c0845a4ff68d403c568266d17e9cc553e561" }, { "cve": "CVE-2026-23212", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "f6c3665b6dc53c3ab7d31b585446a953a74340ef", "subject": "bonding: annotate data-races around slave->last_rx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23212", "commit_url": "https://git.kernel.org/stable/c/f6c3665b6dc53c3ab7d31b585446a953a74340ef" }, { "cve": "CVE-2026-23213", "author_name": "Perry Yuan", "author_email": "perry.yuan@amd.com", "fix_sha": "0de604d0357d0d22cbf03af1077d174b641707b6", "subject": "drm/amd/pm: Disable MMIO access during SMU Mode 1 reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23213", "commit_url": "https://git.kernel.org/stable/c/0de604d0357d0d22cbf03af1077d174b641707b6" }, { "cve": "CVE-2026-23214", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "1972f44c189c8aacde308fa9284e474c1a5cbd9f", "subject": "btrfs: reject new transactions if the fs is fully read-only", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23214", "commit_url": "https://git.kernel.org/stable/c/1972f44c189c8aacde308fa9284e474c1a5cbd9f" }, { "cve": "CVE-2026-23215", "author_name": "Josh Poimboeuf", "author_email": "jpoimboe@kernel.org", "fix_sha": "2687c848e57820651b9f69d30c4710f4219f7dbf", "subject": "x86/vmware: Fix hypercall clobbers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23215", "commit_url": "https://git.kernel.org/stable/c/2687c848e57820651b9f69d30c4710f4219f7dbf" }, { "cve": "CVE-2026-23216", "author_name": "Maurizio Lombardi", "author_email": "mlombard@redhat.com", "fix_sha": "9411a89e9e7135cc459178fa77a3f1d6191ae903", "subject": "scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23216", "commit_url": "https://git.kernel.org/stable/c/9411a89e9e7135cc459178fa77a3f1d6191ae903" }, { "cve": "CVE-2026-23217", "author_name": "Martin Kaiser", "author_email": "martin@kaiser.cx", "fix_sha": "b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0", "subject": "riscv: trace: fix snapshot deadlock with sbi ecall", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23217", "commit_url": "https://git.kernel.org/stable/c/b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0" }, { "cve": "CVE-2026-23218", "author_name": "Chen Ni", "author_email": "nichen@iscas.ac.cn", "fix_sha": "e34f77b09080c86c929153e2a72da26b4f8947ff", "subject": "gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23218", "commit_url": "https://git.kernel.org/stable/c/e34f77b09080c86c929153e2a72da26b4f8947ff" }, { "cve": "CVE-2026-23219", "author_name": "Hao Ge", "author_email": "hao.ge@linux.dev", "fix_sha": "e6c53ead2d8fa73206e0a63e9cd9aea6bc929837", "subject": "mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23219", "commit_url": "https://git.kernel.org/stable/c/e6c53ead2d8fa73206e0a63e9cd9aea6bc929837" }, { "cve": "CVE-2026-23220", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "010eb01ce23b34b50531448b0da391c7f05a72af", "subject": "ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23220", "commit_url": "https://git.kernel.org/stable/c/010eb01ce23b34b50531448b0da391c7f05a72af" }, { "cve": "CVE-2026-23221", "author_name": "Gui-Dong Han", "author_email": "hanguidong02@gmail.com", "fix_sha": "148891e95014b5dc5878acefa57f1940c281c431", "subject": "bus: fsl-mc: fix use-after-free in driver_override_show()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23221", "commit_url": "https://git.kernel.org/stable/c/148891e95014b5dc5878acefa57f1940c281c431" }, { "cve": "CVE-2026-23222", "author_name": "Kees Cook", "author_email": "kees@kernel.org", "fix_sha": "1562b1fb7e17c1b3addb15e125c718b2be7f5512", "subject": "crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23222", "commit_url": "https://git.kernel.org/stable/c/1562b1fb7e17c1b3addb15e125c718b2be7f5512" }, { "cve": "CVE-2026-23223", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "1c253e11225bc5167217897885b85093e17c2217", "subject": "xfs: fix UAF in xchk_btree_check_block_owner", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23223", "commit_url": "https://git.kernel.org/stable/c/1c253e11225bc5167217897885b85093e17c2217" }, { "cve": "CVE-2026-23224", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "1caf50ce4af096d0280d59a31abdd85703cd995c", "subject": "erofs: fix UAF issue for file-backed mounts w/ directio option", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23224", "commit_url": "https://git.kernel.org/stable/c/1caf50ce4af096d0280d59a31abdd85703cd995c" }, { "cve": "CVE-2026-23225", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "1e83ccd5921a610ef409a7d4e56db27822b4ea39", "subject": "sched/mmcid: Don't assume CID is CPU owned on mode switch", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23225", "commit_url": "https://git.kernel.org/stable/c/1e83ccd5921a610ef409a7d4e56db27822b4ea39" }, { "cve": "CVE-2026-23226", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "4f3a06cc57976cafa8c6f716646be6c79a99e485", "subject": "ksmbd: add chann_lock to protect ksmbd_chann_list xarray", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23226", "commit_url": "https://git.kernel.org/stable/c/4f3a06cc57976cafa8c6f716646be6c79a99e485" }, { "cve": "CVE-2026-23227", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "52b330799e2d6f825ae2bb74662ec1b10eb954bb", "subject": "drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23227", "commit_url": "https://git.kernel.org/stable/c/52b330799e2d6f825ae2bb74662ec1b10eb954bb" }, { "cve": "CVE-2026-23228", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "77ffbcac4e569566d0092d5f22627dfc0896b553", "subject": "smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23228", "commit_url": "https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553" }, { "cve": "CVE-2026-23229", "author_name": "Bibo Mao", "author_email": "maobibo@loongson.cn", "fix_sha": "b505047ffc8057555900d2d3a005d033e6967382", "subject": "crypto: virtio - Add spinlock protection with virtqueue notification", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23229", "commit_url": "https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382" }, { "cve": "CVE-2026-23230", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "ec306600d5ba7148c9dbf8f5a8f1f5c1a044a241", "subject": "smb: client: split cached_fid bitfields to avoid shared-byte RMW races", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23230", "commit_url": "https://git.kernel.org/stable/c/ec306600d5ba7148c9dbf8f5a8f1f5c1a044a241" }, { "cve": "CVE-2026-23231", "author_name": "Inseo An", "author_email": "y0un9sa@gmail.com", "fix_sha": "71e99ee20fc3f662555118cf1159443250647533", "subject": "netfilter: nf_tables: fix use-after-free in nf_tables_addchain()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23231", "commit_url": "https://git.kernel.org/stable/c/71e99ee20fc3f662555118cf1159443250647533" }, { "cve": "CVE-2026-23232", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "3996b70209f145bfcf2afc7d05dd92c27b233b48", "subject": "Revert \"f2fs: block cache/dio write during f2fs_enable_checkpoint()\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23232", "commit_url": "https://git.kernel.org/stable/c/3996b70209f145bfcf2afc7d05dd92c27b233b48" }, { "cve": "CVE-2026-23233", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "5c145c03188bc9ba1c29e0bc4d527a5978fc47f9", "subject": "f2fs: fix to avoid mapping wrong physical block for swapfile", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23233", "commit_url": "https://git.kernel.org/stable/c/5c145c03188bc9ba1c29e0bc4d527a5978fc47f9" }, { "cve": "CVE-2026-23234", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "ce2739e482bce8d2c014d76c4531c877f382aa54", "subject": "f2fs: fix to avoid UAF in f2fs_write_end_io()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23234", "commit_url": "https://git.kernel.org/stable/c/ce2739e482bce8d2c014d76c4531c877f382aa54" }, { "cve": "CVE-2026-23235", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "98ea0039dbfdd00e5cc1b9a8afa40434476c0955", "subject": "f2fs: fix out-of-bounds access in sysfs attribute read/write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23235", "commit_url": "https://git.kernel.org/stable/c/98ea0039dbfdd00e5cc1b9a8afa40434476c0955" }, { "cve": "CVE-2026-23236", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "120adae7b42faa641179270c067864544a50ab69", "subject": "fbdev: smscufx: properly copy ioctl memory to kernelspace", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23236", "commit_url": "https://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69" }, { "cve": "CVE-2026-23237", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "fe747d7112283f47169e9c16e751179a9b38611e", "subject": "platform/x86: classmate-laptop: Add missing NULL pointer checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23237", "commit_url": "https://git.kernel.org/stable/c/fe747d7112283f47169e9c16e751179a9b38611e" }, { "cve": "CVE-2026-23238", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "ab7ad7abb3660c58ffffdf07ff3bb976e7e0afa0", "subject": "romfs: check sb_set_blocksize() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23238", "commit_url": "https://git.kernel.org/stable/c/ab7ad7abb3660c58ffffdf07ff3bb976e7e0afa0" }, { "cve": "CVE-2026-23239", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "e1512c1db9e8794d8d130addd2615ec27231d994", "subject": "espintcp: Fix race condition in espintcp_close()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23239", "commit_url": "https://git.kernel.org/stable/c/e1512c1db9e8794d8d130addd2615ec27231d994" }, { "cve": "CVE-2026-23240", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "7bb09315f93dce6acc54bf59e5a95ba7365c2be4", "subject": "tls: Fix race condition in tls_sw_cancel_work_tx()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23240", "commit_url": "https://git.kernel.org/stable/c/7bb09315f93dce6acc54bf59e5a95ba7365c2be4" }, { "cve": "CVE-2026-23241", "author_name": "Jeffrey Bencteux", "author_email": "jeff@bencteux.fr", "fix_sha": "bcb90a2834c7393c26df9609b889a3097b7700cd", "subject": "audit: add missing syscalls to read class", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23241", "commit_url": "https://git.kernel.org/stable/c/bcb90a2834c7393c26df9609b889a3097b7700cd" }, { "cve": "CVE-2026-23242", "author_name": "YunJe Shin", "author_email": "yjshin0438@gmail.com", "fix_sha": "14ab3da122bd18920ad57428f6cf4fade8385142", "subject": "RDMA/siw: Fix potential NULL pointer dereference in header processing", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23242", "commit_url": "https://git.kernel.org/stable/c/14ab3da122bd18920ad57428f6cf4fade8385142" }, { "cve": "CVE-2026-23243", "author_name": "YunJe Shin", "author_email": "yjshin0438@gmail.com", "fix_sha": "5551b02fdbfd85a325bb857f3a8f9c9f33397ed2", "subject": "RDMA/umad: Reject negative data_len in ib_umad_write", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23243", "commit_url": "https://git.kernel.org/stable/c/5551b02fdbfd85a325bb857f3a8f9c9f33397ed2" }, { "cve": "CVE-2026-23244", "author_name": "Sungwoo Kim", "author_email": "iam@sung-woo.kim", "fix_sha": "c3320153769f05fd7fe9d840cb555dd3080ae424", "subject": "nvme: fix memory allocation in nvme_pr_read_keys()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23244", "commit_url": "https://git.kernel.org/stable/c/c3320153769f05fd7fe9d840cb555dd3080ae424" }, { "cve": "CVE-2026-23245", "author_name": "Paul Moses", "author_email": "p@1g4.org", "fix_sha": "62413a9c3cb183afb9bb6e94dd68caf4e4145f4c", "subject": "net/sched: act_gate: snapshot parameters with RCU on replace", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23245", "commit_url": "https://git.kernel.org/stable/c/62413a9c3cb183afb9bb6e94dd68caf4e4145f4c" }, { "cve": "CVE-2026-23246", "author_name": "Ariel Silver", "author_email": "arielsilver77@gmail.com", "fix_sha": "162d331d833dc73a3e905a24c44dd33732af1fc5", "subject": "wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23246", "commit_url": "https://git.kernel.org/stable/c/162d331d833dc73a3e905a24c44dd33732af1fc5" }, { "cve": "CVE-2026-23247", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "165573e41f2f66ef98940cf65f838b2cb575d9d1", "subject": "tcp: secure_seq: add back ports to TS offset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23247", "commit_url": "https://git.kernel.org/stable/c/165573e41f2f66ef98940cf65f838b2cb575d9d1" }, { "cve": "CVE-2026-23248", "author_name": "Haocheng Yu", "author_email": "yuhaocheng035@gmail.com", "fix_sha": "77de62ad3de3967818c3dbe656b7336ebee461d2", "subject": "perf/core: Fix refcount bug and potential UAF in perf_mmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23248", "commit_url": "https://git.kernel.org/stable/c/77de62ad3de3967818c3dbe656b7336ebee461d2" }, { "cve": "CVE-2026-23249", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "55e03b8cbe2783ec9acfb88e8adb946ed504e117", "subject": "xfs: check for deleted cursors when revalidating two btrees", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23249", "commit_url": "https://git.kernel.org/stable/c/55e03b8cbe2783ec9acfb88e8adb946ed504e117" }, { "cve": "CVE-2026-23250", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a", "subject": "xfs: check return value of xchk_scrub_create_subord", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23250", "commit_url": "https://git.kernel.org/stable/c/ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a" }, { "cve": "CVE-2026-23251", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "ba408d299a3bb3c5309f40c5326e4fb83ead4247", "subject": "xfs: only call xf{array,blob}_destroy if we have a valid pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23251", "commit_url": "https://git.kernel.org/stable/c/ba408d299a3bb3c5309f40c5326e4fb83ead4247" }, { "cve": "CVE-2026-23252", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "60382993a2e18041f88c7969f567f168cd3b4de3", "subject": "xfs: get rid of the xchk_xfile_*_descr calls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23252", "commit_url": "https://git.kernel.org/stable/c/60382993a2e18041f88c7969f567f168cd3b4de3" }, { "cve": "CVE-2026-23253", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "bfbc0b5b32a8f28ce284add619bf226716a59bc0", "subject": "media: dvb-core: fix wrong reinitialization of ringbuffer on reopen", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23253", "commit_url": "https://git.kernel.org/stable/c/bfbc0b5b32a8f28ce284add619bf226716a59bc0" }, { "cve": "CVE-2026-23254", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "5c2c3c38be396257a6a2e55bd601a12bb9781507", "subject": "net: gro: fix outer network offset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23254", "commit_url": "https://git.kernel.org/stable/c/5c2c3c38be396257a6a2e55bd601a12bb9781507" }, { "cve": "CVE-2026-23255", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "f613e8b4afea0cd17c7168e8b00e25bc8d33175d", "subject": "net: add proper RCU protection to /proc/net/ptype", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23255", "commit_url": "https://git.kernel.org/stable/c/f613e8b4afea0cd17c7168e8b00e25bc8d33175d" }, { "cve": "CVE-2026-23256", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "6cbba46934aefdfb5d171e0a95aec06c24f7ca30", "subject": "net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23256", "commit_url": "https://git.kernel.org/stable/c/6cbba46934aefdfb5d171e0a95aec06c24f7ca30" }, { "cve": "CVE-2026-23257", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "8558aef4e8a1a83049ab906d21d391093cfa7e7f", "subject": "net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23257", "commit_url": "https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f" }, { "cve": "CVE-2026-23258", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "926ede0c85e1e57c97d64d9612455267d597bb2c", "subject": "net: liquidio: Initialize netdev pointer before queue setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23258", "commit_url": "https://git.kernel.org/stable/c/926ede0c85e1e57c97d64d9612455267d597bb2c" }, { "cve": "CVE-2026-23259", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "4b9748055457ac3a0710bf210c229d01ea1b01b9", "subject": "io_uring/rw: free potentially allocated iovec on cache put failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23259", "commit_url": "https://git.kernel.org/stable/c/4b9748055457ac3a0710bf210c229d01ea1b01b9" }, { "cve": "CVE-2026-23260", "author_name": "Kaushlendra Kumar", "author_email": "kaushlendra.kumar@intel.com", "fix_sha": "f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8", "subject": "regmap: maple: free entry on mas_store_gfp() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23260", "commit_url": "https://git.kernel.org/stable/c/f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8" }, { "cve": "CVE-2026-23261", "author_name": "Chaitanya Kulkarni", "author_email": "ckulkarnilinux@gmail.com", "fix_sha": "d1877cc7270302081a315a81a0ee8331f19f95c8", "subject": "nvme-fc: release admin tagset if init fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23261", "commit_url": "https://git.kernel.org/stable/c/d1877cc7270302081a315a81a0ee8331f19f95c8" }, { "cve": "CVE-2026-23262", "author_name": "Debarghya Kundu", "author_email": "debarghyak@google.com", "fix_sha": "7b9ebcce0296e104a0d82a6b09d68564806158ff", "subject": "gve: Fix stats report corruption on queue count change", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23262", "commit_url": "https://git.kernel.org/stable/c/7b9ebcce0296e104a0d82a6b09d68564806158ff" }, { "cve": "CVE-2026-23263", "author_name": "Pavel Begunkov", "author_email": "asml.silence@gmail.com", "fix_sha": "0ae91d8ab70922fb74c22c20bedcb69459579b1c", "subject": "io_uring/zcrx: fix page array leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23263", "commit_url": "https://git.kernel.org/stable/c/0ae91d8ab70922fb74c22c20bedcb69459579b1c" }, { "cve": "CVE-2026-23264", "author_name": "Bert Karwatzki", "author_email": "spasswolf@web.de", "fix_sha": "243b467dea1735fed904c2e54d248a46fa417a2d", "subject": "Revert \"drm/amd: Check if ASPM is enabled from PCIe subsystem\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23264", "commit_url": "https://git.kernel.org/stable/c/243b467dea1735fed904c2e54d248a46fa417a2d" }, { "cve": "CVE-2026-23265", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "50ac3ecd8e05b6bcc350c71a4307d40c030ec7e4", "subject": "f2fs: fix to do sanity check on node footer in {read,write}_end_io", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23265", "commit_url": "https://git.kernel.org/stable/c/50ac3ecd8e05b6bcc350c71a4307d40c030ec7e4" }, { "cve": "CVE-2026-23266", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "0209e21e3c372fa2da04c39214bec0b64e4eb5f4", "subject": "fbdev: rivafb: fix divide error in nv3_arb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23266", "commit_url": "https://git.kernel.org/stable/c/0209e21e3c372fa2da04c39214bec0b64e4eb5f4" }, { "cve": "CVE-2026-23267", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "7633a7387eb4d0259d6bea945e1d3469cd135bbc", "subject": "f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23267", "commit_url": "https://git.kernel.org/stable/c/7633a7387eb4d0259d6bea945e1d3469cd135bbc" }, { "cve": "CVE-2026-23268", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "6601e13e82841879406bf9f369032656f441a425", "subject": "apparmor: fix unprivileged local user can do privileged policy management", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23268", "commit_url": "https://git.kernel.org/stable/c/6601e13e82841879406bf9f369032656f441a425" }, { "cve": "CVE-2026-23269", "author_name": "Massimiliano Pellizzer", "author_email": "massimiliano.pellizzer@canonical.com", "fix_sha": "9063d7e2615f4a7ab321de6b520e23d370e58816", "subject": "apparmor: validate DFA start states are in bounds in unpack_pdb", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23269", "commit_url": "https://git.kernel.org/stable/c/9063d7e2615f4a7ab321de6b520e23d370e58816" }, { "cve": "CVE-2026-23270", "author_name": "Victor Nogueira", "author_email": "victor@mojatatu.com", "fix_sha": "11cb63b0d1a0685e0831ae3c77223e002ef18189", "subject": "net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23270", "commit_url": "https://git.kernel.org/stable/c/11cb63b0d1a0685e0831ae3c77223e002ef18189" }, { "cve": "CVE-2026-23271", "author_name": "Peter Zijlstra", "author_email": "peterz@infradead.org", "fix_sha": "c9bc1753b3cc41d0e01fbca7f035258b5f4db0ae", "subject": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23271", "commit_url": "https://git.kernel.org/stable/c/c9bc1753b3cc41d0e01fbca7f035258b5f4db0ae" }, { "cve": "CVE-2026-23272", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "def602e498a4f951da95c95b1b8ce8ae68aa733a", "subject": "netfilter: nf_tables: unconditionally bump set->nelems before insertion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23272", "commit_url": "https://git.kernel.org/stable/c/def602e498a4f951da95c95b1b8ce8ae68aa733a" }, { "cve": "CVE-2026-23273", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "e3f000f0dee1bfab52e2e61ca6a3835d9e187e35", "subject": "macvlan: observe an RCU grace period in macvlan_common_newlink() error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23273", "commit_url": "https://git.kernel.org/stable/c/e3f000f0dee1bfab52e2e61ca6a3835d9e187e35" }, { "cve": "CVE-2026-23274", "author_name": "Yuan Tan", "author_email": "tanyuan98@outlook.com", "fix_sha": "329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf", "subject": "netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23274", "commit_url": "https://git.kernel.org/stable/c/329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf" }, { "cve": "CVE-2026-23275", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "96189080265e6bb5dde3a4afbaf947af493e3f82", "subject": "io_uring: ensure ctx->rings is stable for task work flags manipulation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23275", "commit_url": "https://git.kernel.org/stable/c/96189080265e6bb5dde3a4afbaf947af493e3f82" }, { "cve": "CVE-2026-23276", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "6f1a9140ecda3baba3d945b9a6155af4268aafc4", "subject": "net: add xmit recursion limit to tunnel xmit functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23276", "commit_url": "https://git.kernel.org/stable/c/6f1a9140ecda3baba3d945b9a6155af4268aafc4" }, { "cve": "CVE-2026-23277", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "0cc0c2e661af418bbf7074179ea5cfffc0a5c466", "subject": "net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23277", "commit_url": "https://git.kernel.org/stable/c/0cc0c2e661af418bbf7074179ea5cfffc0a5c466" }, { "cve": "CVE-2026-23278", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9", "subject": "netfilter: nf_tables: always walk all pending catchall elements", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23278", "commit_url": "https://git.kernel.org/stable/c/7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9" }, { "cve": "CVE-2026-23279", "author_name": "Vahagn Vardanian", "author_email": "vahagn@redrays.io", "fix_sha": "017c1792525064a723971f0216e6ef86a8c7af11", "subject": "wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23279", "commit_url": "https://git.kernel.org/stable/c/017c1792525064a723971f0216e6ef86a8c7af11" }, { "cve": "CVE-2026-23280", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "03808abb1d868aed7478a11a82e5bb4b3f1ca6d6", "subject": "accel/amdxdna: Prevent ubuf size overflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23280", "commit_url": "https://git.kernel.org/stable/c/03808abb1d868aed7478a11a82e5bb4b3f1ca6d6" }, { "cve": "CVE-2026-23281", "author_name": "Daniel Hodges", "author_email": "git@danielhodges.dev", "fix_sha": "03cc8f90d0537fcd4985c3319b4fafbf2e3fb1f0", "subject": "wifi: libertas: fix use-after-free in lbs_free_adapter()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23281", "commit_url": "https://git.kernel.org/stable/c/03cc8f90d0537fcd4985c3319b4fafbf2e3fb1f0" }, { "cve": "CVE-2026-23282", "author_name": "Paulo Alcantara", "author_email": "pc@manguebit.org", "fix_sha": "048efe129a297256d3c2088cf8d79515ff5ec864", "subject": "smb: client: fix oops due to uninitialised var in smb2_unlink()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23282", "commit_url": "https://git.kernel.org/stable/c/048efe129a297256d3c2088cf8d79515ff5ec864" }, { "cve": "CVE-2026-23283", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "0902010c8d163f7b62e655efda1a843529152c7c", "subject": "regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23283", "commit_url": "https://git.kernel.org/stable/c/0902010c8d163f7b62e655efda1a843529152c7c" }, { "cve": "CVE-2026-23284", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "0abc73c8a40fd64ac1739c90bb4f42c418d27a5e", "subject": "net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23284", "commit_url": "https://git.kernel.org/stable/c/0abc73c8a40fd64ac1739c90bb4f42c418d27a5e" }, { "cve": "CVE-2026-23285", "author_name": "Christoph B\u00f6hmwalder", "author_email": "christoph.boehmwalder@linbit.com", "fix_sha": "0d195d3b205ca90db30d70d09d7bb6909aac178f", "subject": "drbd: fix null-pointer dereference on local read error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23285", "commit_url": "https://git.kernel.org/stable/c/0d195d3b205ca90db30d70d09d7bb6909aac178f" }, { "cve": "CVE-2026-23286", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "101bacb303e89dc2e0640ae6a5e0fb97c4eb45bb", "subject": "atm: lec: fix null-ptr-deref in lec_arp_clear_vccs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23286", "commit_url": "https://git.kernel.org/stable/c/101bacb303e89dc2e0640ae6a5e0fb97c4eb45bb" }, { "cve": "CVE-2026-23287", "author_name": "Nam Cao", "author_email": "namcao@linutronix.de", "fix_sha": "1072020685f4b81f6efad3b412cdae0bd62bb043", "subject": "irqchip/sifive-plic: Fix frozen interrupt due to affinity setting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23287", "commit_url": "https://git.kernel.org/stable/c/1072020685f4b81f6efad3b412cdae0bd62bb043" }, { "cve": "CVE-2026-23288", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "1110a949675ebd56b3f0286e664ea543f745801c", "subject": "accel/amdxdna: Fix out-of-bounds memset in command slot handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23288", "commit_url": "https://git.kernel.org/stable/c/1110a949675ebd56b3f0286e664ea543f745801c" }, { "cve": "CVE-2026-23289", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "117942ca43e2e3c3d121faae530989931b7f67e1", "subject": "IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23289", "commit_url": "https://git.kernel.org/stable/c/117942ca43e2e3c3d121faae530989931b7f67e1" }, { "cve": "CVE-2026-23290", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "11de1d3ae5565ed22ef1f89d73d8f2d00322c699", "subject": "net: usb: pegasus: validate USB endpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23290", "commit_url": "https://git.kernel.org/stable/c/11de1d3ae5565ed22ef1f89d73d8f2d00322c699" }, { "cve": "CVE-2026-23291", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "12133a483dfa832241fbbf09321109a0ea8a520e", "subject": "nfc: pn533: properly drop the usb interface reference on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23291", "commit_url": "https://git.kernel.org/stable/c/12133a483dfa832241fbbf09321109a0ea8a520e" }, { "cve": "CVE-2026-23292", "author_name": "Prithvi Tambewagh", "author_email": "activprithvi@gmail.com", "fix_sha": "14d4ac19d1895397532eec407433c5d74d9da53b", "subject": "scsi: target: Fix recursive locking in __configfs_open_file()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23292", "commit_url": "https://git.kernel.org/stable/c/14d4ac19d1895397532eec407433c5d74d9da53b" }, { "cve": "CVE-2026-23293", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "168ff39e4758897d2eee4756977d036d52884c7e", "subject": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23293", "commit_url": "https://git.kernel.org/stable/c/168ff39e4758897d2eee4756977d036d52884c7e" }, { "cve": "CVE-2026-23294", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "1872e75375c40add4a35990de3be77b5741c252c", "subject": "bpf: Fix race in devmap on PREEMPT_RT", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23294", "commit_url": "https://git.kernel.org/stable/c/1872e75375c40add4a35990de3be77b5741c252c" }, { "cve": "CVE-2026-23295", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "1aa82181a3c285c7351523d587f7981ae4c015c8", "subject": "accel/amdxdna: Fix dead lock for suspend and resume", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23295", "commit_url": "https://git.kernel.org/stable/c/1aa82181a3c285c7351523d587f7981ae4c015c8" }, { "cve": "CVE-2026-23296", "author_name": "Junxiao Bi", "author_email": "junxiao.bi@oracle.com", "fix_sha": "1ac22c8eae81366101597d48360718dff9b9d980", "subject": "scsi: core: Fix refcount leak for tagset_refcnt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23296", "commit_url": "https://git.kernel.org/stable/c/1ac22c8eae81366101597d48360718dff9b9d980" }, { "cve": "CVE-2026-23297", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "1cb968a2013ffa8112d52ebe605009ea1c6a582c", "subject": "nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23297", "commit_url": "https://git.kernel.org/stable/c/1cb968a2013ffa8112d52ebe605009ea1c6a582c" }, { "cve": "CVE-2026-23298", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "1e446fd0582ad8be9f6dafb115fc2e7245f9bea7", "subject": "can: ucan: Fix infinite loop from zero-length messages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23298", "commit_url": "https://git.kernel.org/stable/c/1e446fd0582ad8be9f6dafb115fc2e7245f9bea7" }, { "cve": "CVE-2026-23299", "author_name": "Heitor Alves de Siqueira", "author_email": "halves@igalia.com", "fix_sha": "21e4271e65094172aadd5beb8caea95dd0fbf6d7", "subject": "Bluetooth: purge error queues in socket destructors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23299", "commit_url": "https://git.kernel.org/stable/c/21e4271e65094172aadd5beb8caea95dd0fbf6d7" }, { "cve": "CVE-2026-23300", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "21ec92774d1536f71bdc90b0e3d052eff99cf093", "subject": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23300", "commit_url": "https://git.kernel.org/stable/c/21ec92774d1536f71bdc90b0e3d052eff99cf093" }, { "cve": "CVE-2026-23301", "author_name": "Charles Keepax", "author_email": "ckeepax@opensource.cirrus.com", "fix_sha": "27990181031fdcdbe0f7c46011f6404e5d116386", "subject": "ASoC: SDCA: Add allocation failure check for Entity name", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23301", "commit_url": "https://git.kernel.org/stable/c/27990181031fdcdbe0f7c46011f6404e5d116386" }, { "cve": "CVE-2026-23302", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "2ef2b20cf4e04ac8a6ba68493f8780776ff84300", "subject": "net: annotate data-races around sk->sk_{data_ready,write_space}", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23302", "commit_url": "https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300" }, { "cve": "CVE-2026-23303", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "2f37dc436d4e61ff7ae0b0353cf91b8c10396e4d", "subject": "smb: client: Don't log plaintext credentials in cifs_set_cifscreds", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23303", "commit_url": "https://git.kernel.org/stable/c/2f37dc436d4e61ff7ae0b0353cf91b8c10396e4d" }, { "cve": "CVE-2026-23304", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "2ffb4f5c2ccb2fa1c049dd11899aee7967deef5a", "subject": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23304", "commit_url": "https://git.kernel.org/stable/c/2ffb4f5c2ccb2fa1c049dd11899aee7967deef5a" }, { "cve": "CVE-2026-23305", "author_name": "Quentin Schulz", "author_email": "quentin.schulz@cherry.de", "fix_sha": "34f4495a7f72895776b81969639f527c99eb12b9", "subject": "accel/rocket: fix unwinding in error path in rocket_probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23305", "commit_url": "https://git.kernel.org/stable/c/34f4495a7f72895776b81969639f527c99eb12b9" }, { "cve": "CVE-2026-23306", "author_name": "Salomon Dushimirimana", "author_email": "salomondush@google.com", "fix_sha": "38353c26db28efd984f51d426eac2396d299cca7", "subject": "scsi: pm8001: Fix use-after-free in pm8001_queue_command()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23306", "commit_url": "https://git.kernel.org/stable/c/38353c26db28efd984f51d426eac2396d299cca7" }, { "cve": "CVE-2026-23307", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "38a01c9700b0dcafe97dfa9dc7531bf4a245deff", "subject": "can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23307", "commit_url": "https://git.kernel.org/stable/c/38a01c9700b0dcafe97dfa9dc7531bf4a245deff" }, { "cve": "CVE-2026-23308", "author_name": "Florian Eckert", "author_email": "fe@dev.tdt.de", "fix_sha": "3e00b1b332e54ba50cca6691f628b9c06574024f", "subject": "pinctrl: equilibrium: fix warning trace on load", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23308", "commit_url": "https://git.kernel.org/stable/c/3e00b1b332e54ba50cca6691f628b9c06574024f" }, { "cve": "CVE-2026-23309", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "457965c13f0837a289c9164b842d0860133f6274", "subject": "tracing: Add NULL pointer check to trigger_data_free()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23309", "commit_url": "https://git.kernel.org/stable/c/457965c13f0837a289c9164b842d0860133f6274" }, { "cve": "CVE-2026-23310", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "479d589b40b836442bbdadc3fdb37f001bb67f26", "subject": "bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23310", "commit_url": "https://git.kernel.org/stable/c/479d589b40b836442bbdadc3fdb37f001bb67f26" }, { "cve": "CVE-2026-23311", "author_name": "Namhyung Kim", "author_email": "namhyung@kernel.org", "fix_sha": "486ff5ad49bc50315bcaf6d45f04a33ef0a45ced", "subject": "perf/core: Fix invalid wait context in ctx_sched_in()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23311", "commit_url": "https://git.kernel.org/stable/c/486ff5ad49bc50315bcaf6d45f04a33ef0a45ced" }, { "cve": "CVE-2026-23312", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "4b063c002ca759d1b299988ee23f564c9609c875", "subject": "net: usb: kaweth: validate USB endpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23312", "commit_url": "https://git.kernel.org/stable/c/4b063c002ca759d1b299988ee23f564c9609c875" }, { "cve": "CVE-2026-23313", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9", "subject": "i40e: Fix preempt count leak in napi poll tracepoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23313", "commit_url": "https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9" }, { "cve": "CVE-2026-23314", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "4baaddaa44af01cd4ce239493060738fd0881835", "subject": "regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23314", "commit_url": "https://git.kernel.org/stable/c/4baaddaa44af01cd4ce239493060738fd0881835" }, { "cve": "CVE-2026-23315", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "4e10a730d1b511ff49723371ed6d694dd1b2c785", "subject": "wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23315", "commit_url": "https://git.kernel.org/stable/c/4e10a730d1b511ff49723371ed6d694dd1b2c785" }, { "cve": "CVE-2026-23316", "author_name": "Yung Chih Su", "author_email": "yuuchihsu@gmail.com", "fix_sha": "4ee7fa6cf78ff26d783d39e2949d14c4c1cd5e7f", "subject": "net: ipv4: fix ARM64 alignment fault in multipath hash seed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23316", "commit_url": "https://git.kernel.org/stable/c/4ee7fa6cf78ff26d783d39e2949d14c4c1cd5e7f" }, { "cve": "CVE-2026-23317", "author_name": "Ian Forbes", "author_email": "ian.forbes@broadcom.com", "fix_sha": "5023ca80f9589295cb60735016e39fc5cc714243", "subject": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23317", "commit_url": "https://git.kernel.org/stable/c/5023ca80f9589295cb60735016e39fc5cc714243" }, { "cve": "CVE-2026-23318", "author_name": "Jun Seo", "author_email": "jun.seo.93@proton.me", "fix_sha": "54f9d645a5453d0bfece0c465d34aaf072ea99fa", "subject": "ALSA: usb-audio: Use correct version for UAC3 header validation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23318", "commit_url": "https://git.kernel.org/stable/c/54f9d645a5453d0bfece0c465d34aaf072ea99fa" }, { "cve": "CVE-2026-23319", "author_name": "Lang Xu", "author_email": "xulang@uniontech.com", "fix_sha": "56145d237385ca0e7ca9ff7b226aaf2eb8ef368b", "subject": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23319", "commit_url": "https://git.kernel.org/stable/c/56145d237385ca0e7ca9ff7b226aaf2eb8ef368b" }, { "cve": "CVE-2026-23321", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "579a752464a64cb5f9139102f0e6b90a1f595ceb", "subject": "mptcp: pm: in-kernel: always mark signal+subflow endp as used", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23321", "commit_url": "https://git.kernel.org/stable/c/579a752464a64cb5f9139102f0e6b90a1f595ceb" }, { "cve": "CVE-2026-23322", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "594c11d0e1d445f580898a2b8c850f2e3f099368", "subject": "ipmi: Fix use-after-free and list corruption on sender error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23322", "commit_url": "https://git.kernel.org/stable/c/594c11d0e1d445f580898a2b8c850f2e3f099368" }, { "cve": "CVE-2026-23323", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "5dd69b864911ae3847365e8bafe7854e79fbeecb", "subject": "hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23323", "commit_url": "https://git.kernel.org/stable/c/5dd69b864911ae3847365e8bafe7854e79fbeecb" }, { "cve": "CVE-2026-23324", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "5eaad4f768266f1f17e01232ffe2ef009f8129b7", "subject": "can: usb: etas_es58x: correctly anchor the urb in the read bulk callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23324", "commit_url": "https://git.kernel.org/stable/c/5eaad4f768266f1f17e01232ffe2ef009f8129b7" }, { "cve": "CVE-2026-23325", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "60862846308627e9e15546bb647a00de44deb27b", "subject": "wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23325", "commit_url": "https://git.kernel.org/stable/c/60862846308627e9e15546bb647a00de44deb27b" }, { "cve": "CVE-2026-23326", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "60abb0ac11dccd6b98fd9182bc5f85b621688861", "subject": "xsk: Fix fragment node deletion to prevent buffer leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23326", "commit_url": "https://git.kernel.org/stable/c/60abb0ac11dccd6b98fd9182bc5f85b621688861" }, { "cve": "CVE-2026-23327", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "60b5d1f68338aff2c5af0113f04aefa7169c50c2", "subject": "cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23327", "commit_url": "https://git.kernel.org/stable/c/60b5d1f68338aff2c5af0113f04aefa7169c50c2" }, { "cve": "CVE-2026-23328", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "6270ee26e1edd862ea17e3eba148ca8fb2c99dc9", "subject": "accel/amdxdna: Fix NULL pointer dereference of mgmt_chann", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23328", "commit_url": "https://git.kernel.org/stable/c/6270ee26e1edd862ea17e3eba148ca8fb2c99dc9" }, { "cve": "CVE-2026-23329", "author_name": "Michal Swiatkowski", "author_email": "michal.swiatkowski@linux.intel.com", "fix_sha": "636cc3bd12f499c74eaf5dc9a7d5b832f1bb24ed", "subject": "libie: don't unroll if fwlog isn't supported", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23329", "commit_url": "https://git.kernel.org/stable/c/636cc3bd12f499c74eaf5dc9a7d5b832f1bb24ed" }, { "cve": "CVE-2026-23330", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "66083581945bd5b8e99fe49b5aeb83d03f62d053", "subject": "nfc: nci: complete pending data exchange on device close", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23330", "commit_url": "https://git.kernel.org/stable/c/66083581945bd5b8e99fe49b5aeb83d03f62d053" }, { "cve": "CVE-2026-23331", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "6996a2d2d0a64808c19c98002aeb5d9d1b2df6a4", "subject": "udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23331", "commit_url": "https://git.kernel.org/stable/c/6996a2d2d0a64808c19c98002aeb5d9d1b2df6a4" }, { "cve": "CVE-2026-23332", "author_name": "Srinivas Pandruvada", "author_email": "srinivas.pandruvada@linux.intel.com", "fix_sha": "6b050482ec40569429d963ac52afa878691b04c9", "subject": "cpufreq: intel_pstate: Fix crash during turbo disable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23332", "commit_url": "https://git.kernel.org/stable/c/6b050482ec40569429d963ac52afa878691b04c9" }, { "cve": "CVE-2026-23334", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "7299b1b39a255f6092ce4ec0b65f66e9d6a357af", "subject": "can: usb: f81604: handle short interrupt urb messages properly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23334", "commit_url": "https://git.kernel.org/stable/c/7299b1b39a255f6092ce4ec0b65f66e9d6a357af" }, { "cve": "CVE-2026-23335", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "74586c6da9ea222a61c98394f2fc0a604748438c", "subject": "RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23335", "commit_url": "https://git.kernel.org/stable/c/74586c6da9ea222a61c98394f2fc0a604748438c" }, { "cve": "CVE-2026-23336", "author_name": "Daniil Dulov", "author_email": "d.dulov@aladdin.ru", "fix_sha": "767d23ade706d5fa51c36168e92a9c5533c351a1", "subject": "wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23336", "commit_url": "https://git.kernel.org/stable/c/767d23ade706d5fa51c36168e92a9c5533c351a1" }, { "cve": "CVE-2026-23337", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "7a648d598cb8e8c62af3f0e020a25820a3f3a9a7", "subject": "pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23337", "commit_url": "https://git.kernel.org/stable/c/7a648d598cb8e8c62af3f0e020a25820a3f3a9a7" }, { "cve": "CVE-2026-23338", "author_name": "Tvrtko Ursulin", "author_email": "tvrtko.ursulin@igalia.com", "fix_sha": "7b7d7693a55d606d700beb9549c9f7f0e5d9c24f", "subject": "drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23338", "commit_url": "https://git.kernel.org/stable/c/7b7d7693a55d606d700beb9549c9f7f0e5d9c24f" }, { "cve": "CVE-2026-23339", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "7bd4b0c4779f978a6528c9b7937d2ca18e936e2c", "subject": "nfc: nci: free skb on nci_transceive early error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23339", "commit_url": "https://git.kernel.org/stable/c/7bd4b0c4779f978a6528c9b7937d2ca18e936e2c" }, { "cve": "CVE-2026-23340", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "7f083faf59d14c04e01ec05a7507f036c965acf8", "subject": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23340", "commit_url": "https://git.kernel.org/stable/c/7f083faf59d14c04e01ec05a7507f036c965acf8" }, { "cve": "CVE-2026-23341", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "8363c02863332992a1822688da41f881d88d1631", "subject": "accel/amdxdna: Fix crash when destroying a suspended hardware context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23341", "commit_url": "https://git.kernel.org/stable/c/8363c02863332992a1822688da41f881d88d1631" }, { "cve": "CVE-2026-23342", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "869c63d5975d55e97f6b168e885452b3da20ea47", "subject": "bpf: Fix race in cpumap on PREEMPT_RT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23342", "commit_url": "https://git.kernel.org/stable/c/869c63d5975d55e97f6b168e885452b3da20ea47" }, { "cve": "CVE-2026-23343", "author_name": "Larysa Zaremba", "author_email": "larysa.zaremba@intel.com", "fix_sha": "8821e857759be9db3cde337ad328b71fe5c8a55f", "subject": "xdp: produce a warning when calculated tailroom is negative", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23343", "commit_url": "https://git.kernel.org/stable/c/8821e857759be9db3cde337ad328b71fe5c8a55f" }, { "cve": "CVE-2026-23344", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "889b0e2721e793eb46cf7d17b965aa3252af3ec8", "subject": "crypto: ccp - Fix use-after-free on error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23344", "commit_url": "https://git.kernel.org/stable/c/889b0e2721e793eb46cf7d17b965aa3252af3ec8" }, { "cve": "CVE-2026-23345", "author_name": "Catalin Marinas", "author_email": "catalin.marinas@arm.com", "fix_sha": "8a85b3131225a8c8143ba2ae29c0eef8c1f9117f", "subject": "arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23345", "commit_url": "https://git.kernel.org/stable/c/8a85b3131225a8c8143ba2ae29c0eef8c1f9117f" }, { "cve": "CVE-2026-23346", "author_name": "Will Deacon", "author_email": "will@kernel.org", "fix_sha": "8f098037139b294050053123ab2bc0f819d08932", "subject": "arm64: io: Extract user memory type in ioremap_prot()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23346", "commit_url": "https://git.kernel.org/stable/c/8f098037139b294050053123ab2bc0f819d08932" }, { "cve": "CVE-2026-23347", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "952caa5da10bed22be09612433964f6877ba0dde", "subject": "can: usb: f81604: correctly anchor the urb in the read bulk callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23347", "commit_url": "https://git.kernel.org/stable/c/952caa5da10bed22be09612433964f6877ba0dde" }, { "cve": "CVE-2026-23348", "author_name": "Dave Jiang", "author_email": "dave.jiang@intel.com", "fix_sha": "96a1fd0d84b17360840f344826897fa71049870e", "subject": "cxl: Fix race of nvdimm_bus object when creating nvdimm objects", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23348", "commit_url": "https://git.kernel.org/stable/c/96a1fd0d84b17360840f344826897fa71049870e" }, { "cve": "CVE-2026-23349", "author_name": "Tomasz Paku\u0142a", "author_email": "tomasz.pakula.oficjalny@gmail.com", "fix_sha": "97d5c8f5c09a604c4873c8348f58de3cea69a7df", "subject": "HID: pidff: Fix condition effect bit clearing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23349", "commit_url": "https://git.kernel.org/stable/c/97d5c8f5c09a604c4873c8348f58de3cea69a7df" }, { "cve": "CVE-2026-23350", "author_name": "Tomasz Lis", "author_email": "tomasz.lis@intel.com", "fix_sha": "99f9b5343cae80eb0dfe050baf6c86d722b3ba2e", "subject": "drm/xe/queue: Call fini on exec queue creation fail", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23350", "commit_url": "https://git.kernel.org/stable/c/99f9b5343cae80eb0dfe050baf6c86d722b3ba2e" }, { "cve": "CVE-2026-23351", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "9df95785d3d8302f7c066050117b04cd3c2048c2", "subject": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23351", "commit_url": "https://git.kernel.org/stable/c/9df95785d3d8302f7c066050117b04cd3c2048c2" }, { "cve": "CVE-2026-23352", "author_name": "Mike Rapoport (Microsoft)", "author_email": "rppt@kernel.org", "fix_sha": "a4b0bf6a40f3c107c67a24fbc614510ef5719980", "subject": "x86/efi: defer freeing of boot services memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23352", "commit_url": "https://git.kernel.org/stable/c/a4b0bf6a40f3c107c67a24fbc614510ef5719980" }, { "cve": "CVE-2026-23353", "author_name": "Michal Schmidt", "author_email": "mschmidt@redhat.com", "fix_sha": "a9c354e656597aededa027d63d2ff0973f6b033f", "subject": "ice: fix crash in ethtool offline loopback test", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23353", "commit_url": "https://git.kernel.org/stable/c/a9c354e656597aededa027d63d2ff0973f6b033f" }, { "cve": "CVE-2026-23354", "author_name": "Andrew Cooper", "author_email": "andrew.cooper3@citrix.com", "fix_sha": "aa280a08e7d8fae58557acc345b36b3dc329d595", "subject": "x86/fred: Correct speculative safety in fred_extint()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23354", "commit_url": "https://git.kernel.org/stable/c/aa280a08e7d8fae58557acc345b36b3dc329d595" }, { "cve": "CVE-2026-23355", "author_name": "Niklas Cassel", "author_email": "cassel@kernel.org", "fix_sha": "aac9b27f7c1f2b2cf7f50a9ca633ecbbcaf22af9", "subject": "ata: libata: cancel pending work after clearing deferred_qc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23355", "commit_url": "https://git.kernel.org/stable/c/aac9b27f7c1f2b2cf7f50a9ca633ecbbcaf22af9" }, { "cve": "CVE-2026-23356", "author_name": "Lars Ellenberg", "author_email": "lars.ellenberg@linbit.com", "fix_sha": "ab140365fb62c0bdab22b2f516aff563b2559e3b", "subject": "drbd: fix \"LOGIC BUG\" in drbd_al_begin_io_nonblock()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23356", "commit_url": "https://git.kernel.org/stable/c/ab140365fb62c0bdab22b2f516aff563b2559e3b" }, { "cve": "CVE-2026-23357", "author_name": "Alban Bedel", "author_email": "alban.bedel@lht.dlh.de", "fix_sha": "ab3f894de216f4a62adc3b57e9191888cbf26885", "subject": "can: mcp251x: fix deadlock in error path of mcp251x_open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23357", "commit_url": "https://git.kernel.org/stable/c/ab3f894de216f4a62adc3b57e9191888cbf26885" }, { "cve": "CVE-2026-23358", "author_name": "Lijo Lazar", "author_email": "lijo.lazar@amd.com", "fix_sha": "b57c4ec98c17789136a4db948aec6daadceb5024", "subject": "drm/amdgpu: Fix error handling in slot reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23358", "commit_url": "https://git.kernel.org/stable/c/b57c4ec98c17789136a4db948aec6daadceb5024" }, { "cve": "CVE-2026-23359", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "b7bf516c3ecd9a2aae2dc2635178ab87b734fef1", "subject": "bpf: Fix stack-out-of-bounds write in devmap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23359", "commit_url": "https://git.kernel.org/stable/c/b7bf516c3ecd9a2aae2dc2635178ab87b734fef1" }, { "cve": "CVE-2026-23360", "author_name": "Ming Lei", "author_email": "ming.lei@redhat.com", "fix_sha": "b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d", "subject": "nvme: fix admin queue leak on controller reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23360", "commit_url": "https://git.kernel.org/stable/c/b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d" }, { "cve": "CVE-2026-23361", "author_name": "Niklas Cassel", "author_email": "cassel@kernel.org", "fix_sha": "c22533c66ccae10511ad6a7afc34bb26c47577e3", "subject": "PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23361", "commit_url": "https://git.kernel.org/stable/c/c22533c66ccae10511ad6a7afc34bb26c47577e3" }, { "cve": "CVE-2026-23362", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "c35636e91e392e1540949bbc67932167cb48bc3a", "subject": "can: bcm: fix locking for bcm_op runtime updates", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23362", "commit_url": "https://git.kernel.org/stable/c/c35636e91e392e1540949bbc67932167cb48bc3a" }, { "cve": "CVE-2026-23363", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "c41a9abd6ae31d130e8f332e7c8800c4c866234b", "subject": "wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23363", "commit_url": "https://git.kernel.org/stable/c/c41a9abd6ae31d130e8f332e7c8800c4c866234b" }, { "cve": "CVE-2026-23364", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "c5794709bc9105935dbedef8b9cf9c06f2b559fa", "subject": "ksmbd: Compare MACs in constant time", "cvss_score": 7.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23364", "commit_url": "https://git.kernel.org/stable/c/c5794709bc9105935dbedef8b9cf9c06f2b559fa" }, { "cve": "CVE-2026-23365", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "c58b6c29a4c9b8125e8ad3bca0637e00b71e2693", "subject": "net: usb: kalmia: validate USB endpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23365", "commit_url": "https://git.kernel.org/stable/c/c58b6c29a4c9b8125e8ad3bca0637e00b71e2693" }, { "cve": "CVE-2026-23366", "author_name": "Jonathan Cavitt", "author_email": "jonathan.cavitt@intel.com", "fix_sha": "c601fd5414315fc515f746b499110e46272e7243", "subject": "drm/client: Do not destroy NULL modes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23366", "commit_url": "https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243" }, { "cve": "CVE-2026-23367", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "c854758abe0b8d86f9c43dc060ff56a0ee5b31e0", "subject": "wifi: radiotap: reject radiotap with unknown bits", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23367", "commit_url": "https://git.kernel.org/stable/c/c854758abe0b8d86f9c43dc060ff56a0ee5b31e0" }, { "cve": "CVE-2026-23368", "author_name": "Andrew Lunn", "author_email": "andrew@lunn.ch", "fix_sha": "c8dbdc6e380e7e96a51706db3e4b7870d8a9402d", "subject": "net: phy: register phy led_triggers during probe to avoid AB-BA deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23368", "commit_url": "https://git.kernel.org/stable/c/c8dbdc6e380e7e96a51706db3e4b7870d8a9402d" }, { "cve": "CVE-2026-23369", "author_name": "Charles Haithcock", "author_email": "chaithco@redhat.com", "fix_sha": "cfc69c2e6c699c96949f7b0455195b0bfb7dc715", "subject": "i2c: i801: Revert \"i2c: i801: replace acpi_lock with I2C bus lock\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23369", "commit_url": "https://git.kernel.org/stable/c/cfc69c2e6c699c96949f7b0455195b0bfb7dc715" }, { "cve": "CVE-2026-23370", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "d1a196e0a6dcddd03748468a0e9e3100790fc85c", "subject": "platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23370", "commit_url": "https://git.kernel.org/stable/c/d1a196e0a6dcddd03748468a0e9e3100790fc85c" }, { "cve": "CVE-2026-23371", "author_name": "Juri Lelli", "author_email": "juri.lelli@redhat.com", "fix_sha": "d658686a1331db3bb108ca079d76deb3208ed949", "subject": "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23371", "commit_url": "https://git.kernel.org/stable/c/d658686a1331db3bb108ca079d76deb3208ed949" }, { "cve": "CVE-2026-23372", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "d793458c45df2aed498d7f74145eab7ee22d25aa", "subject": "nfc: rawsock: cancel tx_work before socket teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23372", "commit_url": "https://git.kernel.org/stable/c/d793458c45df2aed498d7f74145eab7ee22d25aa" }, { "cve": "CVE-2026-23373", "author_name": "Sebastian Krzyszkowiak", "author_email": "sebastian.krzyszkowiak@puri.sm", "fix_sha": "d973b1039ccde6b241b438d53297edce4de45b5c", "subject": "wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23373", "commit_url": "https://git.kernel.org/stable/c/d973b1039ccde6b241b438d53297edce4de45b5c" }, { "cve": "CVE-2026-23374", "author_name": "Chaitanya Kulkarni", "author_email": "kch@nvidia.com", "fix_sha": "da46b5dfef48658d03347cda21532bcdbb521e67", "subject": "blktrace: fix __this_cpu_read/write in preemptible context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23374", "commit_url": "https://git.kernel.org/stable/c/da46b5dfef48658d03347cda21532bcdbb521e67" }, { "cve": "CVE-2026-23375", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "dd085fe9a8ebfc5d10314c60452db38d2b75e609", "subject": "mm: thp: deny THP for files on anonymous inodes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23375", "commit_url": "https://git.kernel.org/stable/c/dd085fe9a8ebfc5d10314c60452db38d2b75e609" }, { "cve": "CVE-2026-23376", "author_name": "Justin Tee", "author_email": "justintee8345@gmail.com", "fix_sha": "dd677d0598387ea623820ab2bd0e029c377445a3", "subject": "nvmet-fcloop: Check remoteport port_state before calling done callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23376", "commit_url": "https://git.kernel.org/stable/c/dd677d0598387ea623820ab2bd0e029c377445a3" }, { "cve": "CVE-2026-23377", "author_name": "Larysa Zaremba", "author_email": "larysa.zaremba@intel.com", "fix_sha": "e142dc4ef0f451b7ef99d09aaa84e9389af629d7", "subject": "ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23377", "commit_url": "https://git.kernel.org/stable/c/e142dc4ef0f451b7ef99d09aaa84e9389af629d7" }, { "cve": "CVE-2026-23378", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "e2cedd400c3ec0302ffca2490e8751772906ac23", "subject": "net/sched: act_ife: Fix metalist update behavior", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23378", "commit_url": "https://git.kernel.org/stable/c/e2cedd400c3ec0302ffca2490e8751772906ac23" }, { "cve": "CVE-2026-23379", "author_name": "Davide Caratti", "author_email": "dcaratti@redhat.com", "fix_sha": "e35626f610f3d2b7953ccddf6a77453da22b3a9e", "subject": "net/sched: ets: fix divide by zero in the offload path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23379", "commit_url": "https://git.kernel.org/stable/c/e35626f610f3d2b7953ccddf6a77453da22b3a9e" }, { "cve": "CVE-2026-23380", "author_name": "Qing Wang", "author_email": "wangqing7171@gmail.com", "fix_sha": "e39bb9e02b68942f8e9359d2a3efe7d37ae6be0e", "subject": "tracing: Fix WARN_ON in tracing_buffers_mmap_close", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23380", "commit_url": "https://git.kernel.org/stable/c/e39bb9e02b68942f8e9359d2a3efe7d37ae6be0e" }, { "cve": "CVE-2026-23381", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "e5e890630533bdc15b26a34bb8e7ef539bdf1322", "subject": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23381", "commit_url": "https://git.kernel.org/stable/c/e5e890630533bdc15b26a34bb8e7ef539bdf1322" }, { "cve": "CVE-2026-23382", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "ecfa6f34492c493a9a1dc2900f3edeb01c79946b", "subject": "HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23382", "commit_url": "https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b" }, { "cve": "CVE-2026-23383", "author_name": "Fuad Tabba", "author_email": "tabba@google.com", "fix_sha": "ef06fd16d48704eac868441d98d4ef083d8f3d07", "subject": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23383", "commit_url": "https://git.kernel.org/stable/c/ef06fd16d48704eac868441d98d4ef083d8f3d07" }, { "cve": "CVE-2026-23384", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "faa72102b178c7ae6c6afea23879e7c84fc59b4e", "subject": "RDMA/ionic: Fix kernel stack leak in ionic_create_cq()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23384", "commit_url": "https://git.kernel.org/stable/c/faa72102b178c7ae6c6afea23879e7c84fc59b4e" }, { "cve": "CVE-2026-23385", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "fb7fb4016300ac622c964069e286dc83166a5d52", "subject": "netfilter: nf_tables: clone set on flush only", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23385", "commit_url": "https://git.kernel.org/stable/c/fb7fb4016300ac622c964069e286dc83166a5d52" }, { "cve": "CVE-2026-23386", "author_name": "Ankit Garg", "author_email": "nktgrg@google.com", "fix_sha": "fb868db5f4bccd7a78219313ab2917429f715cea", "subject": "gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23386", "commit_url": "https://git.kernel.org/stable/c/fb868db5f4bccd7a78219313ab2917429f715cea" }, { "cve": "CVE-2026-23387", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "fd5bed798f45eb3a178ad527b43ab92705faaf8a", "subject": "pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23387", "commit_url": "https://git.kernel.org/stable/c/fd5bed798f45eb3a178ad527b43ab92705faaf8a" }, { "cve": "CVE-2026-23388", "author_name": "Phillip Lougher", "author_email": "phillip@squashfs.org.uk", "fix_sha": "fdb24a820a5832ec4532273282cbd4f22c291a0d", "subject": "Squashfs: check metadata block offset is within range", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23388", "commit_url": "https://git.kernel.org/stable/c/fdb24a820a5832ec4532273282cbd4f22c291a0d" }, { "cve": "CVE-2026-23389", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "fe868b499d16f55bbeea89992edb98043c9de416", "subject": "ice: Fix memory leak in ice_set_ringparam()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23389", "commit_url": "https://git.kernel.org/stable/c/fe868b499d16f55bbeea89992edb98043c9de416" }, { "cve": "CVE-2026-23390", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "daafcc0ef0b358d9d622b6e3b7c43767aa3814ee", "subject": "tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23390", "commit_url": "https://git.kernel.org/stable/c/daafcc0ef0b358d9d622b6e3b7c43767aa3814ee" }, { "cve": "CVE-2026-23391", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "f62a218a946b19bb59abdd5361da85fa4606b96b", "subject": "netfilter: xt_CT: drop pending enqueued packets on template removal", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23391", "commit_url": "https://git.kernel.org/stable/c/f62a218a946b19bb59abdd5361da85fa4606b96b" }, { "cve": "CVE-2026-23392", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "d73f4b53aaaea4c95f245e491aa5eeb8a21874ce", "subject": "netfilter: nf_tables: release flowtable after rcu grace period on error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23392", "commit_url": "https://git.kernel.org/stable/c/d73f4b53aaaea4c95f245e491aa5eeb8a21874ce" }, { "cve": "CVE-2026-23393", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "3715a00855316066cdda69d43648336367422127", "subject": "bridge: cfm: Fix race condition in peer_mep deletion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23393", "commit_url": "https://git.kernel.org/stable/c/3715a00855316066cdda69d43648336367422127" }, { "cve": "CVE-2026-23394", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "e5b31d988a41549037b8d8721a3c3cae893d8670", "subject": "af_unix: Give up GC if MSG_PEEK intervened.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23394", "commit_url": "https://git.kernel.org/stable/c/e5b31d988a41549037b8d8721a3c3cae893d8670" }, { "cve": "CVE-2026-23395", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "5b3e2052334f2ff6d5200e952f4aa66994d09899", "subject": "Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23395", "commit_url": "https://git.kernel.org/stable/c/5b3e2052334f2ff6d5200e952f4aa66994d09899" }, { "cve": "CVE-2026-23396", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "c73bb9a2d33bf81f6eecaa0f474b6c6dbe9855bd", "subject": "wifi: mac80211: fix NULL deref in mesh_matches_local()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23396", "commit_url": "https://git.kernel.org/stable/c/c73bb9a2d33bf81f6eecaa0f474b6c6dbe9855bd" }, { "cve": "CVE-2026-23397", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "dbdfaae9609629a9569362e3b8f33d0a20fd783c", "subject": "nfnetlink_osf: validate individual option lengths in fingerprints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23397", "commit_url": "https://git.kernel.org/stable/c/dbdfaae9609629a9569362e3b8f33d0a20fd783c" }, { "cve": "CVE-2026-23398", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "614aefe56af8e13331e50220c936fc0689cf5675", "subject": "icmp: fix NULL pointer dereference in icmp_tag_validation()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23398", "commit_url": "https://git.kernel.org/stable/c/614aefe56af8e13331e50220c936fc0689cf5675" }, { "cve": "CVE-2026-23399", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "0548a13b5a145b16e4da0628b5936baf35f51b43", "subject": "nf_tables: nft_dynset: fix possible stateful expression memleak in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23399", "commit_url": "https://git.kernel.org/stable/c/0548a13b5a145b16e4da0628b5936baf35f51b43" }, { "cve": "CVE-2026-23400", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "2e303f0febb65a434040774b793ba8356698802b", "subject": "rust_binder: call set_notification_done() without proc lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23400", "commit_url": "https://git.kernel.org/stable/c/2e303f0febb65a434040774b793ba8356698802b" }, { "cve": "CVE-2026-23401", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "aad885e774966e97b675dfe928da164214a71605", "subject": "KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23401", "commit_url": "https://git.kernel.org/stable/c/aad885e774966e97b675dfe928da164214a71605" }, { "cve": "CVE-2026-23402", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "df83746075778958954aa0460cca55f4b3fc9c02", "subject": "KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23402", "commit_url": "https://git.kernel.org/stable/c/df83746075778958954aa0460cca55f4b3fc9c02" }, { "cve": "CVE-2026-23403", "author_name": "Massimiliano Pellizzer", "author_email": "massimiliano.pellizzer@canonical.com", "fix_sha": "e38c55d9f834e5b848bfed0f5c586aaf45acb825", "subject": "apparmor: fix memory leak in verify_header", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23403", "commit_url": "https://git.kernel.org/stable/c/e38c55d9f834e5b848bfed0f5c586aaf45acb825" }, { "cve": "CVE-2026-23404", "author_name": "Massimiliano Pellizzer", "author_email": "massimiliano.pellizzer@canonical.com", "fix_sha": "ab09264660f9de5d05d1ef4e225aa447c63a8747", "subject": "apparmor: replace recursive profile removal with iterative approach", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23404", "commit_url": "https://git.kernel.org/stable/c/ab09264660f9de5d05d1ef4e225aa447c63a8747" }, { "cve": "CVE-2026-23405", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "306039414932c80f8420695a24d4fe10c84ccfb2", "subject": "apparmor: fix: limit the number of levels of policy namespaces", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23405", "commit_url": "https://git.kernel.org/stable/c/306039414932c80f8420695a24d4fe10c84ccfb2" }, { "cve": "CVE-2026-23406", "author_name": "Massimiliano Pellizzer", "author_email": "massimiliano.pellizzer@canonical.com", "fix_sha": "8756b68edae37ff546c02091989a4ceab3f20abd", "subject": "apparmor: fix side-effect bug in match_char() macro usage", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23406", "commit_url": "https://git.kernel.org/stable/c/8756b68edae37ff546c02091989a4ceab3f20abd" }, { "cve": "CVE-2026-23407", "author_name": "Massimiliano Pellizzer", "author_email": "massimiliano.pellizzer@canonical.com", "fix_sha": "d352873bbefa7eb39995239d0b44ccdf8aaa79a4", "subject": "apparmor: fix missing bounds check on DEFAULT table in verify_dfa()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23407", "commit_url": "https://git.kernel.org/stable/c/d352873bbefa7eb39995239d0b44ccdf8aaa79a4" }, { "cve": "CVE-2026-23408", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "5df0c44e8f5f619d3beb871207aded7c78414502", "subject": "apparmor: Fix double free of ns_name in aa_replace_profiles()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23408", "commit_url": "https://git.kernel.org/stable/c/5df0c44e8f5f619d3beb871207aded7c78414502" }, { "cve": "CVE-2026-23409", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "39440b137546a3aa383cfdabc605fb73811b6093", "subject": "apparmor: fix differential encoding verification", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23409", "commit_url": "https://git.kernel.org/stable/c/39440b137546a3aa383cfdabc605fb73811b6093" }, { "cve": "CVE-2026-23410", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "a0b7091c4de45a7325c8780e6934a894f92ac86b", "subject": "apparmor: fix race on rawdata dereference", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23410", "commit_url": "https://git.kernel.org/stable/c/a0b7091c4de45a7325c8780e6934a894f92ac86b" }, { "cve": "CVE-2026-23411", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "8e135b8aee5a06c52a4347a5a6d51223c6f36ba3", "subject": "apparmor: fix race between freeing data and fs accessing it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23411", "commit_url": "https://git.kernel.org/stable/c/8e135b8aee5a06c52a4347a5a6d51223c6f36ba3" }, { "cve": "CVE-2026-23412", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "24f90fa3994b992d1a09003a3db2599330a5232a", "subject": "netfilter: bpf: defer hook memory release until rcu readers are done", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23412", "commit_url": "https://git.kernel.org/stable/c/24f90fa3994b992d1a09003a3db2599330a5232a" }, { "cve": "CVE-2026-23413", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "a0671125d4f55e1e98d9bde8a0b671941987e208", "subject": "clsact: Fix use-after-free in init/destroy rollback asymmetry", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23413", "commit_url": "https://git.kernel.org/stable/c/a0671125d4f55e1e98d9bde8a0b671941987e208" }, { "cve": "CVE-2026-23414", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "84a8335d8300576f1b377ae24abca1d9f197807f", "subject": "tls: Purge async_hold in tls_decrypt_async_wait()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23414", "commit_url": "https://git.kernel.org/stable/c/84a8335d8300576f1b377ae24abca1d9f197807f" }, { "cve": "CVE-2026-23415", "author_name": "Hao-Yu Yang", "author_email": "naup96721@gmail.com", "fix_sha": "190a8c48ff623c3d67cb295b4536a660db2012aa", "subject": "futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23415", "commit_url": "https://git.kernel.org/stable/c/190a8c48ff623c3d67cb295b4536a660db2012aa" }, { "cve": "CVE-2026-23416", "author_name": "Lorenzo Stoakes (Oracle)", "author_email": "ljs@kernel.org", "fix_sha": "2697dd8ae721db4f6a53d4f4cbd438212a80f8dc", "subject": "mm/mseal: update VMA end correctly on merge", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23416", "commit_url": "https://git.kernel.org/stable/c/2697dd8ae721db4f6a53d4f4cbd438212a80f8dc" }, { "cve": "CVE-2026-23417", "author_name": "Sachin Kumar", "author_email": "xcyfun@protonmail.com", "fix_sha": "2321a9596d2260310267622e0ad8fbfa6f95378f", "subject": "bpf: Fix constant blinding for PROBE_MEM32 stores", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23417", "commit_url": "https://git.kernel.org/stable/c/2321a9596d2260310267622e0ad8fbfa6f95378f" }, { "cve": "CVE-2026-23418", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "3091723785def05ebfe6a50866f87a044ae314ba", "subject": "drm/xe/reg_sr: Fix leak on xa_store failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23418", "commit_url": "https://git.kernel.org/stable/c/3091723785def05ebfe6a50866f87a044ae314ba" }, { "cve": "CVE-2026-23419", "author_name": "Allison Henderson", "author_email": "achender@kernel.org", "fix_sha": "6a877ececd6daa002a9a0002cd0fbca6592a9244", "subject": "net/rds: Fix circular locking dependency in rds_tcp_tune", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23419", "commit_url": "https://git.kernel.org/stable/c/6a877ececd6daa002a9a0002cd0fbca6592a9244" }, { "cve": "CVE-2026-23420", "author_name": "Bart Van Assche", "author_email": "bvanassche@acm.org", "fix_sha": "72c6df8f284b3a49812ce2ac136727ace70acc7c", "subject": "wifi: wlcore: Fix a locking bug", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23420", "commit_url": "https://git.kernel.org/stable/c/72c6df8f284b3a49812ce2ac136727ace70acc7c" }, { "cve": "CVE-2026-23421", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "e377182f0266f46f02d01838e6bde67b9dac0d66", "subject": "drm/xe/configfs: Free ctx_restore_mid_bb in release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23421", "commit_url": "https://git.kernel.org/stable/c/e377182f0266f46f02d01838e6bde67b9dac0d66" }, { "cve": "CVE-2026-23422", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "74badb9c20b1a9c02a95c735c6d3cd6121679c93", "subject": "dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23422", "commit_url": "https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93" }, { "cve": "CVE-2026-23423", "author_name": "Miquel Sabat\u00e9 Sol\u00e0", "author_email": "mssola@mssola.com", "fix_sha": "3f501412f2079ca14bf68a18d80a2b7a823f1f64", "subject": "btrfs: free pages on error in btrfs_uring_read_extent()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23423", "commit_url": "https://git.kernel.org/stable/c/3f501412f2079ca14bf68a18d80a2b7a823f1f64" }, { "cve": "CVE-2026-23424", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "901ec3470994006bc8dd02399e16b675566c3416", "subject": "accel/amdxdna: Validate command buffer payload count", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23424", "commit_url": "https://git.kernel.org/stable/c/901ec3470994006bc8dd02399e16b675566c3416" }, { "cve": "CVE-2026-23425", "author_name": "Fuad Tabba", "author_email": "tabba@google.com", "fix_sha": "7e7c2cf0024d89443a7af52e09e47b1fe634ab17", "subject": "KVM: arm64: Fix ID register initialization for non-protected pKVM guests", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23425", "commit_url": "https://git.kernel.org/stable/c/7e7c2cf0024d89443a7af52e09e47b1fe634ab17" }, { "cve": "CVE-2026-23426", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "fef0e649f8b42bdffe4a916dd46e1b1e9ad2f207", "subject": "drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23426", "commit_url": "https://git.kernel.org/stable/c/fef0e649f8b42bdffe4a916dd46e1b1e9ad2f207" }, { "cve": "CVE-2026-23427", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "b425e4d0eb321a1116ddbf39636333181675d8f4", "subject": "ksmbd: fix use-after-free in durable v2 replay of active file handles", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23427", "commit_url": "https://git.kernel.org/stable/c/b425e4d0eb321a1116ddbf39636333181675d8f4" }, { "cve": "CVE-2026-23428", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "c33615f995aee80657b9fdfbc4ee7f49c2bd733d", "subject": "ksmbd: fix use-after-free of share_conf in compound request", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23428", "commit_url": "https://git.kernel.org/stable/c/c33615f995aee80657b9fdfbc4ee7f49c2bd733d" }, { "cve": "CVE-2026-23429", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "06e14c36e20b48171df13d51b89fe67c594ed07a", "subject": "iommu/sva: Fix crash in iommu_sva_unbind_device()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23429", "commit_url": "https://git.kernel.org/stable/c/06e14c36e20b48171df13d51b89fe67c594ed07a" }, { "cve": "CVE-2026-23430", "author_name": "Ian Forbes", "author_email": "ian.forbes@broadcom.com", "fix_sha": "c6cb77c474a32265e21c4871c7992468bf5e7638", "subject": "drm/vmwgfx: Don't overwrite KMS surface dirty tracker", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23430", "commit_url": "https://git.kernel.org/stable/c/c6cb77c474a32265e21c4871c7992468bf5e7638" }, { "cve": "CVE-2026-23431", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "b8db9552997924b750e727a625a30eaa4603bbb9", "subject": "spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23431", "commit_url": "https://git.kernel.org/stable/c/b8db9552997924b750e727a625a30eaa4603bbb9" }, { "cve": "CVE-2026-23432", "author_name": "Stanislav Kinsburskii", "author_email": "skinsburskii@linux.microsoft.com", "fix_sha": "6922db250422a0dfee34de322f86b7a73d713d33", "subject": "mshv: Fix use-after-free in mshv_map_user_memory error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23432", "commit_url": "https://git.kernel.org/stable/c/6922db250422a0dfee34de322f86b7a73d713d33" }, { "cve": "CVE-2026-23433", "author_name": "Ben Horgan", "author_email": "ben.horgan@arm.com", "fix_sha": "4ad79c874e53ebb7fe3b8ae7ac6c858a2121f415", "subject": "arm_mpam: Fix null pointer dereference when restoring bandwidth counters", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23433", "commit_url": "https://git.kernel.org/stable/c/4ad79c874e53ebb7fe3b8ae7ac6c858a2121f415" }, { "cve": "CVE-2026-23434", "author_name": "Kamal Dasu", "author_email": "kamal.dasu@broadcom.com", "fix_sha": "bab2bc6e850a697a23b9e5f0e21bb8c187615e95", "subject": "mtd: rawnand: serialize lock/unlock against other NAND operations", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23434", "commit_url": "https://git.kernel.org/stable/c/bab2bc6e850a697a23b9e5f0e21bb8c187615e95" }, { "cve": "CVE-2026-23435", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "8d5fae6011260de209aaf231120e8146b14bc8e0", "subject": "perf/x86: Move event pointer setup earlier in x86_pmu_enable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23435", "commit_url": "https://git.kernel.org/stable/c/8d5fae6011260de209aaf231120e8146b14bc8e0" }, { "cve": "CVE-2026-23436", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "d75ec7e8ba1979a1eb0b9211d94d749cdce849c8", "subject": "net: shaper: protect from late creation of hierarchy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23436", "commit_url": "https://git.kernel.org/stable/c/d75ec7e8ba1979a1eb0b9211d94d749cdce849c8" }, { "cve": "CVE-2026-23437", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "0f9ea7141f365b4f27226898e62220fb98ef8dc6", "subject": "net: shaper: protect late read accesses to the hierarchy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23437", "commit_url": "https://git.kernel.org/stable/c/0f9ea7141f365b4f27226898e62220fb98ef8dc6" }, { "cve": "CVE-2026-23438", "author_name": "Muhammad Hammad Ijaz", "author_email": "mhijaz@amazon.com", "fix_sha": "8a63baadf08453f66eb582fdb6dd234f72024723", "subject": "net: mvpp2: guard flow control update with global_tx_fc in buffer switching", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23438", "commit_url": "https://git.kernel.org/stable/c/8a63baadf08453f66eb582fdb6dd234f72024723" }, { "cve": "CVE-2026-23439", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "b3a6df291fecf5f8a308953b65ca72b7fc9e015d", "subject": "udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23439", "commit_url": "https://git.kernel.org/stable/c/b3a6df291fecf5f8a308953b65ca72b7fc9e015d" }, { "cve": "CVE-2026-23440", "author_name": "Jianbo Liu", "author_email": "jianbol@nvidia.com", "fix_sha": "beb6e2e5976a128b0cccf10d158124422210c5ef", "subject": "net/mlx5e: Fix race condition during IPSec ESN update", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23440", "commit_url": "https://git.kernel.org/stable/c/beb6e2e5976a128b0cccf10d158124422210c5ef" }, { "cve": "CVE-2026-23441", "author_name": "Jianbo Liu", "author_email": "jianbol@nvidia.com", "fix_sha": "99b36850d881e2d65912b2520a1c80d0fcc9429a", "subject": "net/mlx5e: Prevent concurrent access to IPSec ASO context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23441", "commit_url": "https://git.kernel.org/stable/c/99b36850d881e2d65912b2520a1c80d0fcc9429a" }, { "cve": "CVE-2026-23442", "author_name": "Minhong He", "author_email": "heminhong@kylinos.cn", "fix_sha": "06413793526251870e20402c39930804f14d59c0", "subject": "ipv6: add NULL checks for idev in SRv6 paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23442", "commit_url": "https://git.kernel.org/stable/c/06413793526251870e20402c39930804f14d59c0" }, { "cve": "CVE-2026-23443", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "bf504b229cb8d534eccbaeaa23eba34c05131e25", "subject": "ACPI: processor: Fix previous acpi_processor_errata_piix4() fix", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23443", "commit_url": "https://git.kernel.org/stable/c/bf504b229cb8d534eccbaeaa23eba34c05131e25" }, { "cve": "CVE-2026-23444", "author_name": "Felix Fietkau", "author_email": "nbd@nbd.name", "fix_sha": "d5ad6ab61cbd89afdb60881f6274f74328af3ee9", "subject": "wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23444", "commit_url": "https://git.kernel.org/stable/c/d5ad6ab61cbd89afdb60881f6274f74328af3ee9" }, { "cve": "CVE-2026-23445", "author_name": "Zdenek Bouska", "author_email": "zdenek.bouska@siemens.com", "fix_sha": "45b33e805bd39f615d9353a7194b2da5281332df", "subject": "igc: fix page fault in XDP TX timestamps handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23445", "commit_url": "https://git.kernel.org/stable/c/45b33e805bd39f615d9353a7194b2da5281332df" }, { "cve": "CVE-2026-23446", "author_name": "Nikola Z. Ivanov", "author_email": "zlatistiv@gmail.com", "fix_sha": "069c8f5aebe4d5224cf62acc7d4b3486091c658a", "subject": "net: usb: aqc111: Do not perform PM inside suspend callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23446", "commit_url": "https://git.kernel.org/stable/c/069c8f5aebe4d5224cf62acc7d4b3486091c658a" }, { "cve": "CVE-2026-23447", "author_name": "Tobi Gaertner", "author_email": "tob.gaertner@me.com", "fix_sha": "77914255155e68a20aa41175edeecf8121dac391", "subject": "net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23447", "commit_url": "https://git.kernel.org/stable/c/77914255155e68a20aa41175edeecf8121dac391" }, { "cve": "CVE-2026-23448", "author_name": "Tobi Gaertner", "author_email": "tob.gaertner@me.com", "fix_sha": "2aa8a4fa8d5b7d0e1ebcec100e1a4d80a1f4b21a", "subject": "net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23448", "commit_url": "https://git.kernel.org/stable/c/2aa8a4fa8d5b7d0e1ebcec100e1a4d80a1f4b21a" }, { "cve": "CVE-2026-23449", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "66360460cab63c248ca5b1070a01c0c29133b960", "subject": "net/sched: teql: Fix double-free in teql_master_xmit", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23449", "commit_url": "https://git.kernel.org/stable/c/66360460cab63c248ca5b1070a01c0c29133b960" }, { "cve": "CVE-2026-23450", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "6d5e4538364b9ceb1ac2941a4deb86650afb3538", "subject": "net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23450", "commit_url": "https://git.kernel.org/stable/c/6d5e4538364b9ceb1ac2941a4deb86650afb3538" }, { "cve": "CVE-2026-23451", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "b7405dcf7385445e10821777143f18c3ce20fa04", "subject": "bonding: prevent potential infinite loop in bond_header_parse()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23451", "commit_url": "https://git.kernel.org/stable/c/b7405dcf7385445e10821777143f18c3ce20fa04" }, { "cve": "CVE-2026-23452", "author_name": "Bart Van Assche", "author_email": "bvanassche@acm.org", "fix_sha": "29ab768277617452d88c0607c9299cdc63b6e9ff", "subject": "PM: runtime: Fix a race condition related to device removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23452", "commit_url": "https://git.kernel.org/stable/c/29ab768277617452d88c0607c9299cdc63b6e9ff" }, { "cve": "CVE-2026-23453", "author_name": "Meghana Malladi", "author_email": "m-malladi@ti.com", "fix_sha": "719d3e71691db7c4f1658ba5a6d1472928121594", "subject": "net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23453", "commit_url": "https://git.kernel.org/stable/c/719d3e71691db7c4f1658ba5a6d1472928121594" }, { "cve": "CVE-2026-23454", "author_name": "Dipayaan Roy", "author_email": "dipayanroy@linux.microsoft.com", "fix_sha": "fa103fc8f56954a60699a29215cb713448a39e87", "subject": "net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23454", "commit_url": "https://git.kernel.org/stable/c/fa103fc8f56954a60699a29215cb713448a39e87" }, { "cve": "CVE-2026-23455", "author_name": "Jenny Guanni Qu", "author_email": "qguanni@gmail.com", "fix_sha": "f173d0f4c0f689173f8cdac79991043a4a89bf66", "subject": "netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23455", "commit_url": "https://git.kernel.org/stable/c/f173d0f4c0f689173f8cdac79991043a4a89bf66" }, { "cve": "CVE-2026-23456", "author_name": "Jenny Guanni Qu", "author_email": "qguanni@gmail.com", "fix_sha": "1e3a3593162c96e8a8de48b1e14f60c3b57fca8a", "subject": "netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23456", "commit_url": "https://git.kernel.org/stable/c/1e3a3593162c96e8a8de48b1e14f60c3b57fca8a" }, { "cve": "CVE-2026-23457", "author_name": "Lukas Johannes M\u00f6ller", "author_email": "research@johannes-moeller.dev", "fix_sha": "fbce58e719a17aa215c724473fd5baaa4a8dc57c", "subject": "netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23457", "commit_url": "https://git.kernel.org/stable/c/fbce58e719a17aa215c724473fd5baaa4a8dc57c" }, { "cve": "CVE-2026-23458", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "5cb81eeda909dbb2def209dd10636b51549a3f8a", "subject": "netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23458", "commit_url": "https://git.kernel.org/stable/c/5cb81eeda909dbb2def209dd10636b51549a3f8a" }, { "cve": "CVE-2026-23459", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8431c602f551549f082bbfa67f3003f2d8e3e132", "subject": "ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23459", "commit_url": "https://git.kernel.org/stable/c/8431c602f551549f082bbfa67f3003f2d8e3e132" }, { "cve": "CVE-2026-23460", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "e1f0a18c9564cdb16523c802e2c6fe5874e3d944", "subject": "net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23460", "commit_url": "https://git.kernel.org/stable/c/e1f0a18c9564cdb16523c802e2c6fe5874e3d944" }, { "cve": "CVE-2026-23461", "author_name": "Shaurya Rane", "author_email": "ssrane_b23@ee.vjti.ac.in", "fix_sha": "752a6c9596dd25efd6978a73ff21f3b592668f4a", "subject": "Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23461", "commit_url": "https://git.kernel.org/stable/c/752a6c9596dd25efd6978a73ff21f3b592668f4a" }, { "cve": "CVE-2026-23462", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "dbf666e4fc9bdd975a61bf682b3f75cb0145eedd", "subject": "Bluetooth: HIDP: Fix possible UAF", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23462", "commit_url": "https://git.kernel.org/stable/c/dbf666e4fc9bdd975a61bf682b3f75cb0145eedd" }, { "cve": "CVE-2026-23463", "author_name": "Richard Genoud", "author_email": "richard.genoud@bootlin.com", "fix_sha": "014077044e874e270ec480515edbc1cadb976cf2", "subject": "soc: fsl: qbman: fix race condition in qman_destroy_fq", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23463", "commit_url": "https://git.kernel.org/stable/c/014077044e874e270ec480515edbc1cadb976cf2" }, { "cve": "CVE-2026-23464", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "5a741f8cc6fe62542f955cd8d24933a1b6589cbd", "subject": "soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23464", "commit_url": "https://git.kernel.org/stable/c/5a741f8cc6fe62542f955cd8d24933a1b6589cbd" }, { "cve": "CVE-2026-23465", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "9573a365ff9ff45da9222d3fe63695ce562beb24", "subject": "btrfs: log new dentries when logging parent dir of a conflicting inode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23465", "commit_url": "https://git.kernel.org/stable/c/9573a365ff9ff45da9222d3fe63695ce562beb24" }, { "cve": "CVE-2026-23466", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "01f2557aa684e514005541e71a3d01f4cd45c170", "subject": "drm/xe: Open-code GGTT MMIO access protection", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23466", "commit_url": "https://git.kernel.org/stable/c/01f2557aa684e514005541e71a3d01f4cd45c170" }, { "cve": "CVE-2026-23467", "author_name": "Imre Deak", "author_email": "imre.deak@intel.com", "fix_sha": "ac57eb3b7d2ad649025b5a0fa207315f755ac4f6", "subject": "drm/i915/dmc: Fix an unlikely NULL pointer deference at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23467", "commit_url": "https://git.kernel.org/stable/c/ac57eb3b7d2ad649025b5a0fa207315f755ac4f6" }, { "cve": "CVE-2026-23468", "author_name": "Jesse.Zhang", "author_email": "jesse.zhang@amd.com", "fix_sha": "6270b1a5dab94665d7adce3dc78bc9066ed28bdd", "subject": "drm/amdgpu: Limit BO list entry count to prevent resource exhaustion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23468", "commit_url": "https://git.kernel.org/stable/c/6270b1a5dab94665d7adce3dc78bc9066ed28bdd" }, { "cve": "CVE-2026-23469", "author_name": "Alessio Belle", "author_email": "alessio.belle@imgtec.com", "fix_sha": "2d7f05cddf4c268cc36256a2476946041dbdd36d", "subject": "drm/imagination: Synchronize interrupts before suspending the GPU", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23469", "commit_url": "https://git.kernel.org/stable/c/2d7f05cddf4c268cc36256a2476946041dbdd36d" }, { "cve": "CVE-2026-23470", "author_name": "Alessio Belle", "author_email": "alessio.belle@imgtec.com", "fix_sha": "a55c2a5c8d680156495b7b1e2a9f5a3e313ba524", "subject": "drm/imagination: Fix deadlock in soft reset sequence", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23470", "commit_url": "https://git.kernel.org/stable/c/a55c2a5c8d680156495b7b1e2a9f5a3e313ba524" }, { "cve": "CVE-2026-23472", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "455ce986fa356ff43a43c0d363ba95fa152f21d5", "subject": "serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23472", "commit_url": "https://git.kernel.org/stable/c/455ce986fa356ff43a43c0d363ba95fa152f21d5" }, { "cve": "CVE-2026-23474", "author_name": "Finn Thain", "author_email": "fthain@linux-m68k.org", "fix_sha": "8e2f8020270af7777d49c2e7132260983e4fc566", "subject": "mtd: Avoid boot crash in RedBoot partition table parser", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23474", "commit_url": "https://git.kernel.org/stable/c/8e2f8020270af7777d49c2e7132260983e4fc566" }, { "cve": "CVE-2026-23475", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "dee0774bbb2abb172e9069ce5ffef579b12b3ae9", "subject": "spi: fix statistics allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23475", "commit_url": "https://git.kernel.org/stable/c/dee0774bbb2abb172e9069ce5ffef579b12b3ae9" }, { "cve": "CVE-2026-31389", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "8634e05b08ead636e926022f4a98416e13440df9", "subject": "spi: fix use-after-free on controller registration failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31389", "commit_url": "https://git.kernel.org/stable/c/8634e05b08ead636e926022f4a98416e13440df9" }, { "cve": "CVE-2026-31390", "author_name": "Varun Gupta", "author_email": "varun.gupta@intel.com", "fix_sha": "0cfe9c4838f1147713f6b5c02094cd4dc0c598fa", "subject": "drm/xe: Fix memory leak in xe_vm_madvise_ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31390", "commit_url": "https://git.kernel.org/stable/c/0cfe9c4838f1147713f6b5c02094cd4dc0c598fa" }, { "cve": "CVE-2026-31391", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "d240b079a37e90af03fd7dfec94930eb6c83936e", "subject": "crypto: atmel-sha204a - Fix OOM ->tfm_count leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31391", "commit_url": "https://git.kernel.org/stable/c/d240b079a37e90af03fd7dfec94930eb6c83936e" }, { "cve": "CVE-2026-31392", "author_name": "Paulo Alcantara", "author_email": "pc@manguebit.org", "fix_sha": "12b4c5d98cd7ca46d5035a57bcd995df614c14e1", "subject": "smb: client: fix krb5 mount with username option", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31392", "commit_url": "https://git.kernel.org/stable/c/12b4c5d98cd7ca46d5035a57bcd995df614c14e1" }, { "cve": "CVE-2026-31393", "author_name": "Lukas Johannes M\u00f6ller", "author_email": "research@johannes-moeller.dev", "fix_sha": "dd815e6e3918dc75a49aaabac36e4f024d675101", "subject": "Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31393", "commit_url": "https://git.kernel.org/stable/c/dd815e6e3918dc75a49aaabac36e4f024d675101" }, { "cve": "CVE-2026-31394", "author_name": "Felix Fietkau", "author_email": "nbd@nbd.name", "fix_sha": "672e5229e1ecfc2a3509b53adcb914d8b024a853", "subject": "mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31394", "commit_url": "https://git.kernel.org/stable/c/672e5229e1ecfc2a3509b53adcb914d8b024a853" }, { "cve": "CVE-2026-31395", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "64dcbde7f8f870a4f2d9daf24ffb06f9748b5dd3", "subject": "bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31395", "commit_url": "https://git.kernel.org/stable/c/64dcbde7f8f870a4f2d9daf24ffb06f9748b5dd3" }, { "cve": "CVE-2026-31396", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "8da13e6d63c1a97f7302d342c89c4a56a55c7015", "subject": "net: macb: fix use-after-free access to PTP clock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31396", "commit_url": "https://git.kernel.org/stable/c/8da13e6d63c1a97f7302d342c89c4a56a55c7015" }, { "cve": "CVE-2026-31397", "author_name": "Chris Down", "author_email": "chris@chrisdown.name", "fix_sha": "fae654083bfa409bb2244f390232e2be47f05bfc", "subject": "mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31397", "commit_url": "https://git.kernel.org/stable/c/fae654083bfa409bb2244f390232e2be47f05bfc" }, { "cve": "CVE-2026-31398", "author_name": "Dev Jain", "author_email": "dev.jain@arm.com", "fix_sha": "29f40594a28114b9a9bc87f6cf7bbee9609628f2", "subject": "mm/rmap: fix incorrect pte restoration for lazyfree folios", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31398", "commit_url": "https://git.kernel.org/stable/c/29f40594a28114b9a9bc87f6cf7bbee9609628f2" }, { "cve": "CVE-2026-31399", "author_name": "Ira Weiny", "author_email": "ira.weiny@intel.com", "fix_sha": "a8aec14230322ed8f1e8042b6d656c1631d41163", "subject": "nvdimm/bus: Fix potential use after free in asynchronous initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31399", "commit_url": "https://git.kernel.org/stable/c/a8aec14230322ed8f1e8042b6d656c1631d41163" }, { "cve": "CVE-2026-31400", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "17ad31b3a43b72aec3a3d83605891e1397d0d065", "subject": "sunrpc: fix cache_request leak in cache_release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31400", "commit_url": "https://git.kernel.org/stable/c/17ad31b3a43b72aec3a3d83605891e1397d0d065" }, { "cve": "CVE-2026-31401", "author_name": "Benjamin Tissoires", "author_email": "bentiss@kernel.org", "fix_sha": "2b658c1c442ec1cd9eec5ead98d68662c40fe645", "subject": "HID: bpf: prevent buffer overflow in hid_hw_request", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31401", "commit_url": "https://git.kernel.org/stable/c/2b658c1c442ec1cd9eec5ead98d68662c40fe645" }, { "cve": "CVE-2026-31402", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "5133b61aaf437e5f25b1b396b14242a6bb0508e2", "subject": "nfsd: fix heap overflow in NFSv4.0 LOCK replay cache", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31402", "commit_url": "https://git.kernel.org/stable/c/5133b61aaf437e5f25b1b396b14242a6bb0508e2" }, { "cve": "CVE-2026-31403", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "e7fcf179b82d3a3730fd8615da01b087cc654d0b", "subject": "NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31403", "commit_url": "https://git.kernel.org/stable/c/e7fcf179b82d3a3730fd8615da01b087cc654d0b" }, { "cve": "CVE-2026-31405", "author_name": "Ariel Silver", "author_email": "arielsilver77@gmail.com", "fix_sha": "24d87712727a5017ad142d63940589a36cd25647", "subject": "media: dvb-net: fix OOB access in ULE extension header tables", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31405", "commit_url": "https://git.kernel.org/stable/c/24d87712727a5017ad142d63940589a36cd25647" }, { "cve": "CVE-2026-31406", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "daf8e3b253aa760ff9e96c7768a464bc1d6b3c90", "subject": "xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31406", "commit_url": "https://git.kernel.org/stable/c/daf8e3b253aa760ff9e96c7768a464bc1d6b3c90" }, { "cve": "CVE-2026-31407", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "f900e1d77ee0ef87bfb5ab3fe60f0b3d8ad5ba05", "subject": "netfilter: conntrack: add missing netlink policy validations", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31407", "commit_url": "https://git.kernel.org/stable/c/f900e1d77ee0ef87bfb5ab3fe60f0b3d8ad5ba05" }, { "cve": "CVE-2026-31408", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "598dbba9919c5e36c54fe1709b557d64120cb94b", "subject": "Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31408", "commit_url": "https://git.kernel.org/stable/c/598dbba9919c5e36c54fe1709b557d64120cb94b" }, { "cve": "CVE-2026-31409", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "282343cf8a4a5a3603b1cb0e17a7083e4a593b03", "subject": "ksmbd: unset conn->binding on failed binding request", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31409", "commit_url": "https://git.kernel.org/stable/c/282343cf8a4a5a3603b1cb0e17a7083e4a593b03" }, { "cve": "CVE-2026-31410", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "3a64125730cabc34fccfbc230c2667c2e14f7308", "subject": "ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31410", "commit_url": "https://git.kernel.org/stable/c/3a64125730cabc34fccfbc230c2667c2e14f7308" }, { "cve": "CVE-2026-31411", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "ae88a5d2f29b69819dc7b04086734439d074a643", "subject": "net: atm: fix crash due to unvalidated vcc pointer in sigd_send()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31411", "commit_url": "https://git.kernel.org/stable/c/ae88a5d2f29b69819dc7b04086734439d074a643" }, { "cve": "CVE-2026-31412", "author_name": "Seungjin Bae", "author_email": "eeodqql09@gmail.com", "fix_sha": "8479891d1f04a8ce55366fe4ca361ccdb96f02e1", "subject": "usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31412", "commit_url": "https://git.kernel.org/stable/c/8479891d1f04a8ce55366fe4ca361ccdb96f02e1" }, { "cve": "CVE-2026-31413", "author_name": "Daniel Wade", "author_email": "danjwade95@gmail.com", "fix_sha": "c845894ebd6fb43226b3118d6b017942550910c5", "subject": "bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31413", "commit_url": "https://git.kernel.org/stable/c/c845894ebd6fb43226b3118d6b017942550910c5" }, { "cve": "CVE-2026-31414", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "f01794106042ee27e54af6fdf5b319a2fe3df94d", "subject": "netfilter: nf_conntrack_expect: use expect->helper", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31414", "commit_url": "https://git.kernel.org/stable/c/f01794106042ee27e54af6fdf5b319a2fe3df94d" }, { "cve": "CVE-2026-31415", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "4e453375561fc60820e6b9d8ebeb6b3ee177d42e", "subject": "ipv6: avoid overflows in ip6_datagram_send_ctl()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31415", "commit_url": "https://git.kernel.org/stable/c/4e453375561fc60820e6b9d8ebeb6b3ee177d42e" }, { "cve": "CVE-2026-31416", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "6d52a4a0520a6696bdde51caa11f2d6821cd0c01", "subject": "netfilter: nfnetlink_log: account for netlink header size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31416", "commit_url": "https://git.kernel.org/stable/c/6d52a4a0520a6696bdde51caa11f2d6821cd0c01" }, { "cve": "CVE-2026-31417", "author_name": "Martin Schiller", "author_email": "ms@dev.tdt.de", "fix_sha": "a1822cb524e89b4cd2cf0b82e484a2335496a6d9", "subject": "net/x25: Fix overflow when accumulating packets", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31417", "commit_url": "https://git.kernel.org/stable/c/a1822cb524e89b4cd2cf0b82e484a2335496a6d9" }, { "cve": "CVE-2026-31418", "author_name": "Yifan Wu", "author_email": "yifanwucs@gmail.com", "fix_sha": "9862ef9ab0a116c6dca98842aab7de13a252ae02", "subject": "netfilter: ipset: drop logically empty buckets in mtype_del", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31418", "commit_url": "https://git.kernel.org/stable/c/9862ef9ab0a116c6dca98842aab7de13a252ae02" }, { "cve": "CVE-2026-31419", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "2884bf72fb8f03409e423397319205de48adca16", "subject": "net: bonding: fix use-after-free in bond_xmit_broadcast()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31419", "commit_url": "https://git.kernel.org/stable/c/2884bf72fb8f03409e423397319205de48adca16" }, { "cve": "CVE-2026-31420", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "fa6e24963342de4370e3a3c9af41e38277b74cf3", "subject": "bridge: mrp: reject zero test interval to avoid OOM panic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31420", "commit_url": "https://git.kernel.org/stable/c/fa6e24963342de4370e3a3c9af41e38277b74cf3" }, { "cve": "CVE-2026-31421", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "faeea8bbf6e958bf3c00cb08263109661975987c", "subject": "net/sched: cls_fw: fix NULL pointer dereference on shared blocks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31421", "commit_url": "https://git.kernel.org/stable/c/faeea8bbf6e958bf3c00cb08263109661975987c" }, { "cve": "CVE-2026-31422", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "1a280dd4bd1d616a01d6ffe0de284c907b555504", "subject": "net/sched: cls_flow: fix NULL pointer dereference on shared blocks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31422", "commit_url": "https://git.kernel.org/stable/c/1a280dd4bd1d616a01d6ffe0de284c907b555504" }, { "cve": "CVE-2026-31423", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "4576100b8cd03118267513cafacde164b498b322", "subject": "net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31423", "commit_url": "https://git.kernel.org/stable/c/4576100b8cd03118267513cafacde164b498b322" }, { "cve": "CVE-2026-31424", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "3d5d488f11776738deab9da336038add95d342d1", "subject": "netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31424", "commit_url": "https://git.kernel.org/stable/c/3d5d488f11776738deab9da336038add95d342d1" }, { "cve": "CVE-2026-31425", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "a54ecccfae62c5c85259ae5ea5d9c20009519049", "subject": "rds: ib: reject FRMR registration before IB connection is established", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31425", "commit_url": "https://git.kernel.org/stable/c/a54ecccfae62c5c85259ae5ea5d9c20009519049" }, { "cve": "CVE-2026-31426", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "f6484cadbcaf26b5844b51bd7307a663dda48ef6", "subject": "ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31426", "commit_url": "https://git.kernel.org/stable/c/f6484cadbcaf26b5844b51bd7307a663dda48ef6" }, { "cve": "CVE-2026-31427", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "6a2b724460cb67caed500c508c2ae5cf012e4db4", "subject": "netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31427", "commit_url": "https://git.kernel.org/stable/c/6a2b724460cb67caed500c508c2ae5cf012e4db4" }, { "cve": "CVE-2026-31428", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "52025ebaa29f4eb4ed8bf92ce83a68f24ab7fdf7", "subject": "netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31428", "commit_url": "https://git.kernel.org/stable/c/52025ebaa29f4eb4ed8bf92ce83a68f24ab7fdf7" }, { "cve": "CVE-2026-31429", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "0f42e3f4fe2a58394e37241d02d9ca6ab7b7d516", "subject": "net: skb: fix cross-cache free of KFENCE-allocated skb head", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31429", "commit_url": "https://git.kernel.org/stable/c/0f42e3f4fe2a58394e37241d02d9ca6ab7b7d516" }, { "cve": "CVE-2026-31430", "author_name": "Lukas Wunner", "author_email": "lukas@wunner.de", "fix_sha": "d702c3408213bb12bd570bb97204d8340d141c51", "subject": "X.509: Fix out-of-bounds access when parsing extensions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31430", "commit_url": "https://git.kernel.org/stable/c/d702c3408213bb12bd570bb97204d8340d141c51" }, { "cve": "CVE-2026-31431", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "subject": "crypto: algif_aead - Revert to operating out-of-place", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431", "commit_url": "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5" }, { "cve": "CVE-2026-31432", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "fda9522ed6afaec45cabc198d8492270c394c7bc", "subject": "ksmbd: fix OOB write in QUERY_INFO for compound requests", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31432", "commit_url": "https://git.kernel.org/stable/c/fda9522ed6afaec45cabc198d8492270c394c7bc" }, { "cve": "CVE-2026-31433", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "beef2634f81f1c086208191f7228bce1d366493d", "subject": "ksmbd: fix potencial OOB in get_file_all_info() for compound requests", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31433", "commit_url": "https://git.kernel.org/stable/c/beef2634f81f1c086208191f7228bce1d366493d" }, { "cve": "CVE-2026-31434", "author_name": "Shin'ichiro Kawasaki", "author_email": "shinichiro.kawasaki@wdc.com", "fix_sha": "a4376d9a5d4c9610e69def3fc0b32c86a7ab7a41", "subject": "btrfs: fix leak of kobject name for sub-group space_info", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31434", "commit_url": "https://git.kernel.org/stable/c/a4376d9a5d4c9610e69def3fc0b32c86a7ab7a41" }, { "cve": "CVE-2026-31435", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "7e57523490cd2efb52b1ea97f2e0a74c0fb634cd", "subject": "netfs: Fix read abandonment during retry", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31435", "commit_url": "https://git.kernel.org/stable/c/7e57523490cd2efb52b1ea97f2e0a74c0fb634cd" }, { "cve": "CVE-2026-31436", "author_name": "Tuo Li", "author_email": "islituo@gmail.com", "fix_sha": "e1c9866173c5f8521f2d0768547a01508cb9ff27", "subject": "dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31436", "commit_url": "https://git.kernel.org/stable/c/e1c9866173c5f8521f2d0768547a01508cb9ff27" }, { "cve": "CVE-2026-31437", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "e9075e420a1eb3b52c60f3b95893a55e77419ce8", "subject": "netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31437", "commit_url": "https://git.kernel.org/stable/c/e9075e420a1eb3b52c60f3b95893a55e77419ce8" }, { "cve": "CVE-2026-31438", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "67e467a11f62ff64ad219dc6aa5459e132c79d14", "subject": "netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31438", "commit_url": "https://git.kernel.org/stable/c/67e467a11f62ff64ad219dc6aa5459e132c79d14" }, { "cve": "CVE-2026-31439", "author_name": "Alexander Stein", "author_email": "alexander.stein@ew.tq-group.com", "fix_sha": "e0adbf74e2a0455a6bc9628726ba87bcd0b42bf8", "subject": "dmaengine: xilinx: xdma: Fix regmap init error handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31439", "commit_url": "https://git.kernel.org/stable/c/e0adbf74e2a0455a6bc9628726ba87bcd0b42bf8" }, { "cve": "CVE-2026-31440", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "ee66bc29578391c9b48523dc9119af67bd5c7c0f", "subject": "dmaengine: idxd: Fix leaking event log memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31440", "commit_url": "https://git.kernel.org/stable/c/ee66bc29578391c9b48523dc9119af67bd5c7c0f" }, { "cve": "CVE-2026-31441", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "d9cfb5193a047a92a4d3c0e91ea4cc87c8f7c478", "subject": "dmaengine: idxd: Fix memory leak when a wq is reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31441", "commit_url": "https://git.kernel.org/stable/c/d9cfb5193a047a92a4d3c0e91ea4cc87c8f7c478" }, { "cve": "CVE-2026-31442", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "d6077df7b75d26e4edf98983836c05d00ebabd8d", "subject": "dmaengine: idxd: Fix possible invalid memory access after FLR", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31442", "commit_url": "https://git.kernel.org/stable/c/d6077df7b75d26e4edf98983836c05d00ebabd8d" }, { "cve": "CVE-2026-31443", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "52d2edea0d63c935e82631e4b9e4a94eccf97b5b", "subject": "dmaengine: idxd: Fix crash when the event log is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31443", "commit_url": "https://git.kernel.org/stable/c/52d2edea0d63c935e82631e4b9e4a94eccf97b5b" }, { "cve": "CVE-2026-31444", "author_name": "Werner Kasselman", "author_email": "werner@verivus.com", "fix_sha": "48623ec358c1c600fa1e38368746f933e0f1a617", "subject": "ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31444", "commit_url": "https://git.kernel.org/stable/c/48623ec358c1c600fa1e38368746f933e0f1a617" }, { "cve": "CVE-2026-31445", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "26f775a054c3cda86ad465a64141894a90a9e145", "subject": "mm/damon/core: avoid use of half-online-committed context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31445", "commit_url": "https://git.kernel.org/stable/c/26f775a054c3cda86ad465a64141894a90a9e145" }, { "cve": "CVE-2026-31446", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "d15e4b0a418537aafa56b2cb80d44add83e83697", "subject": "ext4: fix use-after-free in update_super_work when racing with umount", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31446", "commit_url": "https://git.kernel.org/stable/c/d15e4b0a418537aafa56b2cb80d44add83e83697" }, { "cve": "CVE-2026-31447", "author_name": "Helen Koike", "author_email": "koike@igalia.com", "fix_sha": "3822743dc20386d9897e999dbb990befa3a5b3f8", "subject": "ext4: reject mount if bigalloc with s_first_data_block != 0", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31447", "commit_url": "https://git.kernel.org/stable/c/3822743dc20386d9897e999dbb990befa3a5b3f8" }, { "cve": "CVE-2026-31448", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "5422fe71d26d42af6c454ca9527faaad4e677d6c", "subject": "ext4: avoid infinite loops caused by residual data", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31448", "commit_url": "https://git.kernel.org/stable/c/5422fe71d26d42af6c454ca9527faaad4e677d6c" }, { "cve": "CVE-2026-31449", "author_name": "Tejas Bharambe", "author_email": "tejas.bharambe@outlook.com", "fix_sha": "2acb5c12ebd860f30e4faf67e6cc8c44ddfe5fe8", "subject": "ext4: validate p_idx bounds in ext4_ext_correct_indexes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31449", "commit_url": "https://git.kernel.org/stable/c/2acb5c12ebd860f30e4faf67e6cc8c44ddfe5fe8" }, { "cve": "CVE-2026-31450", "author_name": "Li Chen", "author_email": "me@linux.beauty", "fix_sha": "1aec30021edd410b986c156f195f3d23959a9d11", "subject": "ext4: publish jinode after initialization", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31450", "commit_url": "https://git.kernel.org/stable/c/1aec30021edd410b986c156f195f3d23959a9d11" }, { "cve": "CVE-2026-31451", "author_name": "Yuto Ohnuki", "author_email": "ytohnuki@amazon.com", "fix_sha": "356227096eb66e41b23caf7045e6304877322edf", "subject": "ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31451", "commit_url": "https://git.kernel.org/stable/c/356227096eb66e41b23caf7045e6304877322edf" }, { "cve": "CVE-2026-31452", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "ed9356a30e59c7cc3198e7fc46cfedf3767b9b17", "subject": "ext4: convert inline data to extents when truncate exceeds inline size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31452", "commit_url": "https://git.kernel.org/stable/c/ed9356a30e59c7cc3198e7fc46cfedf3767b9b17" }, { "cve": "CVE-2026-31453", "author_name": "Yuto Ohnuki", "author_email": "ytohnuki@amazon.com", "fix_sha": "79ef34ec0554ec04bdbafafbc9836423734e1bd6", "subject": "xfs: avoid dereferencing log items after push callbacks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31453", "commit_url": "https://git.kernel.org/stable/c/79ef34ec0554ec04bdbafafbc9836423734e1bd6" }, { "cve": "CVE-2026-31454", "author_name": "Yuto Ohnuki", "author_email": "ytohnuki@amazon.com", "fix_sha": "394d70b86fae9fe865e7e6d9540b7696f73aa9b6", "subject": "xfs: save ailp before dropping the AIL lock in push callbacks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31454", "commit_url": "https://git.kernel.org/stable/c/394d70b86fae9fe865e7e6d9540b7696f73aa9b6" }, { "cve": "CVE-2026-31455", "author_name": "Yuto Ohnuki", "author_email": "ytohnuki@amazon.com", "fix_sha": "4f24a767e3d64a5f58c595b5c29b6063a201f1e3", "subject": "xfs: stop reclaim before pushing AIL during unmount", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31455", "commit_url": "https://git.kernel.org/stable/c/4f24a767e3d64a5f58c595b5c29b6063a201f1e3" }, { "cve": "CVE-2026-31456", "author_name": "Max Boone", "author_email": "mboone@akamai.com", "fix_sha": "3b89863c3fa482912911cd65a12a3aeef662c250", "subject": "mm/pagewalk: fix race between concurrent split and refault", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31456", "commit_url": "https://git.kernel.org/stable/c/3b89863c3fa482912911cd65a12a3aeef662c250" }, { "cve": "CVE-2026-31457", "author_name": "Josh Law", "author_email": "objecting@objecting.org", "fix_sha": "6557004a8b59c7701e695f02be03c7e20ed1cc15", "subject": "mm/damon/sysfs: check contexts->nr in repeat_call_fn", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31457", "commit_url": "https://git.kernel.org/stable/c/6557004a8b59c7701e695f02be03c7e20ed1cc15" }, { "cve": "CVE-2026-31458", "author_name": "Josh Law", "author_email": "objecting@objecting.org", "fix_sha": "1bfe9fb5ed2667fb075682408b776b5273162615", "subject": "mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31458", "commit_url": "https://git.kernel.org/stable/c/1bfe9fb5ed2667fb075682408b776b5273162615" }, { "cve": "CVE-2026-31459", "author_name": "Josh Law", "author_email": "objecting@objecting.org", "fix_sha": "7fe000eb32904758a85e62f6ea9483f89d5dabfc", "subject": "mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31459", "commit_url": "https://git.kernel.org/stable/c/7fe000eb32904758a85e62f6ea9483f89d5dabfc" }, { "cve": "CVE-2026-31460", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "9da4f9964abcaeb6e19797d5e3b10faad338a786", "subject": "drm/amd/display: check if ext_caps is valid in BL setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31460", "commit_url": "https://git.kernel.org/stable/c/9da4f9964abcaeb6e19797d5e3b10faad338a786" }, { "cve": "CVE-2026-31461", "author_name": "Alex Hung", "author_email": "alex.hung@amd.com", "fix_sha": "37c2caa167b0b8aca4f74c32404c5288b876a2a3", "subject": "drm/amd/display: Fix drm_edid leak in amdgpu_dm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31461", "commit_url": "https://git.kernel.org/stable/c/37c2caa167b0b8aca4f74c32404c5288b876a2a3" }, { "cve": "CVE-2026-31462", "author_name": "Eric Huang", "author_email": "jinhuieric.huang@amd.com", "fix_sha": "14b81abe7bdc25f8097906fc2f91276ffedb2d26", "subject": "drm/amdgpu: prevent immediate PASID reuse case", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31462", "commit_url": "https://git.kernel.org/stable/c/14b81abe7bdc25f8097906fc2f91276ffedb2d26" }, { "cve": "CVE-2026-31463", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "bd71fb3fea9945987053968f028a948997cba8cc", "subject": "iomap: fix invalid folio access when i_blkbits differs from I/O granularity", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31463", "commit_url": "https://git.kernel.org/stable/c/bd71fb3fea9945987053968f028a948997cba8cc" }, { "cve": "CVE-2026-31464", "author_name": "Tyllis Xu", "author_email": "livelycarpet87@gmail.com", "fix_sha": "61d099ac4a7a8fb11ebdb6e2ec8d77f38e77362f", "subject": "scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31464", "commit_url": "https://git.kernel.org/stable/c/61d099ac4a7a8fb11ebdb6e2ec8d77f38e77362f" }, { "cve": "CVE-2026-31465", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "76f9377cd2ab7a9220c25d33940d9ca20d368172", "subject": "writeback: don't block sync for filesystems with no data integrity guarantees", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31465", "commit_url": "https://git.kernel.org/stable/c/76f9377cd2ab7a9220c25d33940d9ca20d368172" }, { "cve": "CVE-2026-31466", "author_name": "Jinjiang Tu", "author_email": "tujinjiang@huawei.com", "fix_sha": "4c5e7f0fcd592801c9cc18f29f80fbee84eb8669", "subject": "mm/huge_memory: fix folio isn't locked in softleaf_to_folio()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31466", "commit_url": "https://git.kernel.org/stable/c/4c5e7f0fcd592801c9cc18f29f80fbee84eb8669" }, { "cve": "CVE-2026-31467", "author_name": "Jiucheng Xu", "author_email": "jiucheng.xu@amlogic.com", "fix_sha": "c23df30915f83e7257c8625b690a1cece94142a0", "subject": "erofs: add GFP_NOIO in the bio completion if needed", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31467", "commit_url": "https://git.kernel.org/stable/c/c23df30915f83e7257c8625b690a1cece94142a0" }, { "cve": "CVE-2026-31468", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "e98137f0a874ab36d0946de4707aa48cb7137d1c", "subject": "vfio/pci: Fix double free in dma-buf feature", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31468", "commit_url": "https://git.kernel.org/stable/c/e98137f0a874ab36d0946de4707aa48cb7137d1c" }, { "cve": "CVE-2026-31469", "author_name": "xietangxin", "author_email": "xietangxin@yeah.net", "fix_sha": "ba8bda9a0896746053aa97ac6c3e08168729172c", "subject": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31469", "commit_url": "https://git.kernel.org/stable/c/ba8bda9a0896746053aa97ac6c3e08168729172c" }, { "cve": "CVE-2026-31470", "author_name": "Zubin Mithra", "author_email": "zsm@google.com", "fix_sha": "c3fd16c3b98ed726294feab2f94f876290bf7b61", "subject": "virt: tdx-guest: Fix handling of host controlled 'quote' buffer length", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31470", "commit_url": "https://git.kernel.org/stable/c/c3fd16c3b98ed726294feab2f94f876290bf7b61" }, { "cve": "CVE-2026-31471", "author_name": "Paul Moses", "author_email": "p@1g4.org", "fix_sha": "d849a2f7309fc0616e79d13b008b0a47e0458b6e", "subject": "xfrm: iptfs: only publish mode_data after clone setup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31471", "commit_url": "https://git.kernel.org/stable/c/d849a2f7309fc0616e79d13b008b0a47e0458b6e" }, { "cve": "CVE-2026-31472", "author_name": "Roshan Kumar", "author_email": "roshaen09@gmail.com", "fix_sha": "0d10393d5eac33cbd92f7a41fddca12c41d3cb7e", "subject": "xfrm: iptfs: validate inner IPv4 header length in IPTFS payload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31472", "commit_url": "https://git.kernel.org/stable/c/0d10393d5eac33cbd92f7a41fddca12c41d3cb7e" }, { "cve": "CVE-2026-31473", "author_name": "Yuchan Nam", "author_email": "entropy1110@gmail.com", "fix_sha": "bef4f4a88b73e4cc550d25f665b8a9952af22773", "subject": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31473", "commit_url": "https://git.kernel.org/stable/c/bef4f4a88b73e4cc550d25f665b8a9952af22773" }, { "cve": "CVE-2026-31474", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "424e95d62110cdbc8fd12b40918f37e408e35a92", "subject": "can: isotp: fix tx.buf use-after-free in isotp_sendmsg()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31474", "commit_url": "https://git.kernel.org/stable/c/424e95d62110cdbc8fd12b40918f37e408e35a92" }, { "cve": "CVE-2026-31475", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "fe757092d2329c397ecb32f2bf68a5b1c4bd9193", "subject": "ASoC: sma1307: fix double free of devm_kzalloc() memory", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31475", "commit_url": "https://git.kernel.org/stable/c/fe757092d2329c397ecb32f2bf68a5b1c4bd9193" }, { "cve": "CVE-2026-31476", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "9bbb19d21ded7d78645506f20d8c44895e3d0fb9", "subject": "ksmbd: do not expire session on binding failure", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31476", "commit_url": "https://git.kernel.org/stable/c/9bbb19d21ded7d78645506f20d8c44895e3d0fb9" }, { "cve": "CVE-2026-31477", "author_name": "Werner Kasselman", "author_email": "werner@verivus.com", "fix_sha": "309b44ed684496ed3f9c5715d10b899338623512", "subject": "ksmbd: fix memory leaks and NULL deref in smb2_lock()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31477", "commit_url": "https://git.kernel.org/stable/c/309b44ed684496ed3f9c5715d10b899338623512" }, { "cve": "CVE-2026-31478", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "0e55f63dd08f09651d39e1b709a91705a8a0ddcb", "subject": "ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31478", "commit_url": "https://git.kernel.org/stable/c/0e55f63dd08f09651d39e1b709a91705a8a0ddcb" }, { "cve": "CVE-2026-31479", "author_name": "Matthew Auld", "author_email": "matthew.auld@intel.com", "fix_sha": "bfe9e314d7574d1c5c851972e7aee342733819d2", "subject": "drm/xe: always keep track of remap prev/next", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31479", "commit_url": "https://git.kernel.org/stable/c/bfe9e314d7574d1c5c851972e7aee342733819d2" }, { "cve": "CVE-2026-31480", "author_name": "Luo Haiyang", "author_email": "luo.haiyang@zte.com.cn", "fix_sha": "1f9885732248d22f788e4992c739a98c88ab8a55", "subject": "tracing: Fix potential deadlock in cpu hotplug with osnoise", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31480", "commit_url": "https://git.kernel.org/stable/c/1f9885732248d22f788e4992c739a98c88ab8a55" }, { "cve": "CVE-2026-31481", "author_name": "Wesley Atwell", "author_email": "atwellwea@gmail.com", "fix_sha": "250ab25391edeeab8462b68be42e4904506c409c", "subject": "tracing: Drain deferred trigger frees if kthread creation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31481", "commit_url": "https://git.kernel.org/stable/c/250ab25391edeeab8462b68be42e4904506c409c" }, { "cve": "CVE-2026-31482", "author_name": "Vasily Gorbik", "author_email": "gor@linux.ibm.com", "fix_sha": "0738d395aab8fae3b5a3ad3fc640630c91693c27", "subject": "s390/entry: Scrub r12 register on kernel entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31482", "commit_url": "https://git.kernel.org/stable/c/0738d395aab8fae3b5a3ad3fc640630c91693c27" }, { "cve": "CVE-2026-31483", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "48b8814e25d073dd84daf990a879a820bad2bcbd", "subject": "s390/syscalls: Add spectre boundary for syscall dispatch table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31483", "commit_url": "https://git.kernel.org/stable/c/48b8814e25d073dd84daf990a879a820bad2bcbd" }, { "cve": "CVE-2026-31484", "author_name": "Nicholas Carlini", "author_email": "nicholas@carlini.com", "fix_sha": "5170efd9c344c68a8075dcb8ed38d3f8a60e7ed4", "subject": "io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31484", "commit_url": "https://git.kernel.org/stable/c/5170efd9c344c68a8075dcb8ed38d3f8a60e7ed4" }, { "cve": "CVE-2026-31485", "author_name": "Marc Kleine-Budde", "author_email": "mkl@pengutronix.de", "fix_sha": "b341c1176f2e001b3adf0b47154fc31589f7410e", "subject": "spi: spi-fsl-lpspi: fix teardown order issue (UAF)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31485", "commit_url": "https://git.kernel.org/stable/c/b341c1176f2e001b3adf0b47154fc31589f7410e" }, { "cve": "CVE-2026-31486", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "754bd2b4a084b90b5e7b630e1f423061a9b9b761", "subject": "hwmon: (pmbus/core) Protect regulator operations with mutex", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31486", "commit_url": "https://git.kernel.org/stable/c/754bd2b4a084b90b5e7b630e1f423061a9b9b761" }, { "cve": "CVE-2026-31487", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "cc34d77dd48708d810c12bfd6f5bf03304f6c824", "subject": "spi: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31487", "commit_url": "https://git.kernel.org/stable/c/cc34d77dd48708d810c12bfd6f5bf03304f6c824" }, { "cve": "CVE-2026-31488", "author_name": "Yussuf Khalil", "author_email": "dev@pp3345.net", "fix_sha": "aed3d041ab061ec8a64f50a3edda0f4db7280025", "subject": "drm/amd/display: Do not skip unrelated mode changes in DSC validation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31488", "commit_url": "https://git.kernel.org/stable/c/aed3d041ab061ec8a64f50a3edda0f4db7280025" }, { "cve": "CVE-2026-31489", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "63542bb402b7013171c9f621c28b609eda4dbf1f", "subject": "spi: meson-spicc: Fix double-put in remove path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31489", "commit_url": "https://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f" }, { "cve": "CVE-2026-31490", "author_name": "Micha\u0142 Winiarski", "author_email": "michal.winiarski@intel.com", "fix_sha": "87997b6c6516e049cbaf2fc6810b213d587a06b1", "subject": "drm/xe/pf: Fix use-after-free in migration restore", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31490", "commit_url": "https://git.kernel.org/stable/c/87997b6c6516e049cbaf2fc6810b213d587a06b1" }, { "cve": "CVE-2026-31491", "author_name": "Shiraz Saleem", "author_email": "shiraz.saleem@intel.com", "fix_sha": "e37afcb56ae070477741fe2d6e61fc0c542cce2d", "subject": "RDMA/irdma: Harden depth calculation functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31491", "commit_url": "https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d" }, { "cve": "CVE-2026-31492", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "11a95521fb93c91e2d4ef9d53dc80ef0a755549b", "subject": "RDMA/irdma: Initialize free_qp completion before using it", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31492", "commit_url": "https://git.kernel.org/stable/c/11a95521fb93c91e2d4ef9d53dc80ef0a755549b" }, { "cve": "CVE-2026-31493", "author_name": "Yonatan Nachum", "author_email": "ynachum@amazon.com", "fix_sha": "ef3b06742c8a201d0e83edc9a33a89a4fe3009f8", "subject": "RDMA/efa: Fix use of completion ctx after free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31493", "commit_url": "https://git.kernel.org/stable/c/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8" }, { "cve": "CVE-2026-31494", "author_name": "Paolo Valerio", "author_email": "pvalerio@redhat.com", "fix_sha": "72d96e4e24bbefdcfbc68bdb9341a05d8f5cb6e5", "subject": "net: macb: use the current queue number for stats", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31494", "commit_url": "https://git.kernel.org/stable/c/72d96e4e24bbefdcfbc68bdb9341a05d8f5cb6e5" }, { "cve": "CVE-2026-31495", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "8f15b5071b4548b0aafc03b366eb45c9c6566704", "subject": "netfilter: ctnetlink: use netlink policy range checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31495", "commit_url": "https://git.kernel.org/stable/c/8f15b5071b4548b0aafc03b366eb45c9c6566704" }, { "cve": "CVE-2026-31496", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "3db5647984de03d9cae0dcddb509b058351f0ee4", "subject": "netfilter: nf_conntrack_expect: skip expectations in other netns via proc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31496", "commit_url": "https://git.kernel.org/stable/c/3db5647984de03d9cae0dcddb509b058351f0ee4" }, { "cve": "CVE-2026-31497", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "129fa608b6ad08b8ab7178eeb2ec272c993aaccc", "subject": "Bluetooth: btusb: clamp SCO altsetting table indices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31497", "commit_url": "https://git.kernel.org/stable/c/129fa608b6ad08b8ab7178eeb2ec272c993aaccc" }, { "cve": "CVE-2026-31498", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "25f420a0d4cfd61d3d23ec4b9c56d9f443d91377", "subject": "Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31498", "commit_url": "https://git.kernel.org/stable/c/25f420a0d4cfd61d3d23ec4b9c56d9f443d91377" }, { "cve": "CVE-2026-31499", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "00fdebbbc557a2fc21321ff2eaa22fd70c078608", "subject": "Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31499", "commit_url": "https://git.kernel.org/stable/c/00fdebbbc557a2fc21321ff2eaa22fd70c078608" }, { "cve": "CVE-2026-31500", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "94d8e6fe5d0818e9300e514e095a200bd5ff93ae", "subject": "Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31500", "commit_url": "https://git.kernel.org/stable/c/94d8e6fe5d0818e9300e514e095a200bd5ff93ae" }, { "cve": "CVE-2026-31501", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "eb8c426c9803beb171f89d15fea17505eb517714", "subject": "net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31501", "commit_url": "https://git.kernel.org/stable/c/eb8c426c9803beb171f89d15fea17505eb517714" }, { "cve": "CVE-2026-31502", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "425000dbf17373a4ab8be9428f5dc055ef870a56", "subject": "team: fix header_ops type confusion with non-Ethernet ports", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31502", "commit_url": "https://git.kernel.org/stable/c/425000dbf17373a4ab8be9428f5dc055ef870a56" }, { "cve": "CVE-2026-31503", "author_name": "Martin KaFai Lau", "author_email": "martin.lau@kernel.org", "fix_sha": "e537dd15d0d4ad989d56a1021290f0c674dd8b28", "subject": "udp: Fix wildcard bind conflict check when using hash2", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31503", "commit_url": "https://git.kernel.org/stable/c/e537dd15d0d4ad989d56a1021290f0c674dd8b28" }, { "cve": "CVE-2026-31504", "author_name": "Yochai Eisenrich", "author_email": "echelonh@gmail.com", "fix_sha": "42156f93d123436f2a27c468f18c966b7e5db796", "subject": "net: fix fanout UAF in packet_release() via NETDEV_UP race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31504", "commit_url": "https://git.kernel.org/stable/c/42156f93d123436f2a27c468f18c966b7e5db796" }, { "cve": "CVE-2026-31505", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "fecacfc95f195b99c71c579a472120d0b4ed65fa", "subject": "iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31505", "commit_url": "https://git.kernel.org/stable/c/fecacfc95f195b99c71c579a472120d0b4ed65fa" }, { "cve": "CVE-2026-31506", "author_name": "Justin Chen", "author_email": "justin.chen@broadcom.com", "fix_sha": "cbfa5be2bf64511d49b854a0f9fd6d0b5118621f", "subject": "net: bcmasp: fix double free of WoL irq", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31506", "commit_url": "https://git.kernel.org/stable/c/cbfa5be2bf64511d49b854a0f9fd6d0b5118621f" }, { "cve": "CVE-2026-31507", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "24dd586bb4cbba1889a50abe74143817a095c1c9", "subject": "net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31507", "commit_url": "https://git.kernel.org/stable/c/24dd586bb4cbba1889a50abe74143817a095c1c9" }, { "cve": "CVE-2026-31508", "author_name": "Toke H\u00f8iland-J\u00f8rgensen", "author_email": "toke@redhat.com", "fix_sha": "7c770dadfda5cbbde6aa3c4363ed513f1d212bf8", "subject": "net: openvswitch: Avoid releasing netdev before teardown completes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31508", "commit_url": "https://git.kernel.org/stable/c/7c770dadfda5cbbde6aa3c4363ed513f1d212bf8" }, { "cve": "CVE-2026-31509", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "4527025d440ce84bf56e75ce1df2e84cb8178616", "subject": "nfc: nci: fix circular locking dependency in nci_close_device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31509", "commit_url": "https://git.kernel.org/stable/c/4527025d440ce84bf56e75ce1df2e84cb8178616" }, { "cve": "CVE-2026-31510", "author_name": "Helen Koike", "author_email": "koike@igalia.com", "fix_sha": "b6552e0503973daf6f23bd6ed9273ef131ee364f", "subject": "Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31510", "commit_url": "https://git.kernel.org/stable/c/b6552e0503973daf6f23bd6ed9273ef131ee364f" }, { "cve": "CVE-2026-31511", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "5f5fa4cd35f707344f65ce9e225b6528691dbbaa", "subject": "Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31511", "commit_url": "https://git.kernel.org/stable/c/5f5fa4cd35f707344f65ce9e225b6528691dbbaa" }, { "cve": "CVE-2026-31512", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "c65bd945d1c08c3db756821b6bf9f1c4a77b29c6", "subject": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31512", "commit_url": "https://git.kernel.org/stable/c/c65bd945d1c08c3db756821b6bf9f1c4a77b29c6" }, { "cve": "CVE-2026-31513", "author_name": "Minseo Park", "author_email": "jacob.park.9436@gmail.com", "fix_sha": "9d87cb22195b2c67405f5485d525190747ad5493", "subject": "Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31513", "commit_url": "https://git.kernel.org/stable/c/9d87cb22195b2c67405f5485d525190747ad5493" }, { "cve": "CVE-2026-31514", "author_name": "Sheng Yong", "author_email": "shengyong1@xiaomi.com", "fix_sha": "eade54040384f54b7fb330e4b0975c5734850b3c", "subject": "erofs: set fileio bio failed in short read case", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31514", "commit_url": "https://git.kernel.org/stable/c/eade54040384f54b7fb330e4b0975c5734850b3c" }, { "cve": "CVE-2026-31515", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "eb2d16a7d599dc9d4df391b5e660df9949963786", "subject": "af_key: validate families in pfkey_send_migrate()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31515", "commit_url": "https://git.kernel.org/stable/c/eb2d16a7d599dc9d4df391b5e660df9949963786" }, { "cve": "CVE-2026-31516", "author_name": "Minwoo Ra", "author_email": "raminwo0202@gmail.com", "fix_sha": "29fe3a61bcdce398ee3955101c39f89c01a8a77e", "subject": "xfrm: prevent policy_hthresh.work from racing with netns teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31516", "commit_url": "https://git.kernel.org/stable/c/29fe3a61bcdce398ee3955101c39f89c01a8a77e" }, { "cve": "CVE-2026-31517", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "0b352f83cabfefdaafa806d6471f0eca117dc7d5", "subject": "xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31517", "commit_url": "https://git.kernel.org/stable/c/0b352f83cabfefdaafa806d6471f0eca117dc7d5" }, { "cve": "CVE-2026-31518", "author_name": "Sabrina Dubroca", "author_email": "sd@queasysnail.net", "fix_sha": "0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2", "subject": "esp: fix skb leak with espintcp and async crypto", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31518", "commit_url": "https://git.kernel.org/stable/c/0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2" }, { "cve": "CVE-2026-31519", "author_name": "Boris Burkov", "author_email": "boris@bur.io", "fix_sha": "5131fa077f9bb386a1b901bf5b247041f0ec8f80", "subject": "btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31519", "commit_url": "https://git.kernel.org/stable/c/5131fa077f9bb386a1b901bf5b247041f0ec8f80" }, { "cve": "CVE-2026-31520", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "239c15116d80f67d32f00acc34575f1a6b699613", "subject": "HID: apple: avoid memory leak in apple_report_fixup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31520", "commit_url": "https://git.kernel.org/stable/c/239c15116d80f67d32f00acc34575f1a6b699613" }, { "cve": "CVE-2026-31521", "author_name": "Ihor Solodrai", "author_email": "ihor.solodrai@linux.dev", "fix_sha": "f9d69d5e7bde2295eb7488a56f094ac8f5383b92", "subject": "module: Fix kernel panic when a symbol st_shndx is out of bounds", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31521", "commit_url": "https://git.kernel.org/stable/c/f9d69d5e7bde2295eb7488a56f094ac8f5383b92" }, { "cve": "CVE-2026-31522", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "91e8c6e601bdc1ccdf886479b6513c01c7e51c2c", "subject": "HID: magicmouse: avoid memory leak in magicmouse_report_fixup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31522", "commit_url": "https://git.kernel.org/stable/c/91e8c6e601bdc1ccdf886479b6513c01c7e51c2c" }, { "cve": "CVE-2026-31523", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "166e31d7dbf6aa44829b98aa446bda5c9580f12a", "subject": "nvme-pci: ensure we're polling a polled queue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31523", "commit_url": "https://git.kernel.org/stable/c/166e31d7dbf6aa44829b98aa446bda5c9580f12a" }, { "cve": "CVE-2026-31524", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "2bad24c17742fc88973d6aea526ce1353f5334a3", "subject": "HID: asus: avoid memory leak in asus_report_fixup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31524", "commit_url": "https://git.kernel.org/stable/c/2bad24c17742fc88973d6aea526ce1353f5334a3" }, { "cve": "CVE-2026-31525", "author_name": "Jenny Guanni Qu", "author_email": "qguanni@gmail.com", "fix_sha": "c77b30bd1dcb61f66c640ff7d2757816210c7cb0", "subject": "bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31525", "commit_url": "https://git.kernel.org/stable/c/c77b30bd1dcb61f66c640ff7d2757816210c7cb0" }, { "cve": "CVE-2026-31526", "author_name": "Ihor Solodrai", "author_email": "ihor.solodrai@linux.dev", "fix_sha": "6c2128505f61b504c79a20b89596feba61388112", "subject": "bpf: Fix exception exit lock checking for subprogs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31526", "commit_url": "https://git.kernel.org/stable/c/6c2128505f61b504c79a20b89596feba61388112" }, { "cve": "CVE-2026-31527", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "2b38efc05bf7a8568ec74bfffea0f5cfa62bc01d", "subject": "driver core: platform: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31527", "commit_url": "https://git.kernel.org/stable/c/2b38efc05bf7a8568ec74bfffea0f5cfa62bc01d" }, { "cve": "CVE-2026-31528", "author_name": "Peter Zijlstra", "author_email": "peterz@infradead.org", "fix_sha": "4b9ce671960627b2505b3f64742544ae9801df97", "subject": "perf: Make sure to use pmu_ctx->pmu for groups", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31528", "commit_url": "https://git.kernel.org/stable/c/4b9ce671960627b2505b3f64742544ae9801df97" }, { "cve": "CVE-2026-31529", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "77b310bb7b5ff8c017524df83292e0242ba89791", "subject": "cxl/region: Fix leakage in __construct_region()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31529", "commit_url": "https://git.kernel.org/stable/c/77b310bb7b5ff8c017524df83292e0242ba89791" }, { "cve": "CVE-2026-31530", "author_name": "Alison Schofield", "author_email": "alison.schofield@intel.com", "fix_sha": "19d2f0b97a131198efc2c4ca3eb7f980bba8c2b4", "subject": "cxl/port: Fix use after free of parent_port in cxl_detach_ep()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31530", "commit_url": "https://git.kernel.org/stable/c/19d2f0b97a131198efc2c4ca3eb7f980bba8c2b4" }, { "cve": "CVE-2026-31531", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "14cf0cd35361f4e94824bf8a42f72713d7702a73", "subject": "ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31531", "commit_url": "https://git.kernel.org/stable/c/14cf0cd35361f4e94824bf8a42f72713d7702a73" }, { "cve": "CVE-2026-31532", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "a535a9217ca3f2fccedaafb2fddb4c48f27d36dc", "subject": "can: raw: fix ro->uniq use-after-free in raw_rcv()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31532", "commit_url": "https://git.kernel.org/stable/c/a535a9217ca3f2fccedaafb2fddb4c48f27d36dc" }, { "cve": "CVE-2026-31533", "author_name": "Muhammad Alifa Ramdhan", "author_email": "ramdhan@starlabs.sg", "fix_sha": "a9b8b18364fffce4c451e6f6fd218fa4ab646705", "subject": "net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31533", "commit_url": "https://git.kernel.org/stable/c/a9b8b18364fffce4c451e6f6fd218fa4ab646705" }, { "cve": "CVE-2026-31535", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "9911b1ed187a770a43950bf51f340ad4b7beecba", "subject": "smb: client: make use of smbdirect_socket.recv_io.credits.available", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31535", "commit_url": "https://git.kernel.org/stable/c/9911b1ed187a770a43950bf51f340ad4b7beecba" }, { "cve": "CVE-2026-31536", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "9da82dc73cb03e85d716a2609364572367a5ff47", "subject": "smb: server: let send_done handle a completion without IB_SEND_SIGNALED", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31536", "commit_url": "https://git.kernel.org/stable/c/9da82dc73cb03e85d716a2609364572367a5ff47" }, { "cve": "CVE-2026-31537", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "34abd408c8ba24d7c97bd02ba874d8c714f49db1", "subject": "smb: server: make use of smbdirect_socket.send_io.bcredits", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31537", "commit_url": "https://git.kernel.org/stable/c/34abd408c8ba24d7c97bd02ba874d8c714f49db1" }, { "cve": "CVE-2026-31538", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "26ad87a2cfb8c1384620d1693a166ed87303046e", "subject": "smb: server: make use of smbdirect_socket.recv_io.credits.available", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31538", "commit_url": "https://git.kernel.org/stable/c/26ad87a2cfb8c1384620d1693a166ed87303046e" }, { "cve": "CVE-2026-31539", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "6e3c5052f9686192e178806e017b7377155f4bab", "subject": "smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31539", "commit_url": "https://git.kernel.org/stable/c/6e3c5052f9686192e178806e017b7377155f4bab" }, { "cve": "CVE-2026-31540", "author_name": "Rahul Bukte", "author_email": "rahul.bukte@sony.com", "fix_sha": "0162ab3220bac870e43e229e6e3024d1a21c3f26", "subject": "drm/i915/gt: Check set_default_submission() before deferencing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31540", "commit_url": "https://git.kernel.org/stable/c/0162ab3220bac870e43e229e6e3024d1a21c3f26" }, { "cve": "CVE-2026-31541", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "07183aac4a6828e474f00b37c9d795d0d99e18a7", "subject": "tracing: Fix trace_marker copy link list updates", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31541", "commit_url": "https://git.kernel.org/stable/c/07183aac4a6828e474f00b37c9d795d0d99e18a7" }, { "cve": "CVE-2026-31542", "author_name": "Kyle Meyer", "author_email": "kyle.meyer@hpe.com", "fix_sha": "1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3", "subject": "x86/platform/uv: Handle deconfigured sockets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31542", "commit_url": "https://git.kernel.org/stable/c/1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3" }, { "cve": "CVE-2026-31543", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "36f46b0e36892eba08978eef7502ff3c94ddba77", "subject": "crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31543", "commit_url": "https://git.kernel.org/stable/c/36f46b0e36892eba08978eef7502ff3c94ddba77" }, { "cve": "CVE-2026-31544", "author_name": "Cristian Marussi", "author_email": "cristian.marussi@arm.com", "fix_sha": "555317d6100164748f7d09f80142739bd29f0cda", "subject": "firmware: arm_scmi: Fix NULL dereference on notify error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31544", "commit_url": "https://git.kernel.org/stable/c/555317d6100164748f7d09f80142739bd29f0cda" }, { "cve": "CVE-2026-31545", "author_name": "Ian Ray", "author_email": "ian.ray@gehealthcare.com", "fix_sha": "55dc632ab2ac2889b15995a9eef56c753d48ebc7", "subject": "NFC: nxp-nci: allow GPIOs to sleep", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31545", "commit_url": "https://git.kernel.org/stable/c/55dc632ab2ac2889b15995a9eef56c753d48ebc7" }, { "cve": "CVE-2026-31546", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "605b52497bf89b3b154674deb135da98f916e390", "subject": "net: bonding: fix NULL deref in bond_debug_rlb_hash_show", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31546", "commit_url": "https://git.kernel.org/stable/c/605b52497bf89b3b154674deb135da98f916e390" }, { "cve": "CVE-2026-31547", "author_name": "Sanjay Yadav", "author_email": "sanjay.kumar.yadav@intel.com", "fix_sha": "65d046b2d8e0d6d855379a981869005fd6b6a41b", "subject": "drm/xe: Fix missing runtime PM reference in ccs_mode_store", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31547", "commit_url": "https://git.kernel.org/stable/c/65d046b2d8e0d6d855379a981869005fd6b6a41b" }, { "cve": "CVE-2026-31548", "author_name": "Peddolla Harshavardhan Reddy", "author_email": "peddolla.reddy@oss.qualcomm.com", "fix_sha": "6dccbc9f3e1d38565dff7730d2b7d1e8b16c9b09", "subject": "wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31548", "commit_url": "https://git.kernel.org/stable/c/6dccbc9f3e1d38565dff7730d2b7d1e8b16c9b09" }, { "cve": "CVE-2026-31549", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "aa79f996eb41e95aed85a1bd7f56bcd6a3842008", "subject": "i2c: cp2615: fix serial string NULL-deref at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31549", "commit_url": "https://git.kernel.org/stable/c/aa79f996eb41e95aed85a1bd7f56bcd6a3842008" }, { "cve": "CVE-2026-31550", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "b826d2c0b0ecb844c84431ba6b502e744f5d919a", "subject": "pmdomain: bcm: bcm2835-power: Increase ASB control timeout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31550", "commit_url": "https://git.kernel.org/stable/c/b826d2c0b0ecb844c84431ba6b502e744f5d919a" }, { "cve": "CVE-2026-31551", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "b94ae8e0d5fe1bdbbfdc3854ff6ce98f6876a828", "subject": "wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31551", "commit_url": "https://git.kernel.org/stable/c/b94ae8e0d5fe1bdbbfdc3854ff6ce98f6876a828" }, { "cve": "CVE-2026-31552", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "deb353d9bb009638b7762cae2d0b6e8fdbb41a69", "subject": "wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31552", "commit_url": "https://git.kernel.org/stable/c/deb353d9bb009638b7762cae2d0b6e8fdbb41a69" }, { "cve": "CVE-2026-31553", "author_name": "Zenghui Yu (Huawei)", "author_email": "zenghui.yu@linux.dev", "fix_sha": "0496acc42fb51eee040b5170cec05cec41385540", "subject": "KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31553", "commit_url": "https://git.kernel.org/stable/c/0496acc42fb51eee040b5170cec05cec41385540" }, { "cve": "CVE-2026-31554", "author_name": "Peter Zijlstra", "author_email": "peterz@infradead.org", "fix_sha": "19f94b39058681dec64a10ebeb6f23fe7fc3f77a", "subject": "futex: Require sys_futex_requeue() to have identical flags", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31554", "commit_url": "https://git.kernel.org/stable/c/19f94b39058681dec64a10ebeb6f23fe7fc3f77a" }, { "cve": "CVE-2026-31555", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "210d36d892de5195e6766c45519dfb1e65f3eb83", "subject": "futex: Clear stale exiting pointer in futex_lock_pi() retry path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31555", "commit_url": "https://git.kernel.org/stable/c/210d36d892de5195e6766c45519dfb1e65f3eb83" }, { "cve": "CVE-2026-31556", "author_name": "hongao", "author_email": "hongao@uniontech.com", "fix_sha": "268378b6ad20569af0d1957992de1c8b16c6e900", "subject": "xfs: scrub: unlock dquot before early return in quota scrub", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31556", "commit_url": "https://git.kernel.org/stable/c/268378b6ad20569af0d1957992de1c8b16c6e900" }, { "cve": "CVE-2026-31557", "author_name": "Chaitanya Kulkarni", "author_email": "kch@nvidia.com", "fix_sha": "2922e3507f6d5caa7f1d07f145e186fc6f317a4e", "subject": "nvmet: move async event work off nvmet-wq", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31557", "commit_url": "https://git.kernel.org/stable/c/2922e3507f6d5caa7f1d07f145e186fc6f317a4e" }, { "cve": "CVE-2026-31558", "author_name": "Huacai Chen", "author_email": "chenhuacai@loongson.cn", "fix_sha": "2db06c15d8c7a0ccb6108524e16cd9163753f354", "subject": "LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31558", "commit_url": "https://git.kernel.org/stable/c/2db06c15d8c7a0ccb6108524e16cd9163753f354" }, { "cve": "CVE-2026-31559", "author_name": "Li Jun", "author_email": "lijun01@kylinos.cn", "fix_sha": "3a28daa9b7d7c2ddf2c722e9e95d7e0928bf0cd1", "subject": "LoongArch: Fix missing NULL checks for kstrdup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31559", "commit_url": "https://git.kernel.org/stable/c/3a28daa9b7d7c2ddf2c722e9e95d7e0928bf0cd1" }, { "cve": "CVE-2026-31560", "author_name": "Vladimir Yakovlev", "author_email": "vovchkir@gmail.com", "fix_sha": "3b46d61890632c8f8b117147b6923bff4b42ccb7", "subject": "spi: spi-dw-dma: fix print error log when wait finish transaction", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31560", "commit_url": "https://git.kernel.org/stable/c/3b46d61890632c8f8b117147b6923bff4b42ccb7" }, { "cve": "CVE-2026-31561", "author_name": "Borislav Petkov (AMD)", "author_email": "bp@alien8.de", "fix_sha": "411df123c017169922cc767affce76282b8e6c85", "subject": "x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31561", "commit_url": "https://git.kernel.org/stable/c/411df123c017169922cc767affce76282b8e6c85" }, { "cve": "CVE-2026-31562", "author_name": "Luca Leonardo Scorcia", "author_email": "l.scorcia@gmail.com", "fix_sha": "4cfdfeb6ac06079f92fccd977fa742d6c5b8dd3a", "subject": "drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31562", "commit_url": "https://git.kernel.org/stable/c/4cfdfeb6ac06079f92fccd977fa742d6c5b8dd3a" }, { "cve": "CVE-2026-31563", "author_name": "Kevin Hao", "author_email": "haokexin@gmail.com", "fix_sha": "647b8a2fe474474704110db6bd07f7a139e621eb", "subject": "net: macb: Use dev_consume_skb_any() to free TX SKBs", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31563", "commit_url": "https://git.kernel.org/stable/c/647b8a2fe474474704110db6bd07f7a139e621eb" }, { "cve": "CVE-2026-31564", "author_name": "Bibo Mao", "author_email": "maobibo@loongson.cn", "fix_sha": "6bcfb7f46d667b04bd1a1169ccedf5fb699c60df", "subject": "LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31564", "commit_url": "https://git.kernel.org/stable/c/6bcfb7f46d667b04bd1a1169ccedf5fb699c60df" }, { "cve": "CVE-2026-31565", "author_name": "Anil Samal", "author_email": "anil.samal@intel.com", "fix_sha": "6f52370970ac07d352a7af4089e55e0e6425f827", "subject": "RDMA/irdma: Fix deadlock during netdev reset with active connections", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31565", "commit_url": "https://git.kernel.org/stable/c/6f52370970ac07d352a7af4089e55e0e6425f827" }, { "cve": "CVE-2026-31566", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "7150850146ebfa4ca998f653f264b8df6f7f85be", "subject": "drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31566", "commit_url": "https://git.kernel.org/stable/c/7150850146ebfa4ca998f653f264b8df6f7f85be" }, { "cve": "CVE-2026-31567", "author_name": "Youngjun Park", "author_email": "youngjun.park@lge.com", "fix_sha": "a8d51efb5929ae308895455a3e496b5eca2cd143", "subject": "PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31567", "commit_url": "https://git.kernel.org/stable/c/a8d51efb5929ae308895455a3e496b5eca2cd143" }, { "cve": "CVE-2026-31568", "author_name": "Janosch Frank", "author_email": "frankja@linux.ibm.com", "fix_sha": "b00be77302d7ec4ad0367bb236494fce7172b730", "subject": "s390/mm: Add missing secure storage access fixups for donated memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31568", "commit_url": "https://git.kernel.org/stable/c/b00be77302d7ec4ad0367bb236494fce7172b730" }, { "cve": "CVE-2026-31569", "author_name": "Huacai Chen", "author_email": "chenhuacai@loongson.cn", "fix_sha": "b97bd69eb0f67b5f961b304d28e9ba45e202d841", "subject": "LoongArch: KVM: Handle the case that EIOINTC's coremap is empty", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31569", "commit_url": "https://git.kernel.org/stable/c/b97bd69eb0f67b5f961b304d28e9ba45e202d841" }, { "cve": "CVE-2026-31570", "author_name": "Ali Norouzi", "author_email": "ali.norouzi@keysight.com", "fix_sha": "b9c310d72783cc2f30d103eed83920a5a29c671a", "subject": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31570", "commit_url": "https://git.kernel.org/stable/c/b9c310d72783cc2f30d103eed83920a5a29c671a" }, { "cve": "CVE-2026-31571", "author_name": "Ville Syrj\u00e4l\u00e4", "author_email": "ville.syrjala@linux.intel.com", "fix_sha": "bfa71b7a9dc6b5b8af157686e03308291141d00c", "subject": "drm/i915: Unlink NV12 planes earlier", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31571", "commit_url": "https://git.kernel.org/stable/c/bfa71b7a9dc6b5b8af157686e03308291141d00c" }, { "cve": "CVE-2026-31572", "author_name": "Pratap Nirujogi", "author_email": "pratap.nirujogi@amd.com", "fix_sha": "e2f1ada8e089dd5a331bcd8b88125ae2af8d188f", "subject": "i2c: designware: amdisp: Fix resume-probe race condition issue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31572", "commit_url": "https://git.kernel.org/stable/c/e2f1ada8e089dd5a331bcd8b88125ae2af8d188f" }, { "cve": "CVE-2026-31573", "author_name": "Ming Qian", "author_email": "ming.qian@oss.nxp.com", "fix_sha": "e8d97c270cb46a2a88739019d0f8547adc7d97da", "subject": "media: verisilicon: Fix kernel panic due to __initconst misuse", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31573", "commit_url": "https://git.kernel.org/stable/c/e8d97c270cb46a2a88739019d0f8547adc7d97da" }, { "cve": "CVE-2026-31574", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "4096fd0e8eaea13ebe5206700b33f49635ae18e5", "subject": "clockevents: Add missing resets of the next_event_forced flag", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31574", "commit_url": "https://git.kernel.org/stable/c/4096fd0e8eaea13ebe5206700b33f49635ae18e5" }, { "cve": "CVE-2026-31575", "author_name": "Jianhui Zhou", "author_email": "jianhuizzzzz@gmail.com", "fix_sha": "0217c7fb4de4a40cee667eb21901f3204effe5ac", "subject": "mm/userfaultfd: fix hugetlb fault mutex hash calculation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31575", "commit_url": "https://git.kernel.org/stable/c/0217c7fb4de4a40cee667eb21901f3204effe5ac" }, { "cve": "CVE-2026-31576", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "3b7da2b4d0fe014eff181ed37e3bf832eb8ed258", "subject": "media: hackrf: fix to not free memory after the device is registered in hackrf_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31576", "commit_url": "https://git.kernel.org/stable/c/3b7da2b4d0fe014eff181ed37e3bf832eb8ed258" }, { "cve": "CVE-2026-31577", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "4a4e0328edd9e9755843787d28f16dd4165f8b48", "subject": "nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31577", "commit_url": "https://git.kernel.org/stable/c/4a4e0328edd9e9755843787d28f16dd4165f8b48" }, { "cve": "CVE-2026-31578", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c", "subject": "media: as102: fix to not free memory after the device is registered in as102_usb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31578", "commit_url": "https://git.kernel.org/stable/c/8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c" }, { "cve": "CVE-2026-31579", "author_name": "Shardul Bankar", "author_email": "shardul.b@mpiricsoftware.com", "fix_sha": "60a25ef8dacb3566b1a8c4de00572a498e2a3bf9", "subject": "wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31579", "commit_url": "https://git.kernel.org/stable/c/60a25ef8dacb3566b1a8c4de00572a498e2a3bf9" }, { "cve": "CVE-2026-31580", "author_name": "Mingzhe Zou", "author_email": "mingzhe.zou@easystack.cn", "fix_sha": "fec114a98b8735ee89c75216c45a78e28be0f128", "subject": "bcache: fix cached_dev.sb_bio use-after-free and crash", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31580", "commit_url": "https://git.kernel.org/stable/c/fec114a98b8735ee89c75216c45a78e28be0f128" }, { "cve": "CVE-2026-31581", "author_name": "Berk Cem Goksel", "author_email": "berkcgoksel@gmail.com", "fix_sha": "b9c826916fdce6419b94eb0cd8810fdac18c2386", "subject": "ALSA: 6fire: fix use-after-free on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31581", "commit_url": "https://git.kernel.org/stable/c/b9c826916fdce6419b94eb0cd8810fdac18c2386" }, { "cve": "CVE-2026-31582", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "08e57f5e1a9067d5fbf33993aa7f51d60b3d13a4", "subject": "hwmon: (powerz) Fix use-after-free on USB disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31582", "commit_url": "https://git.kernel.org/stable/c/08e57f5e1a9067d5fbf33993aa7f51d60b3d13a4" }, { "cve": "CVE-2026-31583", "author_name": "Abhishek Kumar", "author_email": "abhishek_sts8@yahoo.com", "fix_sha": "a66485a934c7187ae8e36517d40615fa2e961cff", "subject": "media: em28xx: fix use-after-free in em28xx_v4l2_open()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31583", "commit_url": "https://git.kernel.org/stable/c/a66485a934c7187ae8e36517d40615fa2e961cff" }, { "cve": "CVE-2026-31584", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "76e35091ffc722ba39b303e48bc5d08abb59dd56", "subject": "media: mediatek: vcodec: fix use-after-free in encoder release path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31584", "commit_url": "https://git.kernel.org/stable/c/76e35091ffc722ba39b303e48bc5d08abb59dd56" }, { "cve": "CVE-2026-31585", "author_name": "Ruslan Valiyev", "author_email": "linuxoid@gmail.com", "fix_sha": "a0e5a598fe9a4612b852406b51153b881592aede", "subject": "media: vidtv: fix nfeeds state corruption on start_streaming failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31585", "commit_url": "https://git.kernel.org/stable/c/a0e5a598fe9a4612b852406b51153b881592aede" }, { "cve": "CVE-2026-31586", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "8f5857be99f1ed1fa80991c72449541f634626ee", "subject": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31586", "commit_url": "https://git.kernel.org/stable/c/8f5857be99f1ed1fa80991c72449541f634626ee" }, { "cve": "CVE-2026-31587", "author_name": "Srinivas Kandagatla", "author_email": "srinivas.kandagatla@oss.qualcomm.com", "fix_sha": "6ec1235fc941dac6c011b30ee01d9220ff87e0cd", "subject": "ASoC: qcom: q6apm: move component registration to unmanaged version", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31587", "commit_url": "https://git.kernel.org/stable/c/6ec1235fc941dac6c011b30ee01d9220ff87e0cd" }, { "cve": "CVE-2026-31588", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "0b16e69d17d8c35c5c9d5918bf596c75a44655d3", "subject": "KVM: x86: Use scratch field in MMIO fragment to hold small write values", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31588", "commit_url": "https://git.kernel.org/stable/c/0b16e69d17d8c35c5c9d5918bf596c75a44655d3" }, { "cve": "CVE-2026-31589", "author_name": "Matthew Wilcox (Oracle)", "author_email": "willy@infradead.org", "fix_sha": "615d9bb2ccad42f9e21d837431e401db2e471195", "subject": "mm: call ->free_folio() directly in folio_unmap_invalidate()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31589", "commit_url": "https://git.kernel.org/stable/c/615d9bb2ccad42f9e21d837431e401db2e471195" }, { "cve": "CVE-2026-31590", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "8acffeef5ef720c35e513e322ab08e32683f32f2", "subject": "KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31590", "commit_url": "https://git.kernel.org/stable/c/8acffeef5ef720c35e513e322ab08e32683f32f2" }, { "cve": "CVE-2026-31591", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "cb923ee6a80f4e604e6242a4702b59251e61a380", "subject": "KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31591", "commit_url": "https://git.kernel.org/stable/c/cb923ee6a80f4e604e6242a4702b59251e61a380" }, { "cve": "CVE-2026-31592", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "b6408b6cec5df76a165575777800ef2aba12b109", "subject": "KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31592", "commit_url": "https://git.kernel.org/stable/c/b6408b6cec5df76a165575777800ef2aba12b109" }, { "cve": "CVE-2026-31593", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "9b9f7962e3e879d12da2bf47e02a24ec51690e3d", "subject": "KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31593", "commit_url": "https://git.kernel.org/stable/c/9b9f7962e3e879d12da2bf47e02a24ec51690e3d" }, { "cve": "CVE-2026-31594", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "0da63230d3ec1ec5fcc443a2314233e95bfece54", "subject": "PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31594", "commit_url": "https://git.kernel.org/stable/c/0da63230d3ec1ec5fcc443a2314233e95bfece54" }, { "cve": "CVE-2026-31595", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "d799984233a50abd2667a7d17a9a710a3f10ebe2", "subject": "PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31595", "commit_url": "https://git.kernel.org/stable/c/d799984233a50abd2667a7d17a9a710a3f10ebe2" }, { "cve": "CVE-2026-31596", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "4a1c0ddc6e7bcf2e9db0eeaab9340dcfe97f448f", "subject": "ocfs2: handle invalid dinode in ocfs2_group_extend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31596", "commit_url": "https://git.kernel.org/stable/c/4a1c0ddc6e7bcf2e9db0eeaab9340dcfe97f448f" }, { "cve": "CVE-2026-31597", "author_name": "Tejas Bharambe", "author_email": "tejas.bharambe@outlook.com", "fix_sha": "7de554cabf160e331e4442e2a9ad874ca9875921", "subject": "ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31597", "commit_url": "https://git.kernel.org/stable/c/7de554cabf160e331e4442e2a9ad874ca9875921" }, { "cve": "CVE-2026-31598", "author_name": "Joseph Qi", "author_email": "joseph.qi@linux.alibaba.com", "fix_sha": "b02da26a992db0c0e2559acbda0fc48d4a2fd337", "subject": "ocfs2: fix possible deadlock between unlink and dio_end_io_write", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31598", "commit_url": "https://git.kernel.org/stable/c/b02da26a992db0c0e2559acbda0fc48d4a2fd337" }, { "cve": "CVE-2026-31599", "author_name": "Ruslan Valiyev", "author_email": "linuxoid@gmail.com", "fix_sha": "f8e1fc918a9fe67103bcda01d20d745f264d00a7", "subject": "media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31599", "commit_url": "https://git.kernel.org/stable/c/f8e1fc918a9fe67103bcda01d20d745f264d00a7" }, { "cve": "CVE-2026-31600", "author_name": "Ryan Roberts", "author_email": "ryan.roberts@arm.com", "fix_sha": "15bfba1ad77fad8e45a37aae54b3c813b33fe27c", "subject": "arm64: mm: Handle invalid large leaf mappings correctly", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31600", "commit_url": "https://git.kernel.org/stable/c/15bfba1ad77fad8e45a37aae54b3c813b33fe27c" }, { "cve": "CVE-2026-31601", "author_name": "Micha\u0142 Winiarski", "author_email": "michal.winiarski@intel.com", "fix_sha": "1b81ed612e12ea9df8c5cb6f0ddd4419fd0b8ac8", "subject": "vfio/xe: Reorganize the init to decouple migration from reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31601", "commit_url": "https://git.kernel.org/stable/c/1b81ed612e12ea9df8c5cb6f0ddd4419fd0b8ac8" }, { "cve": "CVE-2026-31602", "author_name": "Harin Lee", "author_email": "me@harin.net", "fix_sha": "e9418da50d9e5c496c22fe392e4ad74c038a94eb", "subject": "ALSA: ctxfi: Limit PTP to a single page", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31602", "commit_url": "https://git.kernel.org/stable/c/e9418da50d9e5c496c22fe392e4ad74c038a94eb" }, { "cve": "CVE-2026-31603", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "75a1621e4f91310673c9acbcbb25c2a7ff821cd3", "subject": "staging: sm750fb: fix division by zero in ps_to_hz()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31603", "commit_url": "https://git.kernel.org/stable/c/75a1621e4f91310673c9acbcbb25c2a7ff821cd3" }, { "cve": "CVE-2026-31604", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "bbb15e71156cd9f5e1869eee7207a06ea8e96c39", "subject": "wifi: rtw88: fix device leak on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31604", "commit_url": "https://git.kernel.org/stable/c/bbb15e71156cd9f5e1869eee7207a06ea8e96c39" }, { "cve": "CVE-2026-31605", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "a31e4518bec70333a0a98f2946a12b53b45fe5b9", "subject": "fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31605", "commit_url": "https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9" }, { "cve": "CVE-2026-31606", "author_name": "Michael Zimmermann", "author_email": "sigmaepsilon92@gmail.com", "fix_sha": "81ebd43cc0d6d106ce7b6ccbf7b5e40ca7f5503d", "subject": "usb: gadget: f_hid: don't call cdev_init while cdev in use", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31606", "commit_url": "https://git.kernel.org/stable/c/81ebd43cc0d6d106ce7b6ccbf7b5e40ca7f5503d" }, { "cve": "CVE-2026-31607", "author_name": "Nathan Rebello", "author_email": "nathan.c.rebello@gmail.com", "fix_sha": "2ab833a16a825373aad2ba7d54b572b277e95b71", "subject": "usbip: validate number_of_packets in usbip_pack_ret_submit()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31607", "commit_url": "https://git.kernel.org/stable/c/2ab833a16a825373aad2ba7d54b572b277e95b71" }, { "cve": "CVE-2026-31608", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "84ff995ae826aa6bbcc6c7b9ea569ff67c021d72", "subject": "smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31608", "commit_url": "https://git.kernel.org/stable/c/84ff995ae826aa6bbcc6c7b9ea569ff67c021d72" }, { "cve": "CVE-2026-31609", "author_name": "Stefan Metzmacher", "author_email": "metze@samba.org", "fix_sha": "27b7c3e916218b5eb2ee350211140e961bfc49be", "subject": "smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31609", "commit_url": "https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be" }, { "cve": "CVE-2026-31610", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "ad0057fb91218914d6c98268718ceb9d59b388e1", "subject": "ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31610", "commit_url": "https://git.kernel.org/stable/c/ad0057fb91218914d6c98268718ceb9d59b388e1" }, { "cve": "CVE-2026-31611", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "53370cf9090777774e07fd9a8ebce67c6cc333ab", "subject": "ksmbd: require 3 sub-authorities before reading sub_auth[2]", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31611", "commit_url": "https://git.kernel.org/stable/c/53370cf9090777774e07fd9a8ebce67c6cc333ab" }, { "cve": "CVE-2026-31612", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "66751841212c2cc196577453c37f7774ff363f02", "subject": "ksmbd: validate EaNameLength in smb2_get_ea()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31612", "commit_url": "https://git.kernel.org/stable/c/66751841212c2cc196577453c37f7774ff363f02" }, { "cve": "CVE-2026-31613", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "3df690bba28edec865cf7190be10708ad0ddd67e", "subject": "smb: client: fix OOB reads parsing symlink error response", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31613", "commit_url": "https://git.kernel.org/stable/c/3df690bba28edec865cf7190be10708ad0ddd67e" }, { "cve": "CVE-2026-31614", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "3d8b9d06bd3ac4c6846f5498800b0f5f8062e53b", "subject": "smb: client: fix off-by-8 bounds check in check_wsl_eas()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31614", "commit_url": "https://git.kernel.org/stable/c/3d8b9d06bd3ac4c6846f5498800b0f5f8062e53b" }, { "cve": "CVE-2026-31615", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "f880aac8a57ebd92abfa685d45424b2998ac1059", "subject": "usb: gadget: renesas_usb3: validate endpoint index in standard request handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31615", "commit_url": "https://git.kernel.org/stable/c/f880aac8a57ebd92abfa685d45424b2998ac1059" }, { "cve": "CVE-2026-31616", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "c088d5dd2fffb4de1fb8e7f57751c8b82942180a", "subject": "usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31616", "commit_url": "https://git.kernel.org/stable/c/c088d5dd2fffb4de1fb8e7f57751c8b82942180a" }, { "cve": "CVE-2026-31617", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "8f993d30b95dc9557a8a96ceca11abed674c8acb", "subject": "usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31617", "commit_url": "https://git.kernel.org/stable/c/8f993d30b95dc9557a8a96ceca11abed674c8acb" }, { "cve": "CVE-2026-31618", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "8f98b81fe011e1879e6a7b1247e69e06a5e17af2", "subject": "fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31618", "commit_url": "https://git.kernel.org/stable/c/8f98b81fe011e1879e6a7b1247e69e06a5e17af2" }, { "cve": "CVE-2026-31619", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "07704bbf36f57e4379e4cadf96410dab14621e3b", "subject": "ALSA: fireworks: bound device-supplied status before string array lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31619", "commit_url": "https://git.kernel.org/stable/c/07704bbf36f57e4379e4cadf96410dab14621e3b" }, { "cve": "CVE-2026-31620", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "48bd344e1040b9f2eb512be73c13f5db83efc191", "subject": "ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31620", "commit_url": "https://git.kernel.org/stable/c/48bd344e1040b9f2eb512be73c13f5db83efc191" }, { "cve": "CVE-2026-31621", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "8b0c25528cb64f71a73b5c0d49cbbcb68540a4ce", "subject": "bnge: return after auxiliary_device_uninit() in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31621", "commit_url": "https://git.kernel.org/stable/c/8b0c25528cb64f71a73b5c0d49cbbcb68540a4ce" }, { "cve": "CVE-2026-31622", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "46ce8be2ced389bccd84bcc04a12cf2f4d0c22d1", "subject": "NFC: digital: Bounds check NFC-A cascade depth in SDD response handler", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31622", "commit_url": "https://git.kernel.org/stable/c/46ce8be2ced389bccd84bcc04a12cf2f4d0c22d1" }, { "cve": "CVE-2026-31623", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "600dc40554dc5ad1e6f3af51f700228033f43ea7", "subject": "net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31623", "commit_url": "https://git.kernel.org/stable/c/600dc40554dc5ad1e6f3af51f700228033f43ea7" }, { "cve": "CVE-2026-31624", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "69c02ffde6ed4d535fa4e693a9e572729cad3d0d", "subject": "HID: core: clamp report_size in s32ton() to avoid undefined shift", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31624", "commit_url": "https://git.kernel.org/stable/c/69c02ffde6ed4d535fa4e693a9e572729cad3d0d" }, { "cve": "CVE-2026-31625", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "1badfc4319224820d5d890f8eab6aa52e4e83339", "subject": "HID: alps: fix NULL pointer dereference in alps_raw_event()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31625", "commit_url": "https://git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339" }, { "cve": "CVE-2026-31626", "author_name": "Lin YuChen", "author_email": "starpt.official@gmail.com", "fix_sha": "8c964b82a4e97ec7f25e17b803ee196009b38a57", "subject": "staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31626", "commit_url": "https://git.kernel.org/stable/c/8c964b82a4e97ec7f25e17b803ee196009b38a57" }, { "cve": "CVE-2026-31627", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "c0128c7157d639a931353ea344fb44aad6d6e17a", "subject": "i2c: s3c24xx: check the size of the SMBUS message before using it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31627", "commit_url": "https://git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a" }, { "cve": "CVE-2026-31628", "author_name": "Borislav Petkov (AMD)", "author_email": "bp@alien8.de", "fix_sha": "e55d98e7756135f32150b9b8f75d580d0d4b2dd3", "subject": "x86/CPU: Fix FPDSS on Zen1", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31628", "commit_url": "https://git.kernel.org/stable/c/e55d98e7756135f32150b9b8f75d580d0d4b2dd3" }, { "cve": "CVE-2026-31629", "author_name": "Junxi Qian", "author_email": "qjx1298677004@gmail.com", "fix_sha": "2b5dd4632966c39da6ba74dbc8689b309065e82c", "subject": "nfc: llcp: add missing return after LLCP_CLOSED checks", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31629", "commit_url": "https://git.kernel.org/stable/c/2b5dd4632966c39da6ba74dbc8689b309065e82c" }, { "cve": "CVE-2026-31630", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "a44ce6aa2efb61fe44f2cfab72bb01544bbca272", "subject": "rxrpc: proc: size address buffers for %pISpc output", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31630", "commit_url": "https://git.kernel.org/stable/c/a44ce6aa2efb61fe44f2cfab72bb01544bbca272" }, { "cve": "CVE-2026-31631", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "f564af387c8c28238f8ebc13314c589d7ba8475d", "subject": "rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31631", "commit_url": "https://git.kernel.org/stable/c/f564af387c8c28238f8ebc13314c589d7ba8475d" }, { "cve": "CVE-2026-31632", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "7e1876caa8363056f58a21d3b31b82c2daf7e608", "subject": "rxrpc: Fix leak of rxgk context in rxgk_verify_response()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31632", "commit_url": "https://git.kernel.org/stable/c/7e1876caa8363056f58a21d3b31b82c2daf7e608" }, { "cve": "CVE-2026-31633", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "699e52180f4231c257821c037ed5c99d5eb0edb8", "subject": "rxrpc: Fix integer overflow in rxgk_verify_response()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31633", "commit_url": "https://git.kernel.org/stable/c/699e52180f4231c257821c037ed5c99d5eb0edb8" }, { "cve": "CVE-2026-31634", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "f125846ee79fcae537a964ce66494e96fa54a6de", "subject": "rxrpc: fix reference count leak in rxrpc_server_keyring()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31634", "commit_url": "https://git.kernel.org/stable/c/f125846ee79fcae537a964ce66494e96fa54a6de" }, { "cve": "CVE-2026-31635", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "a2567217ade970ecc458144b6be469bc015b23e5", "subject": "rxrpc: fix oversized RESPONSE authenticator length check", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31635", "commit_url": "https://git.kernel.org/stable/c/a2567217ade970ecc458144b6be469bc015b23e5" }, { "cve": "CVE-2026-31636", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "3e3138007887504ee9206d0bfb5acb062c600025", "subject": "rxrpc: fix RESPONSE authenticator parser OOB read", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31636", "commit_url": "https://git.kernel.org/stable/c/3e3138007887504ee9206d0bfb5acb062c600025" }, { "cve": "CVE-2026-31637", "author_name": "Yuqi Xu", "author_email": "xuyuqiabc@gmail.com", "fix_sha": "fe4447cd95623b1cfacc15f280aab73a6d7340b2", "subject": "rxrpc: reject undecryptable rxkad response tickets", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31637", "commit_url": "https://git.kernel.org/stable/c/fe4447cd95623b1cfacc15f280aab73a6d7340b2" }, { "cve": "CVE-2026-31638", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "6331f1b24a3e85465f6454e003a3e6c22005a5c5", "subject": "rxrpc: Only put the call ref if one was acquired", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31638", "commit_url": "https://git.kernel.org/stable/c/6331f1b24a3e85465f6454e003a3e6c22005a5c5" }, { "cve": "CVE-2026-31639", "author_name": "Anderson Nascimento", "author_email": "anderson@allelesecurity.com", "fix_sha": "d666540d217e8d420544ebdfbadeedd623562733", "subject": "rxrpc: Fix key reference count leak from call->key", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31639", "commit_url": "https://git.kernel.org/stable/c/d666540d217e8d420544ebdfbadeedd623562733" }, { "cve": "CVE-2026-31640", "author_name": "Alok Tiwari", "author_email": "alok.a.tiwari@oracle.com", "fix_sha": "b33f5741bb187db8ff32e8f5b96def77cc94dfca", "subject": "rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31640", "commit_url": "https://git.kernel.org/stable/c/b33f5741bb187db8ff32e8f5b96def77cc94dfca" }, { "cve": "CVE-2026-31641", "author_name": "Oleh Konko", "author_email": "security@1seal.org", "fix_sha": "d179a868dd755b0cfcf7582e00943d702b9943b8", "subject": "rxrpc: Fix RxGK token loading to check bounds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31641", "commit_url": "https://git.kernel.org/stable/c/d179a868dd755b0cfcf7582e00943d702b9943b8" }, { "cve": "CVE-2026-31642", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "146d4ab94cf129ee06cd467cb5c71368a6b5bad6", "subject": "rxrpc: Fix call removal to use RCU safe deletion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31642", "commit_url": "https://git.kernel.org/stable/c/146d4ab94cf129ee06cd467cb5c71368a6b5bad6" }, { "cve": "CVE-2026-31643", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "b555912b9b21075e8298015f888ffe3ff60b1a97", "subject": "rxrpc: Fix key parsing memleak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31643", "commit_url": "https://git.kernel.org/stable/c/b555912b9b21075e8298015f888ffe3ff60b1a97" }, { "cve": "CVE-2026-31644", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "59c3d55a946cacdb4181600723c20ac4f4c20c84", "subject": "net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31644", "commit_url": "https://git.kernel.org/stable/c/59c3d55a946cacdb4181600723c20ac4f4c20c84" }, { "cve": "CVE-2026-31645", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "076344a6ad9d1308faaed1402fdcfdda68b604ab", "subject": "net: lan966x: fix page pool leak in error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31645", "commit_url": "https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604ab" }, { "cve": "CVE-2026-31646", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "3fd0da4fd8851a7e62d009b7db6c4a05b092bc19", "subject": "net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31646", "commit_url": "https://git.kernel.org/stable/c/3fd0da4fd8851a7e62d009b7db6c4a05b092bc19" }, { "cve": "CVE-2026-31647", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "591478118293c1bd628de330a99eb1eb2ef8d76b", "subject": "idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31647", "commit_url": "https://git.kernel.org/stable/c/591478118293c1bd628de330a99eb1eb2ef8d76b" }, { "cve": "CVE-2026-31648", "author_name": "Baolin Wang", "author_email": "baolin.wang@linux.alibaba.com", "fix_sha": "f58df566524ebcdfa394329c64f47e3c9257516e", "subject": "mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31648", "commit_url": "https://git.kernel.org/stable/c/f58df566524ebcdfa394329c64f47e3c9257516e" }, { "cve": "CVE-2026-31649", "author_name": "Tyllis Xu", "author_email": "livelycarpet87@gmail.com", "fix_sha": "51f4e090b9f87b40c21b6daadb5c06e6c0a07b67", "subject": "net: stmmac: fix integer underflow in chain mode", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31649", "commit_url": "https://git.kernel.org/stable/c/51f4e090b9f87b40c21b6daadb5c06e6c0a07b67" }, { "cve": "CVE-2026-31650", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "8f4d20a710225ec7a565f6a0459862d3b1f32330", "subject": "mmc: vub300: fix use-after-free on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31650", "commit_url": "https://git.kernel.org/stable/c/8f4d20a710225ec7a565f6a0459862d3b1f32330" }, { "cve": "CVE-2026-31651", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "dff34ef879c5e73298443956a8b391311ba78d57", "subject": "mmc: vub300: fix NULL-deref on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31651", "commit_url": "https://git.kernel.org/stable/c/dff34ef879c5e73298443956a8b391311ba78d57" }, { "cve": "CVE-2026-31652", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "4c04c6b47c361612b1d70cec8f7a60b1482d1400", "subject": "mm/damon/stat: deallocate damon_call() failure leaking damon_ctx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31652", "commit_url": "https://git.kernel.org/stable/c/4c04c6b47c361612b1d70cec8f7a60b1482d1400" }, { "cve": "CVE-2026-31653", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "0199390a6b92fc21860e1b858abf525c7e73b956", "subject": "mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31653", "commit_url": "https://git.kernel.org/stable/c/0199390a6b92fc21860e1b858abf525c7e73b956" }, { "cve": "CVE-2026-31654", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "894f99eb535edc4514f756818f3c4f688ba53a59", "subject": "mm/vma: fix memory leak in __mmap_region()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31654", "commit_url": "https://git.kernel.org/stable/c/894f99eb535edc4514f756818f3c4f688ba53a59" }, { "cve": "CVE-2026-31655", "author_name": "Jacky Bai", "author_email": "ping.bai@nxp.com", "fix_sha": "e91d5f94acf68618ea3ad9c92ac28614e791ae7d", "subject": "pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31655", "commit_url": "https://git.kernel.org/stable/c/e91d5f94acf68618ea3ad9c92ac28614e791ae7d" }, { "cve": "CVE-2026-31656", "author_name": "Sebastian Brzezinka", "author_email": "sebastian.brzezinka@intel.com", "fix_sha": "4c71fd099513bfa8acab529b626e1f0097b76061", "subject": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31656", "commit_url": "https://git.kernel.org/stable/c/4c71fd099513bfa8acab529b626e1f0097b76061" }, { "cve": "CVE-2026-31657", "author_name": "Haoze Xie", "author_email": "royenheart@gmail.com", "fix_sha": "82d8701b2c930d0e96b0dbc9115a218d791cb0d2", "subject": "batman-adv: hold claim backbone gateways by reference", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31657", "commit_url": "https://git.kernel.org/stable/c/82d8701b2c930d0e96b0dbc9115a218d791cb0d2" }, { "cve": "CVE-2026-31658", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "6dede3967619b5944003227a5d09fdc21ed57d10", "subject": "net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31658", "commit_url": "https://git.kernel.org/stable/c/6dede3967619b5944003227a5d09fdc21ed57d10" }, { "cve": "CVE-2026-31659", "author_name": "Ruide Cao", "author_email": "caoruide123@gmail.com", "fix_sha": "3a359bf5c61d52e7f09754108309d637532164a6", "subject": "batman-adv: reject oversized global TT response buffers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31659", "commit_url": "https://git.kernel.org/stable/c/3a359bf5c61d52e7f09754108309d637532164a6" }, { "cve": "CVE-2026-31660", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "c71ba669b570c7b3f86ec875be222ea11dacb352", "subject": "nfc: pn533: allocate rx skb before consuming bytes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31660", "commit_url": "https://git.kernel.org/stable/c/c71ba669b570c7b3f86ec875be222ea11dacb352" }, { "cve": "CVE-2026-31661", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "12cd7632757a54ce586e36040210b1a738a0fc53", "subject": "wifi: brcmsmac: Fix dma_free_coherent() size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31661", "commit_url": "https://git.kernel.org/stable/c/12cd7632757a54ce586e36040210b1a738a0fc53" }, { "cve": "CVE-2026-31662", "author_name": "Oleh Konko", "author_email": "security@1seal.org", "fix_sha": "48a5fe38772b6f039522469ee6131a67838221a8", "subject": "tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31662", "commit_url": "https://git.kernel.org/stable/c/48a5fe38772b6f039522469ee6131a67838221a8" }, { "cve": "CVE-2026-31663", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "1c428b03840094410c5fb6a5db30640486bbbfcb", "subject": "xfrm: hold dev ref until after transport_finish NF_HOOK", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31663", "commit_url": "https://git.kernel.org/stable/c/1c428b03840094410c5fb6a5db30640486bbbfcb" }, { "cve": "CVE-2026-31664", "author_name": "Yasuaki Torimaru", "author_email": "yasuakitorimaru@gmail.com", "fix_sha": "71a98248c63c535eaa4d4c22f099b68d902006d0", "subject": "xfrm: clear trailing padding in build_polexpire()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31664", "commit_url": "https://git.kernel.org/stable/c/71a98248c63c535eaa4d4c22f099b68d902006d0" }, { "cve": "CVE-2026-31665", "author_name": "Tuan Do", "author_email": "tuan@calif.io", "fix_sha": "f8dca15a1b190787bbd03285304b569631160eda", "subject": "netfilter: nft_ct: fix use-after-free in timeout object destroy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31665", "commit_url": "https://git.kernel.org/stable/c/f8dca15a1b190787bbd03285304b569631160eda" }, { "cve": "CVE-2026-31666", "author_name": "robbieko", "author_email": "robbieko@synology.com", "fix_sha": "316fb1b3169efb081d2db910cbbfef445afa03b9", "subject": "btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31666", "commit_url": "https://git.kernel.org/stable/c/316fb1b3169efb081d2db910cbbfef445afa03b9" }, { "cve": "CVE-2026-31667", "author_name": "Mikhail Gavrilov", "author_email": "mikhail.v.gavrilov@gmail.com", "fix_sha": "4cda78d6f8bf2b700529f2fbccb994c3e826d7c2", "subject": "Input: uinput - fix circular locking dependency with ff-core", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31667", "commit_url": "https://git.kernel.org/stable/c/4cda78d6f8bf2b700529f2fbccb994c3e826d7c2" }, { "cve": "CVE-2026-31668", "author_name": "Andrea Mayer", "author_email": "andrea.mayer@uniroma2.it", "fix_sha": "c3812651b522fe8437ebb7063b75ddb95b571643", "subject": "seg6: separate dst_cache for input and output paths in seg6 lwtunnel", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31668", "commit_url": "https://git.kernel.org/stable/c/c3812651b522fe8437ebb7063b75ddb95b571643" }, { "cve": "CVE-2026-31669", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "9b55b253907e7431210483519c5ad711a37dafa1", "subject": "mptcp: fix slab-use-after-free in __inet_lookup_established", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31669", "commit_url": "https://git.kernel.org/stable/c/9b55b253907e7431210483519c5ad711a37dafa1" }, { "cve": "CVE-2026-31670", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "ea245d78dec594372e27d8c79616baf49e98a4a1", "subject": "net: rfkill: prevent unlimited numbers of rfkill events from being created", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31670", "commit_url": "https://git.kernel.org/stable/c/ea245d78dec594372e27d8c79616baf49e98a4a1" }, { "cve": "CVE-2026-31671", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "d10119968d0e1f2b669604baf2a8b5fdb72fa6b4", "subject": "xfrm_user: fix info leak in build_report()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31671", "commit_url": "https://git.kernel.org/stable/c/d10119968d0e1f2b669604baf2a8b5fdb72fa6b4" }, { "cve": "CVE-2026-31672", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "25369b22223d1c56e42a0cd4ac9137349d5a898e", "subject": "wifi: rt2x00usb: fix devres lifetime", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31672", "commit_url": "https://git.kernel.org/stable/c/25369b22223d1c56e42a0cd4ac9137349d5a898e" }, { "cve": "CVE-2026-31673", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "39897df386376912d561d4946499379effa1e7ef", "subject": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31673", "commit_url": "https://git.kernel.org/stable/c/39897df386376912d561d4946499379effa1e7ef" }, { "cve": "CVE-2026-31674", "author_name": "Ren Wei", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "9d3f027327c2fa265f7f85ead41294792c3296ed", "subject": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31674", "commit_url": "https://git.kernel.org/stable/c/9d3f027327c2fa265f7f85ead41294792c3296ed" }, { "cve": "CVE-2026-31675", "author_name": "Yucheng Lu", "author_email": "kanolyc@gmail.com", "fix_sha": "d64cb81dcbd54927515a7f65e5e24affdc73c14b", "subject": "net/sched: sch_netem: fix out-of-bounds access in packet corruption", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31675", "commit_url": "https://git.kernel.org/stable/c/d64cb81dcbd54927515a7f65e5e24affdc73c14b" }, { "cve": "CVE-2026-31676", "author_name": "Wang Jie", "author_email": "jiewang2024@lzu.edu.cn", "fix_sha": "c43ffdcfdbb5567b1f143556df8a04b4eeea041c", "subject": "rxrpc: only handle RESPONSE during service challenge", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31676", "commit_url": "https://git.kernel.org/stable/c/c43ffdcfdbb5567b1f143556df8a04b4eeea041c" }, { "cve": "CVE-2026-31677", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "8eceab19eba9dcbfd2a0daec72e1bf48aa100170", "subject": "crypto: af_alg - limit RX SG extraction by receive buffer budget", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31677", "commit_url": "https://git.kernel.org/stable/c/8eceab19eba9dcbfd2a0daec72e1bf48aa100170" }, { "cve": "CVE-2026-31678", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "6931d21f87bc6d657f145798fad0bf077b82486c", "subject": "openvswitch: defer tunnel netdev_put to RCU release", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31678", "commit_url": "https://git.kernel.org/stable/c/6931d21f87bc6d657f145798fad0bf077b82486c" }, { "cve": "CVE-2026-31679", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "546b68ac893595877ffbd7751e5c55fd1c43ede6", "subject": "openvswitch: validate MPLS set/set_masked payload length", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31679", "commit_url": "https://git.kernel.org/stable/c/546b68ac893595877ffbd7751e5c55fd1c43ede6" }, { "cve": "CVE-2026-31680", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "9ca562bb8e66978b53028fa32b1a190708e6a091", "subject": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31680", "commit_url": "https://git.kernel.org/stable/c/9ca562bb8e66978b53028fa32b1a190708e6a091" }, { "cve": "CVE-2026-31681", "author_name": "Ren Wei", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "ff64c5bfef12461df8450e0f50bb693b5269c720", "subject": "netfilter: xt_multiport: validate range encoding in checkentry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31681", "commit_url": "https://git.kernel.org/stable/c/ff64c5bfef12461df8450e0f50bb693b5269c720" }, { "cve": "CVE-2026-31682", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "a01aee7cafc575bb82f5529e8734e7052f9b16ea", "subject": "bridge: br_nd_send: linearize skb before parsing ND options", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31682", "commit_url": "https://git.kernel.org/stable/c/a01aee7cafc575bb82f5529e8734e7052f9b16ea" }, { "cve": "CVE-2026-31683", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "0d4aef630be9d5f9c1227d07669c26c4383b5ad0", "subject": "batman-adv: avoid OGM aggregation when skb tailroom is insufficient", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31683", "commit_url": "https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0" }, { "cve": "CVE-2026-31684", "author_name": "Ruide Cao", "author_email": "caoruide123@gmail.com", "fix_sha": "c842743d073bdd683606cb414eb0ca84465dd834", "subject": "net: sched: act_csum: validate nested VLAN headers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31684", "commit_url": "https://git.kernel.org/stable/c/c842743d073bdd683606cb414eb0ca84465dd834" }, { "cve": "CVE-2026-31685", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "fdce0b3590f724540795b874b4c8850c90e6b0a8", "subject": "netfilter: ip6t_eui64: reject invalid MAC header for all packets", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31685", "commit_url": "https://git.kernel.org/stable/c/fdce0b3590f724540795b874b4c8850c90e6b0a8" }, { "cve": "CVE-2026-31686", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "51d8c78be0c27ddb91bc2c0263941d8b30a47d3b", "subject": "mm/kasan: fix double free for kasan pXds", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31686", "commit_url": "https://git.kernel.org/stable/c/51d8c78be0c27ddb91bc2c0263941d8b30a47d3b" }, { "cve": "CVE-2026-31687", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "730e5ebff40c852e3ea57b71bf02a4b89c69435f", "subject": "gpio: omap: do not register driver in probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31687", "commit_url": "https://git.kernel.org/stable/c/730e5ebff40c852e3ea57b71bf02a4b89c69435f" }, { "cve": "CVE-2026-31689", "author_name": "Borislav Petkov (AMD)", "author_email": "bp@alien8.de", "fix_sha": "51520e03e70d6c73e33ee7cbe0319767d05764fe", "subject": "EDAC/mc: Fix error path ordering in edac_mc_alloc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31689", "commit_url": "https://git.kernel.org/stable/c/51520e03e70d6c73e33ee7cbe0319767d05764fe" }, { "cve": "CVE-2026-31690", "author_name": "Michal Wilczynski", "author_email": "m.wilczynski@samsung.com", "fix_sha": "88c4bd90725557796c15878b7cb70066e9e6b5ab", "subject": "firmware: thead: Fix buffer overflow and use standard endian macros", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31690", "commit_url": "https://git.kernel.org/stable/c/88c4bd90725557796c15878b7cb70066e9e6b5ab" }, { "cve": "CVE-2026-31691", "author_name": "Alex Dvoretsky", "author_email": "advoretsky@gmail.com", "fix_sha": "b1e067240379f950a0022208e0685f3465c211cb", "subject": "igb: remove napi_synchronize() in igb_down()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31691", "commit_url": "https://git.kernel.org/stable/c/b1e067240379f950a0022208e0685f3465c211cb" }, { "cve": "CVE-2026-31692", "author_name": "Nikolaos Gkarlis", "author_email": "nickgarlis@gmail.com", "fix_sha": "7b735ef81286007794a227ce2539419479c02a5f", "subject": "rtnetlink: add missing netlink_ns_capable() check for peer netns", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31692", "commit_url": "https://git.kernel.org/stable/c/7b735ef81286007794a227ce2539419479c02a5f" }, { "cve": "CVE-2026-31693", "author_name": "Shyam Prasad N", "author_email": "sprasad@microsoft.com", "fix_sha": "14f66f44646333d2bfd7ece36585874fd72f8286", "subject": "cifs: some missing initializations on replay", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31693", "commit_url": "https://git.kernel.org/stable/c/14f66f44646333d2bfd7ece36585874fd72f8286" }, { "cve": "CVE-2026-31694", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "51a8de6c50bf947c8f534cd73da4c8f0a13e7bed", "subject": "fuse: reject oversized dirents in page cache", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31694", "commit_url": "https://git.kernel.org/stable/c/51a8de6c50bf947c8f534cd73da4c8f0a13e7bed" }, { "cve": "CVE-2026-31695", "author_name": "Alexander Popov", "author_email": "alex.popov@linux.com", "fix_sha": "789b06f9f39cdc7e895bdab2c034e39c41c8f8d6", "subject": "wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31695", "commit_url": "https://git.kernel.org/stable/c/789b06f9f39cdc7e895bdab2c034e39c41c8f8d6" }, { "cve": "CVE-2026-31696", "author_name": "Anderson Nascimento", "author_email": "anderson@allelesecurity.com", "fix_sha": "ac33733b10b484d666f97688561670afd5861383", "subject": "rxrpc: Fix missing validation of ticket length in non-XDR key preparsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31696", "commit_url": "https://git.kernel.org/stable/c/ac33733b10b484d666f97688561670afd5861383" }, { "cve": "CVE-2026-31697", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "4f685dbfa87c546e51d9dc6cab379d20f275e114", "subject": "crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31697", "commit_url": "https://git.kernel.org/stable/c/4f685dbfa87c546e51d9dc6cab379d20f275e114" }, { "cve": "CVE-2026-31698", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "e76239fed3cffd6d304d8ca3ce23984fd24f57d3", "subject": "crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31698", "commit_url": "https://git.kernel.org/stable/c/e76239fed3cffd6d304d8ca3ce23984fd24f57d3" }, { "cve": "CVE-2026-31699", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "abe4a6d6f606113251868c2c4a06ba904bb41eed", "subject": "crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31699", "commit_url": "https://git.kernel.org/stable/c/abe4a6d6f606113251868c2c4a06ba904bb41eed" }, { "cve": "CVE-2026-31700", "author_name": "Bingquan Chen", "author_email": "patzilla007@gmail.com", "fix_sha": "2c054e17d9d41f1020376806c7f750834ced4dc5", "subject": "net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31700", "commit_url": "https://git.kernel.org/stable/c/2c054e17d9d41f1020376806c7f750834ced4dc5" }, { "cve": "CVE-2026-31701", "author_name": "Berk Cem Goksel", "author_email": "berkcgoksel@gmail.com", "fix_sha": "80bb50e2d459213cccff3111d5ef98ed4238c0d5", "subject": "ALSA: caiaq: take a reference on the USB device in create_card()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31701", "commit_url": "https://git.kernel.org/stable/c/80bb50e2d459213cccff3111d5ef98ed4238c0d5" }, { "cve": "CVE-2026-31702", "author_name": "George Saad", "author_email": "geoo115@gmail.com", "fix_sha": "39d4ee19c1e7d753dd655aebee632271b171f43a", "subject": "f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31702", "commit_url": "https://git.kernel.org/stable/c/39d4ee19c1e7d753dd655aebee632271b171f43a" }, { "cve": "CVE-2026-31703", "author_name": "Jan Kara", "author_email": "jack@suse.cz", "fix_sha": "6689f01d6740cf358932b3e97ee968c6099800d9", "subject": "writeback: Fix use after free in inode_switch_wbs_work_fn()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31703", "commit_url": "https://git.kernel.org/stable/c/6689f01d6740cf358932b3e97ee968c6099800d9" }, { "cve": "CVE-2026-31704", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "299f962c0b02d048fb45d248b4da493d03f3175d", "subject": "ksmbd: use check_add_overflow() to prevent u16 DACL size overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31704", "commit_url": "https://git.kernel.org/stable/c/299f962c0b02d048fb45d248b4da493d03f3175d" }, { "cve": "CVE-2026-31705", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "30010c952077a1c89ecdd71fc4d574c75a8f5617", "subject": "ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31705", "commit_url": "https://git.kernel.org/stable/c/30010c952077a1c89ecdd71fc4d574c75a8f5617" }, { "cve": "CVE-2026-31706", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3e4e2ea2a781018ed5d75f969e3e5606beb66e48", "subject": "ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31706", "commit_url": "https://git.kernel.org/stable/c/3e4e2ea2a781018ed5d75f969e3e5606beb66e48" }, { "cve": "CVE-2026-31707", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d6a6aa81eac2c9bff66dc6e191179cb69a14426b", "subject": "ksmbd: validate response sizes in ipc_validate_msg()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31707", "commit_url": "https://git.kernel.org/stable/c/d6a6aa81eac2c9bff66dc6e191179cb69a14426b" }, { "cve": "CVE-2026-31708", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a58c5af19ff0d6f44f6e9fe31e33a2c92223f77e", "subject": "smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31708", "commit_url": "https://git.kernel.org/stable/c/a58c5af19ff0d6f44f6e9fe31e33a2c92223f77e" }, { "cve": "CVE-2026-31709", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "0a8cf165566ba55a39fd0f4de172119dd646d39a", "subject": "smb: client: validate the whole DACL before rewriting it in cifsacl", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31709", "commit_url": "https://git.kernel.org/stable/c/0a8cf165566ba55a39fd0f4de172119dd646d39a" }, { "cve": "CVE-2026-31710", "author_name": "Paulo Alcantara", "author_email": "pc@manguebit.org", "fix_sha": "c4d3fc5844d685441befd0caaab648321013cdfd", "subject": "smb: client: fix dir separator in SMB1 UNIX mounts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31710", "commit_url": "https://git.kernel.org/stable/c/c4d3fc5844d685441befd0caaab648321013cdfd" }, { "cve": "CVE-2026-31711", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "6551300dc452ac16a855a83dbd1e74899542d3b3", "subject": "smb: server: fix active_num_conn leak on transport allocation failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31711", "commit_url": "https://git.kernel.org/stable/c/6551300dc452ac16a855a83dbd1e74899542d3b3" }, { "cve": "CVE-2026-31712", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d07b26f39246a82399661936dd0c853983cfade7", "subject": "ksmbd: require minimum ACE size in smb_check_perm_dacl()", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31712", "commit_url": "https://git.kernel.org/stable/c/d07b26f39246a82399661936dd0c853983cfade7" }, { "cve": "CVE-2026-31713", "author_name": "Miklos Szeredi", "author_email": "mszeredi@redhat.com", "fix_sha": "204aa22a686bfee48daca7db620c1e017615f2ff", "subject": "fuse: abort on fatal signal during sync init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31713", "commit_url": "https://git.kernel.org/stable/c/204aa22a686bfee48daca7db620c1e017615f2ff" }, { "cve": "CVE-2026-31714", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "3cf11e6f36c170050c12171dd6fd3142711478fc", "subject": "f2fs: fix to avoid memory leak in f2fs_rename()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31714", "commit_url": "https://git.kernel.org/stable/c/3cf11e6f36c170050c12171dd6fd3142711478fc" }, { "cve": "CVE-2026-31715", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "2d9c4a4ed4eef1f82c5b16b037aee8bad819fd53", "subject": "f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31715", "commit_url": "https://git.kernel.org/stable/c/2d9c4a4ed4eef1f82c5b16b037aee8bad819fd53" }, { "cve": "CVE-2026-31716", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "0ca0485e4b2e837ebb6cbd4f2451aba665a03e4b", "subject": "fs/ntfs3: validate rec->used in journal-replay file record check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31716", "commit_url": "https://git.kernel.org/stable/c/0ca0485e4b2e837ebb6cbd4f2451aba665a03e4b" }, { "cve": "CVE-2026-31717", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "49110a8ce654bbe56bef7c5e44cce31f4b102b8a", "subject": "ksmbd: validate owner of durable handle on reconnect", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31717", "commit_url": "https://git.kernel.org/stable/c/49110a8ce654bbe56bef7c5e44cce31f4b102b8a" }, { "cve": "CVE-2026-31718", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "235e32320a470fcd3998fb3774f2290a0eb302a1", "subject": "ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31718", "commit_url": "https://git.kernel.org/stable/c/235e32320a470fcd3998fb3774f2290a0eb302a1" }, { "cve": "CVE-2026-31719", "author_name": "Dudu Lu", "author_email": "phx0fer@gmail.com", "fix_sha": "3bfbf5f0a99c991769ec562721285df7ab69240b", "subject": "crypto: krb5enc - fix async decrypt skipping hash verification", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31719", "commit_url": "https://git.kernel.org/stable/c/3bfbf5f0a99c991769ec562721285df7ab69240b" }, { "cve": "CVE-2026-31720", "author_name": "Taegu Ha", "author_email": "hataegu0826@gmail.com", "fix_sha": "6e0e34d85cd46ceb37d16054e97a373a32770f6c", "subject": "usb: gadget: f_uac1_legacy: validate control request size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31720", "commit_url": "https://git.kernel.org/stable/c/6e0e34d85cd46ceb37d16054e97a373a32770f6c" }, { "cve": "CVE-2026-31721", "author_name": "Michael Zimmermann", "author_email": "sigmaepsilon92@gmail.com", "fix_sha": "4e0a88254ad59f6c53a34bf5fa241884ec09e8b2", "subject": "usb: gadget: f_hid: move list and spinlock inits from bind to alloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31721", "commit_url": "https://git.kernel.org/stable/c/4e0a88254ad59f6c53a34bf5fa241884ec09e8b2" }, { "cve": "CVE-2026-31722", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "e367599529dc42578545a7f85fde517b35b3cda7", "subject": "usb: gadget: f_rndis: Fix net_device lifecycle with device_move", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31722", "commit_url": "https://git.kernel.org/stable/c/e367599529dc42578545a7f85fde517b35b3cda7" }, { "cve": "CVE-2026-31723", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "06524cd1c9011bee141a87e43ab878641ed3652b", "subject": "usb: gadget: f_subset: Fix net_device lifecycle with device_move", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31723", "commit_url": "https://git.kernel.org/stable/c/06524cd1c9011bee141a87e43ab878641ed3652b" }, { "cve": "CVE-2026-31724", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "d9270c9a8118c1535409db926ac1e2545dc97b81", "subject": "usb: gadget: f_eem: Fix net_device lifecycle with device_move", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31724", "commit_url": "https://git.kernel.org/stable/c/d9270c9a8118c1535409db926ac1e2545dc97b81" }, { "cve": "CVE-2026-31725", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "b2cc4fae67a51f60d81d6af2678696accb07c656", "subject": "usb: gadget: f_ecm: Fix net_device lifecycle with device_move", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31725", "commit_url": "https://git.kernel.org/stable/c/b2cc4fae67a51f60d81d6af2678696accb07c656" }, { "cve": "CVE-2026-31726", "author_name": "Jimmy Hu", "author_email": "hhhuuu@google.com", "fix_sha": "eba2936bbe6b752a31725a9eb5c674ecbf21ee7d", "subject": "usb: gadget: uvc: fix NULL pointer dereference during unbind race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31726", "commit_url": "https://git.kernel.org/stable/c/eba2936bbe6b752a31725a9eb5c674ecbf21ee7d" }, { "cve": "CVE-2026-31727", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "e002e92e88e12457373ed096b18716d97e7bbb20", "subject": "usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31727", "commit_url": "https://git.kernel.org/stable/c/e002e92e88e12457373ed096b18716d97e7bbb20" }, { "cve": "CVE-2026-31728", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "e1eabb072c75681f78312c484ccfffb7430f206e", "subject": "usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31728", "commit_url": "https://git.kernel.org/stable/c/e1eabb072c75681f78312c484ccfffb7430f206e" }, { "cve": "CVE-2026-31729", "author_name": "Nathan Rebello", "author_email": "nathan.c.rebello@gmail.com", "fix_sha": "d2d8c17ac01a1b1f638ea5d340a884ccc5015186", "subject": "usb: typec: ucsi: validate connector number in ucsi_notify_common()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31729", "commit_url": "https://git.kernel.org/stable/c/d2d8c17ac01a1b1f638ea5d340a884ccc5015186" }, { "cve": "CVE-2026-31730", "author_name": "Xingjing Deng", "author_email": "micro6947@gmail.com", "fix_sha": "ba2c83167b215da30fa2aae56b140198cf8d8408", "subject": "misc: fastrpc: possible double-free of cctx->remote_heap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31730", "commit_url": "https://git.kernel.org/stable/c/ba2c83167b215da30fa2aae56b140198cf8d8408" }, { "cve": "CVE-2026-31731", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "45b859b0728267a6199ee5002d62e6c6f3e8c89d", "subject": "thermal: core: Address thermal zone removal races with resume", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31731", "commit_url": "https://git.kernel.org/stable/c/45b859b0728267a6199ee5002d62e6c6f3e8c89d" }, { "cve": "CVE-2026-31732", "author_name": "Tzung-Bi Shih", "author_email": "tzungbi@kernel.org", "fix_sha": "16fdabe143fce2cbf89139677728e17e21b46c28", "subject": "gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31732", "commit_url": "https://git.kernel.org/stable/c/16fdabe143fce2cbf89139677728e17e21b46c28" }, { "cve": "CVE-2026-31733", "author_name": "Andrea Righi", "author_email": "arighi@nvidia.com", "fix_sha": "7e0ffb72de8aa3b25989c2d980e81b829c577010", "subject": "sched_ext: Fix stale direct dispatch state in ddsp_dsq_id", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31733", "commit_url": "https://git.kernel.org/stable/c/7e0ffb72de8aa3b25989c2d980e81b829c577010" }, { "cve": "CVE-2026-31734", "author_name": "Changwoo Min", "author_email": "changwoo@igalia.com", "fix_sha": "0c4a59df370bea245695c00aaae6ae75747139bd", "subject": "sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31734", "commit_url": "https://git.kernel.org/stable/c/0c4a59df370bea245695c00aaae6ae75747139bd" }, { "cve": "CVE-2026-31735", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "ee6e69d032550687a3422504bfca3f834c7b5061", "subject": "iommupt: Fix short gather if the unmap goes into a large mapping", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31735", "commit_url": "https://git.kernel.org/stable/c/ee6e69d032550687a3422504bfca3f834c7b5061" }, { "cve": "CVE-2026-31736", "author_name": "Sven Eckelmann (Plasma Cloud)", "author_email": "se@simonwunderlich.de", "fix_sha": "976ff48c2ac6e6b25b01428c9d7997bcd0fb2949", "subject": "net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31736", "commit_url": "https://git.kernel.org/stable/c/976ff48c2ac6e6b25b01428c9d7997bcd0fb2949" }, { "cve": "CVE-2026-31737", "author_name": "Yufan Chen", "author_email": "yufan.chen@linux.dev", "fix_sha": "c0fd0fe745f5e8c568d898cd1513d0083e46204a", "subject": "net: ftgmac100: fix ring allocation unwind on open failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31737", "commit_url": "https://git.kernel.org/stable/c/c0fd0fe745f5e8c568d898cd1513d0083e46204a" }, { "cve": "CVE-2026-31738", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "afa9a05e6c4971bd5586f1b304e14d61fb3d9385", "subject": "vxlan: validate ND option lengths in vxlan_na_create", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31738", "commit_url": "https://git.kernel.org/stable/c/afa9a05e6c4971bd5586f1b304e14d61fb3d9385" }, { "cve": "CVE-2026-31739", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "4b56770d345524fc2acc143a2b85539cf7d74bc1", "subject": "crypto: tegra - Add missing CRYPTO_ALG_ASYNC", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31739", "commit_url": "https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1" }, { "cve": "CVE-2026-31740", "author_name": "Cosmin Tanislav", "author_email": "cosmin-gabriel.tanislav.xa@renesas.com", "fix_sha": "2932095c114b98cbb40ccf34fc00d613cb17cead", "subject": "counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31740", "commit_url": "https://git.kernel.org/stable/c/2932095c114b98cbb40ccf34fc00d613cb17cead" }, { "cve": "CVE-2026-31741", "author_name": "Cosmin Tanislav", "author_email": "cosmin-gabriel.tanislav.xa@renesas.com", "fix_sha": "67c3f99bed6f422ba343d2b70a2eeeccdfd91bef", "subject": "counter: rz-mtu3-cnt: prevent counter from being toggled multiple times", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31741", "commit_url": "https://git.kernel.org/stable/c/67c3f99bed6f422ba343d2b70a2eeeccdfd91bef" }, { "cve": "CVE-2026-31742", "author_name": "Liav Mordouch", "author_email": "liavmordouch@gmail.com", "fix_sha": "40014493cece72a0be5672cd86763e53fb3ec613", "subject": "vt: discard stale unicode buffer on alt screen exit after resize", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31742", "commit_url": "https://git.kernel.org/stable/c/40014493cece72a0be5672cd86763e53fb3ec613" }, { "cve": "CVE-2026-31743", "author_name": "Ivan Vera", "author_email": "ivanverasantos@gmail.com", "fix_sha": "f9b88613ff402aa6fe8fd020573cb95867ae947e", "subject": "nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31743", "commit_url": "https://git.kernel.org/stable/c/f9b88613ff402aa6fe8fd020573cb95867ae947e" }, { "cve": "CVE-2026-31744", "author_name": "Changwoo Min", "author_email": "changwoo@igalia.com", "fix_sha": "9badc2a84e688be1275bb740942d5f6f51746908", "subject": "PM: EM: Fix NULL pointer dereference when perf domain ID is not found", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31744", "commit_url": "https://git.kernel.org/stable/c/9badc2a84e688be1275bb740942d5f6f51746908" }, { "cve": "CVE-2026-31745", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "fbffb8c7c7bb4d38e9f65e0bee446685011de5d8", "subject": "reset: gpio: fix double free in reset_add_gpio_aux_device() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31745", "commit_url": "https://git.kernel.org/stable/c/fbffb8c7c7bb4d38e9f65e0bee446685011de5d8" }, { "cve": "CVE-2026-31746", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "c8d46f17c2fc7d25c18e60c008928aecab26184d", "subject": "s390/zcrypt: Fix memory leak with CCA cards used as accelerator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31746", "commit_url": "https://git.kernel.org/stable/c/c8d46f17c2fc7d25c18e60c008928aecab26184d" }, { "cve": "CVE-2026-31747", "author_name": "Ian Abbott", "author_email": "abbotti@mev.co.uk", "fix_sha": "3fb43a7a5b44713f892c58ead2e5f3a1bc9f4ee7", "subject": "comedi: me4000: Fix potential overrun of firmware buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31747", "commit_url": "https://git.kernel.org/stable/c/3fb43a7a5b44713f892c58ead2e5f3a1bc9f4ee7" }, { "cve": "CVE-2026-31748", "author_name": "Ian Abbott", "author_email": "abbotti@mev.co.uk", "fix_sha": "cc797d4821c754c701d9714b58bea947e31dbbe0", "subject": "comedi: me_daq: Fix potential overrun of firmware buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31748", "commit_url": "https://git.kernel.org/stable/c/cc797d4821c754c701d9714b58bea947e31dbbe0" }, { "cve": "CVE-2026-31749", "author_name": "Ian Abbott", "author_email": "abbotti@mev.co.uk", "fix_sha": "101ab946b79ad83b36d5cfd47de587492a80acf0", "subject": "comedi: ni_atmio16d: Fix invalid clean-up after failed attach", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31749", "commit_url": "https://git.kernel.org/stable/c/101ab946b79ad83b36d5cfd47de587492a80acf0" }, { "cve": "CVE-2026-31750", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "29f644f14b89e6c4965e3c89251929e451190a66", "subject": "comedi: runflags cannot determine whether to reclaim chanlist", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31750", "commit_url": "https://git.kernel.org/stable/c/29f644f14b89e6c4965e3c89251929e451190a66" }, { "cve": "CVE-2026-31751", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "93853512f565e625df2397f0d8050d6aafd7c3ad", "subject": "comedi: dt2815: add hardware detection to prevent crash", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31751", "commit_url": "https://git.kernel.org/stable/c/93853512f565e625df2397f0d8050d6aafd7c3ad" }, { "cve": "CVE-2026-31752", "author_name": "Yang Yang", "author_email": "n05ec@lzu.edu.cn", "fix_sha": "850837965af15707fd3142c1cf3c5bfaf022299b", "subject": "bridge: br_nd_send: validate ND option lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31752", "commit_url": "https://git.kernel.org/stable/c/850837965af15707fd3142c1cf3c5bfaf022299b" }, { "cve": "CVE-2026-31753", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "7f138de156b20d9f9da6f72f90b63c01941d97d3", "subject": "auxdisplay: line-display: fix NULL dereference in linedisp_release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31753", "commit_url": "https://git.kernel.org/stable/c/7f138de156b20d9f9da6f72f90b63c01941d97d3" }, { "cve": "CVE-2026-31754", "author_name": "Yongchao Wu", "author_email": "yongchao.wu@autochips.com", "fix_sha": "c32f8748d70c8fc77676ad92ed76cede17bf2c48", "subject": "usb: cdns3: gadget: fix state inconsistency on gadget init failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31754", "commit_url": "https://git.kernel.org/stable/c/c32f8748d70c8fc77676ad92ed76cede17bf2c48" }, { "cve": "CVE-2026-31755", "author_name": "Yongchao Wu", "author_email": "yongchao.wu@autochips.com", "fix_sha": "7f6f127b9bc34bed35f56faf7ecb1561d6b39000", "subject": "usb: cdns3: gadget: fix NULL pointer dereference in ep_queue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31755", "commit_url": "https://git.kernel.org/stable/c/7f6f127b9bc34bed35f56faf7ecb1561d6b39000" }, { "cve": "CVE-2026-31756", "author_name": "Juno Choi", "author_email": "juno.choi@lge.com", "fix_sha": "9bb4b5ed7f8c4f95cc556bdf042b0ba2fa13557a", "subject": "usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31756", "commit_url": "https://git.kernel.org/stable/c/9bb4b5ed7f8c4f95cc556bdf042b0ba2fa13557a" }, { "cve": "CVE-2026-31757", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "33cfe0709b6bf1a7f1a16d5e8d65d003a71b6a21", "subject": "usb: misc: usbio: Fix URB memory leak on submit failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31757", "commit_url": "https://git.kernel.org/stable/c/33cfe0709b6bf1a7f1a16d5e8d65d003a71b6a21" }, { "cve": "CVE-2026-31758", "author_name": "Heitor Alves de Siqueira", "author_email": "halves@igalia.com", "fix_sha": "8a768552f7a8276fb9e01d49773d2094ace7c8f1", "subject": "usb: usbtmc: Flush anchored URBs in usbtmc_release", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31758", "commit_url": "https://git.kernel.org/stable/c/8a768552f7a8276fb9e01d49773d2094ace7c8f1" }, { "cve": "CVE-2026-31759", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "01af542392b5d41fd659d487015a71f627accce3", "subject": "usb: ulpi: fix double free in ulpi_register_interface() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31759", "commit_url": "https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3" }, { "cve": "CVE-2026-31760", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "5cefb52c1af6f69ea719e42788f6ec6a087eb74c", "subject": "gpib: lpvo_usb: fix memory leak on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31760", "commit_url": "https://git.kernel.org/stable/c/5cefb52c1af6f69ea719e42788f6ec6a087eb74c" }, { "cve": "CVE-2026-31761", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "4c05799449108fb0e0a6bd30e65fffc71e60db4d", "subject": "iio: gyro: mpu3050: Move iio_device_register() to correct location", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31761", "commit_url": "https://git.kernel.org/stable/c/4c05799449108fb0e0a6bd30e65fffc71e60db4d" }, { "cve": "CVE-2026-31762", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "4216db1043a3be72ef9c2b7b9f393d7fa72496e6", "subject": "iio: gyro: mpu3050: Fix irq resource leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31762", "commit_url": "https://git.kernel.org/stable/c/4216db1043a3be72ef9c2b7b9f393d7fa72496e6" }, { "cve": "CVE-2026-31763", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "edb11a1aef4011a4b7b22cc3c3396c6fe371f4a6", "subject": "iio: gyro: mpu3050: Fix incorrect free_irq() variable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31763", "commit_url": "https://git.kernel.org/stable/c/edb11a1aef4011a4b7b22cc3c3396c6fe371f4a6" }, { "cve": "CVE-2026-31764", "author_name": "Francesco Lavra", "author_email": "flavra@baylibre.com", "fix_sha": "679c04c10d65d32a3f269e696b22912ff0a001b9", "subject": "iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31764", "commit_url": "https://git.kernel.org/stable/c/679c04c10d65d32a3f269e696b22912ff0a001b9" }, { "cve": "CVE-2026-31765", "author_name": "Donet Tom", "author_email": "donettom@linux.ibm.com", "fix_sha": "4487571ef17a30d274600b3bd6965f497a881299", "subject": "drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31765", "commit_url": "https://git.kernel.org/stable/c/4487571ef17a30d274600b3bd6965f497a881299" }, { "cve": "CVE-2026-31766", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "a018d1819f158991b7308e4f74609c6c029b670c", "subject": "drm/amdgpu: validate doorbell_offset in user queue creation", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31766", "commit_url": "https://git.kernel.org/stable/c/a018d1819f158991b7308e4f74609c6c029b670c" }, { "cve": "CVE-2026-31767", "author_name": "Ville Syrj\u00e4l\u00e4", "author_email": "ville.syrjala@linux.intel.com", "fix_sha": "4dfce79e098915d8e5fc2b9e1d980bc3251dd32c", "subject": "drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31767", "commit_url": "https://git.kernel.org/stable/c/4dfce79e098915d8e5fc2b9e1d980bc3251dd32c" }, { "cve": "CVE-2026-31768", "author_name": "David Lechner", "author_email": "dlechner@baylibre.com", "fix_sha": "768461517a28d80fe81ea4d5d03a90cd184ea6ad", "subject": "iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31768", "commit_url": "https://git.kernel.org/stable/c/768461517a28d80fe81ea4d5d03a90cd184ea6ad" }, { "cve": "CVE-2026-31769", "author_name": "Adam Crosser", "author_email": "adam.crosser@praetorian.com", "fix_sha": "d1857f8296dceb75d00ab857fc3c61bc00c7f5c6", "subject": "gpib: fix use-after-free in IO ioctl handlers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31769", "commit_url": "https://git.kernel.org/stable/c/d1857f8296dceb75d00ab857fc3c61bc00c7f5c6" }, { "cve": "CVE-2026-31770", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "39e2a5bf970402a8530a319cf06122e216ba57b8", "subject": "hwmon: (occ) Fix division by zero in occ_show_power_1()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31770", "commit_url": "https://git.kernel.org/stable/c/39e2a5bf970402a8530a319cf06122e216ba57b8" }, { "cve": "CVE-2026-31771", "author_name": "Oleh Konko", "author_email": "security@1seal.org", "fix_sha": "2b2bf47cd75518c36fa2d41380e4a40641cc89cd", "subject": "Bluetooth: hci_event: move wake reason storage into validated event handlers", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31771", "commit_url": "https://git.kernel.org/stable/c/2b2bf47cd75518c36fa2d41380e4a40641cc89cd" }, { "cve": "CVE-2026-31772", "author_name": "hkbinbin", "author_email": "hkbinbinbin@gmail.com", "fix_sha": "bc39a094730ce062fa034a529c93147c096cb488", "subject": "Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31772", "commit_url": "https://git.kernel.org/stable/c/bc39a094730ce062fa034a529c93147c096cb488" }, { "cve": "CVE-2026-31773", "author_name": "Oleh Konko", "author_email": "security@1seal.org", "fix_sha": "20756fec2f0108cb88e815941f1ffff88dc286fe", "subject": "Bluetooth: SMP: derive legacy responder STK authentication from MITM state", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31773", "commit_url": "https://git.kernel.org/stable/c/20756fec2f0108cb88e815941f1ffff88dc286fe" }, { "cve": "CVE-2026-31774", "author_name": "Junxi Qian", "author_email": "qjx1298677004@gmail.com", "fix_sha": "b948f9d5d3057b01188e36664e7c7604d1c8ecb5", "subject": "io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31774", "commit_url": "https://git.kernel.org/stable/c/b948f9d5d3057b01188e36664e7c7604d1c8ecb5" }, { "cve": "CVE-2026-31775", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "75dc1980cf48826287e43dc7a49e310c6691f97e", "subject": "ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31775", "commit_url": "https://git.kernel.org/stable/c/75dc1980cf48826287e43dc7a49e310c6691f97e" }, { "cve": "CVE-2026-31776", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "b045ab3dff97edae6d538eeff900a34c098761f8", "subject": "ALSA: ctxfi: Fix missing SPDIFI1 index handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31776", "commit_url": "https://git.kernel.org/stable/c/b045ab3dff97edae6d538eeff900a34c098761f8" }, { "cve": "CVE-2026-31777", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "277c6960d4ddb94d16198afd70c92c3d4593d131", "subject": "ALSA: ctxfi: Check the error for index mapping", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31777", "commit_url": "https://git.kernel.org/stable/c/277c6960d4ddb94d16198afd70c92c3d4593d131" }, { "cve": "CVE-2026-31778", "author_name": "Berk Cem Goksel", "author_email": "berkcgoksel@gmail.com", "fix_sha": "45424e871abf2a152e247a9cff78359f18dd95c0", "subject": "ALSA: caiaq: fix stack out-of-bounds read in init_card", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31778", "commit_url": "https://git.kernel.org/stable/c/45424e871abf2a152e247a9cff78359f18dd95c0" }, { "cve": "CVE-2026-31779", "author_name": "Alexey Velichayshiy", "author_email": "a.velichayshiy@ispras.ru", "fix_sha": "744fabc338e87b95c4d1ff7c95bc8c0f834c6d99", "subject": "wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31779", "commit_url": "https://git.kernel.org/stable/c/744fabc338e87b95c4d1ff7c95bc8c0f834c6d99" }, { "cve": "CVE-2026-31780", "author_name": "Yasuaki Torimaru", "author_email": "yasuakitorimaru@gmail.com", "fix_sha": "d049e56b1739101d1c4d81deedb269c52a8dbba0", "subject": "wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31780", "commit_url": "https://git.kernel.org/stable/c/d049e56b1739101d1c4d81deedb269c52a8dbba0" }, { "cve": "CVE-2026-31781", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "f8995c2df519f382525ca4bc90553ad2ec611067", "subject": "drm/ioc32: stop speculation on the drm_compat_ioctl path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31781", "commit_url": "https://git.kernel.org/stable/c/f8995c2df519f382525ca4bc90553ad2ec611067" }, { "cve": "CVE-2026-31782", "author_name": "Ian Rogers", "author_email": "irogers@google.com", "fix_sha": "dbde07f06226438cd2cf1179745fa1bec5d8914a", "subject": "perf/x86: Fix potential bad container_of in intel_pmu_hw_config", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31782", "commit_url": "https://git.kernel.org/stable/c/dbde07f06226438cd2cf1179745fa1bec5d8914a" }, { "cve": "CVE-2026-31783", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "b0dc7e7c56573e7a52080f25f3179a45f3dd7e6f", "subject": "spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31783", "commit_url": "https://git.kernel.org/stable/c/b0dc7e7c56573e7a52080f25f3179a45f3dd7e6f" }, { "cve": "CVE-2026-31784", "author_name": "Daniele Ceraolo Spurio", "author_email": "daniele.ceraolospurio@intel.com", "fix_sha": "76903b2057c8677c2c006e87fede15f496555dc0", "subject": "drm/xe/pxp: Clear restart flag in pxp_start after jumping back", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31784", "commit_url": "https://git.kernel.org/stable/c/76903b2057c8677c2c006e87fede15f496555dc0" }, { "cve": "CVE-2026-31785", "author_name": "Jonathan Cavitt", "author_email": "jonathan.cavitt@intel.com", "fix_sha": "6d192b4f2d644d15d9a9f1d33dab05af936f6540", "subject": "drm/xe/xe_pagefault: Disallow writes to read-only VMAs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31785", "commit_url": "https://git.kernel.org/stable/c/6d192b4f2d644d15d9a9f1d33dab05af936f6540" }, { "cve": "CVE-2026-31786", "author_name": "Juergen Gross", "author_email": "jgross@suse.com", "fix_sha": "27fdbab4221b375de54bf91919798d88520c6e28", "subject": "Buffer overflow in drivers/xen/sys-hypervisor.c", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31786", "commit_url": "https://git.kernel.org/stable/c/27fdbab4221b375de54bf91919798d88520c6e28" }, { "cve": "CVE-2026-31787", "author_name": "Juergen Gross", "author_email": "jgross@suse.com", "fix_sha": "24daca4fc07f3ff8cd0e3f629cd982187f48436a", "subject": "xen/privcmd: fix double free via VMA splitting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31787", "commit_url": "https://git.kernel.org/stable/c/24daca4fc07f3ff8cd0e3f629cd982187f48436a" }, { "cve": "CVE-2026-31788", "author_name": "Juergen Gross", "author_email": "jgross@suse.com", "fix_sha": "453b8fb68f3641fea970db88b7d9a153ed2a37e8", "subject": "xen/privcmd: restrict usage in unprivileged domU", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31788", "commit_url": "https://git.kernel.org/stable/c/453b8fb68f3641fea970db88b7d9a153ed2a37e8" }, { "cve": "CVE-2026-43004", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "73cd1f97946ae3796544448ff12c07f399bb2881", "subject": "spi: stm32-ospi: Fix resource leak in remove() callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43004", "commit_url": "https://git.kernel.org/stable/c/73cd1f97946ae3796544448ff12c07f399bb2881" }, { "cve": "CVE-2026-43005", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6", "subject": "hwmon: (tps53679) Fix array access with zero-length block read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43005", "commit_url": "https://git.kernel.org/stable/c/0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6" }, { "cve": "CVE-2026-43006", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "111a12b422a8cfa93deabaef26fec48237163214", "subject": "io_uring/rsrc: reject zero-length fixed buffer import", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43006", "commit_url": "https://git.kernel.org/stable/c/111a12b422a8cfa93deabaef26fec48237163214" }, { "cve": "CVE-2026-43007", "author_name": "Youssef Samir", "author_email": "youssef.abdulrahman@oss.qualcomm.com", "fix_sha": "2feec5ae5df785658924ab6bd91280dc3926507c", "subject": "accel/qaic: Handle DBC deactivation if the owner went away", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43007", "commit_url": "https://git.kernel.org/stable/c/2feec5ae5df785658924ab6bd91280dc3926507c" }, { "cve": "CVE-2026-43008", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "8de4e0f44c638c66cdc5eeb4d5ab9acd61c31e4f", "subject": "gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43008", "commit_url": "https://git.kernel.org/stable/c/8de4e0f44c638c66cdc5eeb4d5ab9acd61c31e4f" }, { "cve": "CVE-2026-43009", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "179ee84a89114b854ac2dd1d293633a7f6c8dac1", "subject": "bpf: Fix incorrect pruning due to atomic fetch precision tracking", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43009", "commit_url": "https://git.kernel.org/stable/c/179ee84a89114b854ac2dd1d293633a7f6c8dac1" }, { "cve": "CVE-2026-43010", "author_name": "Varun R Mallya", "author_email": "varunrmallya@gmail.com", "fix_sha": "eb7024bfcc5f68ed11ed9dd4891a3073c15f04a8", "subject": "bpf: Reject sleepable kprobe_multi programs at attach time", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43010", "commit_url": "https://git.kernel.org/stable/c/eb7024bfcc5f68ed11ed9dd4891a3073c15f04a8" }, { "cve": "CVE-2026-43011", "author_name": "Martin Schiller", "author_email": "ms@dev.tdt.de", "fix_sha": "d10a26aa4d072320530e6968ef945c8c575edf61", "subject": "net/x25: Fix potential double free of skb", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43011", "commit_url": "https://git.kernel.org/stable/c/d10a26aa4d072320530e6968ef945c8c575edf61" }, { "cve": "CVE-2026-43012", "author_name": "Saeed Mahameed", "author_email": "saeedm@nvidia.com", "fix_sha": "403186400a1a6166efe7031edc549c15fee4723f", "subject": "net/mlx5: Fix switchdev mode rollback in case of failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43012", "commit_url": "https://git.kernel.org/stable/c/403186400a1a6166efe7031edc549c15fee4723f" }, { "cve": "CVE-2026-43013", "author_name": "Shay Drory", "author_email": "shayd@nvidia.com", "fix_sha": "bf16bca6653679d8a514d6c1c5a2c67065033f14", "subject": "net/mlx5: lag: Check for LAG device before creating debugfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43013", "commit_url": "https://git.kernel.org/stable/c/bf16bca6653679d8a514d6c1c5a2c67065033f14" }, { "cve": "CVE-2026-43014", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "f0f367a4f459cc8118aadc43c6bba53c60d93f8d", "subject": "net: macb: properly unregister fixed rate clocks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43014", "commit_url": "https://git.kernel.org/stable/c/f0f367a4f459cc8118aadc43c6bba53c60d93f8d" }, { "cve": "CVE-2026-43015", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "ce8fe5287b87e24e225c342f3b0ec04f0b3680fe", "subject": "net: macb: fix clk handling on PCI glue driver removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43015", "commit_url": "https://git.kernel.org/stable/c/ce8fe5287b87e24e225c342f3b0ec04f0b3680fe" }, { "cve": "CVE-2026-43016", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "ad8391d37f334ee73ba91926f8b4e4cf6d31ea04", "subject": "bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43016", "commit_url": "https://git.kernel.org/stable/c/ad8391d37f334ee73ba91926f8b4e4cf6d31ea04" }, { "cve": "CVE-2026-43017", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "bda93eec78cdbfe5cda00785cefebd443e56b88b", "subject": "Bluetooth: MGMT: validate mesh send advertising payload length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43017", "commit_url": "https://git.kernel.org/stable/c/bda93eec78cdbfe5cda00785cefebd443e56b88b" }, { "cve": "CVE-2026-43018", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "b255531b27da336571411248c2a72a350662bd09", "subject": "Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43018", "commit_url": "https://git.kernel.org/stable/c/b255531b27da336571411248c2a72a350662bd09" }, { "cve": "CVE-2026-43019", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "a2639a7f0f5bf7d73f337f8f077c19415c62ed2c", "subject": "Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43019", "commit_url": "https://git.kernel.org/stable/c/a2639a7f0f5bf7d73f337f8f077c19415c62ed2c" }, { "cve": "CVE-2026-43020", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "b8dbe9648d69059cfe3a28917bfbf7e61efd7f15", "subject": "Bluetooth: MGMT: validate LTK enc_size on load", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43020", "commit_url": "https://git.kernel.org/stable/c/b8dbe9648d69059cfe3a28917bfbf7e61efd7f15" }, { "cve": "CVE-2026-43021", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "aca377208e7f7322bf4e107cdec6e7d7e8aa7a88", "subject": "Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43021", "commit_url": "https://git.kernel.org/stable/c/aca377208e7f7322bf4e107cdec6e7d7e8aa7a88" }, { "cve": "CVE-2026-43022", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "2969554bcfccb5c609f6b6cd4a014933f3a66dd0", "subject": "Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43022", "commit_url": "https://git.kernel.org/stable/c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0" }, { "cve": "CVE-2026-43023", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "8a5b0135d4a5d9683203a3d9a12a711ccec5936b", "subject": "Bluetooth: SCO: fix race conditions in sco_sock_connect()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43023", "commit_url": "https://git.kernel.org/stable/c/8a5b0135d4a5d9683203a3d9a12a711ccec5936b" }, { "cve": "CVE-2026-43024", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "da107398cbd4bbdb6bffecb2ce86d5c9384f4cec", "subject": "netfilter: nf_tables: reject immediate NF_QUEUE verdict", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43024", "commit_url": "https://git.kernel.org/stable/c/da107398cbd4bbdb6bffecb2ce86d5c9384f4cec" }, { "cve": "CVE-2026-43025", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "917b61fa2042f11e2af4c428e43f08199586633a", "subject": "netfilter: ctnetlink: ignore explicit helper on new expectations", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43025", "commit_url": "https://git.kernel.org/stable/c/917b61fa2042f11e2af4c428e43f08199586633a" }, { "cve": "CVE-2026-43026", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "35177c6877134a21315f37d57a5577846225623e", "subject": "netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43026", "commit_url": "https://git.kernel.org/stable/c/35177c6877134a21315f37d57a5577846225623e" }, { "cve": "CVE-2026-43027", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "a242a9ae58aa46ff7dae51ce64150a93957abe65", "subject": "netfilter: nf_conntrack_helper: pass helper to expect cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43027", "commit_url": "https://git.kernel.org/stable/c/a242a9ae58aa46ff7dae51ce64150a93957abe65" }, { "cve": "CVE-2026-43028", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "a958a4f90ddd7de0800b33ca9d7b886b7d40f74e", "subject": "netfilter: x_tables: ensure names are nul-terminated", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43028", "commit_url": "https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e" }, { "cve": "CVE-2026-43029", "author_name": "Li Xiasong", "author_email": "lixiasong1@huawei.com", "fix_sha": "5dd8025a49c268ab6b94d978532af3ad341132a7", "subject": "mptcp: fix soft lockup in mptcp_recvmsg()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43029", "commit_url": "https://git.kernel.org/stable/c/5dd8025a49c268ab6b94d978532af3ad341132a7" }, { "cve": "CVE-2026-43030", "author_name": "Alexei Starovoitov", "author_email": "ast@kernel.org", "fix_sha": "a8502a79e832b861e99218cbd2d8f4312d62e225", "subject": "bpf: Fix regsafe() for pointers to packet", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43030", "commit_url": "https://git.kernel.org/stable/c/a8502a79e832b861e99218cbd2d8f4312d62e225" }, { "cve": "CVE-2026-43031", "author_name": "Suraj Gupta", "author_email": "suraj.gupta2@amd.com", "fix_sha": "d1978d03e86785872871bff9c2623174b10740de", "subject": "net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43031", "commit_url": "https://git.kernel.org/stable/c/d1978d03e86785872871bff9c2623174b10740de" }, { "cve": "CVE-2026-43032", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "30fe3f5f6494f827d812ff179f295a8e532709d6", "subject": "NFC: pn533: bound the UART receive buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43032", "commit_url": "https://git.kernel.org/stable/c/30fe3f5f6494f827d812ff179f295a8e532709d6" }, { "cve": "CVE-2026-43033", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "e02494114ebf7c8b42777c6cd6982f113bfdbec7", "subject": "crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43033", "commit_url": "https://git.kernel.org/stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7" }, { "cve": "CVE-2026-43034", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "4ee937107d52f9e5c350e4b5e629760e328b3d9f", "subject": "bnxt_en: set backing store type from query type", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43034", "commit_url": "https://git.kernel.org/stable/c/4ee937107d52f9e5c350e4b5e629760e328b3d9f" }, { "cve": "CVE-2026-43035", "author_name": "Yochai Eisenrich", "author_email": "echelonh@gmail.com", "fix_sha": "e6e3eb5ee89ac4c163d46429391c889a1bb5e404", "subject": "net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43035", "commit_url": "https://git.kernel.org/stable/c/e6e3eb5ee89ac4c163d46429391c889a1bb5e404" }, { "cve": "CVE-2026-43036", "author_name": "Guoyu Su", "author_email": "yss2813483011xxl@gmail.com", "fix_sha": "ddc748a391dd8642ba6b2e4fe22e7f2ddf84b7f0", "subject": "net: use skb_header_pointer() for TCPv4 GSO frag_off check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43036", "commit_url": "https://git.kernel.org/stable/c/ddc748a391dd8642ba6b2e4fe22e7f2ddf84b7f0" }, { "cve": "CVE-2026-43037", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "2edfa31769a4add828a7e604b21cb82aaaa05925", "subject": "ip6_tunnel: clear skb2->cb[] in ip4ip6_err()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037", "commit_url": "https://git.kernel.org/stable/c/2edfa31769a4add828a7e604b21cb82aaaa05925" }, { "cve": "CVE-2026-43038", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "86ab3e55673a7a49a841838776f1ab18d23a67b5", "subject": "ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43038", "commit_url": "https://git.kernel.org/stable/c/86ab3e55673a7a49a841838776f1ab18d23a67b5" }, { "cve": "CVE-2026-43039", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "5597dd284ff8c556c0b00f6a34473677426e3f81", "subject": "net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43039", "commit_url": "https://git.kernel.org/stable/c/5597dd284ff8c556c0b00f6a34473677426e3f81" }, { "cve": "CVE-2026-43040", "author_name": "Yochai Eisenrich", "author_email": "echelonh@gmail.com", "fix_sha": "ae05340ccaa9d347fe85415609e075545bec589f", "subject": "net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43040", "commit_url": "https://git.kernel.org/stable/c/ae05340ccaa9d347fe85415609e075545bec589f" }, { "cve": "CVE-2026-43041", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "2428083101f6883f979cceffa76cd8440751ffe6", "subject": "net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43041", "commit_url": "https://git.kernel.org/stable/c/2428083101f6883f979cceffa76cd8440751ffe6" }, { "cve": "CVE-2026-43042", "author_name": "Sabrina Dubroca", "author_email": "sd@queasysnail.net", "fix_sha": "629ec78ef8608d955ce217880cdc3e1873af3a15", "subject": "mpls: add seqcount to protect the platform_label{,s} pair", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43042", "commit_url": "https://git.kernel.org/stable/c/629ec78ef8608d955ce217880cdc3e1873af3a15" }, { "cve": "CVE-2026-43043", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "62397b493e14107ae82d8b80938f293d95425bcb", "subject": "crypto: af-alg - fix NULL pointer dereference in scatterwalk", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43043", "commit_url": "https://git.kernel.org/stable/c/62397b493e14107ae82d8b80938f293d95425bcb" }, { "cve": "CVE-2026-43044", "author_name": "Horia Geant\u0103", "author_email": "horia.geanta@nxp.com", "fix_sha": "5ddfdcbe10dc5f97afc4e46ca22be2be717e8caf", "subject": "crypto: caam - fix DMA corruption on long hmac keys", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43044", "commit_url": "https://git.kernel.org/stable/c/5ddfdcbe10dc5f97afc4e46ca22be2be717e8caf" }, { "cve": "CVE-2026-43045", "author_name": "Stanislav Kinsburskii", "author_email": "skinsburskii@linux.microsoft.com", "fix_sha": "c0e296f257671ba10249630fe58026f29e4804d9", "subject": "mshv: Fix error handling in mshv_region_pin", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43045", "commit_url": "https://git.kernel.org/stable/c/c0e296f257671ba10249630fe58026f29e4804d9" }, { "cve": "CVE-2026-43046", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "b17b79ff896305fd74980a5f72afec370ee88ca4", "subject": "btrfs: reject root items with drop_progress and zero drop_level", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43046", "commit_url": "https://git.kernel.org/stable/c/b17b79ff896305fd74980a5f72afec370ee88ca4" }, { "cve": "CVE-2026-43047", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "e716edafedad4952fe3a4a273d2e039a84e8681a", "subject": "HID: multitouch: Check to ensure report responses match the request", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43047", "commit_url": "https://git.kernel.org/stable/c/e716edafedad4952fe3a4a273d2e039a84e8681a" }, { "cve": "CVE-2026-43048", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "0a3fe972a7cb1404f693d6f1711f32bc1d244b1c", "subject": "HID: core: Mitigate potential OOB by removing bogus memset()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43048", "commit_url": "https://git.kernel.org/stable/c/0a3fe972a7cb1404f693d6f1711f32bc1d244b1c" }, { "cve": "CVE-2026-43049", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "f7a4c78bfeb320299c1b641500fe7761eadbd101", "subject": "HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43049", "commit_url": "https://git.kernel.org/stable/c/f7a4c78bfeb320299c1b641500fe7761eadbd101" }, { "cve": "CVE-2026-43050", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "922814879542c2e397b0e9641fd36b8202a8e555", "subject": "atm: lec: fix use-after-free in sock_def_readable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43050", "commit_url": "https://git.kernel.org/stable/c/922814879542c2e397b0e9641fd36b8202a8e555" }, { "cve": "CVE-2026-43051", "author_name": "Beno\u00eet Sevens", "author_email": "bsevens@google.com", "fix_sha": "2f1763f62909ccb6386ac50350fa0abbf5bb16a9", "subject": "HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43051", "commit_url": "https://git.kernel.org/stable/c/2f1763f62909ccb6386ac50350fa0abbf5bb16a9" }, { "cve": "CVE-2026-43052", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "7d73872d949c488a1d7c308031d6a9d89b5e0a8b", "subject": "wifi: mac80211: check tdls flag in ieee80211_tdls_oper", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43052", "commit_url": "https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b" }, { "cve": "CVE-2026-43053", "author_name": "Long Li", "author_email": "leo.lilong@huawei.com", "fix_sha": "b854e1c4eff3473b6d3a9ae74129ac5c48bc0b61", "subject": "xfs: close crash window in attr dabtree inactivation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43053", "commit_url": "https://git.kernel.org/stable/c/b854e1c4eff3473b6d3a9ae74129ac5c48bc0b61" }, { "cve": "CVE-2026-43054", "author_name": "Josef Bacik", "author_email": "josef@toxicpanda.com", "fix_sha": "1333eee56cdf3f0cf67c6ab4114c2c9e0a952026", "subject": "scsi: target: tcm_loop: Drain commands in target_reset handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43054", "commit_url": "https://git.kernel.org/stable/c/1333eee56cdf3f0cf67c6ab4114c2c9e0a952026" }, { "cve": "CVE-2026-43055", "author_name": "Thinh Nguyen", "author_email": "thinh.nguyen@synopsys.com", "fix_sha": "01f784fc9d0ab2a6dac45ee443620e517cb2a19b", "subject": "scsi: target: file: Use kzalloc_flex for aio_cmd", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43055", "commit_url": "https://git.kernel.org/stable/c/01f784fc9d0ab2a6dac45ee443620e517cb2a19b" }, { "cve": "CVE-2026-43056", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "c4ea7d8907cf72b259bf70bd8c2e791e1c4ff70f", "subject": "net: mana: fix use-after-free in add_adev() error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43056", "commit_url": "https://git.kernel.org/stable/c/c4ea7d8907cf72b259bf70bd8c2e791e1c4ff70f" }, { "cve": "CVE-2026-43057", "author_name": "Willem de Bruijn", "author_email": "willemb@google.com", "fix_sha": "c4336a07eb6b2526dc2b62928b5104b41a7f81f5", "subject": "net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43057", "commit_url": "https://git.kernel.org/stable/c/c4336a07eb6b2526dc2b62928b5104b41a7f81f5" }, { "cve": "CVE-2026-43058", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "5f8e73bde67e931468bc2a1860d78d72f0c6ba41", "subject": "media: vidtv: fix pass-by-value structs causing MSAN warnings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43058", "commit_url": "https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41" }, { "cve": "CVE-2026-43059", "author_name": "Wang Tao", "author_email": "wangtao554@huawei.com", "fix_sha": "17f89341cb4281d1da0e2fb0de5406ab7c4e25ef", "subject": "Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43059", "commit_url": "https://git.kernel.org/stable/c/17f89341cb4281d1da0e2fb0de5406ab7c4e25ef" }, { "cve": "CVE-2026-43060", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "36eae0956f659e48d5366d9b083d9417f3263ddc", "subject": "netfilter: nft_ct: drop pending enqueued packets on removal", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43060", "commit_url": "https://git.kernel.org/stable/c/36eae0956f659e48d5366d9b083d9417f3263ddc" }, { "cve": "CVE-2026-43061", "author_name": "Raul E Rangel", "author_email": "rrangel@chromium.org", "fix_sha": "a424a34b8faddf97b5af41689087e7a230f79ba7", "subject": "serial: 8250: Fix TX deadlock when using DMA", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43061", "commit_url": "https://git.kernel.org/stable/c/a424a34b8faddf97b5af41689087e7a230f79ba7" }, { "cve": "CVE-2026-43062", "author_name": "Lukas Johannes M\u00f6ller", "author_email": "research@johannes-moeller.dev", "fix_sha": "15145675690cab2de1056e7ed68e59cbd0452529", "subject": "Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43062", "commit_url": "https://git.kernel.org/stable/c/15145675690cab2de1056e7ed68e59cbd0452529" }, { "cve": "CVE-2026-43063", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "70685c291ef82269180758130394ecdc4496b52c", "subject": "xfs: don't irele after failing to iget in xfs_attri_recover_work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43063", "commit_url": "https://git.kernel.org/stable/c/70685c291ef82269180758130394ecdc4496b52c" }, { "cve": "CVE-2026-43064", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "3d33de353b1ff9023d5ec73b9becf80ea87af695", "subject": "dmaengine: idxd: Fix not releasing workqueue on .release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43064", "commit_url": "https://git.kernel.org/stable/c/3d33de353b1ff9023d5ec73b9becf80ea87af695" }, { "cve": "CVE-2026-43065", "author_name": "Theodore Ts'o", "author_email": "tytso@mit.edu", "fix_sha": "9ee29d20aab228adfb02ca93f87fb53c56c2f3af", "subject": "ext4: always drain queued discard work in ext4_mb_release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43065", "commit_url": "https://git.kernel.org/stable/c/9ee29d20aab228adfb02ca93f87fb53c56c2f3af" }, { "cve": "CVE-2026-43066", "author_name": "Baokun Li", "author_email": "libaokun@linux.alibaba.com", "fix_sha": "ec0a7500d8eace5b4f305fa0c594dd148f0e8d29", "subject": "ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43066", "commit_url": "https://git.kernel.org/stable/c/ec0a7500d8eace5b4f305fa0c594dd148f0e8d29" }, { "cve": "CVE-2026-43067", "author_name": "Theodore Ts'o", "author_email": "tytso@mit.edu", "fix_sha": "bb81702370fad22c06ca12b6e1648754dbc37e0f", "subject": "ext4: handle wraparound when searching for blocks for indirect mapped blocks", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43067", "commit_url": "https://git.kernel.org/stable/c/bb81702370fad22c06ca12b6e1648754dbc37e0f" }, { "cve": "CVE-2026-43068", "author_name": "Ye Bin", "author_email": "yebin10@huawei.com", "fix_sha": "46066e3a06647c5b186cc6334409722622d05c44", "subject": "ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43068", "commit_url": "https://git.kernel.org/stable/c/46066e3a06647c5b186cc6334409722622d05c44" }, { "cve": "CVE-2026-43069", "author_name": "Anas Iqbal", "author_email": "mohd.abd.6602@gmail.com", "fix_sha": "31148a7be723aa9f2e8fbd62424825ab8d577973", "subject": "Bluetooth: hci_ll: Fix firmware leak on error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43069", "commit_url": "https://git.kernel.org/stable/c/31148a7be723aa9f2e8fbd62424825ab8d577973" }, { "cve": "CVE-2026-43070", "author_name": "Yazhou Tang", "author_email": "tangyazhou518@outlook.com", "fix_sha": "a3125bc01884431d30d731461634c8295b6f0529", "subject": "bpf: Reset register ID for BPF_END value tracking", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43070", "commit_url": "https://git.kernel.org/stable/c/a3125bc01884431d30d731461634c8295b6f0529" }, { "cve": "CVE-2026-43071", "author_name": "Zhihao Cheng", "author_email": "chengzhihao1@huawei.com", "fix_sha": "f08fe8891c3eeb63b73f9f1f6d97aa629c821579", "subject": "dcache: Limit the minimal number of bucket to two", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43071", "commit_url": "https://git.kernel.org/stable/c/f08fe8891c3eeb63b73f9f1f6d97aa629c821579" }, { "cve": "CVE-2026-43072", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "e597a809a2b97e927060ba182f58eb3e6101bc70", "subject": "drm/vc4: platform_get_irq_byname() returns an int", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43072", "commit_url": "https://git.kernel.org/stable/c/e597a809a2b97e927060ba182f58eb3e6101bc70" }, { "cve": "CVE-2026-43073", "author_name": "Linus Torvalds", "author_email": "torvalds@linux-foundation.org", "fix_sha": "d187a86de793f84766ea40b9ade7ac60aabbb4fe", "subject": "x86-64: rename misleadingly named '__copy_user_nocache()' function", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43073", "commit_url": "https://git.kernel.org/stable/c/d187a86de793f84766ea40b9ade7ac60aabbb4fe" }, { "cve": "CVE-2026-43074", "author_name": "Nicholas Carlini", "author_email": "nicholas@carlini.com", "fix_sha": "07712db80857d5d09ae08f3df85a708ecfc3b61f", "subject": "eventpoll: defer struct eventpoll free to RCU grace period", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43074", "commit_url": "https://git.kernel.org/stable/c/07712db80857d5d09ae08f3df85a708ecfc3b61f" }, { "cve": "CVE-2026-43075", "author_name": "Joseph Qi", "author_email": "joseph.qi@linux.alibaba.com", "fix_sha": "7bc5da4842bed3252d26e742213741a4d0ac1b14", "subject": "ocfs2: fix out-of-bounds write in ocfs2_write_end_inline", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43075", "commit_url": "https://git.kernel.org/stable/c/7bc5da4842bed3252d26e742213741a4d0ac1b14" }, { "cve": "CVE-2026-43076", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "1524af3685b35feac76662cc551cbc37bd14775f", "subject": "ocfs2: validate inline data i_size during inode read", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43076", "commit_url": "https://git.kernel.org/stable/c/1524af3685b35feac76662cc551cbc37bd14775f" }, { "cve": "CVE-2026-43077", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "3d14bd48e3a77091cbce637a12c2ae31b4a1687c", "subject": "crypto: algif_aead - Fix minimum RX size check for decryption", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43077", "commit_url": "https://git.kernel.org/stable/c/3d14bd48e3a77091cbce637a12c2ae31b4a1687c" }, { "cve": "CVE-2026-43078", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "31d00156e50ecad37f2cb6cbf04aaa9a260505ef", "subject": "crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43078", "commit_url": "https://git.kernel.org/stable/c/31d00156e50ecad37f2cb6cbf04aaa9a260505ef" }, { "cve": "CVE-2026-43079", "author_name": "Zide Chen", "author_email": "zide.chen@intel.com", "fix_sha": "7b568e9eba2fad89a696f22f0413d44cf4a1f892", "subject": "perf/x86/intel/uncore: Skip discovery table for offline dies", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43079", "commit_url": "https://git.kernel.org/stable/c/7b568e9eba2fad89a696f22f0413d44cf4a1f892" }, { "cve": "CVE-2026-43080", "author_name": "Alice Mikityanska", "author_email": "alice@isovalent.com", "fix_sha": "ebe560ea5f54134279356703e73b7f867c89db13", "subject": "l2tp: Drop large packets with UDP encap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43080", "commit_url": "https://git.kernel.org/stable/c/ebe560ea5f54134279356703e73b7f867c89db13" }, { "cve": "CVE-2026-43081", "author_name": "Alexander Koskovich", "author_email": "akoskovich@pm.me", "fix_sha": "9709b56d908acc120fe8b4ae250b3c9d749ea832", "subject": "net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43081", "commit_url": "https://git.kernel.org/stable/c/9709b56d908acc120fe8b4ae250b3c9d749ea832" }, { "cve": "CVE-2026-43082", "author_name": "Fabio Baltieri", "author_email": "fabio.baltieri@gmail.com", "fix_sha": "5a37d228799b0ec2c277459c83c814a59d310bc3", "subject": "net: txgbe: leave space for null terminators on property_entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43082", "commit_url": "https://git.kernel.org/stable/c/5a37d228799b0ec2c277459c83c814a59d310bc3" }, { "cve": "CVE-2026-43083", "author_name": "Justin Iurman", "author_email": "justin.iurman@gmail.com", "fix_sha": "b30b1675aa2bcf0491fd3830b051df4e08a7c8ca", "subject": "net: ioam6: fix OOB and missing lock", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43083", "commit_url": "https://git.kernel.org/stable/c/b30b1675aa2bcf0491fd3830b051df4e08a7c8ca" }, { "cve": "CVE-2026-43084", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "936206e3f6ff411581e615e930263d6f8b78df9d", "subject": "netfilter: nfnetlink_queue: make hash table per queue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43084", "commit_url": "https://git.kernel.org/stable/c/936206e3f6ff411581e615e930263d6f8b78df9d" }, { "cve": "CVE-2026-43085", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "1f3083aec8836213da441270cdb1ab612dd82cf4", "subject": "netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43085", "commit_url": "https://git.kernel.org/stable/c/1f3083aec8836213da441270cdb1ab612dd82cf4" }, { "cve": "CVE-2026-43086", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "9a91797e61d286805ae10a92cc48959c30800556", "subject": "ipvs: fix NULL deref in ip_vs_add_service error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43086", "commit_url": "https://git.kernel.org/stable/c/9a91797e61d286805ae10a92cc48959c30800556" }, { "cve": "CVE-2026-43087", "author_name": "Francesco Lavra", "author_email": "flavra@baylibre.com", "fix_sha": "db5b8cecbdf479ad13156af750377e5b43853fab", "subject": "pinctrl: mcp23s08: Disable all pin interrupts during probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43087", "commit_url": "https://git.kernel.org/stable/c/db5b8cecbdf479ad13156af750377e5b43853fab" }, { "cve": "CVE-2026-43088", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "426c355742f02cf743b347d9d7dbdc1bfbfa31ef", "subject": "net: af_key: zero aligned sockaddr tail in PF_KEY exports", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43088", "commit_url": "https://git.kernel.org/stable/c/426c355742f02cf743b347d9d7dbdc1bfbfa31ef" }, { "cve": "CVE-2026-43089", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "1beb76b2053b68c491b78370794b8ff63c8f8c02", "subject": "xfrm_user: fix info leak in build_mapping()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43089", "commit_url": "https://git.kernel.org/stable/c/1beb76b2053b68c491b78370794b8ff63c8f8c02" }, { "cve": "CVE-2026-43090", "author_name": "Kotlyarov Mihail", "author_email": "mihailkotlyarow@gmail.com", "fix_sha": "83317cce60a032c49480dcdabe146435bd689d03", "subject": "xfrm: fix refcount leak in xfrm_migrate_policy_find", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43090", "commit_url": "https://git.kernel.org/stable/c/83317cce60a032c49480dcdabe146435bd689d03" }, { "cve": "CVE-2026-43091", "author_name": "Steffen Klassert", "author_email": "steffen.klassert@secunet.com", "fix_sha": "069daad4f2ae9c5c108131995529d5f02392c446", "subject": "xfrm: Wait for RCU readers during policy netns exit", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43091", "commit_url": "https://git.kernel.org/stable/c/069daad4f2ae9c5c108131995529d5f02392c446" }, { "cve": "CVE-2026-43092", "author_name": "Maciej Fijalkowski", "author_email": "maciej.fijalkowski@intel.com", "fix_sha": "36ee60b569ba0dfb6f961333b90d19ab5b323fa9", "subject": "xsk: validate MTU against usable frame size on bind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43092", "commit_url": "https://git.kernel.org/stable/c/36ee60b569ba0dfb6f961333b90d19ab5b323fa9" }, { "cve": "CVE-2026-43093", "author_name": "Maciej Fijalkowski", "author_email": "maciej.fijalkowski@intel.com", "fix_sha": "a315e022a72d95ef5f1d4e58e903cb492b0ad931", "subject": "xsk: tighten UMEM headroom validation to account for tailroom and min frame", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43093", "commit_url": "https://git.kernel.org/stable/c/a315e022a72d95ef5f1d4e58e903cb492b0ad931" }, { "cve": "CVE-2026-43094", "author_name": "Michal Schmidt", "author_email": "mschmidt@redhat.com", "fix_sha": "4821d563cd7f251ae728be1a6d04af82a294a5b9", "subject": "ixgbevf: add missing negotiate_features op to Hyper-V ops table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43094", "commit_url": "https://git.kernel.org/stable/c/4821d563cd7f251ae728be1a6d04af82a294a5b9" }, { "cve": "CVE-2026-43095", "author_name": "Charles Keepax", "author_email": "ckeepax@opensource.cirrus.com", "fix_sha": "4e53116437e919c4b9a9d95fb73ae14fe0cfc8f9", "subject": "ASoC: SDCA: Fix errors in IRQ cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43095", "commit_url": "https://git.kernel.org/stable/c/4e53116437e919c4b9a9d95fb73ae14fe0cfc8f9" }, { "cve": "CVE-2026-43096", "author_name": "Stanislav Kinsburskii", "author_email": "skinsburskii@linux.microsoft.com", "fix_sha": "16cbec24897624051b324aa3a85859c38ca65fde", "subject": "mshv: Fix infinite fault loop on permission-denied GPA intercepts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43096", "commit_url": "https://git.kernel.org/stable/c/16cbec24897624051b324aa3a85859c38ca65fde" }, { "cve": "CVE-2026-43097", "author_name": "Sahil Chandna", "author_email": "sahilchandna@linux.microsoft.com", "fix_sha": "b6422dff0e518245019233432b6bccfc30b73e2f", "subject": "PCI: hv: Fix double ida_free in hv_pci_probe error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43097", "commit_url": "https://git.kernel.org/stable/c/b6422dff0e518245019233432b6bccfc30b73e2f" }, { "cve": "CVE-2026-43098", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "5c14a19d5b1645cce1cb1252833d70b23635b632", "subject": "nfc: s3fwrn5: allocate rx skb before consuming bytes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43098", "commit_url": "https://git.kernel.org/stable/c/5c14a19d5b1645cce1cb1252833d70b23635b632" }, { "cve": "CVE-2026-43099", "author_name": "Yiqi Sun", "author_email": "sunyiqixm@gmail.com", "fix_sha": "fde29fd9349327acc50d19a0b5f3d5a6c964dfd8", "subject": "ipv4: icmp: fix null-ptr-deref in icmp_build_probe()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43099", "commit_url": "https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8" }, { "cve": "CVE-2026-43100", "author_name": "Zijing Yin", "author_email": "yzjaurora@gmail.com", "fix_sha": "1979645e1842cb7017525a61a0e0e0beb924d02a", "subject": "bridge: guard local VLAN-0 FDB helpers against NULL vlan group", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43100", "commit_url": "https://git.kernel.org/stable/c/1979645e1842cb7017525a61a0e0e0beb924d02a" }, { "cve": "CVE-2026-43101", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "4e65a8b8daa18d63255ec58964dd192c7fdd9f8b", "subject": "ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43101", "commit_url": "https://git.kernel.org/stable/c/4e65a8b8daa18d63255ec58964dd192c7fdd9f8b" }, { "cve": "CVE-2026-43102", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "285fa6b1e03cff78ead0383e1b259c44b95faf90", "subject": "net: airoha: Fix memory leak in airoha_qdma_rx_process()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43102", "commit_url": "https://git.kernel.org/stable/c/285fa6b1e03cff78ead0383e1b259c44b95faf90" }, { "cve": "CVE-2026-43103", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "b120e4432f9f56c7103133d6a11245e617695adb", "subject": "net: lapbether: handle NETDEV_PRE_TYPE_CHANGE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43103", "commit_url": "https://git.kernel.org/stable/c/b120e4432f9f56c7103133d6a11245e617695adb" }, { "cve": "CVE-2026-43104", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "9525d169e5fd481538cf8c663cc5839e54f2e481", "subject": "drm/vc4: Fix a memory leak in hang state error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43104", "commit_url": "https://git.kernel.org/stable/c/9525d169e5fd481538cf8c663cc5839e54f2e481" }, { "cve": "CVE-2026-43105", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "f4dfd6847b3e5d24e336bca6057485116d17aea4", "subject": "drm/vc4: Fix memory leak of BO array in hang state", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43105", "commit_url": "https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4" }, { "cve": "CVE-2026-43106", "author_name": "NeilBrown", "author_email": "neilb@ownmail.net", "fix_sha": "1635c2acdde86c4f555b627aec873c8677c421ed", "subject": "cachefiles: fix incorrect dentry refcount in cachefiles_cull()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43106", "commit_url": "https://git.kernel.org/stable/c/1635c2acdde86c4f555b627aec873c8677c421ed" }, { "cve": "CVE-2026-43107", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "7081d46d32312f1a31f0e0e99c6835a394037599", "subject": "xfrm: account XFRMA_IF_ID in aevent size calculation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43107", "commit_url": "https://git.kernel.org/stable/c/7081d46d32312f1a31f0e0e99c6835a394037599" }, { "cve": "CVE-2026-43108", "author_name": "Mukesh Ojha", "author_email": "mukesh.ojha@oss.qualcomm.com", "fix_sha": "641f6fda143b879da1515f821ee475073678cf2a", "subject": "soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43108", "commit_url": "https://git.kernel.org/stable/c/641f6fda143b879da1515f821ee475073678cf2a" }, { "cve": "CVE-2026-43109", "author_name": "Linus Torvalds", "author_email": "torvalds@linux-foundation.org", "fix_sha": "52f657e34d7b21b47434d9d8b26fa7f6778b63a0", "subject": "x86: shadow stacks: proper error handling for mmap lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43109", "commit_url": "https://git.kernel.org/stable/c/52f657e34d7b21b47434d9d8b26fa7f6778b63a0" }, { "cve": "CVE-2026-43110", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "304950a467d83678bd0b0f46331882e2ac23b12d", "subject": "wifi: brcmfmac: validate bsscfg indices in IF events", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110", "commit_url": "https://git.kernel.org/stable/c/304950a467d83678bd0b0f46331882e2ac23b12d" }, { "cve": "CVE-2026-43111", "author_name": "Beno\u00eet Sevens", "author_email": "bsevens@google.com", "fix_sha": "d802d848308b35220f21a8025352f0c0aba15c12", "subject": "HID: roccat: fix use-after-free in roccat_report_event", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43111", "commit_url": "https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12" }, { "cve": "CVE-2026-43112", "author_name": "Fredric Cover", "author_email": "fredthedude@proton.me", "fix_sha": "78ec5bf2f589ec7fd8f169394bfeca541b077317", "subject": "fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43112", "commit_url": "https://git.kernel.org/stable/c/78ec5bf2f589ec7fd8f169394bfeca541b077317" }, { "cve": "CVE-2026-43113", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "0fd56fad9c56356e7fa7a7c52e7ecbf807a44eb0", "subject": "wifi: wl1251: validate packet IDs before indexing tx_frames", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43113", "commit_url": "https://git.kernel.org/stable/c/0fd56fad9c56356e7fa7a7c52e7ecbf807a44eb0" }, { "cve": "CVE-2026-43114", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "d3c0037ffe1273fa1961e779ff6906234d6cf53c", "subject": "netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43114", "commit_url": "https://git.kernel.org/stable/c/d3c0037ffe1273fa1961e779ff6906234d6cf53c" }, { "cve": "CVE-2026-43115", "author_name": "Joel Fernandes", "author_email": "joelagnelf@nvidia.com", "fix_sha": "a6fc88b22bc8d12ad52e8412c667ec0f5bf055af", "subject": "srcu: Use irq_work to start GP in tiny SRCU", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43115", "commit_url": "https://git.kernel.org/stable/c/a6fc88b22bc8d12ad52e8412c667ec0f5bf055af" }, { "cve": "CVE-2026-43116", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5", "subject": "netfilter: ctnetlink: ensure safe access to master conntrack", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43116", "commit_url": "https://git.kernel.org/stable/c/bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5" }, { "cve": "CVE-2026-43117", "author_name": "Goldwyn Rodrigues", "author_email": "rgoldwyn@suse.de", "fix_sha": "a85b46db143fda5869e7d8df8f258ccef5fa1719", "subject": "btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43117", "commit_url": "https://git.kernel.org/stable/c/a85b46db143fda5869e7d8df8f258ccef5fa1719" }, { "cve": "CVE-2026-43118", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "5254d4181add9dfaa5e3519edd71cc8f752b2f85", "subject": "btrfs: fix zero size inode with non-zero size after log replay", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43118", "commit_url": "https://git.kernel.org/stable/c/5254d4181add9dfaa5e3519edd71cc8f752b2f85" }, { "cve": "CVE-2026-43119", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "b6807cfc195ef99e1ac37b2e1e60df40295daa8c", "subject": "Bluetooth: hci_sync: annotate data-races around hdev->req_status", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43119", "commit_url": "https://git.kernel.org/stable/c/b6807cfc195ef99e1ac37b2e1e60df40295daa8c" }, { "cve": "CVE-2026-43120", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "29a3edd7004bb635d299fb9bc6f0ea4ef13ed5a2", "subject": "RDMA/irdma: Fix double free related to rereg_user_mr", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43120", "commit_url": "https://git.kernel.org/stable/c/29a3edd7004bb635d299fb9bc6f0ea4ef13ed5a2" }, { "cve": "CVE-2026-43121", "author_name": "Kai Aizen", "author_email": "kai@snailsploit.com", "fix_sha": "003049b1c4fb8aabb93febb7d1e49004f6ad653b", "subject": "io_uring/zcrx: fix user_ref race between scrub and refill paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43121", "commit_url": "https://git.kernel.org/stable/c/003049b1c4fb8aabb93febb7d1e49004f6ad653b" }, { "cve": "CVE-2026-43123", "author_name": "Andrey Vatoropin", "author_email": "a.vatoropin@crpt.ru", "fix_sha": "011a0502801c8536f64141a2b61362c14f456544", "subject": "fbcon: check return value of con2fb_acquire_newinfo()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43123", "commit_url": "https://git.kernel.org/stable/c/011a0502801c8536f64141a2b61362c14f456544" }, { "cve": "CVE-2026-43124", "author_name": "Ruipeng Qi", "author_email": "ruipengqi3@gmail.com", "fix_sha": "05363abc7625cf18c96e67f50673cd07f11da5e9", "subject": "pstore: ram_core: fix incorrect success return when vmap() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43124", "commit_url": "https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9" }, { "cve": "CVE-2026-43125", "author_name": "Ezrak1e", "author_email": "ezrakiez@gmail.com", "fix_sha": "080e5563f878c64e697b89e7439d730d0daad882", "subject": "dlm: validate length in dlm_search_rsb_tree", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43125", "commit_url": "https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882" }, { "cve": "CVE-2026-43126", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "084d5d44418148662365eced3e126ad1a81ee3e2", "subject": "ALSA: mixer: oss: Add card disconnect checkpoints", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43126", "commit_url": "https://git.kernel.org/stable/c/084d5d44418148662365eced3e126ad1a81ee3e2" }, { "cve": "CVE-2026-43127", "author_name": "Szymon Wilczek", "author_email": "swilczek.lx@gmail.com", "fix_sha": "08ce2fee1b869ecbfbd94e0eb2630e52203a2e03", "subject": "ntfs3: fix circular locking dependency in run_unpack_ex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43127", "commit_url": "https://git.kernel.org/stable/c/08ce2fee1b869ecbfbd94e0eb2630e52203a2e03" }, { "cve": "CVE-2026-43128", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "104016eb671e19709721c1b0048dd912dc2e96be", "subject": "RDMA/umem: Fix double dma_buf_unpin in failure path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43128", "commit_url": "https://git.kernel.org/stable/c/104016eb671e19709721c1b0048dd912dc2e96be" }, { "cve": "CVE-2026-43129", "author_name": "Harshit Mogalapalli", "author_email": "harshit.m.mogalapalli@oracle.com", "fix_sha": "10d1c75ed4382a8e79874379caa2ead8952734f9", "subject": "ima: verify the previous kernel's IMA buffer lies in addressable RAM", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43129", "commit_url": "https://git.kernel.org/stable/c/10d1c75ed4382a8e79874379caa2ead8952734f9" }, { "cve": "CVE-2026-43130", "author_name": "Jinhui Guo", "author_email": "guojinhui.liam@bytedance.com", "fix_sha": "10e60d87813989e20eac1f3eda30b3bae461e7f9", "subject": "iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43130", "commit_url": "https://git.kernel.org/stable/c/10e60d87813989e20eac1f3eda30b3bae461e7f9" }, { "cve": "CVE-2026-43131", "author_name": "Jinzhou Su", "author_email": "jinzhou.su@amd.com", "fix_sha": "1197366cca89a4c44c541ddedb8ce8bf0757993d", "subject": "drm/amd/pm: Fix null pointer dereference issue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43131", "commit_url": "https://git.kernel.org/stable/c/1197366cca89a4c44c541ddedb8ce8bf0757993d" }, { "cve": "CVE-2026-43132", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "119f4f04186fa4f33ee6bd39af145cdaff1ff17f", "subject": "dm-verity: correctly handle dm_bufio_client_create() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43132", "commit_url": "https://git.kernel.org/stable/c/119f4f04186fa4f33ee6bd39af145cdaff1ff17f" }, { "cve": "CVE-2026-43133", "author_name": "Yosry Ahmed", "author_email": "yosry.ahmed@linux.dev", "fix_sha": "127ccae2c185f62e6ecb4bf24f9cb307e9b9c619", "subject": "KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation", "cvss_score": 7.9, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43133", "commit_url": "https://git.kernel.org/stable/c/127ccae2c185f62e6ecb4bf24f9cb307e9b9c619" }, { "cve": "CVE-2026-43134", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "138d7eca445ef37a0333425d269ee59900ca1104", "subject": "Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43134", "commit_url": "https://git.kernel.org/stable/c/138d7eca445ef37a0333425d269ee59900ca1104" }, { "cve": "CVE-2026-43135", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2", "subject": "media: cx23885: Add missing unmap in snd_cx23885_hw_params()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43135", "commit_url": "https://git.kernel.org/stable/c/141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2" }, { "cve": "CVE-2026-43136", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "1547d41f9f19d691c2c9ce4c29f746297baef9e9", "subject": "HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43136", "commit_url": "https://git.kernel.org/stable/c/1547d41f9f19d691c2c9ce4c29f746297baef9e9" }, { "cve": "CVE-2026-43137", "author_name": "Ranjani Sridharan", "author_email": "ranjani.sridharan@linux.intel.com", "fix_sha": "16c589567a956d46a7c1363af3f64de3d420af20", "subject": "ASoC: SOF: Intel: hda: Fix NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43137", "commit_url": "https://git.kernel.org/stable/c/16c589567a956d46a7c1363af3f64de3d420af20" }, { "cve": "CVE-2026-43138", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "16de4c6a8fe9ff497ca1aba33ef0dbee09f11952", "subject": "reset: gpio: suppress bind attributes in sysfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43138", "commit_url": "https://git.kernel.org/stable/c/16de4c6a8fe9ff497ca1aba33ef0dbee09f11952" }, { "cve": "CVE-2026-43139", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "1799d8abeabc68ec05679292aaf6cba93b343c05", "subject": "xfrm6: fix uninitialized saddr in xfrm6_get_saddr()", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43139", "commit_url": "https://git.kernel.org/stable/c/1799d8abeabc68ec05679292aaf6cba93b343c05" }, { "cve": "CVE-2026-43140", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "17abd396548035fbd6179ee1a431bd75d49676a7", "subject": "HID: magicmouse: Do not crash on missing msc->input", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43140", "commit_url": "https://git.kernel.org/stable/c/17abd396548035fbd6179ee1a431bd75d49676a7" }, { "cve": "CVE-2026-43141", "author_name": "Maciej Grochowski", "author_email": "maciej.grochowski@sony.com", "fix_sha": "186615f8855a0be4ee7d3fcd09a8ecc10e783b08", "subject": "ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43141", "commit_url": "https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08" }, { "cve": "CVE-2026-43142", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "1dabf00ee206eceb0f08a1fe5d1ce635f9064338", "subject": "media: iris: gen1: Destroy internal buffers after FW releases", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43142", "commit_url": "https://git.kernel.org/stable/c/1dabf00ee206eceb0f08a1fe5d1ce635f9064338" }, { "cve": "CVE-2026-43143", "author_name": "Douglas Anderson", "author_email": "dianders@chromium.org", "fix_sha": "20117c92bcf9c11afd64d7481d8f94fdf410726e", "subject": "mfd: core: Add locking around 'mfd_of_node_list'", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43143", "commit_url": "https://git.kernel.org/stable/c/20117c92bcf9c11afd64d7481d8f94fdf410726e" }, { "cve": "CVE-2026-43144", "author_name": "Marek Szyprowski", "author_email": "m.szyprowski@samsung.com", "fix_sha": "243307a0d1b0d01538e202c00454c28b21d4432e", "subject": "wifi: brcmfmac: Fix potential kernel oops when probe fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43144", "commit_url": "https://git.kernel.org/stable/c/243307a0d1b0d01538e202c00454c28b21d4432e" }, { "cve": "CVE-2026-43145", "author_name": "Peng Fan", "author_email": "peng.fan@nxp.com", "fix_sha": "26aa5295010ffaebcf8f1991c53fa7cf2ee1b20d", "subject": "remoteproc: imx_rproc: Fix invalid loaded resource table detection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43145", "commit_url": "https://git.kernel.org/stable/c/26aa5295010ffaebcf8f1991c53fa7cf2ee1b20d" }, { "cve": "CVE-2026-43146", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "2d0bbd982dfdd67da488a772f7a8a1bdca7642bf", "subject": "media: iris: Add buffer to list only after successful allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43146", "commit_url": "https://git.kernel.org/stable/c/2d0bbd982dfdd67da488a772f7a8a1bdca7642bf" }, { "cve": "CVE-2026-43147", "author_name": "Niklas Schnelle", "author_email": "schnelle@linux.ibm.com", "fix_sha": "2fa119c0e5e528453ebae9e70740e8d2d8c0ed5a", "subject": "Revert \"PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43147", "commit_url": "https://git.kernel.org/stable/c/2fa119c0e5e528453ebae9e70740e8d2d8c0ed5a" }, { "cve": "CVE-2026-43148", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "33c1c6d8a28a2761ac74b0380b2563cf546c2a3a", "subject": "powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43148", "commit_url": "https://git.kernel.org/stable/c/33c1c6d8a28a2761ac74b0380b2563cf546c2a3a" }, { "cve": "CVE-2026-43149", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "36bd7d5deef936c4e1e3cd341598140e5c14c1d3", "subject": "net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43149", "commit_url": "https://git.kernel.org/stable/c/36bd7d5deef936c4e1e3cd341598140e5c14c1d3" }, { "cve": "CVE-2026-43150", "author_name": "Robin Murphy", "author_email": "robin.murphy@arm.com", "fix_sha": "36c0de02575ce59dfd879eb4ef63d53a68bbf9ce", "subject": "perf/arm-cmn: Reject unsupported hardware configurations", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43150", "commit_url": "https://git.kernel.org/stable/c/36c0de02575ce59dfd879eb4ef63d53a68bbf9ce" }, { "cve": "CVE-2026-43151", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "370e19042fb8ac68109f8bdb0fdd8118baf39318", "subject": "Revert \"media: iris: Add sanity check for stop streaming\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43151", "commit_url": "https://git.kernel.org/stable/c/370e19042fb8ac68109f8bdb0fdd8118baf39318" }, { "cve": "CVE-2026-43152", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "3756a272d2cf356d2203da8474d173257f5f8521", "subject": "HID: hid-pl: handle probe errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43152", "commit_url": "https://git.kernel.org/stable/c/3756a272d2cf356d2203da8474d173257f5f8521" }, { "cve": "CVE-2026-43153", "author_name": "Christoph Hellwig", "author_email": "hch@lst.de", "fix_sha": "3a65ea768b8094e4699e72f9ab420eb9e0f3f568", "subject": "xfs: remove xfs_attr_leaf_hasname", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43153", "commit_url": "https://git.kernel.org/stable/c/3a65ea768b8094e4699e72f9ab420eb9e0f3f568" }, { "cve": "CVE-2026-43154", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "3afa4da38802a4cba1c23848a32284e7e57b831b", "subject": "erofs: fix incorrect early exits in volume label handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43154", "commit_url": "https://git.kernel.org/stable/c/3afa4da38802a4cba1c23848a32284e7e57b831b" }, { "cve": "CVE-2026-43155", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "3c4ae63073d84abee5d81ce46d86a94e9dae9c89", "subject": "mux: mmio: fix regmap leak on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43155", "commit_url": "https://git.kernel.org/stable/c/3c4ae63073d84abee5d81ce46d86a94e9dae9c89" }, { "cve": "CVE-2026-43156", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "3d7e6ce34f4fcc7083510c28b17a7c36462a25d4", "subject": "net: usb: pegasus: enable basic endpoint checking", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43156", "commit_url": "https://git.kernel.org/stable/c/3d7e6ce34f4fcc7083510c28b17a7c36462a25d4" }, { "cve": "CVE-2026-43157", "author_name": "Bo Sun", "author_email": "bo@mboxify.com", "fix_sha": "3def995c4ede842adf509c410e92d09a0cedc965", "subject": "octeontx2-af: CGX: fix bitmap leaks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43157", "commit_url": "https://git.kernel.org/stable/c/3def995c4ede842adf509c410e92d09a0cedc965" }, { "cve": "CVE-2026-43158", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "3eefc0c2b78444b64feeb3783c017d6adc3cd3ce", "subject": "xfs: fix freemap adjustments when adding xattrs to leaf blocks", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43158", "commit_url": "https://git.kernel.org/stable/c/3eefc0c2b78444b64feeb3783c017d6adc3cd3ce" }, { "cve": "CVE-2026-43159", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "41460a19654c32d39fd0e3a3671cd8d4b7b8479f", "subject": "staging: rtl8723bs: fix null dereference in find_network", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43159", "commit_url": "https://git.kernel.org/stable/c/41460a19654c32d39fd0e3a3671cd8d4b7b8479f" }, { "cve": "CVE-2026-43160", "author_name": "Janne Grunau", "author_email": "j@jannau.net", "fix_sha": "414f65d6736342c77d4ec5e7373039f4a09250dd", "subject": "mfd: macsmc: Initialize mutex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43160", "commit_url": "https://git.kernel.org/stable/c/414f65d6736342c77d4ec5e7373039f4a09250dd" }, { "cve": "CVE-2026-43161", "author_name": "Jinhui Guo", "author_email": "guojinhui.liam@bytedance.com", "fix_sha": "42662d19839f34735b718129ea200e3734b07e50", "subject": "iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43161", "commit_url": "https://git.kernel.org/stable/c/42662d19839f34735b718129ea200e3734b07e50" }, { "cve": "CVE-2026-43162", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "43e5302d22334f1183dec3e0d5d8007eefe2817c", "subject": "media: tegra-video: Fix memory leak in __tegra_channel_try_format()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43162", "commit_url": "https://git.kernel.org/stable/c/43e5302d22334f1183dec3e0d5d8007eefe2817c" }, { "cve": "CVE-2026-43163", "author_name": "Jack Wang", "author_email": "jinpu.wang@ionos.com", "fix_sha": "46ef85f854dfa9d5226b3c1c46493d79556c9589", "subject": "md/bitmap: fix GPF in write_page caused by resize race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43163", "commit_url": "https://git.kernel.org/stable/c/46ef85f854dfa9d5226b3c1c46493d79556c9589" }, { "cve": "CVE-2026-43164", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "470c7ca2b4c3e3a51feeb952b7f97a775b5c49cd", "subject": "udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43164", "commit_url": "https://git.kernel.org/stable/c/470c7ca2b4c3e3a51feeb952b7f97a775b5c49cd" }, { "cve": "CVE-2026-43165", "author_name": "Felix Gu", "author_email": "gu_0233@qq.com", "fix_sha": "4923bbff0bcffe488b3aa76829c829bd15b02585", "subject": "hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43165", "commit_url": "https://git.kernel.org/stable/c/4923bbff0bcffe488b3aa76829c829bd15b02585" }, { "cve": "CVE-2026-43166", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "4a2d046e4b13202a6301a993961f5b30ae4d7119", "subject": "erofs: fix interlaced plain identification for encoded extents", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43166", "commit_url": "https://git.kernel.org/stable/c/4a2d046e4b13202a6301a993961f5b30ae4d7119" }, { "cve": "CVE-2026-43167", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "4efa91a28576054aae0e6dad9cba8fed8293aef8", "subject": "xfrm: always flush state and policy upon NETDEV_UNREGISTER event", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43167", "commit_url": "https://git.kernel.org/stable/c/4efa91a28576054aae0e6dad9cba8fed8293aef8" }, { "cve": "CVE-2026-43168", "author_name": "Heming Zhao", "author_email": "heming.zhao@suse.com", "fix_sha": "5138c936c2c82c9be8883921854bc6f7e1177d8c", "subject": "ocfs2: fix reflink preserve cleanup issue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43168", "commit_url": "https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c" }, { "cve": "CVE-2026-43169", "author_name": "Sanjay Yadav", "author_email": "sanjay.kumar.yadav@intel.com", "fix_sha": "5488a29596cdba93a60a79398dc9b69d5bdadf92", "subject": "drm/buddy: Prevent BUG_ON by validating rounded allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43169", "commit_url": "https://git.kernel.org/stable/c/5488a29596cdba93a60a79398dc9b69d5bdadf92" }, { "cve": "CVE-2026-43170", "author_name": "Prashanth K", "author_email": "prashanth.k@oss.qualcomm.com", "fix_sha": "54aaa3b387c2f580a99dc86a9cc2eb6dfaf599a7", "subject": "usb: dwc3: gadget: Move vbus draw to workqueue context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43170", "commit_url": "https://git.kernel.org/stable/c/54aaa3b387c2f580a99dc86a9cc2eb6dfaf599a7" }, { "cve": "CVE-2026-43171", "author_name": "Mauro Carvalho Chehab", "author_email": "mchehab+huawei@kernel.org", "fix_sha": "55cc6fe5716f678f06bcb95140882dfa684464ec", "subject": "EFI/CPER: don't dump the entire memory region", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43171", "commit_url": "https://git.kernel.org/stable/c/55cc6fe5716f678f06bcb95140882dfa684464ec" }, { "cve": "CVE-2026-43172", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "58192b9ce09b0f0f86e2036683bd542130b91a98", "subject": "wifi: iwlwifi: fix 22000 series SMEM parsing", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43172", "commit_url": "https://git.kernel.org/stable/c/58192b9ce09b0f0f86e2036683bd542130b91a98" }, { "cve": "CVE-2026-43173", "author_name": "Linus Walleij", "author_email": "linusw@kernel.org", "fix_sha": "594163ea88a03bdb412063af50fc7177ef3cbeae", "subject": "net: ethernet: xscale: Check for PTP support properly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43173", "commit_url": "https://git.kernel.org/stable/c/594163ea88a03bdb412063af50fc7177ef3cbeae" }, { "cve": "CVE-2026-43174", "author_name": "Pavel Begunkov", "author_email": "asml.silence@gmail.com", "fix_sha": "5d540e4508950c674d6feef1d95463d039bbf4f5", "subject": "io_uring/zcrx: fix post open error handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43174", "commit_url": "https://git.kernel.org/stable/c/5d540e4508950c674d6feef1d95463d039bbf4f5" }, { "cve": "CVE-2026-43175", "author_name": "Marek Vasut", "author_email": "marek.vasut+renesas@mailbox.org", "fix_sha": "5ec820fc28d0b8a0f3890d476b1976f20e8343cc", "subject": "clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43175", "commit_url": "https://git.kernel.org/stable/c/5ec820fc28d0b8a0f3890d476b1976f20e8343cc" }, { "cve": "CVE-2026-43176", "author_name": "Ping-Ke Shih", "author_email": "pkshih@realtek.com", "fix_sha": "5f93d611b33a05bd03d6843c8efe8cb6a1992620", "subject": "wifi: rtw89: pci: validate release report content before using for RTL8922DE", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43176", "commit_url": "https://git.kernel.org/stable/c/5f93d611b33a05bd03d6843c8efe8cb6a1992620" }, { "cve": "CVE-2026-43177", "author_name": "Bingbu Cao", "author_email": "bingbu.cao@intel.com", "fix_sha": "6099f78e4c9223f4de4169d2fd1cded01279da1a", "subject": "media: ipu6: Fix RPM reference leak in probe error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43177", "commit_url": "https://git.kernel.org/stable/c/6099f78e4c9223f4de4169d2fd1cded01279da1a" }, { "cve": "CVE-2026-43178", "author_name": "Andrii Nakryiko", "author_email": "andrii@kernel.org", "fix_sha": "61dc9f776705d6db6847c101b98fa4f0e9eb6fa3", "subject": "procfs: fix possible double mmput() in do_procmap_query()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43178", "commit_url": "https://git.kernel.org/stable/c/61dc9f776705d6db6847c101b98fa4f0e9eb6fa3" }, { "cve": "CVE-2026-43179", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "643575d5a4f24b23b0c54aa20aa74a4abed8ff5e", "subject": "erofs: fix incorrect early exits for invalid metabox-enabled images", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43179", "commit_url": "https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e" }, { "cve": "CVE-2026-43180", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "64868f5ecadeb359a49bc4485bfa7c497047f13a", "subject": "net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43180", "commit_url": "https://git.kernel.org/stable/c/64868f5ecadeb359a49bc4485bfa7c497047f13a" }, { "cve": "CVE-2026-43181", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "6766f59012301f1bf3f46c6e7149caca45d92309", "subject": "gpio: sysfs: fix chip removal with GPIOs exported over sysfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43181", "commit_url": "https://git.kernel.org/stable/c/6766f59012301f1bf3f46c6e7149caca45d92309" }, { "cve": "CVE-2026-43182", "author_name": "Sakari Ailus", "author_email": "sakari.ailus@linux.intel.com", "fix_sha": "679f0b7b6a409750a25754c8833e268e5fdde742", "subject": "media: ccs: Avoid possible division by zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43182", "commit_url": "https://git.kernel.org/stable/c/679f0b7b6a409750a25754c8833e268e5fdde742" }, { "cve": "CVE-2026-43183", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "68cd8ac994cac38a305200f638b30e13c690753b", "subject": "media: cx25821: Fix a resource leak in cx25821_dev_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43183", "commit_url": "https://git.kernel.org/stable/c/68cd8ac994cac38a305200f638b30e13c690753b" }, { "cve": "CVE-2026-43184", "author_name": "Md Haris Iqbal", "author_email": "haris.iqbal@ionos.com", "fix_sha": "69d26698e4fd44935510553809007151b2fe4db5", "subject": "rnbd-srv: Zero the rsp buffer before using it", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43184", "commit_url": "https://git.kernel.org/stable/c/69d26698e4fd44935510553809007151b2fe4db5" }, { "cve": "CVE-2026-43185", "author_name": "Nicholas Carlini", "author_email": "nicholas@carlini.com", "fix_sha": "6b4f875aac344cdd52a1f34cc70ed2f874a65757", "subject": "ksmbd: fix signededness bug in smb_direct_prepare_negotiation()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43185", "commit_url": "https://git.kernel.org/stable/c/6b4f875aac344cdd52a1f34cc70ed2f874a65757" }, { "cve": "CVE-2026-43186", "author_name": "Qanux", "author_email": "qjx1298677004@gmail.com", "fix_sha": "6db8b56eed62baacaf37486e83378a72635c04cc", "subject": "ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43186", "commit_url": "https://git.kernel.org/stable/c/6db8b56eed62baacaf37486e83378a72635c04cc" }, { "cve": "CVE-2026-43187", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "6f13c1d2a6271c2e73226864a0e83de2770b6f34", "subject": "xfs: delete attr leaf freemap entries when empty", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43187", "commit_url": "https://git.kernel.org/stable/c/6f13c1d2a6271c2e73226864a0e83de2770b6f34" }, { "cve": "CVE-2026-43188", "author_name": "Sam Edwards", "author_email": "cfsworks@gmail.com", "fix_sha": "707104682e3c163f7c14cdd6b07a3e95fb374759", "subject": "ceph: do not propagate page array emplacement errors as batch errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43188", "commit_url": "https://git.kernel.org/stable/c/707104682e3c163f7c14cdd6b07a3e95fb374759" }, { "cve": "CVE-2026-43189", "author_name": "Sakari Ailus", "author_email": "sakari.ailus@linux.intel.com", "fix_sha": "7345d6d356336c448d6b9230ed8704f39679fd12", "subject": "media: v4l2-async: Fix error handling on steps after finding a match", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43189", "commit_url": "https://git.kernel.org/stable/c/7345d6d356336c448d6b9230ed8704f39679fd12" }, { "cve": "CVE-2026-43190", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "735ee8582da3d239eb0c7a53adca61b79fb228b3", "subject": "netfilter: xt_tcpmss: check remaining length before reading optlen", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190", "commit_url": "https://git.kernel.org/stable/c/735ee8582da3d239eb0c7a53adca61b79fb228b3" }, { "cve": "CVE-2026-43191", "author_name": "Nicholas Kazlauskas", "author_email": "nicholas.kazlauskas@amd.com", "fix_sha": "75372d75a4e23783583998ed99d5009d555850da", "subject": "drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43191", "commit_url": "https://git.kernel.org/stable/c/75372d75a4e23783583998ed99d5009d555850da" }, { "cve": "CVE-2026-43192", "author_name": "Benjamin Marzinski", "author_email": "bmarzins@redhat.com", "fix_sha": "787bd63ee661b0148ce8e1fde92b7afddd85c446", "subject": "dm mpath: Add missing dm_put_device when failing to get scsi dh name", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43192", "commit_url": "https://git.kernel.org/stable/c/787bd63ee661b0148ce8e1fde92b7afddd85c446" }, { "cve": "CVE-2026-43193", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "789477b849394afdb60507924d65f7ef18f078ce", "subject": "nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43193", "commit_url": "https://git.kernel.org/stable/c/789477b849394afdb60507924d65f7ef18f078ce" }, { "cve": "CVE-2026-43194", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "7aa767d0d3d04e50ae94e770db7db8197f666970", "subject": "net: consume xmit errors of GSO frames", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43194", "commit_url": "https://git.kernel.org/stable/c/7aa767d0d3d04e50ae94e770db7db8197f666970" }, { "cve": "CVE-2026-43195", "author_name": "Jesse.Zhang", "author_email": "jesse.zhang@amd.com", "fix_sha": "8079b87c02e531cc91601f72ea8336dd2262fdf1", "subject": "drm/amdgpu: validate user queue size constraints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43195", "commit_url": "https://git.kernel.org/stable/c/8079b87c02e531cc91601f72ea8336dd2262fdf1" }, { "cve": "CVE-2026-43196", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "80db65d4acfb9ff12d00172aed39ea8b98261aad", "subject": "soc: ti: pruss: Fix double free in pruss_clk_mux_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43196", "commit_url": "https://git.kernel.org/stable/c/80db65d4acfb9ff12d00172aed39ea8b98261aad" }, { "cve": "CVE-2026-43197", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "82aec772fca2223bc5774bd9af486fd95766e578", "subject": "netconsole: avoid OOB reads, msg is not nul-terminated", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43197", "commit_url": "https://git.kernel.org/stable/c/82aec772fca2223bc5774bd9af486fd95766e578" }, { "cve": "CVE-2026-43198", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "858d2a4f67ff69e645a43487ef7ea7f28f06deae", "subject": "tcp: fix potential race in tcp_v6_syn_recv_sock()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43198", "commit_url": "https://git.kernel.org/stable/c/858d2a4f67ff69e645a43487ef7ea7f28f06deae" }, { "cve": "CVE-2026-43199", "author_name": "Jianbo Liu", "author_email": "jianbol@nvidia.com", "fix_sha": "859380694f434597407632c29f30fdb5e763e6cc", "subject": "net/mlx5e: Fix \"scheduling while atomic\" in IPsec MAC address query", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43199", "commit_url": "https://git.kernel.org/stable/c/859380694f434597407632c29f30fdb5e763e6cc" }, { "cve": "CVE-2026-43200", "author_name": "Manikanta Maddireddy", "author_email": "mmaddireddy@nvidia.com", "fix_sha": "8754dd7639ab0fd68c3ab9d91c7bdecc3e5740a8", "subject": "PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43200", "commit_url": "https://git.kernel.org/stable/c/8754dd7639ab0fd68c3ab9d91c7bdecc3e5740a8" }, { "cve": "CVE-2026-43201", "author_name": "Mauro Carvalho Chehab", "author_email": "mchehab+huawei@kernel.org", "fix_sha": "87880af2d24e62a84ed19943dbdd524f097172f2", "subject": "APEI/GHES: ARM processor Error: don't go past allocated memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43201", "commit_url": "https://git.kernel.org/stable/c/87880af2d24e62a84ed19943dbdd524f097172f2" }, { "cve": "CVE-2026-43202", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "88b3b9924337336a31cefbe99a22ed09401be74a", "subject": "fbdev: vt8500lcdfb: fix missing dma_free_coherent()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43202", "commit_url": "https://git.kernel.org/stable/c/88b3b9924337336a31cefbe99a22ed09401be74a" }, { "cve": "CVE-2026-43203", "author_name": "Duoming Zhou", "author_email": "duoming@zju.edu.cn", "fix_sha": "8930878101cd40063888a68af73b1b0f8b6c79bc", "subject": "atm: fore200e: fix use-after-free in tasklets during device removal", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43203", "commit_url": "https://git.kernel.org/stable/c/8930878101cd40063888a68af73b1b0f8b6c79bc" }, { "cve": "CVE-2026-43204", "author_name": "C\u00e9dric Bellegarde", "author_email": "cedric.bellegarde@adishatz.org", "fix_sha": "8a066a81ee0c1b6cdbd81393536c3b2d19ccef25", "subject": "ASoC: qcom: q6asm: drop DSP responses for closed data streams", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43204", "commit_url": "https://git.kernel.org/stable/c/8a066a81ee0c1b6cdbd81393536c3b2d19ccef25" }, { "cve": "CVE-2026-43205", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "8a5752c6dcc085a3bfc78589925182e4e98468c5", "subject": "dpaa2-switch: validate num_ifs to prevent out-of-bounds write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43205", "commit_url": "https://git.kernel.org/stable/c/8a5752c6dcc085a3bfc78589925182e4e98468c5" }, { "cve": "CVE-2026-43206", "author_name": "Sunday Clement", "author_email": "sunday.clement@amd.com", "fix_sha": "8a70a26c9f34baea6c3199a9862ddaff4554a96d", "subject": "drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43206", "commit_url": "https://git.kernel.org/stable/c/8a70a26c9f34baea6c3199a9862ddaff4554a96d" }, { "cve": "CVE-2026-43207", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "8a8a3232abac5b972058a5f2cb3e33199d2a8648", "subject": "media: mtk-mdp: Fix error handling in probe function", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43207", "commit_url": "https://git.kernel.org/stable/c/8a8a3232abac5b972058a5f2cb3e33199d2a8648" }, { "cve": "CVE-2026-43208", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8a8a9fac9efa6423fd74938b940cb7d731780718", "subject": "net: do not pass flow_id to set_rps_cpu()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43208", "commit_url": "https://git.kernel.org/stable/c/8a8a9fac9efa6423fd74938b940cb7d731780718" }, { "cve": "CVE-2026-43209", "author_name": "Jori Koolstra", "author_email": "jkoolstra@xs4all.nl", "fix_sha": "8c97a6ddc95690a938ded44b4e3202f03f15078c", "subject": "minix: Add required sanity checking to minix_check_superblock()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43209", "commit_url": "https://git.kernel.org/stable/c/8c97a6ddc95690a938ded44b4e3202f03f15078c" }, { "cve": "CVE-2026-43210", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "912b0ee248c529a4f45d1e7f568dc1adddbf2a4a", "subject": "tracing: ring-buffer: Fix to check event length before using", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43210", "commit_url": "https://git.kernel.org/stable/c/912b0ee248c529a4f45d1e7f568dc1adddbf2a4a" }, { "cve": "CVE-2026-43211", "author_name": "Jinhui Guo", "author_email": "guojinhui.liam@bytedance.com", "fix_sha": "9368d1ee62829b08aa31836b3ca003803caf0b72", "subject": "PCI: Fix pci_slot_trylock() error handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43211", "commit_url": "https://git.kernel.org/stable/c/9368d1ee62829b08aa31836b3ca003803caf0b72" }, { "cve": "CVE-2026-43212", "author_name": "John Garry", "author_email": "john.g.garry@oracle.com", "fix_sha": "94b0c831eda778ae9e4f2164a8b3de485d8977bb", "subject": "LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43212", "commit_url": "https://git.kernel.org/stable/c/94b0c831eda778ae9e4f2164a8b3de485d8977bb" }, { "cve": "CVE-2026-43213", "author_name": "Ping-Ke Shih", "author_email": "pkshih@realtek.com", "fix_sha": "957eda596c7665f2966970fd1dcc35fe299b38e8", "subject": "wifi: rtw89: pci: validate sequence number of TX release report", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43213", "commit_url": "https://git.kernel.org/stable/c/957eda596c7665f2966970fd1dcc35fe299b38e8" }, { "cve": "CVE-2026-43214", "author_name": "Vasiliy Kovalev", "author_email": "kovalev@altlinux.org", "fix_sha": "95d848dc7e639988dbb385a8cba9b484607cf98c", "subject": "KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43214", "commit_url": "https://git.kernel.org/stable/c/95d848dc7e639988dbb385a8cba9b484607cf98c" }, { "cve": "CVE-2026-43215", "author_name": "Shyam Prasad N", "author_email": "sprasad@microsoft.com", "fix_sha": "96c4af418586ee9a6aab61738644366426e05316", "subject": "cifs: Fix locking usage for tcon fields", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43215", "commit_url": "https://git.kernel.org/stable/c/96c4af418586ee9a6aab61738644366426e05316" }, { "cve": "CVE-2026-43216", "author_name": "Sebastian Andrzej Siewior", "author_email": "bigeasy@linutronix.de", "fix_sha": "983512f3a87fd8dc4c94dfa6b596b6e57df5aad7", "subject": "net: Drop the lock in skb_may_tx_timestamp()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43216", "commit_url": "https://git.kernel.org/stable/c/983512f3a87fd8dc4c94dfa6b596b6e57df5aad7" }, { "cve": "CVE-2026-43217", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "9aa8d63d09cfc44d879427cc5ba308012ca4ab8e", "subject": "media: iris: gen2: Add sanity check for session stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43217", "commit_url": "https://git.kernel.org/stable/c/9aa8d63d09cfc44d879427cc5ba308012ca4ab8e" }, { "cve": "CVE-2026-43218", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "9cea16fea47e5553f51d10957677ff735b1eff03", "subject": "media: i2c/tw9903: Fix potential memory leak in tw9903_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43218", "commit_url": "https://git.kernel.org/stable/c/9cea16fea47e5553f51d10957677ff735b1eff03" }, { "cve": "CVE-2026-43219", "author_name": "Kevin Hao", "author_email": "haokexin@gmail.com", "fix_sha": "9d724b34fbe13b71865ad0906a4be97571f19cf5", "subject": "net: cpsw_new: Fix potential unregister of netdev that has not been registered yet", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43219", "commit_url": "https://git.kernel.org/stable/c/9d724b34fbe13b71865ad0906a4be97571f19cf5" }, { "cve": "CVE-2026-43220", "author_name": "Ankit Soni", "author_email": "ankit.soni@amd.com", "fix_sha": "9e249c48412828e807afddc21527eb734dc9bd3d", "subject": "iommu/amd: serialize sequence allocation under concurrent TLB invalidations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43220", "commit_url": "https://git.kernel.org/stable/c/9e249c48412828e807afddc21527eb734dc9bd3d" }, { "cve": "CVE-2026-43221", "author_name": "Matt Johnston", "author_email": "matt@codeconstruct.com.au", "fix_sha": "9f235ccecd03c436cb1683eac16b12f119e54aa9", "subject": "ipmi: ipmb: initialise event handler read bytes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43221", "commit_url": "https://git.kernel.org/stable/c/9f235ccecd03c436cb1683eac16b12f119e54aa9" }, { "cve": "CVE-2026-43222", "author_name": "Benjamin Gaignard", "author_email": "benjamin.gaignard@collabora.com", "fix_sha": "a505ca2db89ad92a8d8d27fa68ebafb12e04a679", "subject": "media: verisilicon: AV1: Fix tile info buffer size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43222", "commit_url": "https://git.kernel.org/stable/c/a505ca2db89ad92a8d8d27fa68ebafb12e04a679" }, { "cve": "CVE-2026-43223", "author_name": "Szymon Wilczek", "author_email": "szymonwilczek@gmx.com", "fix_sha": "a8333c8262aed2aedf608c18edd39cf5342680a7", "subject": "media: pvrusb2: fix URB leak in pvr2_send_request_ex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43223", "commit_url": "https://git.kernel.org/stable/c/a8333c8262aed2aedf608c18edd39cf5342680a7" }, { "cve": "CVE-2026-43224", "author_name": "Pavel Begunkov", "author_email": "asml.silence@gmail.com", "fix_sha": "a983aae397767e9da931128ff2b5bf9066513ce3", "subject": "io_uring/zcrx: fix sgtable leak on mapping failures", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43224", "commit_url": "https://git.kernel.org/stable/c/a983aae397767e9da931128ff2b5bf9066513ce3" }, { "cve": "CVE-2026-43225", "author_name": "Diksha Kumari", "author_email": "dikshakdevgan@gmail.com", "fix_sha": "abe850d82c8cb72d28700673678724e779b1826e", "subject": "staging: rtl8723bs: fix memory leak on failure path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43225", "commit_url": "https://git.kernel.org/stable/c/abe850d82c8cb72d28700673678724e779b1826e" }, { "cve": "CVE-2026-43226", "author_name": "Gerd Rausch", "author_email": "gerd.rausch@oracle.com", "fix_sha": "ad22d24be635c6beab6a1fdd3f8b1f3c478d15da", "subject": "net/rds: No shortcut out of RDS_CONN_ERROR", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43226", "commit_url": "https://git.kernel.org/stable/c/ad22d24be635c6beab6a1fdd3f8b1f3c478d15da" }, { "cve": "CVE-2026-43227", "author_name": "Niklas S\u00f6derlund", "author_email": "niklas.soderlund+renesas@ragnatech.se", "fix_sha": "b1278972b08e480990e2789bdc6a7c918bc349be", "subject": "clocksource/drivers/sh_tmu: Always leave device running after probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43227", "commit_url": "https://git.kernel.org/stable/c/b1278972b08e480990e2789bdc6a7c918bc349be" }, { "cve": "CVE-2026-43228", "author_name": "Jori Koolstra", "author_email": "jkoolstra@xs4all.nl", "fix_sha": "b226804532a875c10276168dc55ce752944096bd", "subject": "hfs: Replace BUG_ON with error handling for CNID count checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43228", "commit_url": "https://git.kernel.org/stable/c/b226804532a875c10276168dc55ce752944096bd" }, { "cve": "CVE-2026-43229", "author_name": "Xulin Sun", "author_email": "xulin.sun@windriver.com", "fix_sha": "b74cedac643b02aefa7da881b58a3792859d9748", "subject": "media: chips-media: wave5: Fix device cleanup order to prevent kernel panic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43229", "commit_url": "https://git.kernel.org/stable/c/b74cedac643b02aefa7da881b58a3792859d9748" }, { "cve": "CVE-2026-43230", "author_name": "H\u00e5kon Bugge", "author_email": "haakon.bugge@oracle.com", "fix_sha": "b89fc7c2523b2b0750d91840f4e52521270d70ed", "subject": "net/rds: Clear reconnect pending bit", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43230", "commit_url": "https://git.kernel.org/stable/c/b89fc7c2523b2b0750d91840f4e52521270d70ed" }, { "cve": "CVE-2026-43231", "author_name": "Shaurya Rane", "author_email": "ssrane_b23@ee.vjti.ac.in", "fix_sha": "b8bf939d77c0cd01118e953bbf554e0fa15e9006", "subject": "media: radio-keene: fix memory leak in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43231", "commit_url": "https://git.kernel.org/stable/c/b8bf939d77c0cd01118e953bbf554e0fa15e9006" }, { "cve": "CVE-2026-43232", "author_name": "Duoming Zhou", "author_email": "duoming@zju.edu.cn", "fix_sha": "bae8a5d2e759da2e0cba33ab2080deee96a09373", "subject": "net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43232", "commit_url": "https://git.kernel.org/stable/c/bae8a5d2e759da2e0cba33ab2080deee96a09373" }, { "cve": "CVE-2026-43233", "author_name": "Vahagn Vardanian", "author_email": "vahagn@redrays.io", "fix_sha": "baed0d9ba91d4f390da12d5039128ee897253d60", "subject": "netfilter: nf_conntrack_h323: fix OOB read in decode_choice()", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43233", "commit_url": "https://git.kernel.org/stable/c/baed0d9ba91d4f390da12d5039128ee897253d60" }, { "cve": "CVE-2026-43234", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "bb4c698633c0e19717586a6524a33196cff01a32", "subject": "team: avoid NETDEV_CHANGEMTU event when unregistering slave", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43234", "commit_url": "https://git.kernel.org/stable/c/bb4c698633c0e19717586a6524a33196cff01a32" }, { "cve": "CVE-2026-43235", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "bbef55f414100853d5bcea56a41f8b171bac8fcb", "subject": "media: iris: Add missing platform data entries for SM8750", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43235", "commit_url": "https://git.kernel.org/stable/c/bbef55f414100853d5bcea56a41f8b171bac8fcb" }, { "cve": "CVE-2026-43236", "author_name": "Ludovic Desroches", "author_email": "ludovic.desroches@microchip.com", "fix_sha": "bc847787233277a337788568e90a6ee1557595eb", "subject": "drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43236", "commit_url": "https://git.kernel.org/stable/c/bc847787233277a337788568e90a6ee1557595eb" }, { "cve": "CVE-2026-43237", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "bd8150a1b3370a9f7761c5814202a3fe5a79f44f", "subject": "drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43237", "commit_url": "https://git.kernel.org/stable/c/bd8150a1b3370a9f7761c5814202a3fe5a79f44f" }, { "cve": "CVE-2026-43238", "author_name": "Ruitong Liu", "author_email": "cnitlrt@gmail.com", "fix_sha": "be054cc66f739a9ba615dba9012a07fab8e7dd6f", "subject": "net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43238", "commit_url": "https://git.kernel.org/stable/c/be054cc66f739a9ba615dba9012a07fab8e7dd6f" }, { "cve": "CVE-2026-43239", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "c3c06e42e1527716c54f3ad2ced6a034b5f3a489", "subject": "smb: client: prevent races in ->query_interfaces()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43239", "commit_url": "https://git.kernel.org/stable/c/c3c06e42e1527716c54f3ad2ced6a034b5f3a489" }, { "cve": "CVE-2026-43240", "author_name": "Harshit Mogalapalli", "author_email": "harshit.m.mogalapalli@oracle.com", "fix_sha": "c5489d04337b47e93c0623e8145fcba3f5739efd", "subject": "x86/kexec: add a sanity check on previous kernel's ima kexec buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43240", "commit_url": "https://git.kernel.org/stable/c/c5489d04337b47e93c0623e8145fcba3f5739efd" }, { "cve": "CVE-2026-43241", "author_name": "Maciej Grochowski", "author_email": "maciej.grochowski@sony.com", "fix_sha": "c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface", "subject": "ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43241", "commit_url": "https://git.kernel.org/stable/c/c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface" }, { "cve": "CVE-2026-43242", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "c933138d45176780fabbbe7da263e04d5b3e525d", "subject": "soc: ti: k3-socinfo: Fix regmap leak on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43242", "commit_url": "https://git.kernel.org/stable/c/c933138d45176780fabbbe7da263e04d5b3e525d" }, { "cve": "CVE-2026-43243", "author_name": "Dmytro Laktyushkin", "author_email": "dmytro.laktyushkin@amd.com", "fix_sha": "c979d8db7b0f293111f2e83795ea353c8ed75de9", "subject": "drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43243", "commit_url": "https://git.kernel.org/stable/c/c979d8db7b0f293111f2e83795ea353c8ed75de9" }, { "cve": "CVE-2026-43244", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "ca220141fa8ebae09765a242076b2b77338106b0", "subject": "kcm: fix zero-frag skb in frag_list on partial sendmsg error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43244", "commit_url": "https://git.kernel.org/stable/c/ca220141fa8ebae09765a242076b2b77338106b0" }, { "cve": "CVE-2026-43245", "author_name": "Al Viro", "author_email": "viro@zeniv.linux.org.uk", "fix_sha": "ca2a04e84af79596e5cd9cfe697d5122ec39c8ce", "subject": "ntfs: ->d_compare() must not block", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43245", "commit_url": "https://git.kernel.org/stable/c/ca2a04e84af79596e5cd9cfe697d5122ec39c8ce" }, { "cve": "CVE-2026-43246", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "cad237b6c875fbee5d353a2b289e98d240d17ec8", "subject": "media: i2c/tw9906: Fix potential memory leak in tw9906_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43246", "commit_url": "https://git.kernel.org/stable/c/cad237b6c875fbee5d353a2b289e98d240d17ec8" }, { "cve": "CVE-2026-43247", "author_name": "Jackson Lee", "author_email": "jackson.lee@chipsnmedia.com", "fix_sha": "cbb9c0d50e471483cced55f5b7db4569dcd959a6", "subject": "media: chips-media: wave5: Fix SError of kernel panic when closed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43247", "commit_url": "https://git.kernel.org/stable/c/cbb9c0d50e471483cced55f5b7db4569dcd959a6" }, { "cve": "CVE-2026-43248", "author_name": "Eugenio P\u00e9rez", "author_email": "eperezma@redhat.com", "fix_sha": "cd025c1e876b4e262e71398236a1550486a73ede", "subject": "vhost: move vdpa group bound check to vhost_vdpa", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43248", "commit_url": "https://git.kernel.org/stable/c/cd025c1e876b4e262e71398236a1550486a73ede" }, { "cve": "CVE-2026-43249", "author_name": "Stefano Stabellini", "author_email": "stefano.stabellini@amd.com", "fix_sha": "ce8ded2e61f47747e31eeefb44dc24a2160a7e32", "subject": "9p/xen: protect xen_9pfs_front_free against concurrent calls", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43249", "commit_url": "https://git.kernel.org/stable/c/ce8ded2e61f47747e31eeefb44dc24a2160a7e32" }, { "cve": "CVE-2026-43250", "author_name": "Mario Peter", "author_email": "mario.peter@leica-geosystems.com", "fix_sha": "cea2a1257a3b5ea3e769a445b34af13e6aa5a123", "subject": "usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43250", "commit_url": "https://git.kernel.org/stable/c/cea2a1257a3b5ea3e769a445b34af13e6aa5a123" }, { "cve": "CVE-2026-43251", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "cee8337e1bad168136aecfe6416ecd7d3aa7529a", "subject": "HID: prodikeys: Check presence of pm->input_ep82", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43251", "commit_url": "https://git.kernel.org/stable/c/cee8337e1bad168136aecfe6416ecd7d3aa7529a" }, { "cve": "CVE-2026-43252", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "d191101dee25567c2af3b28565f45346c33d65f5", "subject": "mptcp: pm: in-kernel: always set ID as avail when rm endp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43252", "commit_url": "https://git.kernel.org/stable/c/d191101dee25567c2af3b28565f45346c33d65f5" }, { "cve": "CVE-2026-43253", "author_name": "Ankit Soni", "author_email": "ankit.soni@amd.com", "fix_sha": "d2a0cac10597068567d336e85fa3cbdbe8ca62bf", "subject": "iommu/amd: move wait_on_sem() out of spinlock", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43253", "commit_url": "https://git.kernel.org/stable/c/d2a0cac10597068567d336e85fa3cbdbe8ca62bf" }, { "cve": "CVE-2026-43254", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "d4f687fbbce45b5e88438e89b5e26c0c15847992", "subject": "ovpn: tcp - fix packet extraction from stream", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43254", "commit_url": "https://git.kernel.org/stable/c/d4f687fbbce45b5e88438e89b5e26c0c15847992" }, { "cve": "CVE-2026-43255", "author_name": "Szymon Wilczek", "author_email": "swilczek.lx@gmail.com", "fix_sha": "d66676e6ca96bf8680f869a9bd6573b26c634622", "subject": "wifi: libertas: fix WARNING in usb_tx_block", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43255", "commit_url": "https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622" }, { "cve": "CVE-2026-43256", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "d965919af524e68cb2ab1a685872050ad2ee933d", "subject": "media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43256", "commit_url": "https://git.kernel.org/stable/c/d965919af524e68cb2ab1a685872050ad2ee933d" }, { "cve": "CVE-2026-43257", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "dbc527d980f7ba8559de38f8c1e4158c71a78915", "subject": "media: cx88: Add missing unmap in snd_cx88_hw_params()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43257", "commit_url": "https://git.kernel.org/stable/c/dbc527d980f7ba8559de38f8c1e4158c71a78915" }, { "cve": "CVE-2026-43258", "author_name": "Magnus Lindholm", "author_email": "linmag7@gmail.com", "fix_sha": "dd5712f3379cfe760267cdd28ff957d9ab4e51c7", "subject": "alpha: fix user-space corruption during memory compaction", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43258", "commit_url": "https://git.kernel.org/stable/c/dd5712f3379cfe760267cdd28ff957d9ab4e51c7" }, { "cve": "CVE-2026-43259", "author_name": "Xu Yang", "author_email": "xu.yang_2@nxp.com", "fix_sha": "debf8326a435ac746f48173e4742a574810f1ff4", "subject": "phy: fsl-imx8mq-usb: set platform driver data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43259", "commit_url": "https://git.kernel.org/stable/c/debf8326a435ac746f48173e4742a574810f1ff4" }, { "cve": "CVE-2026-43260", "author_name": "Pavan Chebbi", "author_email": "pavan.chebbi@broadcom.com", "fix_sha": "e123d9302d223767bd910bfbcfe607bae909f8ac", "subject": "bnxt_en: Fix RSS context delete logic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43260", "commit_url": "https://git.kernel.org/stable/c/e123d9302d223767bd910bfbcfe607bae909f8ac" }, { "cve": "CVE-2026-43261", "author_name": "Jinqian Yang", "author_email": "yangjinqian1@huawei.com", "fix_sha": "e3baa5d4b361276efeb87b20d8beced451a7dbd5", "subject": "arm64: Add support for TSV110 Spectre-BHB mitigation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43261", "commit_url": "https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5" }, { "cve": "CVE-2026-43262", "author_name": "Andreas Gruenbacher", "author_email": "agruenba@redhat.com", "fix_sha": "e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2", "subject": "gfs2: fiemap page fault fix", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43262", "commit_url": "https://git.kernel.org/stable/c/e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2" }, { "cve": "CVE-2026-43263", "author_name": "Jackson Lee", "author_email": "jackson.lee@chipsnmedia.com", "fix_sha": "e66ff2b08e4ee1c4d3b84f24818e5bcc178cc3a4", "subject": "media: chips-media: wave5: Fix Null reference while testing fluster", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43263", "commit_url": "https://git.kernel.org/stable/c/e66ff2b08e4ee1c4d3b84f24818e5bcc178cc3a4" }, { "cve": "CVE-2026-43264", "author_name": "Weigang He", "author_email": "geoffreyhe2@gmail.com", "fix_sha": "eacf9840ae1285a1ef47eb0ce16d786e542bd4d7", "subject": "fbdev: of: display_timing: fix refcount leak in of_get_display_timings()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43264", "commit_url": "https://git.kernel.org/stable/c/eacf9840ae1285a1ef47eb0ce16d786e542bd4d7" }, { "cve": "CVE-2026-43265", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "ead63640d4e72e6f6d464f4e31f7fecb79af8869", "subject": "KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43265", "commit_url": "https://git.kernel.org/stable/c/ead63640d4e72e6f6d464f4e31f7fecb79af8869" }, { "cve": "CVE-2026-43266", "author_name": "Mauro Carvalho Chehab", "author_email": "mchehab+huawei@kernel.org", "fix_sha": "eae21beecb95a3b69ee5c38a659f774e171d730e", "subject": "EFI/CPER: don't go past the ARM processor CPER record buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43266", "commit_url": "https://git.kernel.org/stable/c/eae21beecb95a3b69ee5c38a659f774e171d730e" }, { "cve": "CVE-2026-43267", "author_name": "Kuan-Chung Chen", "author_email": "damon.chen@realtek.com", "fix_sha": "eb57be32f438c57c88d6ce756101c1dfbcc03bba", "subject": "wifi: rtw89: fix potential zero beacon interval in beacon tracking", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43267", "commit_url": "https://git.kernel.org/stable/c/eb57be32f438c57c88d6ce756101c1dfbcc03bba" }, { "cve": "CVE-2026-43268", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "ed8889ca21b6ab37bc1435c4009ce37a79acb9e6", "subject": "hfsplus: pretend special inodes as regular files", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43268", "commit_url": "https://git.kernel.org/stable/c/ed8889ca21b6ab37bc1435c4009ce37a79acb9e6" }, { "cve": "CVE-2026-43269", "author_name": "Ludovic Desroches", "author_email": "ludovic.desroches@microchip.com", "fix_sha": "f12352471061df83a36edf54bbb16284793284e4", "subject": "drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43269", "commit_url": "https://git.kernel.org/stable/c/f12352471061df83a36edf54bbb16284793284e4" }, { "cve": "CVE-2026-43270", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "f128bab57b8018e526b7eda854ca20069863af47", "subject": "media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43270", "commit_url": "https://git.kernel.org/stable/c/f128bab57b8018e526b7eda854ca20069863af47" }, { "cve": "CVE-2026-43271", "author_name": "Jiasheng Jiang", "author_email": "jiashengjiangcool@gmail.com", "fix_sha": "f150e753cb8dd756085f46e86f2c35ce472e0a3c", "subject": "md-cluster: fix NULL pointer dereference in process_metadata_update", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43271", "commit_url": "https://git.kernel.org/stable/c/f150e753cb8dd756085f46e86f2c35ce472e0a3c" }, { "cve": "CVE-2026-43272", "author_name": "Daniil Dulov", "author_email": "d.dulov@aladdin.ru", "fix_sha": "f1547779402c4cd67755c33616b7203baa88420b", "subject": "ring-buffer: Fix possible dereference of uninitialized pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43272", "commit_url": "https://git.kernel.org/stable/c/f1547779402c4cd67755c33616b7203baa88420b" }, { "cve": "CVE-2026-43273", "author_name": "ethanwu", "author_email": "ethanwu@synology.com", "fix_sha": "f16bd3fa74a2084ee7e16a8a2be7e7399b970907", "subject": "ceph: supply snapshot context in ceph_zero_partial_object()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43273", "commit_url": "https://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907" }, { "cve": "CVE-2026-43274", "author_name": "Valentina Fernandez", "author_email": "valentina.fernandezalanis@microchip.com", "fix_sha": "f7c330a8c83c9b0332fd524097eaf3e69148164d", "subject": "mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43274", "commit_url": "https://git.kernel.org/stable/c/f7c330a8c83c9b0332fd524097eaf3e69148164d" }, { "cve": "CVE-2026-43275", "author_name": "Thomas Yen", "author_email": "thomasyen@google.com", "fix_sha": "f8ef441811ec413717f188f63d99182f30f0f08e", "subject": "scsi: ufs: core: Flush exception handling work when RPM level is zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43275", "commit_url": "https://git.kernel.org/stable/c/f8ef441811ec413717f188f63d99182f30f0f08e" }, { "cve": "CVE-2026-43276", "author_name": "Dipayaan Roy", "author_email": "dipayanroy@linux.microsoft.com", "fix_sha": "f975a0955276579e2176a134366ed586071c7c6a", "subject": "net: mana: Fix double destroy_workqueue on service rescan PCI path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43276", "commit_url": "https://git.kernel.org/stable/c/f975a0955276579e2176a134366ed586071c7c6a" }, { "cve": "CVE-2026-43277", "author_name": "Mauro Carvalho Chehab", "author_email": "mchehab+huawei@kernel.org", "fix_sha": "fa2408a24f8f0db14d9cfc613ef162dc267d7ad4", "subject": "APEI/GHES: ensure that won't go past CPER allocated record", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43277", "commit_url": "https://git.kernel.org/stable/c/fa2408a24f8f0db14d9cfc613ef162dc267d7ad4" }, { "cve": "CVE-2026-43278", "author_name": "Michael Liang", "author_email": "mliang@purestorage.com", "fix_sha": "fb8a6c18fb9a6561f7a15b58b272442b77a242dd", "subject": "dm: clear cloned request bio pointer when last clone bio completes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43278", "commit_url": "https://git.kernel.org/stable/c/fb8a6c18fb9a6561f7a15b58b272442b77a242dd" }, { "cve": "CVE-2026-43279", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "fba2105a157fffcf19825e4eea498346738c9948", "subject": "ALSA: usb-audio: Add sanity check for OOB writes at silencing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43279", "commit_url": "https://git.kernel.org/stable/c/fba2105a157fffcf19825e4eea498346738c9948" }, { "cve": "CVE-2026-43280", "author_name": "Jia Yao", "author_email": "jia.yao@intel.com", "fix_sha": "fbbe32618e97eff81577a01eb7d9adcd64a216d7", "subject": "drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43280", "commit_url": "https://git.kernel.org/stable/c/fbbe32618e97eff81577a01eb7d9adcd64a216d7" }, { "cve": "CVE-2026-43281", "author_name": "Joonwon Kang", "author_email": "joonwonkang@google.com", "fix_sha": "fcd7f96c783626c07ee3ed75fa3739a8a2052310", "subject": "mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43281", "commit_url": "https://git.kernel.org/stable/c/fcd7f96c783626c07ee3ed75fa3739a8a2052310" }, { "cve": "CVE-2026-43282", "author_name": "Kamal Heib", "author_email": "kheib@redhat.com", "fix_sha": "fd80bd7105f88189f47d465ca8cb7d115570de30", "subject": "RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43282", "commit_url": "https://git.kernel.org/stable/c/fd80bd7105f88189f47d465ca8cb7d115570de30" }, { "cve": "CVE-2026-43283", "author_name": "Thomas Fourier", "author_email": "fourier.thomas@gmail.com", "fix_sha": "ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2", "subject": "net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43283", "commit_url": "https://git.kernel.org/stable/c/ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2" }, { "cve": "CVE-2026-43284", "author_name": "Kuan-Ting Chen", "author_email": "h3xrabbit@gmail.com", "fix_sha": "f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4", "subject": "xfrm: esp: avoid in-place decrypt on shared skb frags", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284", "commit_url": "https://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4" }, { "cve": "CVE-2026-43285", "author_name": "Harry Yoo", "author_email": "harry.yoo@oracle.com", "fix_sha": "144080a5823b2dbd635acb6decf7ab23182664f3", "subject": "mm/slab: do not access current->mems_allowed_seq if !allow_spin", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43285", "commit_url": "https://git.kernel.org/stable/c/144080a5823b2dbd635acb6decf7ab23182664f3" }, { "cve": "CVE-2026-43286", "author_name": "Joshua Hahn", "author_email": "joshua.hahnjy@gmail.com", "fix_sha": "1d3f9bb4c8af70304d19c22e30f5d16a2d589bb5", "subject": "mm/hugetlb: restore failed global reservations to subpool", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43286", "commit_url": "https://git.kernel.org/stable/c/1d3f9bb4c8af70304d19c22e30f5d16a2d589bb5" }, { "cve": "CVE-2026-43287", "author_name": "Xiao Kan", "author_email": "814091656@qq.com", "fix_sha": "26b4309a3ab82a0697751cde52eb336c29c19035", "subject": "drm: Account property blob allocations to memcg", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43287", "commit_url": "https://git.kernel.org/stable/c/26b4309a3ab82a0697751cde52eb336c29c19035" }, { "cve": "CVE-2026-43288", "author_name": "Baokun Li", "author_email": "libaokun1@huawei.com", "fix_sha": "270564513489d98b721a1e4a10017978d5213bff", "subject": "ext4: move ext4_percpu_param_init() before ext4_mb_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43288", "commit_url": "https://git.kernel.org/stable/c/270564513489d98b721a1e4a10017978d5213bff" }, { "cve": "CVE-2026-43289", "author_name": "Li Chen", "author_email": "me@linux.beauty", "fix_sha": "480e1d5c64bb14441f79f2eb9421d5e26f91ea3d", "subject": "kexec: derive purgatory entry from symbol", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43289", "commit_url": "https://git.kernel.org/stable/c/480e1d5c64bb14441f79f2eb9421d5e26f91ea3d" }, { "cve": "CVE-2026-43290", "author_name": "Michal Pecio", "author_email": "michal.pecio@gmail.com", "fix_sha": "4cf3b6fd54ebb1ebc977bdc47fb6cfcf9a471a22", "subject": "media: uvcvideo: Return queued buffers on start_streaming() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43290", "commit_url": "https://git.kernel.org/stable/c/4cf3b6fd54ebb1ebc977bdc47fb6cfcf9a471a22" }, { "cve": "CVE-2026-43291", "author_name": "Michael Thalmeier", "author_email": "michael.thalmeier@hale.at", "fix_sha": "571dcbeb8e635182bb825ae758399831805693c2", "subject": "net: nfc: nci: Fix parameter validation for packet data", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43291", "commit_url": "https://git.kernel.org/stable/c/571dcbeb8e635182bb825ae758399831805693c2" }, { "cve": "CVE-2026-43292", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "5747435e0fd474c24530ef1a6822f47e7d264b27", "subject": "mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43292", "commit_url": "https://git.kernel.org/stable/c/5747435e0fd474c24530ef1a6822f47e7d264b27" }, { "cve": "CVE-2026-43293", "author_name": "Xulin Sun", "author_email": "xulin.sun@windriver.com", "fix_sha": "5a0c122e834b2f7f029526422c71be922960bf03", "subject": "media: chips-media: wave5: Fix kthread worker destruction in polling mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43293", "commit_url": "https://git.kernel.org/stable/c/5a0c122e834b2f7f029526422c71be922960bf03" }, { "cve": "CVE-2026-43294", "author_name": "Hugo Villeneuve", "author_email": "hvilleneuve@dimonoff.com", "fix_sha": "64aa8b3a60a825134f7d866adf05c024bbe0c24c", "subject": "drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43294", "commit_url": "https://git.kernel.org/stable/c/64aa8b3a60a825134f7d866adf05c024bbe0c24c" }, { "cve": "CVE-2026-43295", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "666183dcdd9ad3b8156a1df7f204f728f720380f", "subject": "rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43295", "commit_url": "https://git.kernel.org/stable/c/666183dcdd9ad3b8156a1df7f204f728f720380f" }, { "cve": "CVE-2026-43296", "author_name": "Geetha sowjanya", "author_email": "gakula@marvell.com", "fix_sha": "70e9a5760abfb6338d63994d4de6b0778ec795d6", "subject": "octeontx2-af: Workaround SQM/PSE stalls by disabling sticky", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43296", "commit_url": "https://git.kernel.org/stable/c/70e9a5760abfb6338d63994d4de6b0778ec795d6" }, { "cve": "CVE-2026-43297", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "81f8e0e6a2e115df9274d0289779f8fca694479c", "subject": "media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43297", "commit_url": "https://git.kernel.org/stable/c/81f8e0e6a2e115df9274d0289779f8fca694479c" }, { "cve": "CVE-2026-43298", "author_name": "Lijo Lazar", "author_email": "lijo.lazar@amd.com", "fix_sha": "8980be03b3f9a4b58197ef95d3b37efa41a25331", "subject": "drm/amdgpu: Skip vcn poison irq release on VF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43298", "commit_url": "https://git.kernel.org/stable/c/8980be03b3f9a4b58197ef95d3b37efa41a25331" }, { "cve": "CVE-2026-43299", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "8ceaad6cd6e7fa5f73b0b2796a2e85d75d37e9f3", "subject": "btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43299", "commit_url": "https://git.kernel.org/stable/c/8ceaad6cd6e7fa5f73b0b2796a2e85d75d37e9f3" }, { "cve": "CVE-2026-43300", "author_name": "Tuo Li", "author_email": "islituo@gmail.com", "fix_sha": "95eed73b871111123a8b1d31cb1fce7e902e49ea", "subject": "drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43300", "commit_url": "https://git.kernel.org/stable/c/95eed73b871111123a8b1d31cb1fce7e902e49ea" }, { "cve": "CVE-2026-43301", "author_name": "Xulin Sun", "author_email": "xulin.sun@windriver.com", "fix_sha": "9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38", "subject": "media: chips-media: wave5: Fix PM runtime usage count underflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43301", "commit_url": "https://git.kernel.org/stable/c/9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38" }, { "cve": "CVE-2026-43302", "author_name": "Xiaolei Wang", "author_email": "xiaolei.wang@windriver.com", "fix_sha": "9eb018828b1b30dfba689c060735c50fc5b9f704", "subject": "drm/v3d: Set DMA segment size to avoid debug warnings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43302", "commit_url": "https://git.kernel.org/stable/c/9eb018828b1b30dfba689c060735c50fc5b9f704" }, { "cve": "CVE-2026-43303", "author_name": "Mikhail Gavrilov", "author_email": "mikhail.v.gavrilov@gmail.com", "fix_sha": "ac1ea219590c09572ed5992dc233bbf7bb70fef9", "subject": "mm/page_alloc: clear page->private in free_pages_prepare()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43303", "commit_url": "https://git.kernel.org/stable/c/ac1ea219590c09572ed5992dc233bbf7bb70fef9" }, { "cve": "CVE-2026-43304", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "ac431d597a9bdfc2ba6b314813f29a6ef2b4a3bf", "subject": "libceph: define and enforce CEPH_MAX_KEY_LEN", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43304", "commit_url": "https://git.kernel.org/stable/c/ac431d597a9bdfc2ba6b314813f29a6ef2b4a3bf" }, { "cve": "CVE-2026-43305", "author_name": "Nicholas Kazlauskas", "author_email": "nicholas.kazlauskas@amd.com", "fix_sha": "af3303970da5ce5bfe6dffdd07f38f42aad603e0", "subject": "drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43305", "commit_url": "https://git.kernel.org/stable/c/af3303970da5ce5bfe6dffdd07f38f42aad603e0" }, { "cve": "CVE-2026-43306", "author_name": "Sami Tolvanen", "author_email": "samitolvanen@google.com", "fix_sha": "b40a5d724f29fc2eed23ff353808a9aae616b48a", "subject": "bpf: crypto: Use the correct destructor kfunc type", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43306", "commit_url": "https://git.kernel.org/stable/c/b40a5d724f29fc2eed23ff353808a9aae616b48a" }, { "cve": "CVE-2026-43307", "author_name": "Francesco Lavra", "author_email": "flavra@baylibre.com", "fix_sha": "c1b14015224cfcccd5356333763f2f4f401bd810", "subject": "iio: accel: adxl380: Avoid reading more entries than present in FIFO", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43307", "commit_url": "https://git.kernel.org/stable/c/c1b14015224cfcccd5356333763f2f4f401bd810" }, { "cve": "CVE-2026-43308", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "c7d1d4ff56744074e005771aff193b927392d51f", "subject": "btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43308", "commit_url": "https://git.kernel.org/stable/c/c7d1d4ff56744074e005771aff193b927392d51f" }, { "cve": "CVE-2026-43309", "author_name": "Heinz Mauelshagen", "author_email": "heinzm@redhat.com", "fix_sha": "cefcb9297fbdb6d94b61787b4f8d84f55b741470", "subject": "md raid: fix hang when stopping arrays with metadata through dm-raid", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43309", "commit_url": "https://git.kernel.org/stable/c/cefcb9297fbdb6d94b61787b4f8d84f55b741470" }, { "cve": "CVE-2026-43310", "author_name": "Ming Qian", "author_email": "ming.qian@oss.nxp.com", "fix_sha": "e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765", "subject": "media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43310", "commit_url": "https://git.kernel.org/stable/c/e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765" }, { "cve": "CVE-2026-43311", "author_name": "Prathamesh Shete", "author_email": "pshete@nvidia.com", "fix_sha": "e6d96073af681780820c94079b978474a8a44413", "subject": "soc/tegra: pmc: Fix unsafe generic_handle_irq() call", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43311", "commit_url": "https://git.kernel.org/stable/c/e6d96073af681780820c94079b978474a8a44413" }, { "cve": "CVE-2026-43312", "author_name": "Jai Luthra", "author_email": "jai.luthra@ideasonboard.com", "fix_sha": "eee13cbccacb6d0a3120c126b8544030905b069d", "subject": "media: i2c: ov5647: Initialize subdev before controls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43312", "commit_url": "https://git.kernel.org/stable/c/eee13cbccacb6d0a3120c126b8544030905b069d" }, { "cve": "CVE-2026-43313", "author_name": "Tuo Li", "author_email": "islituo@gmail.com", "fix_sha": "f132e089fe89cadc2098991f0a3cb05c3f824ac6", "subject": "ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43313", "commit_url": "https://git.kernel.org/stable/c/f132e089fe89cadc2098991f0a3cb05c3f824ac6" }, { "cve": "CVE-2026-43314", "author_name": "Ding Hui", "author_email": "dinghui@sangfor.com.cn", "fix_sha": "f3a9c95a15d2f4466acad5c68faeff79ca5e9f47", "subject": "dm: remove fake timeout to avoid leak request", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43314", "commit_url": "https://git.kernel.org/stable/c/f3a9c95a15d2f4466acad5c68faeff79ca5e9f47" }, { "cve": "CVE-2026-43315", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "fc3ba56385d03501eb582e4b86691ba378e556f9", "subject": "KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43315", "commit_url": "https://git.kernel.org/stable/c/fc3ba56385d03501eb582e4b86691ba378e556f9" }, { "cve": "CVE-2026-43316", "author_name": "Kees Cook", "author_email": "kees@kernel.org", "fix_sha": "0fdf6323c35a134f206dcad5babb4ff488552076", "subject": "media: solo6x10: Check for out of bounds chip_id", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43316", "commit_url": "https://git.kernel.org/stable/c/0fdf6323c35a134f206dcad5babb4ff488552076" }, { "cve": "CVE-2026-43317", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "2c198c272f9c9213b0fdf6b4a879f445c574f416", "subject": "most: core: fix leak on early registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43317", "commit_url": "https://git.kernel.org/stable/c/2c198c272f9c9213b0fdf6b4a879f445c574f416" }, { "cve": "CVE-2026-43318", "author_name": "Pierre-Eric Pelloux-Prayer", "author_email": "pierre-eric.pelloux-prayer@amd.com", "fix_sha": "b18fc0ab837381c1a6ef28386602cd888f2d9edf", "subject": "drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43318", "commit_url": "https://git.kernel.org/stable/c/b18fc0ab837381c1a6ef28386602cd888f2d9edf" }, { "cve": "CVE-2026-43319", "author_name": "Fabian Godehardt", "author_email": "fg@emlix.com", "fix_sha": "40534d19ed2afb880ecf202dab26a8e7a5808d16", "subject": "spi: spidev: fix lock inversion between spi_lock and buf_lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43319", "commit_url": "https://git.kernel.org/stable/c/40534d19ed2afb880ecf202dab26a8e7a5808d16" }, { "cve": "CVE-2026-43320", "author_name": "Charlene Liu", "author_email": "charlene.liu@amd.com", "fix_sha": "878a4b73c11111ff5f820730f59a7f8c6fd59374", "subject": "drm/amd/display: Fix dsc eDP issue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43320", "commit_url": "https://git.kernel.org/stable/c/878a4b73c11111ff5f820730f59a7f8c6fd59374" }, { "cve": "CVE-2026-43321", "author_name": "Anton Protopopov", "author_email": "a.s.protopopov@gmail.com", "fix_sha": "d1aab1ca576c90192ba961094d51b0be6355a4d6", "subject": "bpf: Properly mark live registers for indirect jumps", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43321", "commit_url": "https://git.kernel.org/stable/c/d1aab1ca576c90192ba961094d51b0be6355a4d6" }, { "cve": "CVE-2026-43322", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "035c25007c9e698bef3826070ee34bb6d778020c", "subject": "Bluetooth: hci_sync: Fix UAF in le_read_features_complete", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43322", "commit_url": "https://git.kernel.org/stable/c/035c25007c9e698bef3826070ee34bb6d778020c" }, { "cve": "CVE-2026-43323", "author_name": "Peter Zijlstra", "author_email": "peterz@infradead.org", "fix_sha": "1319ea57529e131822bab56bf417c8edc2db9ae8", "subject": "sched/fair: Fix zero_vruntime tracking fix", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43323", "commit_url": "https://git.kernel.org/stable/c/1319ea57529e131822bab56bf417c8edc2db9ae8" }, { "cve": "CVE-2026-43324", "author_name": "Alan Stern", "author_email": "stern@rowland.harvard.edu", "fix_sha": "2ca9e46f8f1f5a297eb0ac83f79d35d5b3a02541", "subject": "USB: dummy-hcd: Fix interrupt synchronization error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43324", "commit_url": "https://git.kernel.org/stable/c/2ca9e46f8f1f5a297eb0ac83f79d35d5b3a02541" }, { "cve": "CVE-2026-43325", "author_name": "Emmanuel Grumbach", "author_email": "emmanuel.grumbach@intel.com", "fix_sha": "323156c3541e23da7e582008a7ac30cd51b60acd", "subject": "wifi: iwlwifi: mvm: don't send a 6E related command when not supported", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43325", "commit_url": "https://git.kernel.org/stable/c/323156c3541e23da7e582008a7ac30cd51b60acd" }, { "cve": "CVE-2026-43326", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "415cb193bb9736f0e830286c72a6fa8eb2a9cc5c", "subject": "sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43326", "commit_url": "https://git.kernel.org/stable/c/415cb193bb9736f0e830286c72a6fa8eb2a9cc5c" }, { "cve": "CVE-2026-43327", "author_name": "Alan Stern", "author_email": "stern@rowland.harvard.edu", "fix_sha": "616a63ff495df12863692ab3f9f7b84e3fa7a66d", "subject": "USB: dummy-hcd: Fix locking/synchronization error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43327", "commit_url": "https://git.kernel.org/stable/c/616a63ff495df12863692ab3f9f7b84e3fa7a66d" }, { "cve": "CVE-2026-43328", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e", "subject": "cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43328", "commit_url": "https://git.kernel.org/stable/c/6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e" }, { "cve": "CVE-2026-43329", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "76522fcdbc3a02b568f5d957f7e66fc194abb893", "subject": "netfilter: flowtable: strictly check for maximum number of actions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43329", "commit_url": "https://git.kernel.org/stable/c/76522fcdbc3a02b568f5d957f7e66fc194abb893" }, { "cve": "CVE-2026-43330", "author_name": "Horia Geant\u0103", "author_email": "horia.geanta@nxp.com", "fix_sha": "80688afb9c35b3934ce2d6be9973758915e2e0ef", "subject": "crypto: caam - fix overflow on long hmac keys", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43330", "commit_url": "https://git.kernel.org/stable/c/80688afb9c35b3934ce2d6be9973758915e2e0ef" }, { "cve": "CVE-2026-43331", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "917e3ad3321e75ca0223d5ccf26ceda116aa51e1", "subject": "x86/kexec: Disable KCOV instrumentation after load_segments()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43331", "commit_url": "https://git.kernel.org/stable/c/917e3ad3321e75ca0223d5ccf26ceda116aa51e1" }, { "cve": "CVE-2026-43332", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "9e07e3b81807edd356e1f794cffa00a428eff443", "subject": "thermal: core: Fix thermal zone device registration error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43332", "commit_url": "https://git.kernel.org/stable/c/9e07e3b81807edd356e1f794cffa00a428eff443" }, { "cve": "CVE-2026-43333", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "b0db1accbc7395657c2b79db59fa9fae0d6656f3", "subject": "bpf: reject direct access to nullable PTR_TO_BUF pointers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43333", "commit_url": "https://git.kernel.org/stable/c/b0db1accbc7395657c2b79db59fa9fae0d6656f3" }, { "cve": "CVE-2026-43334", "author_name": "Oleh Konko", "author_email": "security@1seal.org", "fix_sha": "d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7", "subject": "Bluetooth: SMP: force responder MITM requirements before building the pairing response", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43334", "commit_url": "https://git.kernel.org/stable/c/d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7" }, { "cve": "CVE-2026-43335", "author_name": "Vladimir Zapolskiy", "author_email": "vladimir.zapolskiy@linaro.org", "fix_sha": "dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3", "subject": "interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43335", "commit_url": "https://git.kernel.org/stable/c/dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3" }, { "cve": "CVE-2026-43336", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "e5046823f8fa3677341b541a25af2fcb99a5b1e0", "subject": "lib/crypto: chacha: Zeroize permuted_state before it leaves scope", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43336", "commit_url": "https://git.kernel.org/stable/c/e5046823f8fa3677341b541a25af2fcb99a5b1e0" }, { "cve": "CVE-2026-43337", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "e927b36ae18b66b49219eaa9f46edc7b4fdbb25e", "subject": "drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43337", "commit_url": "https://git.kernel.org/stable/c/e927b36ae18b66b49219eaa9f46edc7b4fdbb25e" }, { "cve": "CVE-2026-43338", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "f9a4e3015db1aeafbef407650eb8555445ca943e", "subject": "btrfs: reserve enough transaction items for qgroup ioctls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43338", "commit_url": "https://git.kernel.org/stable/c/f9a4e3015db1aeafbef407650eb8555445ca943e" }, { "cve": "CVE-2026-43339", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "fd63f185979b047fb22a0dfc6bd94d0cab6a6a70", "subject": "ipv6: prevent possible UaF in addrconf_permanent_addr()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43339", "commit_url": "https://git.kernel.org/stable/c/fd63f185979b047fb22a0dfc6bd94d0cab6a6a70" }, { "cve": "CVE-2026-43340", "author_name": "Ian Abbott", "author_email": "abbotti@mev.co.uk", "fix_sha": "4b9a9a6d71e3e252032f959fb3895a33acb5865c", "subject": "comedi: Reinit dev->spinlock between attachments to low-level drivers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43340", "commit_url": "https://git.kernel.org/stable/c/4b9a9a6d71e3e252032f959fb3895a33acb5865c" }, { "cve": "CVE-2026-43341", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "5e67ba9bb531e1ec6599a82a065dea9040b9ce50", "subject": "net/ipv6: ioam6: prevent schema length wraparound in trace fill", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43341", "commit_url": "https://git.kernel.org/stable/c/5e67ba9bb531e1ec6599a82a065dea9040b9ce50" }, { "cve": "CVE-2026-43342", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "8d8c68b1fc06ece60cf43e1306ff0f4ac121547e", "subject": "usb: gadget: f_rndis: Protect RNDIS options with mutex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43342", "commit_url": "https://git.kernel.org/stable/c/8d8c68b1fc06ece60cf43e1306ff0f4ac121547e" }, { "cve": "CVE-2026-43343", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "caa27923aacd8a5869207842f2ab1657c6c0c7bc", "subject": "usb: gadget: f_subset: Fix unbalanced refcnt in geth_free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43343", "commit_url": "https://git.kernel.org/stable/c/caa27923aacd8a5869207842f2ab1657c6c0c7bc" }, { "cve": "CVE-2026-43344", "author_name": "Zide Chen", "author_email": "zide.chen@intel.com", "fix_sha": "a16d1ec4dd0cdcf689f324adde6067083bce9099", "subject": "perf/x86/intel/uncore: Fix die ID init and look up bugs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43344", "commit_url": "https://git.kernel.org/stable/c/a16d1ec4dd0cdcf689f324adde6067083bce9099" }, { "cve": "CVE-2026-43345", "author_name": "Alexander Koskovich", "author_email": "akoskovich@pm.me", "fix_sha": "56007972c0b1e783ca714d6f1f4d6e66e531d21f", "subject": "net: ipa: fix event ring index not programmed for IPA v5.0+", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43345", "commit_url": "https://git.kernel.org/stable/c/56007972c0b1e783ca714d6f1f4d6e66e531d21f" }, { "cve": "CVE-2026-43346", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "bb3f21edc7056cdf44a7f7bd7ba65af40741838c", "subject": "ice: ptp: don't WARN when controlling PF is unavailable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43346", "commit_url": "https://git.kernel.org/stable/c/bb3f21edc7056cdf44a7f7bd7ba65af40741838c" }, { "cve": "CVE-2026-43347", "author_name": "Loic Poulain", "author_email": "loic.poulain@oss.qualcomm.com", "fix_sha": "85d98669fa7f1d3041d962515e45ee6e392db6f8", "subject": "arm64: dts: qcom: monaco: Reserve full Gunyah metadata region", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43347", "commit_url": "https://git.kernel.org/stable/c/85d98669fa7f1d3041d962515e45ee6e392db6f8" }, { "cve": "CVE-2026-43348", "author_name": "Naman Jain", "author_email": "namjain@linux.microsoft.com", "fix_sha": "404cd6bffe17e25e0f94ed2775ffdd6cd10ac3fd", "subject": "mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43348", "commit_url": "https://git.kernel.org/stable/c/404cd6bffe17e25e0f94ed2775ffdd6cd10ac3fd" }, { "cve": "CVE-2026-43349", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "7b9161a605e91d0987e2596a245dc1f21621b23f", "subject": "f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43349", "commit_url": "https://git.kernel.org/stable/c/7b9161a605e91d0987e2596a245dc1f21621b23f" }, { "cve": "CVE-2026-43350", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2757ad3e4b6f9e0fed4c7739594e702abc5cab21", "subject": "smb: client: require a full NFS mode SID before reading mode bits", "cvss_score": 7.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43350", "commit_url": "https://git.kernel.org/stable/c/2757ad3e4b6f9e0fed4c7739594e702abc5cab21" }, { "cve": "CVE-2026-43351", "author_name": "Marc Zyngier", "author_email": "maz@kernel.org", "fix_sha": "ac6769c8f948dff33265c50e524aebf9aa6f1be0", "subject": "KVM: arm64: Eagerly init vgic dist/redist on vgic creation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43351", "commit_url": "https://git.kernel.org/stable/c/ac6769c8f948dff33265c50e524aebf9aa6f1be0" }, { "cve": "CVE-2026-43352", "author_name": "Adrian Hunter", "author_email": "adrian.hunter@intel.com", "fix_sha": "b795e68bf3073d67bebbb5a44d93f49efc5b8cc7", "subject": "i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43352", "commit_url": "https://git.kernel.org/stable/c/b795e68bf3073d67bebbb5a44d93f49efc5b8cc7" }, { "cve": "CVE-2026-43353", "author_name": "Adrian Hunter", "author_email": "adrian.hunter@intel.com", "fix_sha": "1dca8aee80eea76d2aae21265de5dd64f6ba0f09", "subject": "i3c: mipi-i3c-hci: Fix race in DMA ring dequeue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43353", "commit_url": "https://git.kernel.org/stable/c/1dca8aee80eea76d2aae21265de5dd64f6ba0f09" }, { "cve": "CVE-2026-43354", "author_name": "Yasin Lee", "author_email": "yasin.lee.x@gmail.com", "fix_sha": "a318cfc0853706f1d6ce682dba660bc455d674ef", "subject": "iio: proximity: hx9023s: Protect against division by zero in set_samp_freq", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43354", "commit_url": "https://git.kernel.org/stable/c/a318cfc0853706f1d6ce682dba660bc455d674ef" }, { "cve": "CVE-2026-43355", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "dd72e6c3cdea05cad24e99710939086f7a113fb5", "subject": "iio: light: bh1780: fix PM runtime leak on error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43355", "commit_url": "https://git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5" }, { "cve": "CVE-2026-43356", "author_name": "Radu Sabau", "author_email": "radu.sabau@analog.com", "fix_sha": "9990cd4f8827bd1ae3fb6eb7407630d8d463c430", "subject": "iio: imu: adis: Fix NULL pointer dereference in adis_init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43356", "commit_url": "https://git.kernel.org/stable/c/9990cd4f8827bd1ae3fb6eb7407630d8d463c430" }, { "cve": "CVE-2026-43357", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "acc3949aab3e8094641a9c7c2768de1958c88378", "subject": "iio: gyro: mpu3050-core: fix pm_runtime error handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43357", "commit_url": "https://git.kernel.org/stable/c/acc3949aab3e8094641a9c7c2768de1958c88378" }, { "cve": "CVE-2026-43358", "author_name": "Bart Van Assche", "author_email": "bvanassche@acm.org", "fix_sha": "b2840e33127ce0eea880504b7f133e780f567a9b", "subject": "btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43358", "commit_url": "https://git.kernel.org/stable/c/b2840e33127ce0eea880504b7f133e780f567a9b" }, { "cve": "CVE-2026-43359", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "87f2c46003fce4d739138aab4af1942b1afdadac", "subject": "btrfs: fix transaction abort on set received ioctl due to item overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43359", "commit_url": "https://git.kernel.org/stable/c/87f2c46003fce4d739138aab4af1942b1afdadac" }, { "cve": "CVE-2026-43360", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "2d1ababdedd4ba38867c2500eb7f95af5ddeeef7", "subject": "btrfs: fix transaction abort on file creation due to name hash collision", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43360", "commit_url": "https://git.kernel.org/stable/c/2d1ababdedd4ba38867c2500eb7f95af5ddeeef7" }, { "cve": "CVE-2026-43361", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "e1b18b959025e6b5dbad668f391f65d34b39595a", "subject": "btrfs: fix transaction abort when snapshotting received subvolumes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43361", "commit_url": "https://git.kernel.org/stable/c/e1b18b959025e6b5dbad668f391f65d34b39595a" }, { "cve": "CVE-2026-43362", "author_name": "Bharath SM", "author_email": "bharathsm@microsoft.com", "fix_sha": "d78840a6a38d312dc1a51a65317bb67e46f0b929", "subject": "smb: client: fix in-place encryption corruption in SMB2_write()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43362", "commit_url": "https://git.kernel.org/stable/c/d78840a6a38d312dc1a51a65317bb67e46f0b929" }, { "cve": "CVE-2026-43363", "author_name": "Shashank Balaji", "author_email": "shashank.mahadasyam@sony.com", "fix_sha": "8cc7dd77a1466f0ec58c03478b2e735a5b289b96", "subject": "x86/apic: Disable x2apic on resume if the kernel expects so", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43363", "commit_url": "https://git.kernel.org/stable/c/8cc7dd77a1466f0ec58c03478b2e735a5b289b96" }, { "cve": "CVE-2026-43364", "author_name": "Mehul Rao", "author_email": "mehulrao@gmail.com", "fix_sha": "25966fc097691e5c925ad080f64a2f19c5fd940a", "subject": "ublk: fix NULL pointer dereference in ublk_ctrl_set_size()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43364", "commit_url": "https://git.kernel.org/stable/c/25966fc097691e5c925ad080f64a2f19c5fd940a" }, { "cve": "CVE-2026-43365", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "52a8a1ba883defbfe3200baa22cf4cd21985d51a", "subject": "xfs: fix undersized l_iclog_roundoff values", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43365", "commit_url": "https://git.kernel.org/stable/c/52a8a1ba883defbfe3200baa22cf4cd21985d51a" }, { "cve": "CVE-2026-43366", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "c2c185be5c85d37215397c8e8781abf0a69bec1f", "subject": "io_uring/kbuf: check if target buffer list is still legacy on recycle", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43366", "commit_url": "https://git.kernel.org/stable/c/c2c185be5c85d37215397c8e8781abf0a69bec1f" }, { "cve": "CVE-2026-43367", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "72ecb1dae72775fa9fea0159d8445d620a0a2295", "subject": "drm/amd: Fix a few more NULL pointer dereference in device cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43367", "commit_url": "https://git.kernel.org/stable/c/72ecb1dae72775fa9fea0159d8445d620a0a2295" }, { "cve": "CVE-2026-43368", "author_name": "Janusz Krzysztofik", "author_email": "janusz.krzysztofik@linux.intel.com", "fix_sha": "029ae067431ab9d0fca479bdabe780fa436706ea", "subject": "drm/i915: Fix potential overflow of shmem scatterlist length", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43368", "commit_url": "https://git.kernel.org/stable/c/029ae067431ab9d0fca479bdabe780fa436706ea" }, { "cve": "CVE-2026-43369", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "062ea905fff7756b2e87143ffccaece5cdb44267", "subject": "drm/amd: Fix NULL pointer dereference in device cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43369", "commit_url": "https://git.kernel.org/stable/c/062ea905fff7756b2e87143ffccaece5cdb44267" }, { "cve": "CVE-2026-43370", "author_name": "Alysa Liu", "author_email": "alysa.liu@amd.com", "fix_sha": "2c1030f2e84885cc58bffef6af67d5b9d2e7098f", "subject": "drm/amdgpu: Fix use-after-free race in VM acquire", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43370", "commit_url": "https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f" }, { "cve": "CVE-2026-43371", "author_name": "Kevin Hao", "author_email": "haokexin@gmail.com", "fix_sha": "881a0263d502e1a93ebc13a78254e9ad19520232", "subject": "net: macb: Shuffle the tx ring before enabling tx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43371", "commit_url": "https://git.kernel.org/stable/c/881a0263d502e1a93ebc13a78254e9ad19520232" }, { "cve": "CVE-2026-43372", "author_name": "Bastien Curutchet (Schneider Electric)", "author_email": "bastien.curutchet@bootlin.com", "fix_sha": "99c8c16a4aad0b37293cae213e15957c573cf79b", "subject": "net: dsa: microchip: Fix error path in PTP IRQ setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43372", "commit_url": "https://git.kernel.org/stable/c/99c8c16a4aad0b37293cae213e15957c573cf79b" }, { "cve": "CVE-2026-43373", "author_name": "Jian Zhang", "author_email": "zhangjian.3032@bytedance.com", "fix_sha": "5c3398a54266541610c8d0a7082e654e9ff3e259", "subject": "net: ncsi: fix skb leak in error paths", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43373", "commit_url": "https://git.kernel.org/stable/c/5c3398a54266541610c8d0a7082e654e9ff3e259" }, { "cve": "CVE-2026-43374", "author_name": "Mehul Rao", "author_email": "mehulrao@gmail.com", "fix_sha": "b2662e7593e94ae09b1cf7ee5f09160a3612bcb2", "subject": "net: nexthop: fix percpu use-after-free in remove_nh_grp_entry", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43374", "commit_url": "https://git.kernel.org/stable/c/b2662e7593e94ae09b1cf7ee5f09160a3612bcb2" }, { "cve": "CVE-2026-43375", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "224a0d284c3caf1951302d1744a714784febed71", "subject": "net: mctp: fix device leak on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43375", "commit_url": "https://git.kernel.org/stable/c/224a0d284c3caf1951302d1744a714784febed71" }, { "cve": "CVE-2026-43376", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "1dfd062caa165ec9d7ee0823087930f3ab8a6294", "subject": "ksmbd: fix use-after-free by using call_rcu() for oplock_info", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43376", "commit_url": "https://git.kernel.org/stable/c/1dfd062caa165ec9d7ee0823087930f3ab8a6294" }, { "cve": "CVE-2026-43377", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "441336115df26b966575de56daf7107ed474faed", "subject": "ksmbd: Don't log keys in SMB3 signing and encryption key generation", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43377", "commit_url": "https://git.kernel.org/stable/c/441336115df26b966575de56daf7107ed474faed" }, { "cve": "CVE-2026-43378", "author_name": "Marios Makassikis", "author_email": "mmakassikis@freebox.fr", "fix_sha": "1e689a56173827669a35da7cb2a3c78ed5c53680", "subject": "smb: server: fix use-after-free in smb2_open()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43378", "commit_url": "https://git.kernel.org/stable/c/1e689a56173827669a35da7cb2a3c78ed5c53680" }, { "cve": "CVE-2026-43379", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "eac3361e3d5dd8067b3258c69615888eb45e9f25", "subject": "ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43379", "commit_url": "https://git.kernel.org/stable/c/eac3361e3d5dd8067b3258c69615888eb45e9f25" }, { "cve": "CVE-2026-43380", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43", "subject": "hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43380", "commit_url": "https://git.kernel.org/stable/c/25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43" }, { "cve": "CVE-2026-43381", "author_name": "Dave Airlie", "author_email": "airlied@redhat.com", "fix_sha": "8f3c6f08ababad2e3bdd239728cf66a9949446b4", "subject": "nouveau/dpcd: return EBUSY for aux xfer if the device is asleep", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43381", "commit_url": "https://git.kernel.org/stable/c/8f3c6f08ababad2e3bdd239728cf66a9949446b4" }, { "cve": "CVE-2026-43382", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "cfc83a3c71517b59c1047db57da31e26a9dc2f33", "subject": "batman-adv: Avoid double-rtnl_lock ELP metric worker", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43382", "commit_url": "https://git.kernel.org/stable/c/cfc83a3c71517b59c1047db57da31e26a9dc2f33" }, { "cve": "CVE-2026-43383", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "46d0d6f50dab706637f4c18a470aac20a21900d3", "subject": "net/tcp-md5: Fix MAC comparison to be constant-time", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43383", "commit_url": "https://git.kernel.org/stable/c/46d0d6f50dab706637f4c18a470aac20a21900d3" }, { "cve": "CVE-2026-43384", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "67edfec516d30d3e62925c397be4a1e5185802fc", "subject": "net/tcp-ao: Fix MAC comparison to be constant-time", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43384", "commit_url": "https://git.kernel.org/stable/c/67edfec516d30d3e62925c397be4a1e5185802fc" }, { "cve": "CVE-2026-43385", "author_name": "YiFei Zhu", "author_email": "zhuyifei@google.com", "fix_sha": "1a86a1f7d88996085934139fa4c063b6299a2dd3", "subject": "net: Fix rcu_tasks stall in threaded busypoll", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43385", "commit_url": "https://git.kernel.org/stable/c/1a86a1f7d88996085934139fa4c063b6299a2dd3" }, { "cve": "CVE-2026-43386", "author_name": "Luka Gejak", "author_email": "luka.gejak@linux.dev", "fix_sha": "a75281626fc8fa6dc6c9cc314ee423e8bc45203b", "subject": "staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43386", "commit_url": "https://git.kernel.org/stable/c/a75281626fc8fa6dc6c9cc314ee423e8bc45203b" }, { "cve": "CVE-2026-43387", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "f0109b9d3e1e455429279d602f6276e34689750a", "subject": "staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43387", "commit_url": "https://git.kernel.org/stable/c/f0109b9d3e1e455429279d602f6276e34689750a" }, { "cve": "CVE-2026-43388", "author_name": "Raul Pazemecxas De Andrade", "author_email": "raul_pazemecxas@hotmail.com", "fix_sha": "d210fdcac9c0d1380eab448aebc93f602c1cd4e6", "subject": "mm/damon/core: clear walk_control on inactive context in damos_walk()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43388", "commit_url": "https://git.kernel.org/stable/c/d210fdcac9c0d1380eab448aebc93f602c1cd4e6" }, { "cve": "CVE-2026-43389", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "7e04bf1f33151a30e06a65b74b5f2c19fc2be128", "subject": "mm: memfd_luo: always dirty all folios", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43389", "commit_url": "https://git.kernel.org/stable/c/7e04bf1f33151a30e06a65b74b5f2c19fc2be128" }, { "cve": "CVE-2026-43390", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "8d76afe84fa2babf604b3c173730d4d2b067e361", "subject": "nstree: tighten permission checks for listing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43390", "commit_url": "https://git.kernel.org/stable/c/8d76afe84fa2babf604b3c173730d4d2b067e361" }, { "cve": "CVE-2026-43391", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "d2324a9317f00013facb0ba00b00440e19d2af5e", "subject": "nsfs: tighten permission checks for handle opening", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43391", "commit_url": "https://git.kernel.org/stable/c/d2324a9317f00013facb0ba00b00440e19d2af5e" }, { "cve": "CVE-2026-43392", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "b06ccbabe2506fd70b9167a644978b049150224a", "subject": "sched_ext: Fix starvation of scx_enable() under fair-class saturation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43392", "commit_url": "https://git.kernel.org/stable/c/b06ccbabe2506fd70b9167a644978b049150224a" }, { "cve": "CVE-2026-43393", "author_name": "Mark Harmstone", "author_email": "mark@harmstone.com", "fix_sha": "f15fb3d41543244d1179f423da4a4832a55bc050", "subject": "btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43393", "commit_url": "https://git.kernel.org/stable/c/f15fb3d41543244d1179f423da4a4832a55bc050" }, { "cve": "CVE-2026-43394", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "92978c83bb4eef55d02a6c990c01c423131eefa7", "subject": "nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43394", "commit_url": "https://git.kernel.org/stable/c/92978c83bb4eef55d02a6c990c01c423131eefa7" }, { "cve": "CVE-2026-43395", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "1bfd7575092420ba5a0b944953c95b74a5646ff8", "subject": "drm/xe/sync: Cleanup partially initialized sync on parse failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43395", "commit_url": "https://git.kernel.org/stable/c/1bfd7575092420ba5a0b944953c95b74a5646ff8" }, { "cve": "CVE-2026-43396", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "0879c3f04f67e2a1677c25dcc24669ce21eb6a6c", "subject": "drm/xe/sync: Fix user fence leak on alloc failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43396", "commit_url": "https://git.kernel.org/stable/c/0879c3f04f67e2a1677c25dcc24669ce21eb6a6c" }, { "cve": "CVE-2026-43397", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "803ec1faf7c1823e6e3b1f2aaa81be18528c9436", "subject": "drm/bridge: samsung-dsim: Fix memory leak in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43397", "commit_url": "https://git.kernel.org/stable/c/803ec1faf7c1823e6e3b1f2aaa81be18528c9436" }, { "cve": "CVE-2026-43398", "author_name": "Sunil Khatri", "author_email": "sunil.khatri@amd.com", "fix_sha": "64ac7c09fc44985ec9bb6a9db740899fa40ca613", "subject": "drm/amdgpu: add upper bound check on user inputs in wait ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43398", "commit_url": "https://git.kernel.org/stable/c/64ac7c09fc44985ec9bb6a9db740899fa40ca613" }, { "cve": "CVE-2026-43399", "author_name": "Tvrtko Ursulin", "author_email": "tvrtko.ursulin@igalia.com", "fix_sha": "49abfa812617a7f2d0132c70d23ac98b389c6ec1", "subject": "drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43399", "commit_url": "https://git.kernel.org/stable/c/49abfa812617a7f2d0132c70d23ac98b389c6ec1" }, { "cve": "CVE-2026-43400", "author_name": "Sunil Khatri", "author_email": "sunil.khatri@amd.com", "fix_sha": "ea78f8c68f4f6211c557df49174c54d167821962", "subject": "drm/amdgpu: add upper bound check on user inputs in signal ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43400", "commit_url": "https://git.kernel.org/stable/c/ea78f8c68f4f6211c557df49174c54d167821962" }, { "cve": "CVE-2026-43401", "author_name": "David Arcari", "author_email": "darcari@redhat.com", "fix_sha": "ab39cc4cb8ceecdc2b61747433e7237f1ac2b789", "subject": "cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43401", "commit_url": "https://git.kernel.org/stable/c/ab39cc4cb8ceecdc2b61747433e7237f1ac2b789" }, { "cve": "CVE-2026-43402", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "28aaa9c39945b7925a1cc1d513c8f21ed38f5e4f", "subject": "kthread: consolidate kthread exit paths to prevent use-after-free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43402", "commit_url": "https://git.kernel.org/stable/c/28aaa9c39945b7925a1cc1d513c8f21ed38f5e4f" }, { "cve": "CVE-2026-43403", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "e6b899f08066e744f89df16ceb782e06868bd148", "subject": "nsfs: tighten permission checks for ns iteration ioctls", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43403", "commit_url": "https://git.kernel.org/stable/c/e6b899f08066e744f89df16ceb782e06868bd148" }, { "cve": "CVE-2026-43404", "author_name": "Thomas Hellstr\u00f6m", "author_email": "thomas.hellstrom@linux.intel.com", "fix_sha": "b570f37a2ce480be26c665345c5514686a8a0274", "subject": "mm: Fix a hmm_range_fault() livelock / starvation problem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43404", "commit_url": "https://git.kernel.org/stable/c/b570f37a2ce480be26c665345c5514686a8a0274" }, { "cve": "CVE-2026-43405", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "770444611f047dbfd4517ec0bc1b179d40c2f346", "subject": "libceph: Use u32 for non-negative values in ceph_monmap_decode()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43405", "commit_url": "https://git.kernel.org/stable/c/770444611f047dbfd4517ec0bc1b179d40c2f346" }, { "cve": "CVE-2026-43406", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "69fb5d91bba44ecf7eb80530b85fa4fb028921d5", "subject": "libceph: prevent potential out-of-bounds reads in process_message_header()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43406", "commit_url": "https://git.kernel.org/stable/c/69fb5d91bba44ecf7eb80530b85fa4fb028921d5" }, { "cve": "CVE-2026-43407", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "b282c43ed156ae15ea76748fc15cd5c39dc9ab72", "subject": "libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43407", "commit_url": "https://git.kernel.org/stable/c/b282c43ed156ae15ea76748fc15cd5c39dc9ab72" }, { "cve": "CVE-2026-43408", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "43323a5934b660afae687e8e4e95ac328615a5c4", "subject": "ceph: add a bunch of missing ceph_path_info initializers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43408", "commit_url": "https://git.kernel.org/stable/c/43323a5934b660afae687e8e4e95ac328615a5c4" }, { "cve": "CVE-2026-43409", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "e113f0b46d19626ec15388bcb91432c9a4fd6261", "subject": "kprobes: avoid crash when rmmod/insmod after ftrace killed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43409", "commit_url": "https://git.kernel.org/stable/c/e113f0b46d19626ec15388bcb91432c9a4fd6261" }, { "cve": "CVE-2026-43410", "author_name": "Liwei Song", "author_email": "liwei.song@windriver.com", "fix_sha": "c45f7263100cece247dd3fa5fe277bd97fdb5687", "subject": "firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43410", "commit_url": "https://git.kernel.org/stable/c/c45f7263100cece247dd3fa5fe277bd97fdb5687" }, { "cve": "CVE-2026-43411", "author_name": "Mehul Rao", "author_email": "mehulrao@gmail.com", "fix_sha": "6c5a9baa15de240e747263aba435a0951da8d8d2", "subject": "tipc: fix divide-by-zero in tipc_sk_filter_connect()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43411", "commit_url": "https://git.kernel.org/stable/c/6c5a9baa15de240e747263aba435a0951da8d8d2" }, { "cve": "CVE-2026-43412", "author_name": "Ravi Hothi", "author_email": "ravi.hothi@oss.qualcomm.com", "fix_sha": "d6db827b430bdcca3976cebca7bd69cca03cde2c", "subject": "ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43412", "commit_url": "https://git.kernel.org/stable/c/d6db827b430bdcca3976cebca7bd69cca03cde2c" }, { "cve": "CVE-2026-43413", "author_name": "Xingui Yang", "author_email": "yangxingui@huawei.com", "fix_sha": "8ddc0c26916574395447ebf4cff684314f6873a9", "subject": "scsi: hisi_sas: Fix NULL pointer exception during user_scan()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43413", "commit_url": "https://git.kernel.org/stable/c/8ddc0c26916574395447ebf4cff684314f6873a9" }, { "cve": "CVE-2026-43414", "author_name": "Vladimir Riabchun", "author_email": "ferr.lambarginio@gmail.com", "fix_sha": "c0b7da13a04bd70ef6070bfb9ea85f582294560a", "subject": "scsi: qla2xxx: Completely fix fcport double free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43414", "commit_url": "https://git.kernel.org/stable/c/c0b7da13a04bd70ef6070bfb9ea85f582294560a" }, { "cve": "CVE-2026-43415", "author_name": "Wang Shuaiwei", "author_email": "wangshuaiwei1@xiaomi.com", "fix_sha": "b0bd84c39289ef6a6c3827dd52c875659291970a", "subject": "scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43415", "commit_url": "https://git.kernel.org/stable/c/b0bd84c39289ef6a6c3827dd52c875659291970a" }, { "cve": "CVE-2026-43416", "author_name": "Viktor Malik", "author_email": "vmalik@redhat.com", "fix_sha": "e9bbfb4bfa86c6b5515b868d6982ac60505d7e39", "subject": "powerpc, perf: Check that current->mm is alive before getting user callchain", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43416", "commit_url": "https://git.kernel.org/stable/c/e9bbfb4bfa86c6b5515b868d6982ac60505d7e39" }, { "cve": "CVE-2026-43417", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "28b5a1395036d6c7a6c8034d85ad3d7d365f192c", "subject": "sched/mmcid: Handle vfork()/CLONE_VM correctly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43417", "commit_url": "https://git.kernel.org/stable/c/28b5a1395036d6c7a6c8034d85ad3d7d365f192c" }, { "cve": "CVE-2026-43418", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "b2e48c429ec54715d16fefa719dd2fbded2e65be", "subject": "sched/mmcid: Prevent CID stalls due to concurrent forks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43418", "commit_url": "https://git.kernel.org/stable/c/b2e48c429ec54715d16fefa719dd2fbded2e65be" }, { "cve": "CVE-2026-43419", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "040d159a45ded7f33201421a81df0aa2a86e5a0b", "subject": "ceph: fix memory leaks in ceph_mdsc_build_path()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43419", "commit_url": "https://git.kernel.org/stable/c/040d159a45ded7f33201421a81df0aa2a86e5a0b" }, { "cve": "CVE-2026-43420", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "ce0123cbb4a40a2f1bbb815f292b26e96088639f", "subject": "ceph: fix i_nlink underrun during async unlink", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43420", "commit_url": "https://git.kernel.org/stable/c/ce0123cbb4a40a2f1bbb815f292b26e96088639f" }, { "cve": "CVE-2026-43421", "author_name": "Kuen-Han Tsai", "author_email": "khtsai@google.com", "fix_sha": "ec35c1969650e7cb6c8a91020e568ed46e3551b0", "subject": "usb: gadget: f_ncm: Fix net_device lifecycle with device_move", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43421", "commit_url": "https://git.kernel.org/stable/c/ec35c1969650e7cb6c8a91020e568ed46e3551b0" }, { "cve": "CVE-2026-43424", "author_name": "Jiasheng Jiang", "author_email": "jiashengjiangcool@gmail.com", "fix_sha": "b9fde507355342a2d64225d582dc8b98ff5ecb19", "subject": "usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43424", "commit_url": "https://git.kernel.org/stable/c/b9fde507355342a2d64225d582dc8b98ff5ecb19" }, { "cve": "CVE-2026-43425", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "1be3b77de4eb89af8ae2fd6610546be778e25589", "subject": "usb: image: mdc800: kill download URB on timeout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43425", "commit_url": "https://git.kernel.org/stable/c/1be3b77de4eb89af8ae2fd6610546be778e25589" }, { "cve": "CVE-2026-43426", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "3cbc242b88c607f55da3d0d0d336b49bf1e20412", "subject": "usb: renesas_usbhs: fix use-after-free in ISR during device removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43426", "commit_url": "https://git.kernel.org/stable/c/3cbc242b88c607f55da3d0d0d336b49bf1e20412" }, { "cve": "CVE-2026-43427", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "8df672bfe3ec2268c2636584202755898e547173", "subject": "usb: class: cdc-wdm: fix reordering issue in read code path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43427", "commit_url": "https://git.kernel.org/stable/c/8df672bfe3ec2268c2636584202755898e547173" }, { "cve": "CVE-2026-43428", "author_name": "Alan Stern", "author_email": "stern@rowland.harvard.edu", "fix_sha": "1015c27a5e1a63efae2b18a9901494474b4d1dc3", "subject": "USB: core: Limit the length of unkillable synchronous timeouts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43428", "commit_url": "https://git.kernel.org/stable/c/1015c27a5e1a63efae2b18a9901494474b4d1dc3" }, { "cve": "CVE-2026-43429", "author_name": "Alan Stern", "author_email": "stern@rowland.harvard.edu", "fix_sha": "7784caa413a89487dd14dd5c41db8753483b2acb", "subject": "USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43429", "commit_url": "https://git.kernel.org/stable/c/7784caa413a89487dd14dd5c41db8753483b2acb" }, { "cve": "CVE-2026-43430", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "7a875c09899ba0404844abfd8f0d54cdc481c151", "subject": "usb: yurex: fix race in probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43430", "commit_url": "https://git.kernel.org/stable/c/7a875c09899ba0404844abfd8f0d54cdc481c151" }, { "cve": "CVE-2026-43431", "author_name": "Mathias Nyman", "author_email": "mathias.nyman@linux.intel.com", "fix_sha": "ae4ff9dead5efa2025eddfcdb29411432bf40a7c", "subject": "xhci: Fix NULL pointer dereference when reading portli debugfs files", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43431", "commit_url": "https://git.kernel.org/stable/c/ae4ff9dead5efa2025eddfcdb29411432bf40a7c" }, { "cve": "CVE-2026-43432", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "c1c8550e70401159184130a1afc6261db01fc0ce", "subject": "usb: xhci: Fix memory leak in xhci_disable_slot()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43432", "commit_url": "https://git.kernel.org/stable/c/c1c8550e70401159184130a1afc6261db01fc0ce" }, { "cve": "CVE-2026-43433", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "4cb9e13fec0de7c942f5f927469beb8e48ddd20f", "subject": "rust_binder: avoid reading the written value in offsets array", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43433", "commit_url": "https://git.kernel.org/stable/c/4cb9e13fec0de7c942f5f927469beb8e48ddd20f" }, { "cve": "CVE-2026-43434", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "8ef2c15aeae07647f530d30f6daaf79eb801bcd1", "subject": "rust_binder: check ownership before using vma", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43434", "commit_url": "https://git.kernel.org/stable/c/8ef2c15aeae07647f530d30f6daaf79eb801bcd1" }, { "cve": "CVE-2026-43435", "author_name": "Carlos Llamas", "author_email": "cmllamas@google.com", "fix_sha": "4fc87c240b8f30e22b7ebaae29d57105589e1c0b", "subject": "rust_binder: fix oneway spam detection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43435", "commit_url": "https://git.kernel.org/stable/c/4fc87c240b8f30e22b7ebaae29d57105589e1c0b" }, { "cve": "CVE-2026-43436", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "df1d8abf36ca3681c21a6809eaa9a1e01ef897a6", "subject": "ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43436", "commit_url": "https://git.kernel.org/stable/c/df1d8abf36ca3681c21a6809eaa9a1e01ef897a6" }, { "cve": "CVE-2026-43437", "author_name": "Mehul Rao", "author_email": "mehulrao@gmail.com", "fix_sha": "9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6", "subject": "ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43437", "commit_url": "https://git.kernel.org/stable/c/9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6" }, { "cve": "CVE-2026-43438", "author_name": "Cheng-Yang Chou", "author_email": "yphbchou0911@gmail.com", "fix_sha": "1336b579f6079fb8520be03624fcd9ba443c930b", "subject": "sched_ext: Remove redundant css_put() in scx_cgroup_init()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43438", "commit_url": "https://git.kernel.org/stable/c/1336b579f6079fb8520be03624fcd9ba443c930b" }, { "cve": "CVE-2026-43439", "author_name": "Qingye Zhao", "author_email": "zhaoqingye@honor.com", "fix_sha": "5ee01f1a7343d6a3547b6802ca2d4cdce0edacb1", "subject": "cgroup: fix race between task migration and iteration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43439", "commit_url": "https://git.kernel.org/stable/c/5ee01f1a7343d6a3547b6802ca2d4cdce0edacb1" }, { "cve": "CVE-2026-43440", "author_name": "Shiraz Saleem", "author_email": "shirazsaleem@microsoft.com", "fix_sha": "87c2302813abc55c46485711a678e3c312b00666", "subject": "net/mana: Null service_wq on setup error to prevent double destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43440", "commit_url": "https://git.kernel.org/stable/c/87c2302813abc55c46485711a678e3c312b00666" }, { "cve": "CVE-2026-43441", "author_name": "Ricardo B. Marli\u00e8re", "author_email": "rbm@suse.com", "fix_sha": "30021e969d48e5819d5ae56936c2f34c0f7ce997", "subject": "net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43441", "commit_url": "https://git.kernel.org/stable/c/30021e969d48e5819d5ae56936c2f34c0f7ce997" }, { "cve": "CVE-2026-43442", "author_name": "Tom Ryan", "author_email": "ryan36005@gmail.com", "fix_sha": "6f02c6b196036dbb6defb4647d8707d29b7fe95b", "subject": "io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43442", "commit_url": "https://git.kernel.org/stable/c/6f02c6b196036dbb6defb4647d8707d29b7fe95b" }, { "cve": "CVE-2026-43443", "author_name": "Chen Ni", "author_email": "nichen@iscas.ac.cn", "fix_sha": "30c64fb9839949f085c8eb55b979cbd8a4c51f00", "subject": "ASoC: amd: acp-mach-common: Add missing error check for clock acquisition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43443", "commit_url": "https://git.kernel.org/stable/c/30c64fb9839949f085c8eb55b979cbd8a4c51f00" }, { "cve": "CVE-2026-43444", "author_name": "Philip Yang", "author_email": "philip.yang@amd.com", "fix_sha": "2ce75a0b7e1bfddbcb9bc8aeb2e5e7fa99971acf", "subject": "drm/amdkfd: Unreserve bo if queue update failed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43444", "commit_url": "https://git.kernel.org/stable/c/2ce75a0b7e1bfddbcb9bc8aeb2e5e7fa99971acf" }, { "cve": "CVE-2026-43445", "author_name": "Matt Vollrath", "author_email": "tactii@gmail.com", "fix_sha": "e94eaef11142b01f77bf8ba4d0b59720b7858109", "subject": "e1000/e1000e: Fix leak in DMA error cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43445", "commit_url": "https://git.kernel.org/stable/c/e94eaef11142b01f77bf8ba4d0b59720b7858109" }, { "cve": "CVE-2026-43446", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "6b13cb8f48a42ddf6dd98865b673a82e37ff238b", "subject": "accel/amdxdna: Fix runtime suspend deadlock when there is pending job", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43446", "commit_url": "https://git.kernel.org/stable/c/6b13cb8f48a42ddf6dd98865b673a82e37ff238b" }, { "cve": "CVE-2026-43447", "author_name": "Petr Oros", "author_email": "poros@redhat.com", "fix_sha": "efc54fb13d79117a825fef17364315a58682c7ec", "subject": "iavf: fix PTP use-after-free during reset", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43447", "commit_url": "https://git.kernel.org/stable/c/efc54fb13d79117a825fef17364315a58682c7ec" }, { "cve": "CVE-2026-43448", "author_name": "Sungwoo Kim", "author_email": "iam@sung-woo.kim", "fix_sha": "fc71f409b22ca831a9f87a2712eaa09ef2bb4a5e", "subject": "nvme-pci: Fix race bug in nvme_poll_irqdisable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43448", "commit_url": "https://git.kernel.org/stable/c/fc71f409b22ca831a9f87a2712eaa09ef2bb4a5e" }, { "cve": "CVE-2026-43449", "author_name": "Sungwoo Kim", "author_email": "iam@sung-woo.kim", "fix_sha": "b4e78f1427c7d6859229ae9616df54e1fc05a516", "subject": "nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43449", "commit_url": "https://git.kernel.org/stable/c/b4e78f1427c7d6859229ae9616df54e1fc05a516" }, { "cve": "CVE-2026-43450", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "6dcee8496d53165b2d8a5909b3050b62ae71fe89", "subject": "netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43450", "commit_url": "https://git.kernel.org/stable/c/6dcee8496d53165b2d8a5909b3050b62ae71fe89" }, { "cve": "CVE-2026-43451", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "f1ba83755d81c6fc66ac7acd723d238f974091e9", "subject": "netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43451", "commit_url": "https://git.kernel.org/stable/c/f1ba83755d81c6fc66ac7acd723d238f974091e9" }, { "cve": "CVE-2026-43452", "author_name": "David Dull", "author_email": "monderasdor@gmail.com", "fix_sha": "cfe770220ac2dbd3e104c6b45094037455da81d4", "subject": "netfilter: x_tables: guard option walkers against 1-byte tail reads", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43452", "commit_url": "https://git.kernel.org/stable/c/cfe770220ac2dbd3e104c6b45094037455da81d4" }, { "cve": "CVE-2026-43453", "author_name": "Jenny Guanni Qu", "author_email": "qguanni@gmail.com", "fix_sha": "d6d8cd2db236a9dd13dbc2d05843b3445cc964b5", "subject": "netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43453", "commit_url": "https://git.kernel.org/stable/c/d6d8cd2db236a9dd13dbc2d05843b3445cc964b5" }, { "cve": "CVE-2026-43454", "author_name": "Phil Sutter", "author_email": "phil@nwl.cc", "fix_sha": "b7cdc5a97d02c943f4bdde4d5767ad0c13cad92b", "subject": "netfilter: nf_tables: Fix for duplicate device in netdev hooks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43454", "commit_url": "https://git.kernel.org/stable/c/b7cdc5a97d02c943f4bdde4d5767ad0c13cad92b" }, { "cve": "CVE-2026-43455", "author_name": "Chengfeng Ye", "author_email": "dg573847474@gmail.com", "fix_sha": "7d86aa41c073c4e7eb75fd2e674f1fd8f289728a", "subject": "mctp: route: hold key->lock in mctp_flow_prepare_output()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43455", "commit_url": "https://git.kernel.org/stable/c/7d86aa41c073c4e7eb75fd2e674f1fd8f289728a" }, { "cve": "CVE-2026-43456", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "950803f7254721c1c15858fbbfae3deaaeeecb11", "subject": "bonding: fix type confusion in bond_setup_by_slave()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43456", "commit_url": "https://git.kernel.org/stable/c/950803f7254721c1c15858fbbfae3deaaeeecb11" }, { "cve": "CVE-2026-43457", "author_name": "Haiyue Wang", "author_email": "haiyuewa@163.com", "fix_sha": "e3f5e0f22cfc2371e7471c9fd5b4da78f9df7c69", "subject": "mctp: i2c: fix skb memory leak in receive path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43457", "commit_url": "https://git.kernel.org/stable/c/e3f5e0f22cfc2371e7471c9fd5b4da78f9df7c69" }, { "cve": "CVE-2026-43458", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "288598d80a068a0e9281de35bcb4ce495f189e2a", "subject": "serial: caif: hold tty->link reference in ldisc_open and ser_release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43458", "commit_url": "https://git.kernel.org/stable/c/288598d80a068a0e9281de35bcb4ce495f189e2a" }, { "cve": "CVE-2026-43459", "author_name": "matteo.cotifava", "author_email": "cotifavamatteo@gmail.com", "fix_sha": "95bc5c225513fc3c4ce169563fb5e3929fbb938b", "subject": "ASoC: soc-core: flush delayed work before removing DAIs and widgets", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43459", "commit_url": "https://git.kernel.org/stable/c/95bc5c225513fc3c4ce169563fb5e3929fbb938b" }, { "cve": "CVE-2026-43460", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "111e2863372c322e836e0c896f6dd9cf4ee08c71", "subject": "spi: rockchip-sfc: Fix double-free in remove() callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43460", "commit_url": "https://git.kernel.org/stable/c/111e2863372c322e836e0c896f6dd9cf4ee08c71" }, { "cve": "CVE-2026-43461", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "b20b437666e1cb26a7c499d1664e8f2a0ac67000", "subject": "spi: amlogic: spifc-a4: Fix DMA mapping error handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43461", "commit_url": "https://git.kernel.org/stable/c/b20b437666e1cb26a7c499d1664e8f2a0ac67000" }, { "cve": "CVE-2026-43462", "author_name": "Vivian Wang", "author_email": "wangruikang@iscas.ac.cn", "fix_sha": "86292155bea578ebab0ca3b65d4d87ecd8a0e9ea", "subject": "net: spacemit: Fix error handling in emac_tx_mem_map()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43462", "commit_url": "https://git.kernel.org/stable/c/86292155bea578ebab0ca3b65d4d87ecd8a0e9ea" }, { "cve": "CVE-2026-43463", "author_name": "Miaoqian Lin", "author_email": "linmq006@gmail.com", "fix_sha": "4245a79003adf30e67f8e9060915bd05cb31d142", "subject": "rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43463", "commit_url": "https://git.kernel.org/stable/c/4245a79003adf30e67f8e9060915bd05cb31d142" }, { "cve": "CVE-2026-43464", "author_name": "Dragos Tatulea", "author_email": "dtatulea@nvidia.com", "fix_sha": "a6413e6f6c9d9bb9833324cb3753582f7bc0f2fa", "subject": "net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43464", "commit_url": "https://git.kernel.org/stable/c/a6413e6f6c9d9bb9833324cb3753582f7bc0f2fa" }, { "cve": "CVE-2026-43465", "author_name": "Dragos Tatulea", "author_email": "dtatulea@nvidia.com", "fix_sha": "db25c42c2e1f9c0d136420fff5e5700f7e771a6f", "subject": "net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43465", "commit_url": "https://git.kernel.org/stable/c/db25c42c2e1f9c0d136420fff5e5700f7e771a6f" }, { "cve": "CVE-2026-43466", "author_name": "Gal Pressman", "author_email": "gal@nvidia.com", "fix_sha": "1633111d69053512d099658d4a05fc736fab36b0", "subject": "net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43466", "commit_url": "https://git.kernel.org/stable/c/1633111d69053512d099658d4a05fc736fab36b0" }, { "cve": "CVE-2026-43467", "author_name": "Patrisious Haddad", "author_email": "phaddad@nvidia.com", "fix_sha": "24b2795f9683e092dc22a68f487e7aaaf2ddafea", "subject": "net/mlx5: Fix crash when moving to switchdev mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43467", "commit_url": "https://git.kernel.org/stable/c/24b2795f9683e092dc22a68f487e7aaaf2ddafea" }, { "cve": "CVE-2026-43468", "author_name": "Cosmin Ratiu", "author_email": "cratiu@nvidia.com", "fix_sha": "aed763abf0e905b4b8d747d1ba9e172961572f57", "subject": "net/mlx5: Fix deadlock between devlink lock and esw->wq", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43468", "commit_url": "https://git.kernel.org/stable/c/aed763abf0e905b4b8d747d1ba9e172961572f57" }, { "cve": "CVE-2026-43469", "author_name": "Eric Badger", "author_email": "ebadger@purestorage.com", "fix_sha": "7b6275c80a0c81c5f8943272292dfe67730ce849", "subject": "xprtrdma: Decrement re_receiving on the early exit paths", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43469", "commit_url": "https://git.kernel.org/stable/c/7b6275c80a0c81c5f8943272292dfe67730ce849" }, { "cve": "CVE-2026-43470", "author_name": "Roberto Bergantinos Corpas", "author_email": "rbergant@redhat.com", "fix_sha": "410666a298c34ebd57256fde6b24c96bd23059a2", "subject": "nfs: return EISDIR on nfs3_proc_create if d_alias is a dir", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43470", "commit_url": "https://git.kernel.org/stable/c/410666a298c34ebd57256fde6b24c96bd23059a2" }, { "cve": "CVE-2026-43471", "author_name": "Peter Wang", "author_email": "peter.wang@mediatek.com", "fix_sha": "30df81f2228d65bddf492db3929d9fcaffd38fc5", "subject": "scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43471", "commit_url": "https://git.kernel.org/stable/c/30df81f2228d65bddf492db3929d9fcaffd38fc5" }, { "cve": "CVE-2026-43472", "author_name": "Al Viro", "author_email": "viro@zeniv.linux.org.uk", "fix_sha": "6c4b2243cb6c0755159bd567130d5e12e7b10d9f", "subject": "unshare: fix unshare_fs() handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43472", "commit_url": "https://git.kernel.org/stable/c/6c4b2243cb6c0755159bd567130d5e12e7b10d9f" }, { "cve": "CVE-2026-43473", "author_name": "Ranjan Kumar", "author_email": "ranjan.kumar@broadcom.com", "fix_sha": "fa96392ebebc8fade2b878acb14cce0f71016503", "subject": "scsi: mpi3mr: Add NULL checks when resetting request and reply queues", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43473", "commit_url": "https://git.kernel.org/stable/c/fa96392ebebc8fade2b878acb14cce0f71016503" }, { "cve": "CVE-2026-43474", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "cb184dd19154fc486fa3d9e02afe70a97e54e055", "subject": "fs: init flags_valid before calling vfs_fileattr_get", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43474", "commit_url": "https://git.kernel.org/stable/c/cb184dd19154fc486fa3d9e02afe70a97e54e055" }, { "cve": "CVE-2026-43475", "author_name": "Jan Kiszka", "author_email": "jan.kiszka@siemens.com", "fix_sha": "57297736c08233987e5d29ce6584c6ca2a831b12", "subject": "scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43475", "commit_url": "https://git.kernel.org/stable/c/57297736c08233987e5d29ce6584c6ca2a831b12" }, { "cve": "CVE-2026-43476", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "216345f98cae7fcc84f49728c67478ac00321c87", "subject": "iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43476", "commit_url": "https://git.kernel.org/stable/c/216345f98cae7fcc84f49728c67478ac00321c87" }, { "cve": "CVE-2026-43477", "author_name": "Ville Syrj\u00e4l\u00e4", "author_email": "ville.syrjala@linux.intel.com", "fix_sha": "237aab549676288d9255bb8dcc284738e56eaa31", "subject": "drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43477", "commit_url": "https://git.kernel.org/stable/c/237aab549676288d9255bb8dcc284738e56eaa31" }, { "cve": "CVE-2026-43478", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "30e4b2290cc2a8d1b9ddb9dcb9c981df1f2a7399", "subject": "ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43478", "commit_url": "https://git.kernel.org/stable/c/30e4b2290cc2a8d1b9ddb9dcb9c981df1f2a7399" }, { "cve": "CVE-2026-43479", "author_name": "Oleksij Rempel", "author_email": "o.rempel@pengutronix.de", "fix_sha": "312c816c6bc30342bc30dca0d6db617ab4d3ae4e", "subject": "net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43479", "commit_url": "https://git.kernel.org/stable/c/312c816c6bc30342bc30dca0d6db617ab4d3ae4e" }, { "cve": "CVE-2026-43480", "author_name": "Chen Ni", "author_email": "nichen@iscas.ac.cn", "fix_sha": "53f3a900e9a383d47af7253076e19f510c5708d0", "subject": "ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43480", "commit_url": "https://git.kernel.org/stable/c/53f3a900e9a383d47af7253076e19f510c5708d0" }, { "cve": "CVE-2026-43481", "author_name": "Paul Moses", "author_email": "p@1g4.org", "fix_sha": "57885276cc16a2e2b76282c808a4e84cbecb3aae", "subject": "net-shapers: don't free reply skb after genlmsg_reply()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43481", "commit_url": "https://git.kernel.org/stable/c/57885276cc16a2e2b76282c808a4e84cbecb3aae" }, { "cve": "CVE-2026-43482", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "83236b2e43dba00bee5b82eb5758816b1a674f6a", "subject": "sched_ext: Disable preemption between scx_claim_exit() and kicking helper work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43482", "commit_url": "https://git.kernel.org/stable/c/83236b2e43dba00bee5b82eb5758816b1a674f6a" }, { "cve": "CVE-2026-43483", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "87d0f901a9bd8ae6be57249c737f20ac0cace93d", "subject": "KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43483", "commit_url": "https://git.kernel.org/stable/c/87d0f901a9bd8ae6be57249c737f20ac0cace93d" }, { "cve": "CVE-2026-43484", "author_name": "Penghe Geng", "author_email": "pgeng@nvidia.com", "fix_sha": "901084c51a0a8fb42a3f37d2e9c62083c495f824", "subject": "mmc: core: Avoid bitfield RMW for claim/retune flags", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43484", "commit_url": "https://git.kernel.org/stable/c/901084c51a0a8fb42a3f37d2e9c62083c495f824" }, { "cve": "CVE-2026-43485", "author_name": "Dave Airlie", "author_email": "airlied@redhat.com", "fix_sha": "9478c166c46934160135e197b049b5a05753f2ad", "subject": "nouveau/gsp: drop WARN_ON in ACPI probes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43485", "commit_url": "https://git.kernel.org/stable/c/9478c166c46934160135e197b049b5a05753f2ad" }, { "cve": "CVE-2026-43486", "author_name": "Piotr Jaroszynski", "author_email": "pjaroszynski@nvidia.com", "fix_sha": "97c5550b763171dbef61e6239cab372b9f9cd4a2", "subject": "arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43486", "commit_url": "https://git.kernel.org/stable/c/97c5550b763171dbef61e6239cab372b9f9cd4a2" }, { "cve": "CVE-2026-43487", "author_name": "Maximilian Pezzullo", "author_email": "maximilianpezzullo@gmail.com", "fix_sha": "b3b1d3ae1d87bc9398fb715c945968bf4c75a09a", "subject": "ata: libata-core: Disable LPM on ST1000DM010-2EP102", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43487", "commit_url": "https://git.kernel.org/stable/c/b3b1d3ae1d87bc9398fb715c945968bf4c75a09a" }, { "cve": "CVE-2026-43488", "author_name": "Dayu Jiang", "author_email": "jiangdayu@xiaomi.com", "fix_sha": "d6d5febd12452b7fd951fdd15c3ec262f01901a4", "subject": "usb: xhci: Prevent interrupt storm on host controller error (HCE)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43488", "commit_url": "https://git.kernel.org/stable/c/d6d5febd12452b7fd951fdd15c3ec262f01901a4" }, { "cve": "CVE-2026-43489", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "f85b1c6af5bc3872f994df0a5688c1162de07a62", "subject": "liveupdate: luo_file: remember retrieve() status", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43489", "commit_url": "https://git.kernel.org/stable/c/f85b1c6af5bc3872f994df0a5688c1162de07a62" }, { "cve": "CVE-2026-43490", "author_name": "Shota Zaizen", "author_email": "s@zaizen.me", "fix_sha": "996454bc0da84d5a1dedb1a7861823087e01a7ae", "subject": "ksmbd: validate inherited ACE SID length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43490", "commit_url": "https://git.kernel.org/stable/c/996454bc0da84d5a1dedb1a7861823087e01a7ae" }, { "cve": "CVE-2026-43491", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "d5ee2ff98322337951c56398e79d51815acbf955", "subject": "net: qrtr: ns: Limit the maximum server registration per node", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43491", "commit_url": "https://git.kernel.org/stable/c/d5ee2ff98322337951c56398e79d51815acbf955" }, { "cve": "CVE-2026-43492", "author_name": "Lukas Wunner", "author_email": "lukas@wunner.de", "fix_sha": "8c2f1288250a90a4b5cabed5d888d7e3aeed4035", "subject": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43492", "commit_url": "https://git.kernel.org/stable/c/8c2f1288250a90a4b5cabed5d888d7e3aeed4035" }, { "cve": "CVE-2026-43493", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "915b692e6cb723aac658c25eb82c58fd81235110", "subject": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43493", "commit_url": "https://git.kernel.org/stable/c/915b692e6cb723aac658c25eb82c58fd81235110" }, { "cve": "CVE-2026-43494", "author_name": "Allison Henderson", "author_email": "achender@kernel.org", "fix_sha": "e174929793195e0cd6a4adb0cad731b39f9019b4", "subject": "net/rds: reset op_nents when zerocopy page pin fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43494", "commit_url": "https://git.kernel.org/stable/c/e174929793195e0cd6a4adb0cad731b39f9019b4" }, { "cve": "CVE-2026-43495", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "0e7c074cfcd9bd93765505f9eb8b42f03ed2a744", "subject": "net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43495", "commit_url": "https://git.kernel.org/stable/c/0e7c074cfcd9bd93765505f9eb8b42f03ed2a744" }, { "cve": "CVE-2026-43496", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "458d5615272d3de535748342eb68ca492343048c", "subject": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43496", "commit_url": "https://git.kernel.org/stable/c/458d5615272d3de535748342eb68ca492343048c" }, { "cve": "CVE-2026-43497", "author_name": "Rajat Gupta", "author_email": "rajgupt@qti.qualcomm.com", "fix_sha": "8de779dc40d35d39fa07387b6f921eb11df0f511", "subject": "fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43497", "commit_url": "https://git.kernel.org/stable/c/8de779dc40d35d39fa07387b6f921eb11df0f511" }, { "cve": "CVE-2026-43498", "author_name": "Karol Wachowski", "author_email": "karol.wachowski@linux.intel.com", "fix_sha": "7dd57d7a6350770dfc283287125c409e995200e0", "subject": "accel/ivpu: Disallow re-exporting imported GEM objects", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43498", "commit_url": "https://git.kernel.org/stable/c/7dd57d7a6350770dfc283287125c409e995200e0" }, { "cve": "CVE-2026-43499", "author_name": "Keenan Dong", "author_email": "keenanat2000@gmail.com", "fix_sha": "3bfdc63936dd4773109b7b8c280c0f3b5ae7d349", "subject": "rtmutex: Use waiter::task instead of current in remove_waiter()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43499", "commit_url": "https://git.kernel.org/stable/c/3bfdc63936dd4773109b7b8c280c0f3b5ae7d349" }, { "cve": "CVE-2026-43500", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "aa54b1d27fe0c2b78e664a34fd0fdf7cd1960d71", "subject": "rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43500", "commit_url": "https://git.kernel.org/stable/c/aa54b1d27fe0c2b78e664a34fd0fdf7cd1960d71" }, { "cve": "CVE-2026-43501", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "9e6bf146b55999a095bb14f73a843942456d1adc", "subject": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43501", "commit_url": "https://git.kernel.org/stable/c/9e6bf146b55999a095bb14f73a843942456d1adc" }, { "cve": "CVE-2026-43502", "author_name": "Nan Li", "author_email": "tonanli66@gmail.com", "fix_sha": "44b550d88b267320459d518c0743a241ab2108fa", "subject": "net/rds: handle zerocopy send cleanup before the message is queued", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43502", "commit_url": "https://git.kernel.org/stable/c/44b550d88b267320459d518c0743a241ab2108fa" }, { "cve": "CVE-2026-43503", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "48f6a5356a33dd78e7144ae1faef95ffc990aae0", "subject": "net: skbuff: propagate shared-frag marker through frag-transfer helpers", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503", "commit_url": "https://git.kernel.org/stable/c/48f6a5356a33dd78e7144ae1faef95ffc990aae0" }, { "cve": "CVE-2026-45834", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "2ff1a41a912de8517b4482e946dd951b7d80edbf", "subject": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45834", "commit_url": "https://git.kernel.org/stable/c/2ff1a41a912de8517b4482e946dd951b7d80edbf" }, { "cve": "CVE-2026-45835", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "0a120d96166301d7a95be75b52f843837dbd1219", "subject": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45835", "commit_url": "https://git.kernel.org/stable/c/0a120d96166301d7a95be75b52f843837dbd1219" }, { "cve": "CVE-2026-45836", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "78a88d43dab8d23aeef934ed8ce34d40e6b3d613", "subject": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45836", "commit_url": "https://git.kernel.org/stable/c/78a88d43dab8d23aeef934ed8ce34d40e6b3d613" }, { "cve": "CVE-2026-45837", "author_name": "Alexei Starovoitov", "author_email": "ast@kernel.org", "fix_sha": "4fddde2a732de60bb97e3307d4eb69ac5f1d2b74", "subject": "bpf: Fix use-after-free in arena_vm_close on fork", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45837", "commit_url": "https://git.kernel.org/stable/c/4fddde2a732de60bb97e3307d4eb69ac5f1d2b74" }, { "cve": "CVE-2026-45838", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "5828b9e5b272ecff7cf5d345128d3de7324117f7", "subject": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45838", "commit_url": "https://git.kernel.org/stable/c/5828b9e5b272ecff7cf5d345128d3de7324117f7" }, { "cve": "CVE-2026-45839", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "1c22483a2c4bbf747787f328392ca3e68619c4dc", "subject": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45839", "commit_url": "https://git.kernel.org/stable/c/1c22483a2c4bbf747787f328392ca3e68619c4dc" }, { "cve": "CVE-2026-45840", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "2091c6aa0df6aba47deb5c8ab232b1cb60af3519", "subject": "openvswitch: cap upcall PID array size and pre-size vport replies", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45840", "commit_url": "https://git.kernel.org/stable/c/2091c6aa0df6aba47deb5c8ab232b1cb60af3519" }, { "cve": "CVE-2026-45841", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "2195574dc6d9017d32ac346987e12659f931d932", "subject": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45841", "commit_url": "https://git.kernel.org/stable/c/2195574dc6d9017d32ac346987e12659f931d932" }, { "cve": "CVE-2026-45842", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "e76607442d5b73e1ba6768f501ef815bb58c2c0e", "subject": "slip: reject VJ receive packets on instances with no rstate array", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45842", "commit_url": "https://git.kernel.org/stable/c/e76607442d5b73e1ba6768f501ef815bb58c2c0e" }, { "cve": "CVE-2026-45843", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "4c1367a2d7aad643a6f87c6931b13cc1a25e8ca7", "subject": "slip: bound decode() reads against the compressed packet length", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45843", "commit_url": "https://git.kernel.org/stable/c/4c1367a2d7aad643a6f87c6931b13cc1a25e8ca7" }, { "cve": "CVE-2026-45844", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "1e8e3f449b1e73b73a843257635b9c50f0cc0f0a", "subject": "netfilter: arp_tables: fix IEEE1394 ARP payload parsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45844", "commit_url": "https://git.kernel.org/stable/c/1e8e3f449b1e73b73a843257635b9c50f0cc0f0a" }, { "cve": "CVE-2026-45845", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "3d07ca5c0fae311226f737963984bd94bb159a87", "subject": "net/sched: taprio: fix NULL pointer dereference in class dump", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45845", "commit_url": "https://git.kernel.org/stable/c/3d07ca5c0fae311226f737963984bd94bb159a87" }, { "cve": "CVE-2026-45846", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "aa6c6d9ee064aabfede4402fd1283424e649ca19", "subject": "bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45846", "commit_url": "https://git.kernel.org/stable/c/aa6c6d9ee064aabfede4402fd1283424e649ca19" }, { "cve": "CVE-2026-45847", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "008e7a7c293b30bc43e4368dac6ea3808b75a572", "subject": "net: remove WARN_ON_ONCE when accessing forward path array", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45847", "commit_url": "https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572" }, { "cve": "CVE-2026-45848", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "00b67657535dfea56e84d11492f5c0f61d0af297", "subject": "apparmor: fix NULL sock in aa_sock_file_perm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45848", "commit_url": "https://git.kernel.org/stable/c/00b67657535dfea56e84d11492f5c0f61d0af297" }, { "cve": "CVE-2026-45849", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "026f6513c5880c2c89e38ad66bbec2868f978605", "subject": "net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45849", "commit_url": "https://git.kernel.org/stable/c/026f6513c5880c2c89e38ad66bbec2868f978605" }, { "cve": "CVE-2026-45850", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "05cfe9863ef049d98141dc2969eefde72fb07625", "subject": "ipvs: skip ipv6 extension headers for csum checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45850", "commit_url": "https://git.kernel.org/stable/c/05cfe9863ef049d98141dc2969eefde72fb07625" }, { "cve": "CVE-2026-45851", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "0862438c90487e79822d5647f854977d50381505", "subject": "efi: Fix reservation of unaccepted memory table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45851", "commit_url": "https://git.kernel.org/stable/c/0862438c90487e79822d5647f854977d50381505" }, { "cve": "CVE-2026-45852", "author_name": "Jiasheng Jiang", "author_email": "jiashengjiangcool@gmail.com", "fix_sha": "0beefd0e15d962f497aad750b2d5e9c3570b66d1", "subject": "RDMA/rxe: Fix double free in rxe_srq_from_init", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45852", "commit_url": "https://git.kernel.org/stable/c/0beefd0e15d962f497aad750b2d5e9c3570b66d1" }, { "cve": "CVE-2026-45853", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "0c44d61945c4a80775292d96460aa2f22e62f86c", "subject": "drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45853", "commit_url": "https://git.kernel.org/stable/c/0c44d61945c4a80775292d96460aa2f22e62f86c" }, { "cve": "CVE-2026-45854", "author_name": "Aleksander Jan Bajkowski", "author_email": "olek2@wp.pl", "fix_sha": "0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f", "subject": "crypto: inside-secure/eip93 - unregister only available algorithm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45854", "commit_url": "https://git.kernel.org/stable/c/0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f" }, { "cve": "CVE-2026-45855", "author_name": "Damien Le Moal", "author_email": "dlemoal@kernel.org", "fix_sha": "0ea84089dbf62a92dc7889c79e6b18fc89260808", "subject": "ata: libata-scsi: avoid Non-NCQ command starvation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45855", "commit_url": "https://git.kernel.org/stable/c/0ea84089dbf62a92dc7889c79e6b18fc89260808" }, { "cve": "CVE-2026-45856", "author_name": "Yi Liu", "author_email": "liuy22@mails.tsinghua.edu.cn", "fix_sha": "1956f0a74ccf5dc9c3ef717f2985c3ed3400aab0", "subject": "RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45856", "commit_url": "https://git.kernel.org/stable/c/1956f0a74ccf5dc9c3ef717f2985c3ed3400aab0" }, { "cve": "CVE-2026-45857", "author_name": "Colin Ian King", "author_email": "colin.i.king@gmail.com", "fix_sha": "1982257570b84dc33753d536dd969fd357a014e9", "subject": "scsi: csiostor: Fix dereference of null pointer rn", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45857", "commit_url": "https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9" }, { "cve": "CVE-2026-45858", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "1bf6974822d1dba86cf11b5f05498581cf3488a2", "subject": "ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45858", "commit_url": "https://git.kernel.org/stable/c/1bf6974822d1dba86cf11b5f05498581cf3488a2" }, { "cve": "CVE-2026-45859", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "207b3ebacb6113acaaec0d171d5307032c690004", "subject": "netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45859", "commit_url": "https://git.kernel.org/stable/c/207b3ebacb6113acaaec0d171d5307032c690004" }, { "cve": "CVE-2026-45860", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "21d033e472735ecec677f1ae46d6740b5e47a4f3", "subject": "netfilter: nf_conncount: increase the connection clean up limit to 64", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45860", "commit_url": "https://git.kernel.org/stable/c/21d033e472735ecec677f1ae46d6740b5e47a4f3" }, { "cve": "CVE-2026-45861", "author_name": "Andreas Gruenbacher", "author_email": "agruenba@redhat.com", "fix_sha": "22150a7d401d9e9169b9b68e05bed95f7f49bf69", "subject": "gfs2: Fix slab-use-after-free in qd_put", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45861", "commit_url": "https://git.kernel.org/stable/c/22150a7d401d9e9169b9b68e05bed95f7f49bf69" }, { "cve": "CVE-2026-45862", "author_name": "Dmytro Maluka", "author_email": "dmaluka@chromium.org", "fix_sha": "22d169bdd2849fe6bd18c2643742e1c02be6451c", "subject": "iommu/vt-d: Flush cache for PASID table before using it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45862", "commit_url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c" }, { "cve": "CVE-2026-45863", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "2537089413514caaa9a5fdeeac3a34d45100f747", "subject": "i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45863", "commit_url": "https://git.kernel.org/stable/c/2537089413514caaa9a5fdeeac3a34d45100f747" }, { "cve": "CVE-2026-45864", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "27b75ca4e51e3e4554dc85dbf1a0246c66106fd3", "subject": "fs/ntfs3: prevent infinite loops caused by the next valid being the same", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45864", "commit_url": "https://git.kernel.org/stable/c/27b75ca4e51e3e4554dc85dbf1a0246c66106fd3" }, { "cve": "CVE-2026-45865", "author_name": "Matt Johnston", "author_email": "matt@codeconstruct.com.au", "fix_sha": "2a14e91b6d76639dac70ea170f4384c1ee3cb48d", "subject": "mctp i2c: initialise event handler read bytes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45865", "commit_url": "https://git.kernel.org/stable/c/2a14e91b6d76639dac70ea170f4384c1ee3cb48d" }, { "cve": "CVE-2026-45866", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "308e7e4d0a846359685f40aade023aee7b27284c", "subject": "serial: caif: fix use-after-free in caif_serial ldisc_close()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45866", "commit_url": "https://git.kernel.org/stable/c/308e7e4d0a846359685f40aade023aee7b27284c" }, { "cve": "CVE-2026-45867", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "3291c51d4684d048dd2eb91b5b65fcfdaf72141f", "subject": "power: supply: act8945a: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45867", "commit_url": "https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f" }, { "cve": "CVE-2026-45868", "author_name": "Wei Li", "author_email": "unsw.weili@gmail.com", "fix_sha": "353353309b0f7afa407df29e455f9d15b5acc296", "subject": "pinctrl: single: fix refcount leak in pcs_add_gpio_func()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45868", "commit_url": "https://git.kernel.org/stable/c/353353309b0f7afa407df29e455f9d15b5acc296" }, { "cve": "CVE-2026-45869", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "39fe0eac6d755ef215026518985fcf8de9360e9e", "subject": "power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45869", "commit_url": "https://git.kernel.org/stable/c/39fe0eac6d755ef215026518985fcf8de9360e9e" }, { "cve": "CVE-2026-45870", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "3e6397b056335cc56ef0e9da36c95946a19f5118", "subject": "SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45870", "commit_url": "https://git.kernel.org/stable/c/3e6397b056335cc56ef0e9da36c95946a19f5118" }, { "cve": "CVE-2026-45871", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "3e91b44c93ad2871f89fc2a98c5e4fe6ca5db3d9", "subject": "tpm: st33zp24: Fix missing cleanup on get_burstcount() error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45871", "commit_url": "https://git.kernel.org/stable/c/3e91b44c93ad2871f89fc2a98c5e4fe6ca5db3d9" }, { "cve": "CVE-2026-45872", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "41b37312bd9722af77ec7817ccf22d7a4880c289", "subject": "scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45872", "commit_url": "https://git.kernel.org/stable/c/41b37312bd9722af77ec7817ccf22d7a4880c289" }, { "cve": "CVE-2026-45873", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "4780ec142cbb24b794129d3080eee5cac2943ffc", "subject": "netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45873", "commit_url": "https://git.kernel.org/stable/c/4780ec142cbb24b794129d3080eee5cac2943ffc" }, { "cve": "CVE-2026-45874", "author_name": "Thomas Richard", "author_email": "thomas.richard@bootlin.com", "fix_sha": "4dd5d4c0361af0a3fd24f45c815996abf4429770", "subject": "phy: freescale: imx8qm-hsio: fix NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45874", "commit_url": "https://git.kernel.org/stable/c/4dd5d4c0361af0a3fd24f45c815996abf4429770" }, { "cve": "CVE-2026-45875", "author_name": "Haotian Zhang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "4feb753ba6e5e5bbaba868b841a2db41c21e56fa", "subject": "mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45875", "commit_url": "https://git.kernel.org/stable/c/4feb753ba6e5e5bbaba868b841a2db41c21e56fa" }, { "cve": "CVE-2026-45876", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "53c998527ffa60f9deda8974a11ad39790684159", "subject": "arm64/gcs: Fix error handling in arch_set_shadow_stack_status()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45876", "commit_url": "https://git.kernel.org/stable/c/53c998527ffa60f9deda8974a11ad39790684159" }, { "cve": "CVE-2026-45877", "author_name": "Ryan Lin", "author_email": "ryan.lin@intel.com", "fix_sha": "56f7db581ee73af53cd512e00a6261a025bf1d58", "subject": "HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45877", "commit_url": "https://git.kernel.org/stable/c/56f7db581ee73af53cd512e00a6261a025bf1d58" }, { "cve": "CVE-2026-45878", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "5a19302cab5cec7ae7f1a60c619951e6c17d8742", "subject": "drm/amdkfd: Fix watch_id bounds checking in debug address watch v2", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45878", "commit_url": "https://git.kernel.org/stable/c/5a19302cab5cec7ae7f1a60c619951e6c17d8742" }, { "cve": "CVE-2026-45879", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "5f0b1cb41906e86b64bf69f5ededb83b0d757c27", "subject": "power: supply: bq25980: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45879", "commit_url": "https://git.kernel.org/stable/c/5f0b1cb41906e86b64bf69f5ededb83b0d757c27" }, { "cve": "CVE-2026-45880", "author_name": "Hou Tao", "author_email": "houtao1@huawei.com", "fix_sha": "6220694c52a5a04102b48109e4f24e958b559bd3", "subject": "PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45880", "commit_url": "https://git.kernel.org/stable/c/6220694c52a5a04102b48109e4f24e958b559bd3" }, { "cve": "CVE-2026-45881", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "6259094ee806fb813ca95894c65fb80e2ec98bf1", "subject": "soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45881", "commit_url": "https://git.kernel.org/stable/c/6259094ee806fb813ca95894c65fb80e2ec98bf1" }, { "cve": "CVE-2026-45882", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "62914959b35e9a1e29cc0f64cb8cfc5075a5366f", "subject": "power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45882", "commit_url": "https://git.kernel.org/stable/c/62914959b35e9a1e29cc0f64cb8cfc5075a5366f" }, { "cve": "CVE-2026-45883", "author_name": "Harshit Mogalapalli", "author_email": "harshit.m.mogalapalli@oracle.com", "fix_sha": "62b44ebc1f2c71db3ca2d4737c52e433f6f03038", "subject": "iio: sca3000: Fix a resource leak in sca3000_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45883", "commit_url": "https://git.kernel.org/stable/c/62b44ebc1f2c71db3ca2d4737c52e433f6f03038" }, { "cve": "CVE-2026-45884", "author_name": "Zhengmian Hu", "author_email": "huzhengmian@gmail.com", "fix_sha": "640cf2f09575c9dc344b3f7be2498d31e3923ead", "subject": "apparmor: avoid per-cpu hold underflow in aa_get_buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45884", "commit_url": "https://git.kernel.org/stable/c/640cf2f09575c9dc344b3f7be2498d31e3923ead" }, { "cve": "CVE-2026-45885", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "642f33e34b969eedec334738fd5df95d2dc42742", "subject": "power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45885", "commit_url": "https://git.kernel.org/stable/c/642f33e34b969eedec334738fd5df95d2dc42742" }, { "cve": "CVE-2026-45886", "author_name": "Paul Chaignon", "author_email": "paul.chaignon@gmail.com", "fix_sha": "6557f1565d779851c4db9c488c49c05a47a6e72f", "subject": "bpf: Fix bpf_xdp_store_bytes proto for read-only arg", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45886", "commit_url": "https://git.kernel.org/stable/c/6557f1565d779851c4db9c488c49c05a47a6e72f" }, { "cve": "CVE-2026-45887", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "6884028cd7f275f8bcb854a347265cb1fb0e4bea", "subject": "af_unix: Fix memleak of newsk in unix_stream_connect().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45887", "commit_url": "https://git.kernel.org/stable/c/6884028cd7f275f8bcb854a347265cb1fb0e4bea" }, { "cve": "CVE-2026-45888", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "6abc7d5dcf0ee0f85e16e41c87fbd06231f28753", "subject": "md/raid1: fix memory leak in raid1_run()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45888", "commit_url": "https://git.kernel.org/stable/c/6abc7d5dcf0ee0f85e16e41c87fbd06231f28753" }, { "cve": "CVE-2026-45889", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "6b329393502e5857662b851a13f947209c588587", "subject": "mptcp: do not account for OoO in mptcp_rcvbuf_grow()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45889", "commit_url": "https://git.kernel.org/stable/c/6b329393502e5857662b851a13f947209c588587" }, { "cve": "CVE-2026-45890", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "6d1dc8014334c7fb25719999bca84d811e60a559", "subject": "xen-netback: reject zero-queue configuration from guest", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45890", "commit_url": "https://git.kernel.org/stable/c/6d1dc8014334c7fb25719999bca84d811e60a559" }, { "cve": "CVE-2026-45891", "author_name": "Jian Shen", "author_email": "shenjian15@huawei.com", "fix_sha": "6d2f142b1e4b203387a92519d9d2e34752a79dbb", "subject": "net: hns3: fix double free issue for tx spare buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45891", "commit_url": "https://git.kernel.org/stable/c/6d2f142b1e4b203387a92519d9d2e34752a79dbb" }, { "cve": "CVE-2026-45892", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "6d882ea3b0931b43530d44149b79fcd4ffc13030", "subject": "ext4: drop extent cache after doing PARTIAL_VALID1 zeroout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45892", "commit_url": "https://git.kernel.org/stable/c/6d882ea3b0931b43530d44149b79fcd4ffc13030" }, { "cve": "CVE-2026-45893", "author_name": "Helge Deller", "author_email": "deller@kernel.org", "fix_sha": "6fc367bfd4c8886e6b1742aabbd1c0bdc310db3a", "subject": "apparmor: Fix & Optimize table creation from possibly unaligned memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45893", "commit_url": "https://git.kernel.org/stable/c/6fc367bfd4c8886e6b1742aabbd1c0bdc310db3a" }, { "cve": "CVE-2026-45894", "author_name": "Lu Baolu", "author_email": "baolu.lu@linux.intel.com", "fix_sha": "75ed00055c059dedc47b5daaaa2f8a7a019138ff", "subject": "iommu/vt-d: Clear Present bit before tearing down PASID entry", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45894", "commit_url": "https://git.kernel.org/stable/c/75ed00055c059dedc47b5daaaa2f8a7a019138ff" }, { "cve": "CVE-2026-45895", "author_name": "Abhishek Bapat", "author_email": "abhishekbapat@google.com", "fix_sha": "77449e453dfc006ad738dec55374c4cbc056fd39", "subject": "quota: fix livelock between quotactl and freeze_super", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45895", "commit_url": "https://git.kernel.org/stable/c/77449e453dfc006ad738dec55374c4cbc056fd39" }, { "cve": "CVE-2026-45896", "author_name": "Alexander Usyskin", "author_email": "alexander.usyskin@intel.com", "fix_sha": "779c59274d03cc5c07237a2c845dfb71cff77705", "subject": "mtd: intel-dg: Fix accessing regions before setting nregions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45896", "commit_url": "https://git.kernel.org/stable/c/779c59274d03cc5c07237a2c845dfb71cff77705" }, { "cve": "CVE-2026-45897", "author_name": "Brian Witte", "author_email": "brianwitte@mailfence.com", "fix_sha": "779c60a5190c42689534172f4b49e927c9959e4e", "subject": "netfilter: nft_counter: serialize reset with spinlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45897", "commit_url": "https://git.kernel.org/stable/c/779c60a5190c42689534172f4b49e927c9959e4e" }, { "cve": "CVE-2026-45898", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "7874eeacfa42177565c01d5198726671acf7adf2", "subject": "RDMA/iwcm: Fix workqueue list corruption by removing work_list", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45898", "commit_url": "https://git.kernel.org/stable/c/7874eeacfa42177565c01d5198726671acf7adf2" }, { "cve": "CVE-2026-45899", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "79b592e8f1b435796cbc2722190368e3e8ffd7a1", "subject": "ext4: drop extent cache when splitting extent fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45899", "commit_url": "https://git.kernel.org/stable/c/79b592e8f1b435796cbc2722190368e3e8ffd7a1" }, { "cve": "CVE-2026-45900", "author_name": "Jianpeng Chang", "author_email": "jianpeng.chang.cn@windriver.com", "fix_sha": "7d43252b3060b0ba4a192dce5dba85a3f39ffe39", "subject": "crypto: caam - fix netdev memory leak in dpaa2_caam_probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45900", "commit_url": "https://git.kernel.org/stable/c/7d43252b3060b0ba4a192dce5dba85a3f39ffe39" }, { "cve": "CVE-2026-45901", "author_name": "Brian Witte", "author_email": "brianwitte@mailfence.com", "fix_sha": "7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc", "subject": "netfilter: nf_tables: revert commit_mutex usage in reset path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45901", "commit_url": "https://git.kernel.org/stable/c/7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc" }, { "cve": "CVE-2026-45902", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "8005843369723d9c8975b7c4202d1b85d6125302", "subject": "power: supply: bq256xx: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45902", "commit_url": "https://git.kernel.org/stable/c/8005843369723d9c8975b7c4202d1b85d6125302" }, { "cve": "CVE-2026-45903", "author_name": "Zesen Liu", "author_email": "ftyghome@gmail.com", "fix_sha": "802eef5afb1865bc5536a5302c068ba2215a1f72", "subject": "bpf: Fix memory access flags in helper prototypes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45903", "commit_url": "https://git.kernel.org/stable/c/802eef5afb1865bc5536a5302c068ba2215a1f72" }, { "cve": "CVE-2026-45904", "author_name": "Narayana Murty N", "author_email": "nnmlinux@linux.ibm.com", "fix_sha": "815a8d2feb5615ae7f0b5befd206af0b0160614c", "subject": "powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45904", "commit_url": "https://git.kernel.org/stable/c/815a8d2feb5615ae7f0b5befd206af0b0160614c" }, { "cve": "CVE-2026-45905", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@shopee.com", "fix_sha": "81b84de32bb27ae1ae2eb9acf0420e9d0d14bf00", "subject": "xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45905", "commit_url": "https://git.kernel.org/stable/c/81b84de32bb27ae1ae2eb9acf0420e9d0d14bf00" }, { "cve": "CVE-2026-45906", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "838767f5074700552d3f006d867caed65edc7328", "subject": "power: supply: pf1550: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45906", "commit_url": "https://git.kernel.org/stable/c/838767f5074700552d3f006d867caed65edc7328" }, { "cve": "CVE-2026-45907", "author_name": "Cosmin Ratiu", "author_email": "cratiu@nvidia.com", "fix_sha": "83ac0304a2d77519dae1e54c9713cbe1aedf19c9", "subject": "net/mlx5e: Fix deadlocks between devlink and netdev instance locks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45907", "commit_url": "https://git.kernel.org/stable/c/83ac0304a2d77519dae1e54c9713cbe1aedf19c9" }, { "cve": "CVE-2026-45908", "author_name": "Zishun Yi", "author_email": "zishun.yi.dev@gmail.com", "fix_sha": "84dd57fb0359500092f1101409ca32091731490d", "subject": "accel/amdxdna: Fix memory leak in amdxdna_ubuf_map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45908", "commit_url": "https://git.kernel.org/stable/c/84dd57fb0359500092f1101409ca32091731490d" }, { "cve": "CVE-2026-45909", "author_name": "Sjoerd Simons", "author_email": "sjoerd@collabora.com", "fix_sha": "871afb43e41ad4e8246438de495a939cd0f8113c", "subject": "clk: mediatek: Drop __initconst from gates", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45909", "commit_url": "https://git.kernel.org/stable/c/871afb43e41ad4e8246438de495a939cd0f8113c" }, { "cve": "CVE-2026-45910", "author_name": "Li Zhijian", "author_email": "lizhijian@fujitsu.com", "fix_sha": "87bf646921430e303176edc4eb07c30160361b73", "subject": "RDMA/rxe: Fix race condition in QP timer handlers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45910", "commit_url": "https://git.kernel.org/stable/c/87bf646921430e303176edc4eb07c30160361b73" }, { "cve": "CVE-2026-45911", "author_name": "Thomas Richard (TI)", "author_email": "thomas.richard@bootlin.com", "fix_sha": "87e4b043b98a1d269be0b812f383881abee0ca45", "subject": "usb: cdns3: fix role switching during resume", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45911", "commit_url": "https://git.kernel.org/stable/c/87e4b043b98a1d269be0b812f383881abee0ca45" }, { "cve": "CVE-2026-45912", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "8b4b19a2f96348d70bfa306ef7d4a13b0bcbea79", "subject": "ext4: don't cache extent during splitting extent", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45912", "commit_url": "https://git.kernel.org/stable/c/8b4b19a2f96348d70bfa306ef7d4a13b0bcbea79" }, { "cve": "CVE-2026-45913", "author_name": "Nikolay Aleksandrov", "author_email": "nikolay@nvidia.com", "fix_sha": "8b769e311a86bb9d15c5658ad283b86fc8f080a2", "subject": "net: bridge: mcast: always update mdb_n_entries for vlan contexts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45913", "commit_url": "https://git.kernel.org/stable/c/8b769e311a86bb9d15c5658ad283b86fc8f080a2" }, { "cve": "CVE-2026-45914", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "8bde3e395a85017f12af2b0ba5c3684f5af9c006", "subject": "Revert \"hwmon: (ibmpex) fix use-after-free in high/low store\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45914", "commit_url": "https://git.kernel.org/stable/c/8bde3e395a85017f12af2b0ba5c3684f5af9c006" }, { "cve": "CVE-2026-45915", "author_name": "Zhiyu Zhang", "author_email": "zhiyuzhang999@gmail.com", "fix_sha": "8cafcb881364af5ef3a8b9fed4db254054033d8a", "subject": "fat: avoid parent link count underflow in rmdir", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45915", "commit_url": "https://git.kernel.org/stable/c/8cafcb881364af5ef3a8b9fed4db254054033d8a" }, { "cve": "CVE-2026-45916", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "8d59cf3887fbabacef53bfba473e33e8a8d9d07b", "subject": "power: supply: sbs-battery: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45916", "commit_url": "https://git.kernel.org/stable/c/8d59cf3887fbabacef53bfba473e33e8a8d9d07b" }, { "cve": "CVE-2026-45917", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "8fde939b0206afc1d5846217a01a16b9bc8c7896", "subject": "ipvs: do not keep dest_dst if dev is going down", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45917", "commit_url": "https://git.kernel.org/stable/c/8fde939b0206afc1d5846217a01a16b9bc8c7896" }, { "cve": "CVE-2026-45918", "author_name": "Antonio Quartulli", "author_email": "antonio@openvpn.net", "fix_sha": "94560267d6c41b1ff3fafbab726e3f8a55a6af34", "subject": "ovpn: tcp - don't deref NULL sk_socket member after tcp_close()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45918", "commit_url": "https://git.kernel.org/stable/c/94560267d6c41b1ff3fafbab726e3f8a55a6af34" }, { "cve": "CVE-2026-45919", "author_name": "Chen Jinghuang", "author_email": "chenjinghuang2@huawei.com", "fix_sha": "94894c9c477e53bcea052e075c53f89df3d2a33e", "subject": "sched/rt: Skip currently executing CPU in rto_next_cpu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45919", "commit_url": "https://git.kernel.org/stable/c/94894c9c477e53bcea052e075c53f89df3d2a33e" }, { "cve": "CVE-2026-45920", "author_name": "Brian Foster", "author_email": "bfoster@redhat.com", "fix_sha": "94a8cea54cd935c54fa2fba70354757c0fc245e3", "subject": "ext4: fix dirtyclusters double decrement on fs shutdown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45920", "commit_url": "https://git.kernel.org/stable/c/94a8cea54cd935c54fa2fba70354757c0fc245e3" }, { "cve": "CVE-2026-45921", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "980ce2b02dd06a4fdf5fee38b2e14becf9cf7b8b", "subject": "mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45921", "commit_url": "https://git.kernel.org/stable/c/980ce2b02dd06a4fdf5fee38b2e14becf9cf7b8b" }, { "cve": "CVE-2026-45922", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "9b9d253908478f504297ac283c514e5953ddafa6", "subject": "RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45922", "commit_url": "https://git.kernel.org/stable/c/9b9d253908478f504297ac283c514e5953ddafa6" }, { "cve": "CVE-2026-45923", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "9e7021d2aeae57c323a6f722ed7915686cdcc123", "subject": "net: usb: catc: enable basic endpoint checking", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45923", "commit_url": "https://git.kernel.org/stable/c/9e7021d2aeae57c323a6f722ed7915686cdcc123" }, { "cve": "CVE-2026-45924", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "a09dc10d1353f0e92c21eae2a79af1c2b1ddcde8", "subject": "ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45924", "commit_url": "https://git.kernel.org/stable/c/a09dc10d1353f0e92c21eae2a79af1c2b1ddcde8" }, { "cve": "CVE-2026-45925", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "a1fe789a96fe47733c133134fd264cb7ca832395", "subject": "thermal/of: Fix reference leak in thermal_of_cm_lookup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45925", "commit_url": "https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395" }, { "cve": "CVE-2026-45926", "author_name": "Kari Argillander", "author_email": "kari.argillander@gmail.com", "fix_sha": "a2633dc243c35754a0c2270131d8a199c987c9bf", "subject": "rust: pwm: Fix potential memory leak on init error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45926", "commit_url": "https://git.kernel.org/stable/c/a2633dc243c35754a0c2270131d8a199c987c9bf" }, { "cve": "CVE-2026-45927", "author_name": "KP Singh", "author_email": "kpsingh@kernel.org", "fix_sha": "a2c86aa621c22f2a7e26c654f936d65cfff0aa91", "subject": "bpf: Require frozen map for calculating map hash", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45927", "commit_url": "https://git.kernel.org/stable/c/a2c86aa621c22f2a7e26c654f936d65cfff0aa91" }, { "cve": "CVE-2026-45928", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "a519e21e32398459ba357e67b541402f7295ee1b", "subject": "media: chips-media: wave5: Fix memory leak on codec_info allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45928", "commit_url": "https://git.kernel.org/stable/c/a519e21e32398459ba357e67b541402f7295ee1b" }, { "cve": "CVE-2026-45929", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "a5ec7baa44ea3a1d6aa0ca31c0ad82edf9affe41", "subject": "ovpn: fix possible use-after-free in ovpn_net_xmit", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45929", "commit_url": "https://git.kernel.org/stable/c/a5ec7baa44ea3a1d6aa0ca31c0ad82edf9affe41" }, { "cve": "CVE-2026-45930", "author_name": "Jeremy Kerr", "author_email": "jk@codeconstruct.com.au", "fix_sha": "a6a9bc544b675d8b5180f2718ec985ad267b5cbf", "subject": "net: mctp: ensure our nlmsg responses are initialised", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45930", "commit_url": "https://git.kernel.org/stable/c/a6a9bc544b675d8b5180f2718ec985ad267b5cbf" }, { "cve": "CVE-2026-45931", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "a9162439ad792afcddc04718408ec1380b7a5f63", "subject": "accel/amdxdna: Hold mm structure across iommu_sva_unbind_device()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45931", "commit_url": "https://git.kernel.org/stable/c/a9162439ad792afcddc04718408ec1380b7a5f63" }, { "cve": "CVE-2026-45932", "author_name": "Guillaume Gonnet", "author_email": "ggonnet.linux@gmail.com", "fix_sha": "ae23bc81ddf7c17b663c4ed1b21e35527b0a7131", "subject": "bpf: Fix tcx/netkit detach permissions when prog fd isn't given", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45932", "commit_url": "https://git.kernel.org/stable/c/ae23bc81ddf7c17b663c4ed1b21e35527b0a7131" }, { "cve": "CVE-2026-45933", "author_name": "Puranjay Mohan", "author_email": "puranjay@kernel.org", "fix_sha": "af9e89d8dd39530c8bd14c33ddf6b502df1071b6", "subject": "bpf: Preserve id of register in sync_linked_regs()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45933", "commit_url": "https://git.kernel.org/stable/c/af9e89d8dd39530c8bd14c33ddf6b502df1071b6" }, { "cve": "CVE-2026-45934", "author_name": "Boris Burkov", "author_email": "boris@bur.io", "fix_sha": "b14c5e04bd0f722ed631845599d52d03fcae1bc1", "subject": "btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45934", "commit_url": "https://git.kernel.org/stable/c/b14c5e04bd0f722ed631845599d52d03fcae1bc1" }, { "cve": "CVE-2026-45935", "author_name": "Jiasheng Jiang", "author_email": "jiashengjiangcool@gmail.com", "fix_sha": "b2bc7c44ed1779fc9eaab9a186db0f0d01439622", "subject": "fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45935", "commit_url": "https://git.kernel.org/stable/c/b2bc7c44ed1779fc9eaab9a186db0f0d01439622" }, { "cve": "CVE-2026-45936", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "b2ce982e2e0c888dc55c888ad0e20ea04daf2e6b", "subject": "power: supply: goldfish: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45936", "commit_url": "https://git.kernel.org/stable/c/b2ce982e2e0c888dc55c888ad0e20ea04daf2e6b" }, { "cve": "CVE-2026-45937", "author_name": "Aleksander Jan Bajkowski", "author_email": "olek2@wp.pl", "fix_sha": "b6e32ba6d32503440a3e3e16c8d0521cbb7e0c5d", "subject": "crypto: inside-secure/eip93 - fix kernel panic in driver detach", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45937", "commit_url": "https://git.kernel.org/stable/c/b6e32ba6d32503440a3e3e16c8d0521cbb7e0c5d" }, { "cve": "CVE-2026-45938", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "b7508129978ae1e2ed9b0410396abc05def9c4eb", "subject": "power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45938", "commit_url": "https://git.kernel.org/stable/c/b7508129978ae1e2ed9b0410396abc05def9c4eb" }, { "cve": "CVE-2026-45939", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "b89921eed8cf2d97250bac4be38dbcfbf048b586", "subject": "gpib: Fix memory leak in ni_usb_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45939", "commit_url": "https://git.kernel.org/stable/c/b89921eed8cf2d97250bac4be38dbcfbf048b586" }, { "cve": "CVE-2026-45940", "author_name": "Jie Zhang", "author_email": "jzhang918@gmail.com", "fix_sha": "babab1b42ed68877ef669a08384becf281ad2582", "subject": "net: stmmac: fix oops when split header is enabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45940", "commit_url": "https://git.kernel.org/stable/c/babab1b42ed68877ef669a08384becf281ad2582" }, { "cve": "CVE-2026-45941", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "bbd6e97c836cbeb9606d7b7e5dcf8a1d89525713", "subject": "tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45941", "commit_url": "https://git.kernel.org/stable/c/bbd6e97c836cbeb9606d7b7e5dcf8a1d89525713" }, { "cve": "CVE-2026-45942", "author_name": "Yongjian Sun", "author_email": "sunyongjian1@huawei.com", "fix_sha": "bdc56a9c46b2a99c12313122b9352b619a2e719e", "subject": "ext4: fix e4b bitmap inconsistency reports", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45942", "commit_url": "https://git.kernel.org/stable/c/bdc56a9c46b2a99c12313122b9352b619a2e719e" }, { "cve": "CVE-2026-45943", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "c134a40f86efb8d6b5a949ef70e06d5752209be5", "subject": "erofs: fix inline data read failure for ztailpacking pclusters", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45943", "commit_url": "https://git.kernel.org/stable/c/c134a40f86efb8d6b5a949ef70e06d5752209be5" }, { "cve": "CVE-2026-45944", "author_name": "Lu Baolu", "author_email": "baolu.lu@linux.intel.com", "fix_sha": "c1e4f1dccbe9d7656d1c6872ebeadb5992d0aaa2", "subject": "iommu/vt-d: Clear Present bit before tearing down context entry", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45944", "commit_url": "https://git.kernel.org/stable/c/c1e4f1dccbe9d7656d1c6872ebeadb5992d0aaa2" }, { "cve": "CVE-2026-45945", "author_name": "Lu Baolu", "author_email": "baolu.lu@linux.intel.com", "fix_sha": "c3b1edea3791fa91ab7032faa90355913ad9451b", "subject": "iommu/vt-d: Fix race condition during PASID entry replacement", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45945", "commit_url": "https://git.kernel.org/stable/c/c3b1edea3791fa91ab7032faa90355913ad9451b" }, { "cve": "CVE-2026-45946", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "c4af8a98bb52825a5331ae1d0604c0ea6956ba4b", "subject": "power: supply: ab8500: Fix use-after-free in power_supply_changed()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45946", "commit_url": "https://git.kernel.org/stable/c/c4af8a98bb52825a5331ae1d0604c0ea6956ba4b" }, { "cve": "CVE-2026-45947", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "c9be63d565789b56ca7b0197e2cb78a3671f95a8", "subject": "drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45947", "commit_url": "https://git.kernel.org/stable/c/c9be63d565789b56ca7b0197e2cb78a3671f95a8" }, { "cve": "CVE-2026-45948", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "ca81109d4a8f192dc1cbad4a1ee25246363c2833", "subject": "ext4: fix memory leak in ext4_ext_shift_extents()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45948", "commit_url": "https://git.kernel.org/stable/c/ca81109d4a8f192dc1cbad4a1ee25246363c2833" }, { "cve": "CVE-2026-45949", "author_name": "Lianjie Wang", "author_email": "karin0.zst@gmail.com", "fix_sha": "cc2f39d6ac48e6e3cb2d6240bc0d6df839dd0828", "subject": "hwrng: core - use RCU and work_struct to fix race condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45949", "commit_url": "https://git.kernel.org/stable/c/cc2f39d6ac48e6e3cb2d6240bc0d6df839dd0828" }, { "cve": "CVE-2026-45950", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "ccb679fdae2e62ed92fd9acb25ed809c0226fcc6", "subject": "crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45950", "commit_url": "https://git.kernel.org/stable/c/ccb679fdae2e62ed92fd9acb25ed809c0226fcc6" }, { "cve": "CVE-2026-45951", "author_name": "Anton Protopopov", "author_email": "a.s.protopopov@gmail.com", "fix_sha": "ccd2d799ed4467c07f5ee18c2f5c59bcc990822c", "subject": "bpf: Fix a potential use-after-free of BTF object", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45951", "commit_url": "https://git.kernel.org/stable/c/ccd2d799ed4467c07f5ee18c2f5c59bcc990822c" }, { "cve": "CVE-2026-45952", "author_name": "Dimitri Daskalakis", "author_email": "dimitri.daskalakis1@gmail.com", "fix_sha": "ccd8e87748ad083047d6c8544c5809b7f96cc8df", "subject": "eth: fbnic: Add validation for MTU changes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45952", "commit_url": "https://git.kernel.org/stable/c/ccd8e87748ad083047d6c8544c5809b7f96cc8df" }, { "cve": "CVE-2026-45953", "author_name": "Yu Kuai", "author_email": "yukuai@fnnas.com", "fix_sha": "cd1635d844d26471c56c0a432abdee12fc9ad735", "subject": "md/raid5: fix IO hang with degraded array with llbitmap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45953", "commit_url": "https://git.kernel.org/stable/c/cd1635d844d26471c56c0a432abdee12fc9ad735" }, { "cve": "CVE-2026-45954", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "ce4e25198a6aaaaf36248edf8daf3d744ec8e309", "subject": "fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45954", "commit_url": "https://git.kernel.org/stable/c/ce4e25198a6aaaaf36248edf8daf3d744ec8e309" }, { "cve": "CVE-2026-45955", "author_name": "Yu Kuai", "author_email": "yukuai@fnnas.com", "fix_sha": "d119bd2e1643cc023210ff3c6f0657e4f914e71d", "subject": "md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45955", "commit_url": "https://git.kernel.org/stable/c/d119bd2e1643cc023210ff3c6f0657e4f914e71d" }, { "cve": "CVE-2026-45956", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "d3968a0d85b211e197f2f4f06268a7031079e0d0", "subject": "drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45956", "commit_url": "https://git.kernel.org/stable/c/d3968a0d85b211e197f2f4f06268a7031079e0d0" }, { "cve": "CVE-2026-45957", "author_name": "Yao Kai", "author_email": "yaokai34@huawei.com", "fix_sha": "d41e37f26b3157b3f1d10223863519a943aa239b", "subject": "rcu: Fix rcu_read_unlock() deadloop due to softirq", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45957", "commit_url": "https://git.kernel.org/stable/c/d41e37f26b3157b3f1d10223863519a943aa239b" }, { "cve": "CVE-2026-45958", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "d4c98c077c7fb2dfdece7d605e694b5ea2665085", "subject": "drm/exynos: vidi: fix to avoid directly dereferencing user pointer", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45958", "commit_url": "https://git.kernel.org/stable/c/d4c98c077c7fb2dfdece7d605e694b5ea2665085" }, { "cve": "CVE-2026-45959", "author_name": "Ella Ma", "author_email": "alansnape3058@gmail.com", "fix_sha": "d5abcc33ee76bc26d58b39dc1a097e43a99dd438", "subject": "crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45959", "commit_url": "https://git.kernel.org/stable/c/d5abcc33ee76bc26d58b39dc1a097e43a99dd438" }, { "cve": "CVE-2026-45960", "author_name": "Shardul Bankar", "author_email": "shardul.b@mpiricsoftware.com", "fix_sha": "d8a73cc46c8462a969a7516131feb3096f4c49d3", "subject": "hfsplus: return error when node already exists in hfs_bnode_create", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45960", "commit_url": "https://git.kernel.org/stable/c/d8a73cc46c8462a969a7516131feb3096f4c49d3" }, { "cve": "CVE-2026-45961", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "da6f5bbc2e7902f578b503f2a4c3d8d09ca4b102", "subject": "gfs2: fix memory leaks in gfs2_fill_super error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45961", "commit_url": "https://git.kernel.org/stable/c/da6f5bbc2e7902f578b503f2a4c3d8d09ca4b102" }, { "cve": "CVE-2026-45962", "author_name": "Govindarajulu Varadarajan", "author_email": "govind.varadar@gmail.com", "fix_sha": "da7e4b75e50c087d2031a92f6646eb90f7045a67", "subject": "ublk: Validate SQE128 flag before accessing the cmd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45962", "commit_url": "https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67" }, { "cve": "CVE-2026-45963", "author_name": "Cristian Ciocaltea", "author_email": "cristian.ciocaltea@collabora.com", "fix_sha": "dbd3fd05cddfdeec1e49b0a66269881c09eebd17", "subject": "ASoC: nau8821: Cancel delayed work on component remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45963", "commit_url": "https://git.kernel.org/stable/c/dbd3fd05cddfdeec1e49b0a66269881c09eebd17" }, { "cve": "CVE-2026-45964", "author_name": "Daniel Hodges", "author_email": "git@danielhodges.dev", "fix_sha": "dd2fdc3504592d85e549c523b054898a036a6afe", "subject": "SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45964", "commit_url": "https://git.kernel.org/stable/c/dd2fdc3504592d85e549c523b054898a036a6afe" }, { "cve": "CVE-2026-45965", "author_name": "Georgia Garcia", "author_email": "georgia.garcia@canonical.com", "fix_sha": "df9ac55abd18628bd8cff687ea043660532a3654", "subject": "apparmor: fix invalid deref of rawdata when export_binary is unset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45965", "commit_url": "https://git.kernel.org/stable/c/df9ac55abd18628bd8cff687ea043660532a3654" }, { "cve": "CVE-2026-45966", "author_name": "System Administrator", "author_email": "root@localhost", "fix_sha": "e2938ad00b21340c0362562dfedd7cfec0554d67", "subject": "apparmor: fix NULL pointer dereference in __unix_needs_revalidation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45966", "commit_url": "https://git.kernel.org/stable/c/e2938ad00b21340c0362562dfedd7cfec0554d67" }, { "cve": "CVE-2026-45967", "author_name": "Anton Protopopov", "author_email": "a.s.protopopov@gmail.com", "fix_sha": "e3bd7bdf5ffe49d8381e42843f6e98cd0c78a1e8", "subject": "bpf: Return proper address for non-zero offsets in insn array", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45967", "commit_url": "https://git.kernel.org/stable/c/e3bd7bdf5ffe49d8381e42843f6e98cd0c78a1e8" }, { "cve": "CVE-2026-45968", "author_name": "Aboorva Devarajan", "author_email": "aboorvad@linux.ibm.com", "fix_sha": "e5c9ffc6ae1bcdb1062527d611043681ac301aca", "subject": "cpuidle: Skip governor when only one idle state is available", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45968", "commit_url": "https://git.kernel.org/stable/c/e5c9ffc6ae1bcdb1062527d611043681ac301aca" }, { "cve": "CVE-2026-45969", "author_name": "Haotian Zhang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "e6807641ac94e832988655a1c0e60ccc806b76dc", "subject": "HID: playstation: Add missing check for input_ff_create_memless", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45969", "commit_url": "https://git.kernel.org/stable/c/e6807641ac94e832988655a1c0e60ccc806b76dc" }, { "cve": "CVE-2026-45970", "author_name": "Hangbin Liu", "author_email": "liuhangbin@gmail.com", "fix_sha": "e6834a4c474697df23ab9948fd3577b26bf48656", "subject": "bonding: alb: fix UAF in rlb_arp_recv during bond up/down", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45970", "commit_url": "https://git.kernel.org/stable/c/e6834a4c474697df23ab9948fd3577b26bf48656" }, { "cve": "CVE-2026-45971", "author_name": "KP Singh", "author_email": "kpsingh@kernel.org", "fix_sha": "ea1535e28bb3773fc0b3cbd1f3842b808016990c", "subject": "bpf: Limit bpf program signature size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45971", "commit_url": "https://git.kernel.org/stable/c/ea1535e28bb3773fc0b3cbd1f3842b808016990c" }, { "cve": "CVE-2026-45972", "author_name": "Paulo Alcantara", "author_email": "pc@manguebit.org", "fix_sha": "ebbbc4bfad4cb355d17c671223d0814ee3ef4eda", "subject": "smb: client: fix potential UAF and double free in smb2_open_file()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45972", "commit_url": "https://git.kernel.org/stable/c/ebbbc4bfad4cb355d17c671223d0814ee3ef4eda" }, { "cve": "CVE-2026-45973", "author_name": "Chiara Meiohas", "author_email": "cmeiohas@nvidia.com", "fix_sha": "ebc2164a4cd4314503f1a0c8e7aaf76d7e5fa211", "subject": "RDMA/mlx5: Fix UMR hang in LAG error state unload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45973", "commit_url": "https://git.kernel.org/stable/c/ebc2164a4cd4314503f1a0c8e7aaf76d7e5fa211" }, { "cve": "CVE-2026-45974", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "ecb7c2484cfc83a93658907580035a8adf1e0a92", "subject": "btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45974", "commit_url": "https://git.kernel.org/stable/c/ecb7c2484cfc83a93658907580035a8adf1e0a92" }, { "cve": "CVE-2026-45975", "author_name": "Caleb Sander Mateos", "author_email": "csander@purestorage.com", "fix_sha": "ed9f54cc1e335096733aed03c2a46de3d58922ed", "subject": "ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45975", "commit_url": "https://git.kernel.org/stable/c/ed9f54cc1e335096733aed03c2a46de3d58922ed" }, { "cve": "CVE-2026-45976", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "ee41e5b63c8210525c936ee637a2c8d185ce873c", "subject": "drm/amdgpu: Fix memory leak in amdgpu_ras_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45976", "commit_url": "https://git.kernel.org/stable/c/ee41e5b63c8210525c936ee637a2c8d185ce873c" }, { "cve": "CVE-2026-45977", "author_name": "Chengfeng Ye", "author_email": "dg573847474@gmail.com", "fix_sha": "ee5492fd88cfc079c19fbeac78e9e53b7f6c04f3", "subject": "fbnic: close fw_log race between users and teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45977", "commit_url": "https://git.kernel.org/stable/c/ee5492fd88cfc079c19fbeac78e9e53b7f6c04f3" }, { "cve": "CVE-2026-45978", "author_name": "Chaitanya Mishra", "author_email": "chaitanyamishra.ai@gmail.com", "fix_sha": "efcffd9a6ad8d190651498d5eda53bfc7cf683a7", "subject": "staging: greybus: lights: avoid NULL deref", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45978", "commit_url": "https://git.kernel.org/stable/c/efcffd9a6ad8d190651498d5eda53bfc7cf683a7" }, { "cve": "CVE-2026-45979", "author_name": "Sunil Khatri", "author_email": "sunil.khatri@amd.com", "fix_sha": "f025a2b8d93358467b8e8f4b3a617e88c5f02fab", "subject": "drm/amdgpu: clean up the amdgpu_cs_parser_bos", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45979", "commit_url": "https://git.kernel.org/stable/c/f025a2b8d93358467b8e8f4b3a617e88c5f02fab" }, { "cve": "CVE-2026-45980", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "f1370241fe8045702bc9d0812b996791f0500f1b", "subject": "accel/amdxdna: Stop job scheduling across aie2_release_resource()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45980", "commit_url": "https://git.kernel.org/stable/c/f1370241fe8045702bc9d0812b996791f0500f1b" }, { "cve": "CVE-2026-45981", "author_name": "Salah Triki", "author_email": "salah.triki@gmail.com", "fix_sha": "f65c75b0b9b5a390bc3beadcde0a6fbc3ad118f7", "subject": "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45981", "commit_url": "https://git.kernel.org/stable/c/f65c75b0b9b5a390bc3beadcde0a6fbc3ad118f7" }, { "cve": "CVE-2026-45982", "author_name": "Alexey Simakov", "author_email": "bigalex934@gmail.com", "fix_sha": "f851e03bce968ff9b3faad1b616062e1244fd38d", "subject": "ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45982", "commit_url": "https://git.kernel.org/stable/c/f851e03bce968ff9b3faad1b616062e1244fd38d" }, { "cve": "CVE-2026-45983", "author_name": "Anthony Iliopoulos", "author_email": "ailiop@suse.com", "fix_sha": "f9c206cdc4266caad6a9a7f46341420a10f03ccb", "subject": "nfsd: never defer requests during idmap lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45983", "commit_url": "https://git.kernel.org/stable/c/f9c206cdc4266caad6a9a7f46341420a10f03ccb" }, { "cve": "CVE-2026-45984", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "faddeb848305e79db89ee0479bb0e33380656321", "subject": "gfs2: Fix use-after-free in iomap inline data write path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45984", "commit_url": "https://git.kernel.org/stable/c/faddeb848305e79db89ee0479bb0e33380656321" }, { "cve": "CVE-2026-45985", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "feaf2a80e78f89ee8a3464126077ba8683b62791", "subject": "ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45985", "commit_url": "https://git.kernel.org/stable/c/feaf2a80e78f89ee8a3464126077ba8683b62791" }, { "cve": "CVE-2026-45986", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "02c64052fad03699b9c6d1df2f9b444d17e4ac50", "subject": "crypto: ccree - fix a memory leak in cc_mac_digest()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45986", "commit_url": "https://git.kernel.org/stable/c/02c64052fad03699b9c6d1df2f9b444d17e4ac50" }, { "cve": "CVE-2026-45987", "author_name": "Yosry Ahmed", "author_email": "yosry@kernel.org", "fix_sha": "03bee264f8ebfd39e0254c98e112d033a7aa9055", "subject": "KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45987", "commit_url": "https://git.kernel.org/stable/c/03bee264f8ebfd39e0254c98e112d033a7aa9055" }, { "cve": "CVE-2026-45988", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "0422e7a4883f25101903f3e8105c0808aa5f4ce9", "subject": "rxrpc: Fix re-decryption of RESPONSE packets", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45988", "commit_url": "https://git.kernel.org/stable/c/0422e7a4883f25101903f3e8105c0808aa5f4ce9" }, { "cve": "CVE-2026-45989", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "07fd339b2c253205794bea5d9b4b7548a4546c56", "subject": "of: unittest: fix use-after-free in testdrv_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45989", "commit_url": "https://git.kernel.org/stable/c/07fd339b2c253205794bea5d9b4b7548a4546c56" }, { "cve": "CVE-2026-45990", "author_name": "Marco Elver", "author_email": "elver@google.com", "fix_sha": "082a6d03a2d685a83a332666b500ad3966349588", "subject": "slub: fix data loss and overflow in krealloc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45990", "commit_url": "https://git.kernel.org/stable/c/082a6d03a2d685a83a332666b500ad3966349588" }, { "cve": "CVE-2026-45991", "author_name": "Seohyeon Maeng", "author_email": "bioloidgp@gmail.com", "fix_sha": "08841b06fa64d8edbd1a21ca6e613420c90cc4b8", "subject": "udf: fix partition descriptor append bookkeeping", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45991", "commit_url": "https://git.kernel.org/stable/c/08841b06fa64d8edbd1a21ca6e613420c90cc4b8" }, { "cve": "CVE-2026-45993", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "0c965d2784fbbd7f8e3b96d875c9cfdf7c00da3d", "subject": "LoongArch: Add spectre boundry for syscall dispatch table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45993", "commit_url": "https://git.kernel.org/stable/c/0c965d2784fbbd7f8e3b96d875c9cfdf7c00da3d" }, { "cve": "CVE-2026-45994", "author_name": "Tyllis Xu", "author_email": "livelycarpet87@gmail.com", "fix_sha": "0eb09f737428e482a32a2e31e5e223f2b35a71d3", "subject": "ibmasm: fix OOB reads in command_file_write due to missing size checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45994", "commit_url": "https://git.kernel.org/stable/c/0eb09f737428e482a32a2e31e5e223f2b35a71d3" }, { "cve": "CVE-2026-45995", "author_name": "Pavel Begunkov", "author_email": "asml.silence@gmail.com", "fix_sha": "0fcccfd87152f957fa8312b841f6efef42a05a20", "subject": "io_uring/zcrx: fix user_struct uaf", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45995", "commit_url": "https://git.kernel.org/stable/c/0fcccfd87152f957fa8312b841f6efef42a05a20" }, { "cve": "CVE-2026-45996", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "1c78c2002380a1fe31bfb01a3d5f29809e55a096", "subject": "spi: imx: fix use-after-free on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45996", "commit_url": "https://git.kernel.org/stable/c/1c78c2002380a1fe31bfb01a3d5f29809e55a096" }, { "cve": "CVE-2026-45997", "author_name": "Yang Xiuwei", "author_email": "yangxiuwei@kylinos.cn", "fix_sha": "1e111c4b3a726df1254670a5cc4868cedb946d37", "subject": "scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45997", "commit_url": "https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37" }, { "cve": "CVE-2026-45998", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "1f2740150f904bfa60e4bad74d65add3ccb5e7f8", "subject": "rxrpc: Fix potential UAF after skb_unshare() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45998", "commit_url": "https://git.kernel.org/stable/c/1f2740150f904bfa60e4bad74d65add3ccb5e7f8" }, { "cve": "CVE-2026-45999", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "21e161de2dc660b1bb70ef5b156ab8e6e1cca3ab", "subject": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45999", "commit_url": "https://git.kernel.org/stable/c/21e161de2dc660b1bb70ef5b156ab8e6e1cca3ab" }, { "cve": "CVE-2026-46000", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "24481a7f573305706054c59e275371f8d0fe919f", "subject": "rxrpc: Fix conn-level packet handling to unshare RESPONSE packets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46000", "commit_url": "https://git.kernel.org/stable/c/24481a7f573305706054c59e275371f8d0fe919f" }, { "cve": "CVE-2026-46001", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "24c73e93d6a756e1b8626bb259d2e07c5b89b370", "subject": "hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46001", "commit_url": "https://git.kernel.org/stable/c/24c73e93d6a756e1b8626bb259d2e07c5b89b370" }, { "cve": "CVE-2026-46002", "author_name": "Vasiliy Kovalev", "author_email": "kovalev@altlinux.org", "fix_sha": "25947cc5b2374cd5bf627fe3141496444260d04f", "subject": "ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46002", "commit_url": "https://git.kernel.org/stable/c/25947cc5b2374cd5bf627fe3141496444260d04f" }, { "cve": "CVE-2026-46003", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "27d5e84e810b0849d08b9aec68e48570461ce313", "subject": "net: qrtr: ns: Limit the total number of nodes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46003", "commit_url": "https://git.kernel.org/stable/c/27d5e84e810b0849d08b9aec68e48570461ce313" }, { "cve": "CVE-2026-46004", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "28abd224db4a49560b452115bca3672a20e45b2f", "subject": "ALSA: caiaq: Handle probe errors properly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46004", "commit_url": "https://git.kernel.org/stable/c/28abd224db4a49560b452115bca3672a20e45b2f" }, { "cve": "CVE-2026-46005", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "29a7b2614357393b176ef06ba5bc3ff5afc8df69", "subject": "xfs: fix a resource leak in xfs_alloc_buftarg()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46005", "commit_url": "https://git.kernel.org/stable/c/29a7b2614357393b176ef06ba5bc3ff5afc8df69" }, { "cve": "CVE-2026-46006", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "2fc87d37be1b730a149b035f9375fdb8cc5333a5", "subject": "drm/nouveau: fix u32 overflow in pushbuf reloc bounds check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46006", "commit_url": "https://git.kernel.org/stable/c/2fc87d37be1b730a149b035f9375fdb8cc5333a5" }, { "cve": "CVE-2026-46007", "author_name": "Thomas Wei\u00dfschuh", "author_email": "linux@weissschuh.net", "fix_sha": "3023c050af3600bf451153335dea5e073c9a3088", "subject": "hwmon: (powerz) Avoid cacheline sharing for DMA buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46007", "commit_url": "https://git.kernel.org/stable/c/3023c050af3600bf451153335dea5e073c9a3088" }, { "cve": "CVE-2026-46008", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "33c3f6c2b48cd84b441dba1ee3e62290e53930f4", "subject": "mm/damon/core: fix damos_walk() vs kdamond_fn() exit race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46008", "commit_url": "https://git.kernel.org/stable/c/33c3f6c2b48cd84b441dba1ee3e62290e53930f4" }, { "cve": "CVE-2026-46009", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "3446beddba450c8d6f9aca2f028712ac527fead3", "subject": "PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46009", "commit_url": "https://git.kernel.org/stable/c/3446beddba450c8d6f9aca2f028712ac527fead3" }, { "cve": "CVE-2026-46010", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "3476c8bb960f48e49355d6f93fb7673211e0163f", "subject": "rxrpc: Fix error handling in rxgk_extract_token()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46010", "commit_url": "https://git.kernel.org/stable/c/3476c8bb960f48e49355d6f93fb7673211e0163f" }, { "cve": "CVE-2026-46011", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "34c519feef3e4fcff1078dc8bdb25fbbbd10303f", "subject": "media: mtk-jpeg: fix use-after-free in release path due to uncancelled work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46011", "commit_url": "https://git.kernel.org/stable/c/34c519feef3e4fcff1078dc8bdb25fbbbd10303f" }, { "cve": "CVE-2026-46012", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "34f61a07e0cdefaecd3ec03bb5fb22215643678f", "subject": "rxrpc: Fix memory leaks in rxkad_verify_response()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46012", "commit_url": "https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678f" }, { "cve": "CVE-2026-46013", "author_name": "Chenghao Duan", "author_email": "duanchenghao@kylinos.cn", "fix_sha": "3538f90ab89aaf302782b4b073a0aae66904cd67", "subject": "mm/memfd_luo: fix physical address conversion in put_folios cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46013", "commit_url": "https://git.kernel.org/stable/c/3538f90ab89aaf302782b4b073a0aae66904cd67" }, { "cve": "CVE-2026-46014", "author_name": "Yosry Ahmed", "author_email": "yosry@kernel.org", "fix_sha": "3700f0788da6acf73b2df56690f4b201aa4aefd2", "subject": "KVM: SVM: Add missing save/restore handling of LBR MSRs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46014", "commit_url": "https://git.kernel.org/stable/c/3700f0788da6acf73b2df56690f4b201aa4aefd2" }, { "cve": "CVE-2026-46015", "author_name": "Zhenzhong Wu", "author_email": "jt26wzz@gmail.com", "fix_sha": "3864c6ba1e041bc75342353a70fa2a2c6f909923", "subject": "tcp: call sk_data_ready() after listener migration", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46015", "commit_url": "https://git.kernel.org/stable/c/3864c6ba1e041bc75342353a70fa2a2c6f909923" }, { "cve": "CVE-2026-46016", "author_name": "Ben Levinsky", "author_email": "ben.levinsky@amd.com", "fix_sha": "38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6", "subject": "remoteproc: xlnx: Only access buffer information if IPI is buffered", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46016", "commit_url": "https://git.kernel.org/stable/c/38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6" }, { "cve": "CVE-2026-46017", "author_name": "Lance Yang", "author_email": "lance.yang@linux.dev", "fix_sha": "3bac01168982ec3e3bf87efdc1807c7933590a85", "subject": "mm: fix deferred split queue races during migration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46017", "commit_url": "https://git.kernel.org/stable/c/3bac01168982ec3e3bf87efdc1807c7933590a85" }, { "cve": "CVE-2026-46018", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "3c318f97dcc50b2e0556a1813bd6958678e881fd", "subject": "ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46018", "commit_url": "https://git.kernel.org/stable/c/3c318f97dcc50b2e0556a1813bd6958678e881fd" }, { "cve": "CVE-2026-46019", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "3fcfff4ed35f963380a68741bcd52742baff7f76", "subject": "crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46019", "commit_url": "https://git.kernel.org/stable/c/3fcfff4ed35f963380a68741bcd52742baff7f76" }, { "cve": "CVE-2026-46020", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "40250b2dded0604a112be605f3828700d80ad7c2", "subject": "mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46020", "commit_url": "https://git.kernel.org/stable/c/40250b2dded0604a112be605f3828700d80ad7c2" }, { "cve": "CVE-2026-46021", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "41ff66baf81c6541f4f985dd7eac4494d03d9440", "subject": "thermal: core: Fix thermal zone governor cleanup issues", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46021", "commit_url": "https://git.kernel.org/stable/c/41ff66baf81c6541f4f985dd7eac4494d03d9440" }, { "cve": "CVE-2026-46022", "author_name": "Tyllis Xu", "author_email": "livelycarpet87@gmail.com", "fix_sha": "4b6e6ead556734bdc14024c5f837132b1e7a4b84", "subject": "misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46022", "commit_url": "https://git.kernel.org/stable/c/4b6e6ead556734bdc14024c5f837132b1e7a4b84" }, { "cve": "CVE-2026-46023", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "4c788c6f921b22f9b6c3f316c4a071c05683e7de", "subject": "dm mirror: fix integer overflow in create_dirty_log()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46023", "commit_url": "https://git.kernel.org/stable/c/4c788c6f921b22f9b6c3f316c4a071c05683e7de" }, { "cve": "CVE-2026-46024", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "5199c125d25aeae8615c4fc31652cc0fe624338e", "subject": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46024", "commit_url": "https://git.kernel.org/stable/c/5199c125d25aeae8615c4fc31652cc0fe624338e" }, { "cve": "CVE-2026-46025", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "55da81663b9642dd046b26dd6f1baddbcf337c1e", "subject": "mm/damon/core: fix damon_call() vs kdamond_fn() exit race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46025", "commit_url": "https://git.kernel.org/stable/c/55da81663b9642dd046b26dd6f1baddbcf337c1e" }, { "cve": "CVE-2026-46026", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "5640227d9a21c6a8be249a10677b832e7f40dc55", "subject": "net: qrtr: ns: Limit the maximum number of lookups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46026", "commit_url": "https://git.kernel.org/stable/c/5640227d9a21c6a8be249a10677b832e7f40dc55" }, { "cve": "CVE-2026-46027", "author_name": "Ruijie Li", "author_email": "ruijieli51@gmail.com", "fix_sha": "5a8db80f721deee8e916c2cfdee78decda02ce4f", "subject": "net/smc: avoid early lgr access in smc_clc_wait_msg", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46027", "commit_url": "https://git.kernel.org/stable/c/5a8db80f721deee8e916c2cfdee78decda02ce4f" }, { "cve": "CVE-2026-46028", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "5aa58c3a572b3e3b6c786953339f7978b845cc52", "subject": "crypto: algif_aead - snapshot IV for async AEAD requests", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46028", "commit_url": "https://git.kernel.org/stable/c/5aa58c3a572b3e3b6c786953339f7978b845cc52" }, { "cve": "CVE-2026-46029", "author_name": "Harry Yoo (Oracle)", "author_email": "harry@kernel.org", "fix_sha": "5b31044e649e3e54c2caef135c09b371c2fbcd08", "subject": "mm/slab: return NULL early from kmalloc_nolock() in NMI on UP", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46029", "commit_url": "https://git.kernel.org/stable/c/5b31044e649e3e54c2caef135c09b371c2fbcd08" }, { "cve": "CVE-2026-46030", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "5c709b376460ff322580c41600e31c02f7cc0307", "subject": "EDAC/versalnet: Fix device_node leak in mc_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46030", "commit_url": "https://git.kernel.org/stable/c/5c709b376460ff322580c41600e31c02f7cc0307" }, { "cve": "CVE-2026-46031", "author_name": "Marek Vasut", "author_email": "marex@nabladev.com", "fix_sha": "5c9fcac3c872224316714d0d8914d9af16c76a6d", "subject": "net: ks8851: Reinstate disabling of BHs around IRQ handler", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46031", "commit_url": "https://git.kernel.org/stable/c/5c9fcac3c872224316714d0d8914d9af16c76a6d" }, { "cve": "CVE-2026-46032", "author_name": "Yosry Ahmed", "author_email": "yosry@kernel.org", "fix_sha": "5d291ef0585ed880ed4dd71ea1a5965e0a65fb53", "subject": "KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46032", "commit_url": "https://git.kernel.org/stable/c/5d291ef0585ed880ed4dd71ea1a5965e0a65fb53" }, { "cve": "CVE-2026-46033", "author_name": "Yucheng Lu", "author_email": "kanolyc@gmail.com", "fix_sha": "5db6ef9847717329f12c5ea8aba7e9f588a980c0", "subject": "crypto: authencesn - reject short ahash digests during instance creation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46033", "commit_url": "https://git.kernel.org/stable/c/5db6ef9847717329f12c5ea8aba7e9f588a980c0" }, { "cve": "CVE-2026-46034", "author_name": "Prasanna Kumar T S M", "author_email": "ptsm@linux.microsoft.com", "fix_sha": "5ea5880764cbb164afb17a62e76ca75dc371409d", "subject": "vfio/cdx: Fix NULL pointer dereference in interrupt trigger path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46034", "commit_url": "https://git.kernel.org/stable/c/5ea5880764cbb164afb17a62e76ca75dc371409d" }, { "cve": "CVE-2026-46035", "author_name": "Harry Yoo (Oracle)", "author_email": "harry@kernel.org", "fix_sha": "620b46ed6ae17c8438d889c8c0cfddab36a1476c", "subject": "mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46035", "commit_url": "https://git.kernel.org/stable/c/620b46ed6ae17c8438d889c8c0cfddab36a1476c" }, { "cve": "CVE-2026-46036", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "670e8864b1a218d72f08db40d0103adf38fa1d9b", "subject": "vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46036", "commit_url": "https://git.kernel.org/stable/c/670e8864b1a218d72f08db40d0103adf38fa1d9b" }, { "cve": "CVE-2026-46037", "author_name": "Ruide Cao", "author_email": "caoruide123@gmail.com", "fix_sha": "67bf002a2d7387a6312138210d0bd06e3cf4879b", "subject": "ipv4: icmp: validate reply type before using icmp_pointers", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46037", "commit_url": "https://git.kernel.org/stable/c/67bf002a2d7387a6312138210d0bd06e3cf4879b" }, { "cve": "CVE-2026-46038", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "68efba36446a7774ea5b971257ade049272a07ac", "subject": "net: qrtr: ns: Free the node during ctrl_cmd_bye()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46038", "commit_url": "https://git.kernel.org/stable/c/68efba36446a7774ea5b971257ade049272a07ac" }, { "cve": "CVE-2026-46039", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "6929350080f4da292d111a3b33e53138fee51cec", "subject": "rxgk: Fix potential integer overflow in length check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46039", "commit_url": "https://git.kernel.org/stable/c/6929350080f4da292d111a3b33e53138fee51cec" }, { "cve": "CVE-2026-46040", "author_name": "Chia-Ming Chang", "author_email": "chiamingc@synology.com", "fix_sha": "6a320935fa4293e9e599ec9f85dc9eb3be7029f8", "subject": "inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46040", "commit_url": "https://git.kernel.org/stable/c/6a320935fa4293e9e599ec9f85dc9eb3be7029f8" }, { "cve": "CVE-2026-46041", "author_name": "Weigang He", "author_email": "geoffreyhe2@gmail.com", "fix_sha": "6b526dca0966f2370835765019a54319b78fca8d", "subject": "greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46041", "commit_url": "https://git.kernel.org/stable/c/6b526dca0966f2370835765019a54319b78fca8d" }, { "cve": "CVE-2026-46042", "author_name": "Jackie Liu", "author_email": "liuyun01@kylinos.cn", "fix_sha": "6fae274ce0e3109cbbc4c18b354eaace1f0af7d7", "subject": "mm/mempolicy: fix memory leaks in weighted_interleave_auto_store()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46042", "commit_url": "https://git.kernel.org/stable/c/6fae274ce0e3109cbbc4c18b354eaace1f0af7d7" }, { "cve": "CVE-2026-46043", "author_name": "hkbinbin", "author_email": "hkbinbinbin@gmail.com", "fix_sha": "7244491dab347f648e661da96dc0febadd9daec3", "subject": "RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46043", "commit_url": "https://git.kernel.org/stable/c/7244491dab347f648e661da96dc0febadd9daec3" }, { "cve": "CVE-2026-46044", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "75c486cb1bcaa1a3ec3a6438498176a3a4998ae4", "subject": "ipmi:ssif: Clean up kthread on errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46044", "commit_url": "https://git.kernel.org/stable/c/75c486cb1bcaa1a3ec3a6438498176a3a4998ae4" }, { "cve": "CVE-2026-46045", "author_name": "Yu Kuai", "author_email": "yukuai@fnnas.com", "fix_sha": "7701e68b5072faa03a8f30b4081dc16df9092381", "subject": "md/md-llbitmap: skip reading rdevs that are not in_sync", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46045", "commit_url": "https://git.kernel.org/stable/c/7701e68b5072faa03a8f30b4081dc16df9092381" }, { "cve": "CVE-2026-46046", "author_name": "Sohei Koyama", "author_email": "skoyama@ddn.com", "fix_sha": "77d059519382bd66283e6a4e83ee186e87e7708f", "subject": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46046", "commit_url": "https://git.kernel.org/stable/c/77d059519382bd66283e6a4e83ee186e87e7708f" }, { "cve": "CVE-2026-46047", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "7809fea20c9404bfcfa6112ec08d1fe1d3520beb", "subject": "net: qrtr: ns: Fix use-after-free in driver remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46047", "commit_url": "https://git.kernel.org/stable/c/7809fea20c9404bfcfa6112ec08d1fe1d3520beb" }, { "cve": "CVE-2026-46048", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "7a5f1cd22d47f8ca4b760b6334378ae42c1bd24b", "subject": "ALSA: caiaq: fix usb_dev refcount leak on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46048", "commit_url": "https://git.kernel.org/stable/c/7a5f1cd22d47f8ca4b760b6334378ae42c1bd24b" }, { "cve": "CVE-2026-46049", "author_name": "Harin Lee", "author_email": "me@harin.net", "fix_sha": "7d61662197ecdc458e33e475b6ada7f6da61d364", "subject": "ALSA: ctxfi: Add fallback to default RSR for S/PDIF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46049", "commit_url": "https://git.kernel.org/stable/c/7d61662197ecdc458e33e475b6ada7f6da61d364" }, { "cve": "CVE-2026-46050", "author_name": "Josh Hunt", "author_email": "johunt@akamai.com", "fix_sha": "7d96f3120a7fb7210d21b520c5b6f495da6ba436", "subject": "md/raid10: fix deadlock with check operation and nowait requests", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46050", "commit_url": "https://git.kernel.org/stable/c/7d96f3120a7fb7210d21b520c5b6f495da6ba436" }, { "cve": "CVE-2026-46051", "author_name": "Chia-Ming Chang", "author_email": "chiamingc@synology.com", "fix_sha": "7f9f7c697474268d9ef9479df3ddfe7cdcfbbffc", "subject": "md/raid5: fix soft lockup in retry_aligned_read()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46051", "commit_url": "https://git.kernel.org/stable/c/7f9f7c697474268d9ef9479df3ddfe7cdcfbbffc" }, { "cve": "CVE-2026-46052", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "803447f93d75ab6e40c85e6d12b5630d281d70d6", "subject": "ceph: only d_add() negative dentries when they are unhashed", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46052", "commit_url": "https://git.kernel.org/stable/c/803447f93d75ab6e40c85e6d12b5630d281d70d6" }, { "cve": "CVE-2026-46053", "author_name": "Ao Zhou", "author_email": "draw51280@163.com", "fix_sha": "8141a2dc70080eda1aedc0389ed2db2b292af5bd", "subject": "net: rds: fix MR cleanup on copy error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46053", "commit_url": "https://git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bd" }, { "cve": "CVE-2026-46054", "author_name": "Paul Moore", "author_email": "paul@paul-moore.com", "fix_sha": "82544d36b1729153c8aeb179e84750f0c085d3b1", "subject": "selinux: fix overlayfs mmap() and mprotect() access checks", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46054", "commit_url": "https://git.kernel.org/stable/c/82544d36b1729153c8aeb179e84750f0c085d3b1" }, { "cve": "CVE-2026-46055", "author_name": "Daniel J Blueman", "author_email": "daniel@quora.org", "fix_sha": "828bf7929bedcb79b560b5b4e44f22abee07d31b", "subject": "apparmor: Fix string overrun due to missing termination", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46055", "commit_url": "https://git.kernel.org/stable/c/828bf7929bedcb79b560b5b4e44f22abee07d31b" }, { "cve": "CVE-2026-46056", "author_name": "Shuvam Pandey", "author_email": "shuvampandey1@gmail.com", "fix_sha": "85fa3512048793076eef658f66489112dcc91993", "subject": "Bluetooth: hci_event: fix potential UAF in SSP passkey handlers", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46056", "commit_url": "https://git.kernel.org/stable/c/85fa3512048793076eef658f66489112dcc91993" }, { "cve": "CVE-2026-46057", "author_name": "Micka\u00ebl Sala\u00fcn", "author_email": "mic@digikod.net", "fix_sha": "874c8f83826c95c62c21d9edfe9ef43e5c346724", "subject": "landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46057", "commit_url": "https://git.kernel.org/stable/c/874c8f83826c95c62c21d9edfe9ef43e5c346724" }, { "cve": "CVE-2026-46058", "author_name": "Ming Qian", "author_email": "ming.qian@oss.nxp.com", "fix_sha": "8cd35ceadcfc8c5da2eb7f7ce24525ce9d4ee62e", "subject": "media: amphion: Fix race between m2m job_abort and device_run", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46058", "commit_url": "https://git.kernel.org/stable/c/8cd35ceadcfc8c5da2eb7f7ce24525ce9d4ee62e" }, { "cve": "CVE-2026-46059", "author_name": "Yosry Ahmed", "author_email": "yosry@kernel.org", "fix_sha": "8d397582f6b5e9fbcf09781c7c934b4910e94a50", "subject": "KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46059", "commit_url": "https://git.kernel.org/stable/c/8d397582f6b5e9fbcf09781c7c934b4910e94a50" }, { "cve": "CVE-2026-46060", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "95aed2af87ec43fa7624cc81dd13d37824ad4972", "subject": "crypto: qat - fix IRQ cleanup on 6xxx probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46060", "commit_url": "https://git.kernel.org/stable/c/95aed2af87ec43fa7624cc81dd13d37824ad4972" }, { "cve": "CVE-2026-46061", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "981fcc5674e67158d24d23e841523eccba19d0e7", "subject": "jbd2: fix deadlock in jbd2_journal_cancel_revoke()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46061", "commit_url": "https://git.kernel.org/stable/c/981fcc5674e67158d24d23e841523eccba19d0e7" }, { "cve": "CVE-2026-46062", "author_name": "Tobias Gaertner", "author_email": "tob.gaertner@me.com", "fix_sha": "984a415f019536ea2d24de9010744e5302a9a948", "subject": "ntfs3: fix integer overflow in run_unpack() volume boundary check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46062", "commit_url": "https://git.kernel.org/stable/c/984a415f019536ea2d24de9010744e5302a9a948" }, { "cve": "CVE-2026-46063", "author_name": "Rick Edgecombe", "author_email": "rick.p.edgecombe@intel.com", "fix_sha": "9874b2917b9fbc30956fee209d3c4aa47201c64e", "subject": "x86/shstk: Prevent deadlock during shstk sigreturn", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46063", "commit_url": "https://git.kernel.org/stable/c/9874b2917b9fbc30956fee209d3c4aa47201c64e" }, { "cve": "CVE-2026-46064", "author_name": "Tyllis Xu", "author_email": "livelycarpet87@gmail.com", "fix_sha": "9aad71144fa3682cca3837a06c8623016790e7ec", "subject": "ibmasm: fix heap over-read in ibmasm_send_i2o_message()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46064", "commit_url": "https://git.kernel.org/stable/c/9aad71144fa3682cca3837a06c8623016790e7ec" }, { "cve": "CVE-2026-46065", "author_name": "Thomas Zimmermann", "author_email": "tzimmermann@suse.de", "fix_sha": "9ded47ad003f09a94b6a710b5c47f4aa5ceb7429", "subject": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46065", "commit_url": "https://git.kernel.org/stable/c/9ded47ad003f09a94b6a710b5c47f4aa5ceb7429" }, { "cve": "CVE-2026-46066", "author_name": "Sam Edwards", "author_email": "cfsworks@gmail.com", "fix_sha": "a0d9555bf9eaeba34fe6b6bb86f442fe08ba3842", "subject": "ceph: fix num_ops off-by-one when crypto allocation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46066", "commit_url": "https://git.kernel.org/stable/c/a0d9555bf9eaeba34fe6b6bb86f442fe08ba3842" }, { "cve": "CVE-2026-46067", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "a34dac6482e53e2c76944f25b1489b9b7da3a6e6", "subject": "mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46067", "commit_url": "https://git.kernel.org/stable/c/a34dac6482e53e2c76944f25b1489b9b7da3a6e6" }, { "cve": "CVE-2026-46068", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c", "subject": "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46068", "commit_url": "https://git.kernel.org/stable/c/adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c" }, { "cve": "CVE-2026-46069", "author_name": "Daniel Hodges", "author_email": "git@danielhodges.dev", "fix_sha": "ae5e95d4157481693be2317e3ffcd84e36010cbb", "subject": "wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46069", "commit_url": "https://git.kernel.org/stable/c/ae5e95d4157481693be2317e3ffcd84e36010cbb" }, { "cve": "CVE-2026-46070", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "b0cc3ae97e893bf54bbce447f4e9fd2e0b88bff9", "subject": "md/raid5: validate payload size before accessing journal metadata", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46070", "commit_url": "https://git.kernel.org/stable/c/b0cc3ae97e893bf54bbce447f4e9fd2e0b88bff9" }, { "cve": "CVE-2026-46071", "author_name": "Yosry Ahmed", "author_email": "yosry@kernel.org", "fix_sha": "b53ab5167a81537777ac780bbd93d32613aa3bda", "subject": "KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46071", "commit_url": "https://git.kernel.org/stable/c/b53ab5167a81537777ac780bbd93d32613aa3bda" }, { "cve": "CVE-2026-46072", "author_name": "Tobias Gaertner", "author_email": "tob.gaertner@me.com", "fix_sha": "b62567bca47408e6739dee75f02a2113548af875", "subject": "ntfs3: add buffer boundary checks to run_unpack()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46072", "commit_url": "https://git.kernel.org/stable/c/b62567bca47408e6739dee75f02a2113548af875" }, { "cve": "CVE-2026-46073", "author_name": "Sanman Pradhan", "author_email": "psanman@juniper.net", "fix_sha": "b66437cb20a2d9ef201f40b675569f8ea7787c9f", "subject": "hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46073", "commit_url": "https://git.kernel.org/stable/c/b66437cb20a2d9ef201f40b675569f8ea7787c9f" }, { "cve": "CVE-2026-46074", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "b99e3ddb91b499d920e63a2daff8880be68cfe9e", "subject": "spi: ch341: fix memory leaks on probe failures", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46074", "commit_url": "https://git.kernel.org/stable/c/b99e3ddb91b499d920e63a2daff8880be68cfe9e" }, { "cve": "CVE-2026-46075", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "bab1adf3b87e4bfac92c4f5963c63db434d561c1", "subject": "crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46075", "commit_url": "https://git.kernel.org/stable/c/bab1adf3b87e4bfac92c4f5963c63db434d561c1" }, { "cve": "CVE-2026-46076", "author_name": "Kevin Cheng", "author_email": "chengkev@google.com", "fix_sha": "c36991c6f8d2ab56ee67aff04e3c357f45cfc76c", "subject": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1", "cvss_score": 7.9, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46076", "commit_url": "https://git.kernel.org/stable/c/c36991c6f8d2ab56ee67aff04e3c357f45cfc76c" }, { "cve": "CVE-2026-46077", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "c8a9a647532f5c2a04180352693215e24e9dba03", "subject": "crypto: atmel-tdes - fix DMA sync direction", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46077", "commit_url": "https://git.kernel.org/stable/c/c8a9a647532f5c2a04180352693215e24e9dba03" }, { "cve": "CVE-2026-46078", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "d18a3b5d337fa412a38e776e6b4b857a58836575", "subject": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46078", "commit_url": "https://git.kernel.org/stable/c/d18a3b5d337fa412a38e776e6b4b857a58836575" }, { "cve": "CVE-2026-46079", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "d1fef92e414433ca7b89abf85cb0df42b8d475eb", "subject": "rbd: fix null-ptr-deref when device_add_disk() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46079", "commit_url": "https://git.kernel.org/stable/c/d1fef92e414433ca7b89abf85cb0df42b8d475eb" }, { "cve": "CVE-2026-46080", "author_name": "Heming Zhao", "author_email": "heming.zhao@suse.com", "fix_sha": "d647c5b2fbf81560818dacade360abc8c00a9665", "subject": "ocfs2: split transactions in dio completion to avoid credit exhaustion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46080", "commit_url": "https://git.kernel.org/stable/c/d647c5b2fbf81560818dacade360abc8c00a9665" }, { "cve": "CVE-2026-46081", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "d7e20b9bd6c990773cf0c09e2642250b8a70263d", "subject": "crypto: acomp - fix wrong pointer stored by acomp_save_req()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46081", "commit_url": "https://git.kernel.org/stable/c/d7e20b9bd6c990773cf0c09e2642250b8a70263d" }, { "cve": "CVE-2026-46082", "author_name": "Kevin Cheng", "author_email": "chengkev@google.com", "fix_sha": "d99df02ff427f461102230f9c5b90a6c64ee8e23", "subject": "KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46082", "commit_url": "https://git.kernel.org/stable/c/d99df02ff427f461102230f9c5b90a6c64ee8e23" }, { "cve": "CVE-2026-46083", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "db357034f7e0cf23f233f414a8508312dfe8fbbe", "subject": "spi: fix resource leaks on device setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46083", "commit_url": "https://git.kernel.org/stable/c/db357034f7e0cf23f233f414a8508312dfe8fbbe" }, { "cve": "CVE-2026-46084", "author_name": "Long Li", "author_email": "longli@microsoft.com", "fix_sha": "dbeb256e8dd87233d891b170c0b32a6466467036", "subject": "RDMA/mana_ib: Disable RX steering on RSS QP destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46084", "commit_url": "https://git.kernel.org/stable/c/dbeb256e8dd87233d891b170c0b32a6466467036" }, { "cve": "CVE-2026-46085", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "def304aae2edf321d2671fd6ca766a93c21f877e", "subject": "rxrpc: Fix rxkad crypto unalignment handling", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46085", "commit_url": "https://git.kernel.org/stable/c/def304aae2edf321d2671fd6ca766a93c21f877e" }, { "cve": "CVE-2026-46086", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "df4601653201de21b487c3e7fffd464790cab808", "subject": "net: bridge: use a stable FDB dst snapshot in RCU readers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46086", "commit_url": "https://git.kernel.org/stable/c/df4601653201de21b487c3e7fffd464790cab808" }, { "cve": "CVE-2026-46087", "author_name": "Jackie Liu", "author_email": "liuyun01@kylinos.cn", "fix_sha": "e04ed278d25bf15769800bf6e35c6737f137186f", "subject": "mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46087", "commit_url": "https://git.kernel.org/stable/c/e04ed278d25bf15769800bf6e35c6737f137186f" }, { "cve": "CVE-2026-46088", "author_name": "Ziqing Chen", "author_email": "chenziqing@xiaomi.com", "fix_sha": "e0da8a8cac74f4b9f577979d131f0d2b88a84487", "subject": "ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46088", "commit_url": "https://git.kernel.org/stable/c/e0da8a8cac74f4b9f577979d131f0d2b88a84487" }, { "cve": "CVE-2026-46089", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "e3668b371329ea036ff022ce8ecc82f8befcf003", "subject": "zram: do not forget to endio for partial discard requests", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46089", "commit_url": "https://git.kernel.org/stable/c/e3668b371329ea036ff022ce8ecc82f8befcf003" }, { "cve": "CVE-2026-46090", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "e5c33cdc6f402eab8abd36ecf436b22c9d3a8aff", "subject": "ALSA: aloop: Fix peer runtime UAF during format-change stop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46090", "commit_url": "https://git.kernel.org/stable/c/e5c33cdc6f402eab8abd36ecf436b22c9d3a8aff" }, { "cve": "CVE-2026-46091", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "eac69475b01fe1e861dfe3960b57fa95671c132e", "subject": "media: rc: igorplugusb: heed coherency rules", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46091", "commit_url": "https://git.kernel.org/stable/c/eac69475b01fe1e861dfe3960b57fa95671c132e" }, { "cve": "CVE-2026-46092", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "eb101d2abdcccb514ca4fccd3b278dd8267374f6", "subject": "wifi: rtw88: check for PCI upstream bridge existence", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46092", "commit_url": "https://git.kernel.org/stable/c/eb101d2abdcccb514ca4fccd3b278dd8267374f6" }, { "cve": "CVE-2026-46093", "author_name": "Uladzislau Rezki (Sony)", "author_email": "urezki@gmail.com", "fix_sha": "ec05f51f1e65bce95528543eb73fda56fd201d94", "subject": "mm/vmalloc: take vmap_purge_lock in shrinker", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46093", "commit_url": "https://git.kernel.org/stable/c/ec05f51f1e65bce95528543eb73fda56fd201d94" }, { "cve": "CVE-2026-46094", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "eceafc31ea7b42c984ece10d79d505c0bb6615d5", "subject": "ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46094", "commit_url": "https://git.kernel.org/stable/c/eceafc31ea7b42c984ece10d79d505c0bb6615d5" }, { "cve": "CVE-2026-46095", "author_name": "Yu Kuai", "author_email": "yukuai@fnnas.com", "fix_sha": "ef4ca3d4bf09716cff9ba00eb0351deadc8417ab", "subject": "md/md-llbitmap: raise barrier before state machine transition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46095", "commit_url": "https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab" }, { "cve": "CVE-2026-46096", "author_name": "Gunnar Kudrjavets", "author_email": "gunnarku@amazon.com", "fix_sha": "f0f75a3d98b7959a8677b6363e23190f3018636b", "subject": "tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46096", "commit_url": "https://git.kernel.org/stable/c/f0f75a3d98b7959a8677b6363e23190f3018636b" }, { "cve": "CVE-2026-46097", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "f5f9e07060519e2287e99019a6de1eb3ebb65c37", "subject": "Input: edt-ft5x06 - fix use-after-free in debugfs teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46097", "commit_url": "https://git.kernel.org/stable/c/f5f9e07060519e2287e99019a6de1eb3ebb65c37" }, { "cve": "CVE-2026-46098", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "f7cf8ece8cee3c1ee361991470cdb1eb65ab02e8", "subject": "net: caif: clear client service pointer on teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46098", "commit_url": "https://git.kernel.org/stable/c/f7cf8ece8cee3c1ee361991470cdb1eb65ab02e8" }, { "cve": "CVE-2026-46099", "author_name": "Andrea Mayer", "author_email": "andrea.mayer@uniroma2.it", "fix_sha": "f9c52a6ba9780bd27e0bf4c044fd91c13c778b6e", "subject": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46099", "commit_url": "https://git.kernel.org/stable/c/f9c52a6ba9780bd27e0bf4c044fd91c13c778b6e" }, { "cve": "CVE-2026-46100", "author_name": "Lorenzo Stoakes (Oracle)", "author_email": "ljs@kernel.org", "fix_sha": "fbfc6578eaca12daa0c09df1e9ba7f2c657b49da", "subject": "fs: afs: revert mmap_prepare() change", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46100", "commit_url": "https://git.kernel.org/stable/c/fbfc6578eaca12daa0c09df1e9ba7f2c657b49da" }, { "cve": "CVE-2026-46101", "author_name": "Kai Ma", "author_email": "k4729.23098@gmail.com", "fix_sha": "fe11e5c40817b84abaa5d83bfb6586d8412bfd07", "subject": "netfilter: reject zero shift in nft_bitwise", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46101", "commit_url": "https://git.kernel.org/stable/c/fe11e5c40817b84abaa5d83bfb6586d8412bfd07" }, { "cve": "CVE-2026-46102", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "fe72340daaf1af588be88056faf98965f39e6032", "subject": "net: strparser: fix skb_head leak in strp_abort_strp()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46102", "commit_url": "https://git.kernel.org/stable/c/fe72340daaf1af588be88056faf98965f39e6032" }, { "cve": "CVE-2026-46103", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "fed4626501c871890da287bec62a96e52da1af89", "subject": "can: ucan: fix devres lifetime", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46103", "commit_url": "https://git.kernel.org/stable/c/fed4626501c871890da287bec62a96e52da1af89" }, { "cve": "CVE-2026-46104", "author_name": "Zongyao Chen", "author_email": "zongyao.chen@linux.alibaba.com", "fix_sha": "032e70aff025d7c519af9ab791cd084380619263", "subject": "selinux: use sk blob accessor in socket permission helpers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46104", "commit_url": "https://git.kernel.org/stable/c/032e70aff025d7c519af9ab791cd084380619263" }, { "cve": "CVE-2026-46105", "author_name": "Ranjan Kumar", "author_email": "ranjan.kumar@broadcom.com", "fix_sha": "04631f55afc543d5431a2bdee7f6cc0f2c0debe7", "subject": "scsi: mpt3sas: Limit NVMe request size to 2 MiB", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46105", "commit_url": "https://git.kernel.org/stable/c/04631f55afc543d5431a2bdee7f6cc0f2c0debe7" }, { "cve": "CVE-2026-46106", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "07004a8c4b572171934390148ee48c4175c77eed", "subject": "eventfs: Hold eventfs_mutex and SRCU when remount walks events", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46106", "commit_url": "https://git.kernel.org/stable/c/07004a8c4b572171934390148ee48c4175c77eed" }, { "cve": "CVE-2026-46107", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "09a65adc7d8bbfce06392cb6d375468e2728ead5", "subject": "dm-thin: fix metadata refcount underflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46107", "commit_url": "https://git.kernel.org/stable/c/09a65adc7d8bbfce06392cb6d375468e2728ead5" }, { "cve": "CVE-2026-46108", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "09dd798270ff582d7309f285d4aaf5dbebae01cb", "subject": "ipmi:si: Return state to normal if message allocation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46108", "commit_url": "https://git.kernel.org/stable/c/09dd798270ff582d7309f285d4aaf5dbebae01cb" }, { "cve": "CVE-2026-46109", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "0b9fcab1b8608d429e5f239afb197de928d4de7d", "subject": "usb: ulpi: fix memory leak on ulpi_register() error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46109", "commit_url": "https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d" }, { "cve": "CVE-2026-46110", "author_name": "Sam Edwards", "author_email": "cfsworks@gmail.com", "fix_sha": "0bb05e6adfa99a2ea1fee1125cc0953409f83ed8", "subject": "net: stmmac: Prevent NULL deref when RX memory exhausted", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46110", "commit_url": "https://git.kernel.org/stable/c/0bb05e6adfa99a2ea1fee1125cc0953409f83ed8" }, { "cve": "CVE-2026-46111", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "0beddb0c380bed5f5b8e61ddbe14635bb73d0b41", "subject": "Bluetooth: hci_conn: fix potential UAF in create_big_sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46111", "commit_url": "https://git.kernel.org/stable/c/0beddb0c380bed5f5b8e61ddbe14635bb73d0b41" }, { "cve": "CVE-2026-46112", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "0c99acbc8b6c6dd526ae475a48ee1897b61072fb", "subject": "RDMA/hns: Fix unlocked call to hns_roce_qp_remove()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46112", "commit_url": "https://git.kernel.org/stable/c/0c99acbc8b6c6dd526ae475a48ee1897b61072fb" }, { "cve": "CVE-2026-46113", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "0cb2af2ea66ad8ff195c156ea690f11216285bdf", "subject": "KVM: x86: Fix shadow paging use-after-free due to unexpected GFN", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46113", "commit_url": "https://git.kernel.org/stable/c/0cb2af2ea66ad8ff195c156ea690f11216285bdf" }, { "cve": "CVE-2026-46114", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "1114c87aa6f195cf07da55a27b2122ae26557b26", "subject": "RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46114", "commit_url": "https://git.kernel.org/stable/c/1114c87aa6f195cf07da55a27b2122ae26557b26" }, { "cve": "CVE-2026-46115", "author_name": "Naman Jain", "author_email": "namjain@linux.microsoft.com", "fix_sha": "13920e4b7b784b40cf4519ff1f0f3e513476a499", "subject": "block: add pgmap check to biovec_phys_mergeable", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46115", "commit_url": "https://git.kernel.org/stable/c/13920e4b7b784b40cf4519ff1f0f3e513476a499" }, { "cve": "CVE-2026-46116", "author_name": "Michal Kosiorek", "author_email": "mkosiorek121@gmail.com", "fix_sha": "14acf9652e5690de3c7486c6db5fb8dafd0a32a3", "subject": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46116", "commit_url": "https://git.kernel.org/stable/c/14acf9652e5690de3c7486c6db5fb8dafd0a32a3" }, { "cve": "CVE-2026-46117", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "159f2efabc89d3f931d38f2d35876535d4abf0a3", "subject": "RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46117", "commit_url": "https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3" }, { "cve": "CVE-2026-46118", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "1b9f7aafa44f5ce852c00509104d10fd9eb0f402", "subject": "pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46118", "commit_url": "https://git.kernel.org/stable/c/1b9f7aafa44f5ce852c00509104d10fd9eb0f402" }, { "cve": "CVE-2026-46119", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "1c439de70b1c3eb3c6bffa8245c16b9fc318f114", "subject": "libceph: Fix slab-out-of-bounds access in auth message processing", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46119", "commit_url": "https://git.kernel.org/stable/c/1c439de70b1c3eb3c6bffa8245c16b9fc318f114" }, { "cve": "CVE-2026-46120", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "1d324c2f43f70c965f25c58cc3611c779adbe47e", "subject": "ip6_gre: Use cached t->net in ip6erspan_changelink().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46120", "commit_url": "https://git.kernel.org/stable/c/1d324c2f43f70c965f25c58cc3611c779adbe47e" }, { "cve": "CVE-2026-46121", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "1e68eb96e8beb1abefd12dd22c5637795d8a877e", "subject": "mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46121", "commit_url": "https://git.kernel.org/stable/c/1e68eb96e8beb1abefd12dd22c5637795d8a877e" }, { "cve": "CVE-2026-46122", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "1f4f78bf8549e6ac4f04fba4176854f3a6e0c332", "subject": "wifi: b43: enforce bounds check on firmware key index in b43_rx()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46122", "commit_url": "https://git.kernel.org/stable/c/1f4f78bf8549e6ac4f04fba4176854f3a6e0c332" }, { "cve": "CVE-2026-46123", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "21bd244b6de5d2fe1063c23acc93fbdd2b20d112", "subject": "Bluetooth: virtio_bt: clamp rx length before skb_put", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46123", "commit_url": "https://git.kernel.org/stable/c/21bd244b6de5d2fe1063c23acc93fbdd2b20d112" }, { "cve": "CVE-2026-46124", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "24376458138387fb251e782e624c7776e9826796", "subject": "isofs: validate block number from NFS file handle in isofs_export_iget", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46124", "commit_url": "https://git.kernel.org/stable/c/24376458138387fb251e782e624c7776e9826796" }, { "cve": "CVE-2026-46125", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "283fc9e44ff5b5ac967439b4951b80bd4299f4e4", "subject": "wifi: mac80211: remove station if connection prep fails", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46125", "commit_url": "https://git.kernel.org/stable/c/283fc9e44ff5b5ac967439b4951b80bd4299f4e4" }, { "cve": "CVE-2026-46126", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "34ecf795692ee57c393109f4a24ccc313091e137", "subject": "RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46126", "commit_url": "https://git.kernel.org/stable/c/34ecf795692ee57c393109f4a24ccc313091e137" }, { "cve": "CVE-2026-46127", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "34fbf48cf3b410d2a6e8c586fa952a36331ca5ba", "subject": "RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46127", "commit_url": "https://git.kernel.org/stable/c/34fbf48cf3b410d2a6e8c586fa952a36331ca5ba" }, { "cve": "CVE-2026-46128", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "36920f30e78e69df01f9691c470b6f3ba8aebf98", "subject": "ipmi: Check event message buffer response for bad data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46128", "commit_url": "https://git.kernel.org/stable/c/36920f30e78e69df01f9691c470b6f3ba8aebf98" }, { "cve": "CVE-2026-46129", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "3f487be81292702a59ea9dbc4088b3360a50e837", "subject": "btrfs: fix double free in create_space_info() error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46129", "commit_url": "https://git.kernel.org/stable/c/3f487be81292702a59ea9dbc4088b3360a50e837" }, { "cve": "CVE-2026-46130", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "430a05cb926f6bdf53e81460a2c3a553257f3f61", "subject": "dm-verity-fec: fix reading parity bytes split across blocks (take 3)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46130", "commit_url": "https://git.kernel.org/stable/c/430a05cb926f6bdf53e81460a2c3a553257f3f61" }, { "cve": "CVE-2026-46131", "author_name": "Paolo Bonzini", "author_email": "pbonzini@redhat.com", "fix_sha": "464af6fc2b1dcc74005b7f58ee3812b17777efee", "subject": "KVM: x86: check for nEPT/nNPT in slow flush hypercalls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46131", "commit_url": "https://git.kernel.org/stable/c/464af6fc2b1dcc74005b7f58ee3812b17777efee" }, { "cve": "CVE-2026-46132", "author_name": "Kai Zen", "author_email": "kai.aizen.dev@gmail.com", "fix_sha": "4b9e327991815e128ad3af75c3a04630a63ce3e0", "subject": "net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46132", "commit_url": "https://git.kernel.org/stable/c/4b9e327991815e128ad3af75c3a04630a63ce3e0" }, { "cve": "CVE-2026-46133", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "4c6f86d85d03cdb33addce86aa69aa795ca6c47a", "subject": "RDMA/rxe: Reject unknown opcodes before ICRC processing", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46133", "commit_url": "https://git.kernel.org/stable/c/4c6f86d85d03cdb33addce86aa69aa795ca6c47a" }, { "cve": "CVE-2026-46134", "author_name": "Tzung-Bi Shih", "author_email": "tzungbi@kernel.org", "fix_sha": "525cb7ba6661074c1c5cc3772bccc6afab6791ef", "subject": "platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46134", "commit_url": "https://git.kernel.org/stable/c/525cb7ba6661074c1c5cc3772bccc6afab6791ef" }, { "cve": "CVE-2026-46135", "author_name": "Chaitanya Kulkarni", "author_email": "kch@nvidia.com", "fix_sha": "5293a8882c549fab4a878bc76b0b6c951f980a61", "subject": "nvmet-tcp: fix race between ICReq handling and queue teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46135", "commit_url": "https://git.kernel.org/stable/c/5293a8882c549fab4a878bc76b0b6c951f980a61" }, { "cve": "CVE-2026-46136", "author_name": "Leon Yen", "author_email": "leon.yen@mediatek.com", "fix_sha": "5373f8b19e568b5c217832b9bbef165bd2b2df14", "subject": "wifi: mt76: mt7921: fix a potential clc buffer length underflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46136", "commit_url": "https://git.kernel.org/stable/c/5373f8b19e568b5c217832b9bbef165bd2b2df14" }, { "cve": "CVE-2026-46137", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "5cd6e0ad79d2615264f63929f8b457ad97ae550d", "subject": "mptcp: pm: ADD_ADDR rtx: fix potential data-race", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46137", "commit_url": "https://git.kernel.org/stable/c/5cd6e0ad79d2615264f63929f8b457ad97ae550d" }, { "cve": "CVE-2026-46138", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "5ddb8014261137cadaf83ab5617a588d80a22586", "subject": "Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46138", "commit_url": "https://git.kernel.org/stable/c/5ddb8014261137cadaf83ab5617a588d80a22586" }, { "cve": "CVE-2026-46139", "author_name": "Bjoern Doebel", "author_email": "doebel@amazon.de", "fix_sha": "5e489c6c47a2ac15edbaca153b9348e42c1eacab", "subject": "smb: client: use kzalloc to zero-initialize security descriptor buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46139", "commit_url": "https://git.kernel.org/stable/c/5e489c6c47a2ac15edbaca153b9348e42c1eacab" }, { "cve": "CVE-2026-46140", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "634a4408c0615c523cf7531790f4f14a422b9206", "subject": "Bluetooth: btmtk: validate WMT event SKB length before struct access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46140", "commit_url": "https://git.kernel.org/stable/c/634a4408c0615c523cf7531790f4f14a422b9206" }, { "cve": "CVE-2026-46141", "author_name": "Nilay Shroff", "author_email": "nilay@linux.ibm.com", "fix_sha": "6771c54728c278bf1e4bfdab4fddbbb186e33498", "subject": "powerpc/xive: fix kmemleak caused by incorrect chip_data lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46141", "commit_url": "https://git.kernel.org/stable/c/6771c54728c278bf1e4bfdab4fddbbb186e33498" }, { "cve": "CVE-2026-46142", "author_name": "Jiawen Wu", "author_email": "jiawenwu@trustnetic.com", "fix_sha": "694de316f607fe2473d52ca0707e3918e72c1562", "subject": "net: libwx: fix VF illegal register access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46142", "commit_url": "https://git.kernel.org/stable/c/694de316f607fe2473d52ca0707e3918e72c1562" }, { "cve": "CVE-2026-46143", "author_name": "Srinivas Kandagatla", "author_email": "srinivas.kandagatla@oss.qualcomm.com", "fix_sha": "69acc488aaf39d0ddf6c3cf0e47c1873d39919a2", "subject": "ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46143", "commit_url": "https://git.kernel.org/stable/c/69acc488aaf39d0ddf6c3cf0e47c1873d39919a2" }, { "cve": "CVE-2026-46144", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "6aaa978c6b6218cfac15fe1dab17c76fe229ce3f", "subject": "RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46144", "commit_url": "https://git.kernel.org/stable/c/6aaa978c6b6218cfac15fe1dab17c76fe229ce3f" }, { "cve": "CVE-2026-46145", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "6dd2d4ad9c8429523b1c220c5132bd551c006425", "subject": "RDMA/mana: Validate rx_hash_key_len", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46145", "commit_url": "https://git.kernel.org/stable/c/6dd2d4ad9c8429523b1c220c5132bd551c006425" }, { "cve": "CVE-2026-46146", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "6e7247d8f5fefeceb0bb9cc80a5388a636b219cd", "subject": "ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46146", "commit_url": "https://git.kernel.org/stable/c/6e7247d8f5fefeceb0bb9cc80a5388a636b219cd" }, { "cve": "CVE-2026-46147", "author_name": "Fuad Tabba", "author_email": "tabba@google.com", "fix_sha": "73b9c1e5da84cd69b1a86e374e450817cd051371", "subject": "KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46147", "commit_url": "https://git.kernel.org/stable/c/73b9c1e5da84cd69b1a86e374e450817cd051371" }, { "cve": "CVE-2026-46148", "author_name": "Conor Dooley", "author_email": "conor.dooley@microchip.com", "fix_sha": "7672749e1496215e8683ce57cf323119033954cf", "subject": "spi: microchip-core-qspi: control built-in cs manually", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46148", "commit_url": "https://git.kernel.org/stable/c/7672749e1496215e8683ce57cf323119033954cf" }, { "cve": "CVE-2026-46149", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "772a896a56e0e3ef9424a025cec9176f9d8f4552", "subject": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46149", "commit_url": "https://git.kernel.org/stable/c/772a896a56e0e3ef9424a025cec9176f9d8f4552" }, { "cve": "CVE-2026-46150", "author_name": "Miklos Szeredi", "author_email": "mszeredi@redhat.com", "fix_sha": "7746e3bd4cc19b5092e00d32d676e329bfcb6900", "subject": "fanotify: fix false positive on permission events", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46150", "commit_url": "https://git.kernel.org/stable/c/7746e3bd4cc19b5092e00d32d676e329bfcb6900" }, { "cve": "CVE-2026-46151", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "7a400c6fe3617e31e690e3f7ca37bb335e0498f3", "subject": "usb: usblp: fix heap leak in IEEE 1284 device ID via short response", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46151", "commit_url": "https://git.kernel.org/stable/c/7a400c6fe3617e31e690e3f7ca37bb335e0498f3" }, { "cve": "CVE-2026-46152", "author_name": "Catherine", "author_email": "enderaoelyther@gmail.com", "fix_sha": "7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba", "subject": "wifi: mac80211: drop stray 'static' from fast-RX rx_result", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46152", "commit_url": "https://git.kernel.org/stable/c/7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba" }, { "cve": "CVE-2026-46153", "author_name": "Longxuan Yu", "author_email": "ylong030@ucr.edu", "fix_sha": "7dddc74af369478ba7f9bc136d0fc1dc4570cb66", "subject": "8021q: delete cleared egress QoS mappings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46153", "commit_url": "https://git.kernel.org/stable/c/7dddc74af369478ba7f9bc136d0fc1dc4570cb66" }, { "cve": "CVE-2026-46154", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "80afd4c84bc8f5e80145ce35279f5ce53f6043db", "subject": "sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46154", "commit_url": "https://git.kernel.org/stable/c/80afd4c84bc8f5e80145ce35279f5ce53f6043db" }, { "cve": "CVE-2026-46155", "author_name": "Zisen Ye", "author_email": "zisenye@stu.xidian.edu.cn", "fix_sha": "8d09328dfda089675e4c049f3f256064a1d1996b", "subject": "smb/client: fix out-of-bounds read in smb2_compound_op()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46155", "commit_url": "https://git.kernel.org/stable/c/8d09328dfda089675e4c049f3f256064a1d1996b" }, { "cve": "CVE-2026-46156", "author_name": "Wentao Guan", "author_email": "guanwentao@uniontech.com", "fix_sha": "8dfa2f8780e486d05b9a0ffce70b8f5fbd62053e", "subject": "LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46156", "commit_url": "https://git.kernel.org/stable/c/8dfa2f8780e486d05b9a0ffce70b8f5fbd62053e" }, { "cve": "CVE-2026-46157", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "901ac0ff15edf9503162e2cf6579bd11a30f1ed4", "subject": "ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46157", "commit_url": "https://git.kernel.org/stable/c/901ac0ff15edf9503162e2cf6579bd11a30f1ed4" }, { "cve": "CVE-2026-46158", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "9634cb35af17019baec21ca648516ce376fa10e6", "subject": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46158", "commit_url": "https://git.kernel.org/stable/c/9634cb35af17019baec21ca648516ce376fa10e6" }, { "cve": "CVE-2026-46159", "author_name": "Yochai Eisenrich", "author_email": "yochaie@sweet.security", "fix_sha": "973e57c726c1f8e77259d1c8e519519f1e9aea77", "subject": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46159", "commit_url": "https://git.kernel.org/stable/c/973e57c726c1f8e77259d1c8e519519f1e9aea77" }, { "cve": "CVE-2026-46160", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "999757231c49376cd1a37308d2c8c4c9932571e1", "subject": "btrfs: fix missing last_unlink_trans update when removing a directory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46160", "commit_url": "https://git.kernel.org/stable/c/999757231c49376cd1a37308d2c8c4c9932571e1" }, { "cve": "CVE-2026-46161", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "9aa6d860b0930e2f72795665c42c44252a558a0c", "subject": "md/raid10: fix divide-by-zero in setup_geo() with zero far_copies", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46161", "commit_url": "https://git.kernel.org/stable/c/9aa6d860b0930e2f72795665c42c44252a558a0c" }, { "cve": "CVE-2026-46162", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "9aab1c3d7299285e2569cbc0ed5892d631a241b2", "subject": "ice: fix double free in ice_sf_eth_activate() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46162", "commit_url": "https://git.kernel.org/stable/c/9aab1c3d7299285e2569cbc0ed5892d631a241b2" }, { "cve": "CVE-2026-46163", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "a035766f970bde2d4298346a31a80685be5c0205", "subject": "wifi: b43legacy: enforce bounds check on firmware key index in RX path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46163", "commit_url": "https://git.kernel.org/stable/c/a035766f970bde2d4298346a31a80685be5c0205" }, { "cve": "CVE-2026-46164", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "a7449edf96143f192606ec8647e3167e1ecbd728", "subject": "btrfs: fix double free in create_space_info_sub_group() error path", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46164", "commit_url": "https://git.kernel.org/stable/c/a7449edf96143f192606ec8647e3167e1ecbd728" }, { "cve": "CVE-2026-46165", "author_name": "Ilya Maximets", "author_email": "i.maximets@ovn.org", "fix_sha": "aa69918bd418e700309fdd08509dba324fb24296", "subject": "openvswitch: vport: fix self-deadlock on release of tunnel ports", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46165", "commit_url": "https://git.kernel.org/stable/c/aa69918bd418e700309fdd08509dba324fb24296" }, { "cve": "CVE-2026-46166", "author_name": "Benjamin Berg", "author_email": "benjamin.berg@intel.com", "fix_sha": "ac8eb3e18f41e2cc8492cc1d358bcb786c850270", "subject": "wifi: mac80211: use safe list iteration in radar detect work", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46166", "commit_url": "https://git.kernel.org/stable/c/ac8eb3e18f41e2cc8492cc1d358bcb786c850270" }, { "cve": "CVE-2026-46167", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "b38e53cbfb9d84732e5984fbd73e128d592415c5", "subject": "usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46167", "commit_url": "https://git.kernel.org/stable/c/b38e53cbfb9d84732e5984fbd73e128d592415c5" }, { "cve": "CVE-2026-46168", "author_name": "Gang Yan", "author_email": "yangang@kylinos.cn", "fix_sha": "b5c52908d52c6c8eb8933264aa6087a0600fd892", "subject": "mptcp: fix scheduling with atomic in timestamp sockopt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46168", "commit_url": "https://git.kernel.org/stable/c/b5c52908d52c6c8eb8933264aa6087a0600fd892" }, { "cve": "CVE-2026-46169", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "b6b592275aeff184aa82fcf6abccd833fb71b393", "subject": "hfsplus: fix uninit-value by validating catalog record size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46169", "commit_url": "https://git.kernel.org/stable/c/b6b592275aeff184aa82fcf6abccd833fb71b393" }, { "cve": "CVE-2026-46170", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "b7b9a461569734d33d3259d58d2507adfac107ed", "subject": "mptcp: pm: ADD_ADDR rtx: free sk if last", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46170", "commit_url": "https://git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107ed" }, { "cve": "CVE-2026-46171", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978", "subject": "riscv: kvm: fix vector context allocation leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46171", "commit_url": "https://git.kernel.org/stable/c/b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978" }, { "cve": "CVE-2026-46172", "author_name": "Yilin Zhu", "author_email": "zylzyl2333@gmail.com", "fix_sha": "bc0fcb9823cd0894934cf968b525c575833d7078", "subject": "ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46172", "commit_url": "https://git.kernel.org/stable/c/bc0fcb9823cd0894934cf968b525c575833d7078" }, { "cve": "CVE-2026-46173", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "c1fa0bb633e4a6b11e83ffc57fa5abe8ebb87891", "subject": "exit: prevent preemption of oopsing TASK_DEAD task", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46173", "commit_url": "https://git.kernel.org/stable/c/c1fa0bb633e4a6b11e83ffc57fa5abe8ebb87891" }, { "cve": "CVE-2026-46174", "author_name": "Prathyushi Nangia", "author_email": "prathyushi.nangia@amd.com", "fix_sha": "c21b90f77687075115d989e53a8ec5e2bb427ab1", "subject": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46174", "commit_url": "https://git.kernel.org/stable/c/c21b90f77687075115d989e53a8ec5e2bb427ab1" }, { "cve": "CVE-2026-46175", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "c3e238bd1f56993f205ef83889d406dfeaf717a8", "subject": "f2fs: fix fsck inconsistency caused by FGGC of node block", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46175", "commit_url": "https://git.kernel.org/stable/c/c3e238bd1f56993f205ef83889d406dfeaf717a8" }, { "cve": "CVE-2026-46176", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "c488df06bd552bb8b6e14fa0cfd5ad986c6e9525", "subject": "RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46176", "commit_url": "https://git.kernel.org/stable/c/c488df06bd552bb8b6e14fa0cfd5ad986c6e9525" }, { "cve": "CVE-2026-46177", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "c4cca236968683eb0d59abfb12d5c7e4d8514227", "subject": "ipmi: Add limits to event and receive message requests", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46177", "commit_url": "https://git.kernel.org/stable/c/c4cca236968683eb0d59abfb12d5c7e4d8514227" }, { "cve": "CVE-2026-46178", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "c54c7e4cb679c0aaa1cb489b9c3f2cd98e63a44c", "subject": "RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46178", "commit_url": "https://git.kernel.org/stable/c/c54c7e4cb679c0aaa1cb489b9c3f2cd98e63a44c" }, { "cve": "CVE-2026-46179", "author_name": "Mark Brown", "author_email": "broonie@kernel.org", "fix_sha": "c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8", "subject": "ASoC: SOF: Don't allow pointer operations on unconfigured streams", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46179", "commit_url": "https://git.kernel.org/stable/c/c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8" }, { "cve": "CVE-2026-46180", "author_name": "Marek Szyprowski", "author_email": "m.szyprowski@samsung.com", "fix_sha": "c623b63580880cc742255eaed3d79804c1b91143", "subject": "wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46180", "commit_url": "https://git.kernel.org/stable/c/c623b63580880cc742255eaed3d79804c1b91143" }, { "cve": "CVE-2026-46181", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "c9341307ea16b9395c2e4c9c94d8499d91fe31d0", "subject": "RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46181", "commit_url": "https://git.kernel.org/stable/c/c9341307ea16b9395c2e4c9c94d8499d91fe31d0" }, { "cve": "CVE-2026-46182", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "cefeed44296261173a806bef988b26bc565da4be", "subject": "pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46182", "commit_url": "https://git.kernel.org/stable/c/cefeed44296261173a806bef988b26bc565da4be" }, { "cve": "CVE-2026-46183", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "cf3b71421ca00807328c6d9cd242f9de3b77a4bf", "subject": "mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46183", "commit_url": "https://git.kernel.org/stable/c/cf3b71421ca00807328c6d9cd242f9de3b77a4bf" }, { "cve": "CVE-2026-46184", "author_name": "SeungJu Cheon", "author_email": "suunj1331@gmail.com", "fix_sha": "d1f73f169c1014463b5060e3f60813e13ddc7b87", "subject": "sound: ua101: fix division by zero at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46184", "commit_url": "https://git.kernel.org/stable/c/d1f73f169c1014463b5060e3f60813e13ddc7b87" }, { "cve": "CVE-2026-46185", "author_name": "Zisen Ye", "author_email": "zisenye@stu.xidian.edu.cn", "fix_sha": "d62b8d236fab503c6fec1d3e9a38bea71feaca20", "subject": "smb/client: fix out-of-bounds read in symlink_data()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46185", "commit_url": "https://git.kernel.org/stable/c/d62b8d236fab503c6fec1d3e9a38bea71feaca20" }, { "cve": "CVE-2026-46186", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "daf23014e5d975e72ea9c02b5160d3fcf070ea47", "subject": "Bluetooth: virtio_bt: validate rx pkt_type header length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46186", "commit_url": "https://git.kernel.org/stable/c/daf23014e5d975e72ea9c02b5160d3fcf070ea47" }, { "cve": "CVE-2026-46187", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "db57a1aa54ff68669781976e4edb045e09e2b65b", "subject": "wifi: rsi: fix kthread lifetime race between self-exit and external-stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46187", "commit_url": "https://git.kernel.org/stable/c/db57a1aa54ff68669781976e4edb045e09e2b65b" }, { "cve": "CVE-2026-46188", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "dd66b42854705e4e4ee7f14d260f86c578bed3e3", "subject": "octeon_ep_vf: add NULL check for napi_build_skb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46188", "commit_url": "https://git.kernel.org/stable/c/dd66b42854705e4e4ee7f14d260f86c578bed3e3" }, { "cve": "CVE-2026-46189", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "e38e86995df27f1f854063dab1f0c6a513db3faf", "subject": "RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46189", "commit_url": "https://git.kernel.org/stable/c/e38e86995df27f1f854063dab1f0c6a513db3faf" }, { "cve": "CVE-2026-46190", "author_name": "Tudor Ambarus", "author_email": "tudor.ambarus@linaro.org", "fix_sha": "e47029b977e747cb3a9174308fd55762cce70147", "subject": "mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46190", "commit_url": "https://git.kernel.org/stable/c/e47029b977e747cb3a9174308fd55762cce70147" }, { "cve": "CVE-2026-46191", "author_name": "Thomas Zimmermann", "author_email": "tzimmermann@suse.de", "fix_sha": "e4ef723d8975a2694cc90733a6b888a5e2841842", "subject": "fbcon: Avoid OOB font access if console rotation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46191", "commit_url": "https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842" }, { "cve": "CVE-2026-46192", "author_name": "Conor Dooley", "author_email": "conor.dooley@microchip.com", "fix_sha": "eb56deaabf127e8985fc91fa6c97bf8a3b062844", "subject": "spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46192", "commit_url": "https://git.kernel.org/stable/c/eb56deaabf127e8985fc91fa6c97bf8a3b062844" }, { "cve": "CVE-2026-46193", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "ec54093e6a8f87e800bb6aa15eb7fc1e33faa524", "subject": "xfrm: ah: account for ESN high bits in async callbacks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46193", "commit_url": "https://git.kernel.org/stable/c/ec54093e6a8f87e800bb6aa15eb7fc1e33faa524" }, { "cve": "CVE-2026-46195", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "f98b48151cc502ada59d9778f0112d21f2586ca3", "subject": "smb: client: validate dacloffset before building DACL pointers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46195", "commit_url": "https://git.kernel.org/stable/c/f98b48151cc502ada59d9778f0112d21f2586ca3" }, { "cve": "CVE-2026-46196", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "fad217e16fded7f3c09f8637b0f6a224d58b5f2e", "subject": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46196", "commit_url": "https://git.kernel.org/stable/c/fad217e16fded7f3c09f8637b0f6a224d58b5f2e" }, { "cve": "CVE-2026-46197", "author_name": "Alysa Liu", "author_email": "alysa.liu@amd.com", "fix_sha": "045e0ff208f0838a246c10204105126611b267a1", "subject": "drm/amdkfd: validate SVM ioctl nattr against buffer size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46197", "commit_url": "https://git.kernel.org/stable/c/045e0ff208f0838a246c10204105126611b267a1" }, { "cve": "CVE-2026-46198", "author_name": "Lyes Bourennani", "author_email": "lbourennani@fuzzinglabs.com", "fix_sha": "0799e5943611006b346b8813c7daf7dd5aa26bfd", "subject": "batman-adv: fix integer overflow on buff_pos", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46198", "commit_url": "https://git.kernel.org/stable/c/0799e5943611006b346b8813c7daf7dd5aa26bfd" }, { "cve": "CVE-2026-46199", "author_name": "Benjamin Cheng", "author_email": "benjamin.cheng@amd.com", "fix_sha": "0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648", "subject": "drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46199", "commit_url": "https://git.kernel.org/stable/c/0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648" }, { "cve": "CVE-2026-46200", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "0f997fdae819a8c2cc83bd4ff7d935ad76c727c9", "subject": "spi: mpc52xx: fix controller deregistration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46200", "commit_url": "https://git.kernel.org/stable/c/0f997fdae819a8c2cc83bd4ff7d935ad76c727c9" }, { "cve": "CVE-2026-46201", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "111ab678471bf1f90d078d5513bb086b70596c3c", "subject": "drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46201", "commit_url": "https://git.kernel.org/stable/c/111ab678471bf1f90d078d5513bb086b70596c3c" }, { "cve": "CVE-2026-46202", "author_name": "Sangyun Kim", "author_email": "sangyun.kim@snu.ac.kr", "fix_sha": "1654e53349d4e657b331de354313461f401f5063", "subject": "HID: appletb-kbd: run inactivity autodim from workqueues", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46202", "commit_url": "https://git.kernel.org/stable/c/1654e53349d4e657b331de354313461f401f5063" }, { "cve": "CVE-2026-46203", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "233db2cb14db8b1935dda52a6affd97276462b82", "subject": "spi: cadence-quadspi: fix unclocked access on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46203", "commit_url": "https://git.kernel.org/stable/c/233db2cb14db8b1935dda52a6affd97276462b82" }, { "cve": "CVE-2026-46204", "author_name": "Benjamin Cheng", "author_email": "benjamin.cheng@amd.com", "fix_sha": "2444eb0ec8283f4a3845eb7febad378476e1ba3c", "subject": "drm/amdgpu/vcn4: Prevent OOB reads when parsing IB", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46204", "commit_url": "https://git.kernel.org/stable/c/2444eb0ec8283f4a3845eb7febad378476e1ba3c" }, { "cve": "CVE-2026-46205", "author_name": "Sakari Ailus", "author_email": "sakari.ailus@linux.intel.com", "fix_sha": "2b7eb2c5dc72f0fc954ac4aa155f9e285e937f7c", "subject": "staging: media: atomisp: Disallow all private IOCTLs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46205", "commit_url": "https://git.kernel.org/stable/c/2b7eb2c5dc72f0fc954ac4aa155f9e285e937f7c" }, { "cve": "CVE-2026-46206", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "3243543592425beec83d453793e9d27caa0d8e66", "subject": "batman-adv: reject new tp_meter sessions during teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46206", "commit_url": "https://git.kernel.org/stable/c/3243543592425beec83d453793e9d27caa0d8e66" }, { "cve": "CVE-2026-46207", "author_name": "Stefano Garzarella", "author_email": "sgarzare@redhat.com", "fix_sha": "3a3e3d90cbc79600544536723911657730759af3", "subject": "vsock/virtio: fix empty payload in tap skb for non-linear buffers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46207", "commit_url": "https://git.kernel.org/stable/c/3a3e3d90cbc79600544536723911657730759af3" }, { "cve": "CVE-2026-46208", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "3d3cf6a7314aca4df0a6dde28ce784a2a30d0166", "subject": "batman-adv: stop tp_meter sessions during mesh teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46208", "commit_url": "https://git.kernel.org/stable/c/3d3cf6a7314aca4df0a6dde28ce784a2a30d0166" }, { "cve": "CVE-2026-46209", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "3d4c2268bd7243c3780fe32bf24ff876da272acf", "subject": "drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46209", "commit_url": "https://git.kernel.org/stable/c/3d4c2268bd7243c3780fe32bf24ff876da272acf" }, { "cve": "CVE-2026-46210", "author_name": "Vishnu Reddy", "author_email": "busanna.reddy@oss.qualcomm.com", "fix_sha": "3d9593ad1a58c5acc3e5fa2a48222bb7632e6812", "subject": "media: iris: fix use-after-free of fmt_src during MBPF check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46210", "commit_url": "https://git.kernel.org/stable/c/3d9593ad1a58c5acc3e5fa2a48222bb7632e6812" }, { "cve": "CVE-2026-46211", "author_name": "Yasuaki Torimaru", "author_email": "yasuakitorimaru@gmail.com", "fix_sha": "47cbfe2608314b833ad61a65827d8fb363bc2d2d", "subject": "drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46211", "commit_url": "https://git.kernel.org/stable/c/47cbfe2608314b833ad61a65827d8fb363bc2d2d" }, { "cve": "CVE-2026-46212", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "4ae1709a314060a196981b344610d023ea841e57", "subject": "batman-adv: bla: prevent use-after-free when deleting claims", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46212", "commit_url": "https://git.kernel.org/stable/c/4ae1709a314060a196981b344610d023ea841e57" }, { "cve": "CVE-2026-46213", "author_name": "Sangyun Kim", "author_email": "sangyun.kim@snu.ac.kr", "fix_sha": "4db2af929279c799b5653a39eb0795c72baffca4", "subject": "HID: appletb-kbd: fix UAF in inactivity-timer cleanup path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46213", "commit_url": "https://git.kernel.org/stable/c/4db2af929279c799b5653a39eb0795c72baffca4" }, { "cve": "CVE-2026-46214", "author_name": "Dudu Lu", "author_email": "phx0fer@gmail.com", "fix_sha": "52bcb57a4e8a0865a76c587c2451906342ae1b2d", "subject": "vsock/virtio: fix accept queue count leak on transport mismatch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46214", "commit_url": "https://git.kernel.org/stable/c/52bcb57a4e8a0865a76c587c2451906342ae1b2d" }, { "cve": "CVE-2026-46215", "author_name": "Francis, David", "author_email": "david.francis@amd.com", "fix_sha": "5e28b7b94408897e41c63477aabc9e1db439bc8c", "subject": "drm: Set old handle to NULL before prime swap in change_handle", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46215", "commit_url": "https://git.kernel.org/stable/c/5e28b7b94408897e41c63477aabc9e1db439bc8c" }, { "cve": "CVE-2026-46216", "author_name": "Gustavo Sousa", "author_email": "gustavo.sousa@intel.com", "fix_sha": "60a1e131a811b68703da58fd805ab359b704ab03", "subject": "drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46216", "commit_url": "https://git.kernel.org/stable/c/60a1e131a811b68703da58fd805ab359b704ab03" }, { "cve": "CVE-2026-46218", "author_name": "Benjamin Cheng", "author_email": "benjamin.cheng@amd.com", "fix_sha": "66085e206431ef88ce36f53c1f53d570790ccc9e", "subject": "drm/amdgpu: Add bounds checking to ib_{get,set}_value", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46218", "commit_url": "https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e" }, { "cve": "CVE-2026-46219", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0", "subject": "spi: mpc52xx: fix use-after-free on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46219", "commit_url": "https://git.kernel.org/stable/c/706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0" }, { "cve": "CVE-2026-46220", "author_name": "John B. Moore", "author_email": "jbmoore61@gmail.com", "fix_sha": "78d2e624fa073c14970aa097adcf3ea31c157a66", "subject": "drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46220", "commit_url": "https://git.kernel.org/stable/c/78d2e624fa073c14970aa097adcf3ea31c157a66" }, { "cve": "CVE-2026-46221", "author_name": "Prasanna Kumar T S M", "author_email": "ptsm@linux.microsoft.com", "fix_sha": "8cf5dd235eff6008cb04c3d8064d2acfa90616f1", "subject": "EDAC/versalnet: Fix device name memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46221", "commit_url": "https://git.kernel.org/stable/c/8cf5dd235eff6008cb04c3d8064d2acfa90616f1" }, { "cve": "CVE-2026-46222", "author_name": "Dang Huynh", "author_email": "dang.huynh@mainlining.org", "fix_sha": "8e3c751259dc2d1325838eff26f41032523c7b57", "subject": "media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46222", "commit_url": "https://git.kernel.org/stable/c/8e3c751259dc2d1325838eff26f41032523c7b57" }, { "cve": "CVE-2026-46223", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "93618edf753838a727dbff63c7c291dee22d656b", "subject": "cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46223", "commit_url": "https://git.kernel.org/stable/c/93618edf753838a727dbff63c7c291dee22d656b" }, { "cve": "CVE-2026-46224", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "93a528f67ce5095bcab46a69839eca97f43dd352", "subject": "drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46224", "commit_url": "https://git.kernel.org/stable/c/93a528f67ce5095bcab46a69839eca97f43dd352" }, { "cve": "CVE-2026-46225", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "9944fa6726afb1e6eb7e2212764e7da0c97f2dcc", "subject": "spi: rspi: fix controller deregistration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46225", "commit_url": "https://git.kernel.org/stable/c/9944fa6726afb1e6eb7e2212764e7da0c97f2dcc" }, { "cve": "CVE-2026-46226", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "9b7abfed4c3754062d1f3ffd452e65a38667f586", "subject": "spi: fsl: fix controller deregistration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46226", "commit_url": "https://git.kernel.org/stable/c/9b7abfed4c3754062d1f3ffd452e65a38667f586" }, { "cve": "CVE-2026-46227", "author_name": "Ben Morris", "author_email": "bmorris@anthropic.com", "fix_sha": "abb5f36771cc4c05899b34000829a787572a8817", "subject": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46227", "commit_url": "https://git.kernel.org/stable/c/abb5f36771cc4c05899b34000829a787572a8817" }, { "cve": "CVE-2026-46228", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "abe572f630bc1f0e77041012ab075869036ede4f", "subject": "spi: ch341: fix devres lifetime", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46228", "commit_url": "https://git.kernel.org/stable/c/abe572f630bc1f0e77041012ab075869036ede4f" }, { "cve": "CVE-2026-46229", "author_name": "Amir Shetaia", "author_email": "amir.shetaia@amd.com", "fix_sha": "ad52d61d82181dbdb7f05826de38352d5e550cc2", "subject": "drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46229", "commit_url": "https://git.kernel.org/stable/c/ad52d61d82181dbdb7f05826de38352d5e550cc2" }, { "cve": "CVE-2026-46230", "author_name": "Benjamin Cheng", "author_email": "benjamin.cheng@amd.com", "fix_sha": "b193019860d61e92da395eae2011f2f6716b182f", "subject": "drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46230", "commit_url": "https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f" }, { "cve": "CVE-2026-46231", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "ba9d20ee9076dac32c371116bacbe72480eb356c", "subject": "batman-adv: bla: put backbone reference on failed claim hash insert", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46231", "commit_url": "https://git.kernel.org/stable/c/ba9d20ee9076dac32c371116bacbe72480eb356c" }, { "cve": "CVE-2026-46232", "author_name": "T.J. Mercier", "author_email": "tjmercier@google.com", "fix_sha": "cac61b58a3b6340c52afa06bb15eac033158db2f", "subject": "HID: playstation: Clamp num_touch_reports", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46232", "commit_url": "https://git.kernel.org/stable/c/cac61b58a3b6340c52afa06bb15eac033158db2f" }, { "cve": "CVE-2026-46233", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "cf6b604011591865ae39ac82de8978c1120d17af", "subject": "batman-adv: bla: only purge non-released claims", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46233", "commit_url": "https://git.kernel.org/stable/c/cf6b604011591865ae39ac82de8978c1120d17af" }, { "cve": "CVE-2026-46234", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "d114bfdc9b76bf93b881e195b7ec957c14227bab", "subject": "vsock: fix buffer size clamping order", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46234", "commit_url": "https://git.kernel.org/stable/c/d114bfdc9b76bf93b881e195b7ec957c14227bab" }, { "cve": "CVE-2026-46235", "author_name": "Wang Jun", "author_email": "1742789905@qq.com", "fix_sha": "d51c60a498e83c9a79884c8e420f97e3885c9583", "subject": "media: saa7164: add ioremap return checks and cleanups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46235", "commit_url": "https://git.kernel.org/stable/c/d51c60a498e83c9a79884c8e420f97e3885c9583" }, { "cve": "CVE-2026-46236", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff", "subject": "media: rc: xbox_remote: heed DMA restrictions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46236", "commit_url": "https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff" }, { "cve": "CVE-2026-46238", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "f03e8583532941b07761c5429de7d50766fa3110", "subject": "batman-adv: stop caching unowned originator pointers in BAT IV", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46238", "commit_url": "https://git.kernel.org/stable/c/f03e8583532941b07761c5429de7d50766fa3110" }, { "cve": "CVE-2026-46239", "author_name": "Xiaolei Wang", "author_email": "xiaolei.wang@windriver.com", "fix_sha": "f11ae9c04f8368a3b5a0280ef595198dace1c983", "subject": "media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46239", "commit_url": "https://git.kernel.org/stable/c/f11ae9c04f8368a3b5a0280ef595198dace1c983" }, { "cve": "CVE-2026-46240", "author_name": "Dikshita Agarwal", "author_email": "dikshita.agarwal@oss.qualcomm.com", "fix_sha": "f27cfdcfc916bb59297825805f4c3499f89f9e76", "subject": "media: iris: Fix use-after-free in iris_release_internal_buffers()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46240", "commit_url": "https://git.kernel.org/stable/c/f27cfdcfc916bb59297825805f4c3499f89f9e76" }, { "cve": "CVE-2026-46241", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "f62c060272b9d7423b1650b844e8e4e7b8f9f925", "subject": "spi: mpc52xx: fix use-after-free on registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46241", "commit_url": "https://git.kernel.org/stable/c/f62c060272b9d7423b1650b844e8e4e7b8f9f925" }, { "cve": "CVE-2026-46242", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "a6dc643c69311677c574a0f17a3f4d66a5f3744b", "subject": "eventpoll: fix ep_remove struct eventpoll / struct file UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46242", "commit_url": "https://git.kernel.org/stable/c/a6dc643c69311677c574a0f17a3f4d66a5f3744b" }, { "cve": "CVE-2026-46243", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "3da1fdf4efbc490041eb4f836bf596201203f8f2", "subject": "smb: client: reject userspace cifs.spnego descriptions", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243", "commit_url": "https://git.kernel.org/stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2" }, { "cve": "CVE-2026-46244", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "b6a91f68ebfed9c38e0e9150f58a9b85da07181c", "subject": "netfilter: nft_inner: Fix IPv6 inner_thoff desync", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46244", "commit_url": "https://git.kernel.org/stable/c/b6a91f68ebfed9c38e0e9150f58a9b85da07181c" }, { "cve": "CVE-2026-46245", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "226a40c06a183abaeb7529a4f54d6c203bd14407", "subject": "drm/amd/display: Fix dc_link NULL handling in HPD init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46245", "commit_url": "https://git.kernel.org/stable/c/226a40c06a183abaeb7529a4f54d6c203bd14407" }, { "cve": "CVE-2026-46246", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "23067259919663580c6f81801847cfc7bd54fd1f", "subject": "power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46246", "commit_url": "https://git.kernel.org/stable/c/23067259919663580c6f81801847cfc7bd54fd1f" }, { "cve": "CVE-2026-46247", "author_name": "Dmitry Baryshkov", "author_email": "dmitry.baryshkov@oss.qualcomm.com", "fix_sha": "2583cb925ca1ce450aa5d74a05a67448db970193", "subject": "clk: qcom: gfx3d: add parent to parent request map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46247", "commit_url": "https://git.kernel.org/stable/c/2583cb925ca1ce450aa5d74a05a67448db970193" }, { "cve": "CVE-2026-46248", "author_name": "Aaradhana Sahu", "author_email": "aaradhana.sahu@oss.qualcomm.com", "fix_sha": "2c1ba9c2adf0fda96eaaebd8799268a7506a8fc9", "subject": "wifi: ath12k: clear stale link mapping of ahvif->links_map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46248", "commit_url": "https://git.kernel.org/stable/c/2c1ba9c2adf0fda96eaaebd8799268a7506a8fc9" }, { "cve": "CVE-2026-46249", "author_name": "Anshumali Gaur", "author_email": "agaur@marvell.com", "fix_sha": "2d2d574309e3ae84ee794869a5da8b4c38753a94", "subject": "octeontx2-af: Fix PF driver crash with kexec kernel booting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46249", "commit_url": "https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94" }, { "cve": "CVE-2026-46250", "author_name": "Yao Zi", "author_email": "me@ziyao.cc", "fix_sha": "30bfc2d6a1132a89a5f1c3b96c59cf3e4d076ea3", "subject": "MIPS: Work around LLVM bug when gp is used as global register variable", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46250", "commit_url": "https://git.kernel.org/stable/c/30bfc2d6a1132a89a5f1c3b96c59cf3e4d076ea3" }, { "cve": "CVE-2026-46251", "author_name": "Boris Burkov", "author_email": "boris@bur.io", "fix_sha": "3a1f4264daed4b419c325a7fe35e756cada3cf82", "subject": "btrfs: fix block_group_tree dirty_list corruption", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46251", "commit_url": "https://git.kernel.org/stable/c/3a1f4264daed4b419c325a7fe35e756cada3cf82" }, { "cve": "CVE-2026-46252", "author_name": "Andr\u00e9 Draszik", "author_email": "andre.draszik@linaro.org", "fix_sha": "497330b203d2c59c5ff3fa4c34d14494d7203bc3", "subject": "regulator: core: fix locking in regulator_resolve_supply() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46252", "commit_url": "https://git.kernel.org/stable/c/497330b203d2c59c5ff3fa4c34d14494d7203bc3" }, { "cve": "CVE-2026-46253", "author_name": "Sai Ritvik Tanksalkar", "author_email": "stanksal@purdue.edu", "fix_sha": "5669645c052f235726a85f443769b6fc02f66762", "subject": "pstore/ram: fix buffer overflow in persistent_ram_save_old()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46253", "commit_url": "https://git.kernel.org/stable/c/5669645c052f235726a85f443769b6fc02f66762" }, { "cve": "CVE-2026-46254", "author_name": "Helge Deller", "author_email": "deller@kernel.org", "fix_sha": "64802f731214a51dfe3c6c27636b3ddafd003eb0", "subject": "AppArmor: Allow apparmor to handle unaligned dfa tables", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46254", "commit_url": "https://git.kernel.org/stable/c/64802f731214a51dfe3c6c27636b3ddafd003eb0" }, { "cve": "CVE-2026-46255", "author_name": "Jared Kangas", "author_email": "jkangas@redhat.com", "fix_sha": "666c53e94c1d0bf0bdf14c49505ece9ddbe725bc", "subject": "dmaengine: fsl-edma: don't explicitly disable clocks in .remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46255", "commit_url": "https://git.kernel.org/stable/c/666c53e94c1d0bf0bdf14c49505ece9ddbe725bc" }, { "cve": "CVE-2026-46256", "author_name": "Mike Snitzer", "author_email": "snitzer@hammerspace.com", "fix_sha": "67435d2d8a33a75f9647724952cb1b18279d2e95", "subject": "NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46256", "commit_url": "https://git.kernel.org/stable/c/67435d2d8a33a75f9647724952cb1b18279d2e95" }, { "cve": "CVE-2026-46257", "author_name": "Stephen Eta Zhou", "author_email": "stephen.eta.zhou@gmail.com", "fix_sha": "694921a93f3e3621e067afc545cedf6fe3b234a9", "subject": "clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46257", "commit_url": "https://git.kernel.org/stable/c/694921a93f3e3621e067afc545cedf6fe3b234a9" }, { "cve": "CVE-2026-46258", "author_name": "Douglas Anderson", "author_email": "dianders@chromium.org", "fix_sha": "6af6be278e3ba2ffb6af5b796c89dfb3f5d9063e", "subject": "gpio: cdev: Avoid NULL dereference in linehandle_create()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46258", "commit_url": "https://git.kernel.org/stable/c/6af6be278e3ba2ffb6af5b796c89dfb3f5d9063e" }, { "cve": "CVE-2026-46259", "author_name": "Jinliang Zheng", "author_email": "alexjlzheng@tencent.com", "fix_sha": "76149d53502cf17ef3ae454ff384551236fba867", "subject": "procfs: fix missing RCU protection when reading real_parent in do_task_stat()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46259", "commit_url": "https://git.kernel.org/stable/c/76149d53502cf17ef3ae454ff384551236fba867" }, { "cve": "CVE-2026-46260", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "8244f959e2c125c849e569f5b23ed49804cce695", "subject": "ipv6: Fix out-of-bound access in fib6_add_rt2node().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46260", "commit_url": "https://git.kernel.org/stable/c/8244f959e2c125c849e569f5b23ed49804cce695" }, { "cve": "CVE-2026-46261", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "888a0a802c467bbe34a42167bdf9d7331333440a", "subject": "spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46261", "commit_url": "https://git.kernel.org/stable/c/888a0a802c467bbe34a42167bdf9d7331333440a" }, { "cve": "CVE-2026-46262", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "9f16d96e1222391a6b996a1b676bec14fb91e3b2", "subject": "ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46262", "commit_url": "https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2" }, { "cve": "CVE-2026-46263", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "abde491143e4e12eecc41337910aace4e8d59603", "subject": "drm/amd/display: Fix out-of-bounds stream encoder index v3", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46263", "commit_url": "https://git.kernel.org/stable/c/abde491143e4e12eecc41337910aace4e8d59603" }, { "cve": "CVE-2026-46264", "author_name": "Michal Wajdeczko", "author_email": "michal.wajdeczko@intel.com", "fix_sha": "bf7172cd25ed182f30af2cbb9f80c730dc717d8e", "subject": "drm/xe/pf: Fix sysfs initialization", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46264", "commit_url": "https://git.kernel.org/stable/c/bf7172cd25ed182f30af2cbb9f80c730dc717d8e" }, { "cve": "CVE-2026-46265", "author_name": "Chengchang Tang", "author_email": "tangchengchang@huawei.com", "fix_sha": "c0a26bbd3f99b7b03f072e3409aff4e6ec8af6f6", "subject": "RDMA/hns: Fix WQ_MEM_RECLAIM warning", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46265", "commit_url": "https://git.kernel.org/stable/c/c0a26bbd3f99b7b03f072e3409aff4e6ec8af6f6" }, { "cve": "CVE-2026-46266", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "c89477ad79446867394360b29bb801010fc3ff22", "subject": "inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46266", "commit_url": "https://git.kernel.org/stable/c/c89477ad79446867394360b29bb801010fc3ff22" }, { "cve": "CVE-2026-46267", "author_name": "Votokina Victoria", "author_email": "victoria.votokina@kaspersky.com", "fix_sha": "c9efde1e537baed7648a94022b43836a348a074f", "subject": "nfc: hci: shdlc: Stop timers and work before freeing context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46267", "commit_url": "https://git.kernel.org/stable/c/c9efde1e537baed7648a94022b43836a348a074f" }, { "cve": "CVE-2026-46268", "author_name": "Hou Tao", "author_email": "houtao1@huawei.com", "fix_sha": "cb500023a75246f60b79af9f7321d6e75330c5b5", "subject": "PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46268", "commit_url": "https://git.kernel.org/stable/c/cb500023a75246f60b79af9f7321d6e75330c5b5" }, { "cve": "CVE-2026-46269", "author_name": "Jiayu Du", "author_email": "jiayu.riscv@isrc.iscas.ac.cn", "fix_sha": "d8c128fb6c2277d95f3f6a4ce28b82c8370031f6", "subject": "pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46269", "commit_url": "https://git.kernel.org/stable/c/d8c128fb6c2277d95f3f6a4ce28b82c8370031f6" }, { "cve": "CVE-2026-46270", "author_name": "Waqar Hameed", "author_email": "waqar.hameed@axis.com", "fix_sha": "e2febe375e5ea5afed92f4cd9711bde8f24ee6d2", "subject": "power: supply: rt9455: Fix use-after-free in power_supply_changed()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46270", "commit_url": "https://git.kernel.org/stable/c/e2febe375e5ea5afed92f4cd9711bde8f24ee6d2" }, { "cve": "CVE-2026-46271", "author_name": "Baochen Qiang", "author_email": "baochen.qiang@oss.qualcomm.com", "fix_sha": "e62102ac9b773bdb08475aa9ca24dea61ae98708", "subject": "wifi: ath12k: do WoW offloads only on primary link", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46271", "commit_url": "https://git.kernel.org/stable/c/e62102ac9b773bdb08475aa9ca24dea61ae98708" }, { "cve": "CVE-2026-46272", "author_name": "Yicong Yang", "author_email": "yangyicong@hisilicon.com", "fix_sha": "e6e43e82c79c97917cbe356c07e8a6f3f982ab53", "subject": "coresight: tmc-etr: Fix race condition between sysfs and perf mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46272", "commit_url": "https://git.kernel.org/stable/c/e6e43e82c79c97917cbe356c07e8a6f3f982ab53" }, { "cve": "CVE-2026-46273", "author_name": "Mingming Cao", "author_email": "mmc@linux.ibm.com", "fix_sha": "cc427d24ac6442ffdeafd157a63c7c5b73ed4de4", "subject": "ibmveth: Disable GSO for packets with small MSS", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46273", "commit_url": "https://git.kernel.org/stable/c/cc427d24ac6442ffdeafd157a63c7c5b73ed4de4" }, { "cve": "CVE-2026-46274", "author_name": "Nicholas Carlini", "author_email": "nicholas@carlini.com", "fix_sha": "d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc", "subject": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46274", "commit_url": "https://git.kernel.org/stable/c/d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc" }, { "cve": "CVE-2026-46275", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "c1bb9336ae6b54a5f6a353c4bd4ed9a4307e429b", "subject": "Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46275", "commit_url": "https://git.kernel.org/stable/c/c1bb9336ae6b54a5f6a353c4bd4ed9a4307e429b" }, { "cve": "CVE-2026-46276", "author_name": "Arjan van de Ven", "author_email": "arjan@linux.intel.com", "fix_sha": "095a8b0ad3c3b5cdc3850d961adb8a8f735220bb", "subject": "drm/amdgpu: fix zero-size GDS range init on RDNA4", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46276", "commit_url": "https://git.kernel.org/stable/c/095a8b0ad3c3b5cdc3850d961adb8a8f735220bb" }, { "cve": "CVE-2026-46277", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "39928984956037cabd304321cb8f342e47421db5", "subject": "mm/zone_device: do not touch device folio after calling ->folio_free()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46277", "commit_url": "https://git.kernel.org/stable/c/39928984956037cabd304321cb8f342e47421db5" }, { "cve": "CVE-2026-46278", "author_name": "Brajesh Gupta", "author_email": "brajesh.gupta@imgtec.com", "fix_sha": "5dfd429591f8d7185bf63a08b5c30863fb605611", "subject": "drm/imagination: Fix segfault when updating ftrace mask", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46278", "commit_url": "https://git.kernel.org/stable/c/5dfd429591f8d7185bf63a08b5c30863fb605611" }, { "cve": "CVE-2026-46279", "author_name": "Hao Ge", "author_email": "hao.ge@linux.dev", "fix_sha": "6b1842775a460245e97d36d3a67d0cfba7c4ff79", "subject": "mm/alloc_tag: clear codetag for pages allocated before page_ext initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46279", "commit_url": "https://git.kernel.org/stable/c/6b1842775a460245e97d36d3a67d0cfba7c4ff79" }, { "cve": "CVE-2026-46280", "author_name": "Alistair Popple", "author_email": "apopple@nvidia.com", "fix_sha": "744dd97752ef1076a8d8672bb0d8aa2c7abc1144", "subject": "lib: test_hmm: evict device pages on file close to avoid use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46280", "commit_url": "https://git.kernel.org/stable/c/744dd97752ef1076a8d8672bb0d8aa2c7abc1144" }, { "cve": "CVE-2026-46281", "author_name": "Marco Elver", "author_email": "elver@google.com", "fix_sha": "82d1f01292d3f09bf063f829f8ab8de12b4280a1", "subject": "vmalloc: fix buffer overflow in vrealloc_node_align()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46281", "commit_url": "https://git.kernel.org/stable/c/82d1f01292d3f09bf063f829f8ab8de12b4280a1" }, { "cve": "CVE-2026-46282", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "aac0a51b16700b403a55b67ba495de021db78763", "subject": "iio: frequency: admv1013: fix NULL pointer dereference on str", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46282", "commit_url": "https://git.kernel.org/stable/c/aac0a51b16700b403a55b67ba495de021db78763" }, { "cve": "CVE-2026-46283", "author_name": "Gunnar Kudrjavets", "author_email": "gunnarku@amazon.com", "fix_sha": "c424d2664f08c77f08b4580b5f0cbaabf7c229b2", "subject": "tpm: Use kfree_sensitive() to free auth session in tpm_dev_release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46283", "commit_url": "https://git.kernel.org/stable/c/c424d2664f08c77f08b4580b5f0cbaabf7c229b2" }, { "cve": "CVE-2026-46284", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "c45b354911d01565156e38d7f6bc07edb51fc34c", "subject": "mm/hugetlb: fix early boot crash on parameters without '=' separator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46284", "commit_url": "https://git.kernel.org/stable/c/c45b354911d01565156e38d7f6bc07edb51fc34c" }, { "cve": "CVE-2026-46285", "author_name": "James Kim", "author_email": "james010kim@gmail.com", "fix_sha": "ca19808bc6fac7e29420d8508df569b346b3e339", "subject": "mtd: docg3: fix use-after-free in docg3_release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46285", "commit_url": "https://git.kernel.org/stable/c/ca19808bc6fac7e29420d8508df569b346b3e339" }, { "cve": "CVE-2026-46286", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "d45963a93c1495e9f1338fde91d0ebba8fd22474", "subject": "leds: qcom-lpg: Check for array overflow when selecting the high resolution", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46286", "commit_url": "https://git.kernel.org/stable/c/d45963a93c1495e9f1338fde91d0ebba8fd22474" }, { "cve": "CVE-2026-46287", "author_name": "Jiawen Wu", "author_email": "jiawenwu@trustnetic.com", "fix_sha": "e159f05e12cc1111a3103b99375ddf0dfd0e7d63", "subject": "net: txgbe: fix RTNL assertion warning when remove module", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46287", "commit_url": "https://git.kernel.org/stable/c/e159f05e12cc1111a3103b99375ddf0dfd0e7d63" }, { "cve": "CVE-2026-46288", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "faecdd423c27f0d6090156a435ba9dbbac0eaddb", "subject": "of: unittest: fix use-after-free in of_unittest_changeset()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46288", "commit_url": "https://git.kernel.org/stable/c/faecdd423c27f0d6090156a435ba9dbbac0eaddb" }, { "cve": "CVE-2026-46289", "author_name": "Christian A. Ehrhardt", "author_email": "lk@c--e.de", "fix_sha": "07b7d66e65d9cfe6b9c2c34aa22cfcaac37a5c45", "subject": "lib/scatterlist: fix length calculations in extract_kvec_to_sg", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46289", "commit_url": "https://git.kernel.org/stable/c/07b7d66e65d9cfe6b9c2c34aa22cfcaac37a5c45" }, { "cve": "CVE-2026-46290", "author_name": "Ivan Hu", "author_email": "ivan.hu@canonical.com", "fix_sha": "088f65e206087bf903743bd18417261d7a4c9644", "subject": "x86/efi: Fix graceful fault handling after FPU softirq changes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46290", "commit_url": "https://git.kernel.org/stable/c/088f65e206087bf903743bd18417261d7a4c9644" }, { "cve": "CVE-2026-46291", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "177730a273b18e195263ed953853273e901b5064", "subject": "crypto: caam - guard HMAC key hex dumps in hash_digest_key", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46291", "commit_url": "https://git.kernel.org/stable/c/177730a273b18e195263ed953853273e901b5064" }, { "cve": "CVE-2026-46292", "author_name": "Ulf Hansson", "author_email": "ulf.hansson@linaro.org", "fix_sha": "26735dfdd8930d9ef1fa92e590a9bf77726efdf6", "subject": "pmdomain: core: Fix detach procedure for virtual devices in genpd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46292", "commit_url": "https://git.kernel.org/stable/c/26735dfdd8930d9ef1fa92e590a9bf77726efdf6" }, { "cve": "CVE-2026-46293", "author_name": "Conor Dooley", "author_email": "conor.dooley@microchip.com", "fix_sha": "2f7ae8ab6aa73daaf080d5332110357c29df9c36", "subject": "clk: microchip: mpfs-ccc: fix out of bounds access during output registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46293", "commit_url": "https://git.kernel.org/stable/c/2f7ae8ab6aa73daaf080d5332110357c29df9c36" }, { "cve": "CVE-2026-46294", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "2fa49cc884f6496a915c35621ba4da35649bf159", "subject": "dm: fix a buffer overflow in ioctl processing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46294", "commit_url": "https://git.kernel.org/stable/c/2fa49cc884f6496a915c35621ba4da35649bf159" }, { "cve": "CVE-2026-46295", "author_name": "Paolo Bonzini", "author_email": "pbonzini@redhat.com", "fix_sha": "33fd0ccd2590b470b65adcca288615ad3b5e3e06", "subject": "KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46295", "commit_url": "https://git.kernel.org/stable/c/33fd0ccd2590b470b65adcca288615ad3b5e3e06" }, { "cve": "CVE-2026-46296", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "45daacbead8a009844bd5dba6cfa731332184d17", "subject": "spi: s3c64xx: fix NULL-deref on driver unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46296", "commit_url": "https://git.kernel.org/stable/c/45daacbead8a009844bd5dba6cfa731332184d17" }, { "cve": "CVE-2026-46297", "author_name": "Jiawen Wu", "author_email": "jiawenwu@trustnetic.com", "fix_sha": "7a33345153eeeda195c55f15be27074e4c3b5109", "subject": "net: libwx: use request_irq for VF misc interrupt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46297", "commit_url": "https://git.kernel.org/stable/c/7a33345153eeeda195c55f15be27074e4c3b5109" }, { "cve": "CVE-2026-46298", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "7a4f0846ee6cc8cf44ae0046ed42e3259d1dd45b", "subject": "pseries/papr-hvpipe: Fix race with interrupt handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46298", "commit_url": "https://git.kernel.org/stable/c/7a4f0846ee6cc8cf44ae0046ed42e3259d1dd45b" }, { "cve": "CVE-2026-46299", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "90c500e4fd83fa33c09bc7ee23b6d9cc487ac733", "subject": "hfsplus: fix held lock freed on hfsplus_fill_super()", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46299", "commit_url": "https://git.kernel.org/stable/c/90c500e4fd83fa33c09bc7ee23b6d9cc487ac733" }, { "cve": "CVE-2026-46300", "author_name": "William Bowling", "author_email": "vakzz@zellic.io", "fix_sha": "f84eca5817390257cef78013d0112481c503b4a3", "subject": "net: skbuff: preserve shared-frag marker during coalescing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300", "commit_url": "https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3" }, { "cve": "CVE-2026-46301", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "9d72732fe70c11424bc90ed466c7ccfa58b42a9a", "subject": "spi: topcliff-pch: fix use-after-free on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46301", "commit_url": "https://git.kernel.org/stable/c/9d72732fe70c11424bc90ed466c7ccfa58b42a9a" }, { "cve": "CVE-2026-46302", "author_name": "Stephen Smalley", "author_email": "stephen.smalley.work@gmail.com", "fix_sha": "a02cd6805562305f936e807da83e253b719dd965", "subject": "selinux: allow multiple opens of /sys/fs/selinux/policy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46302", "commit_url": "https://git.kernel.org/stable/c/a02cd6805562305f936e807da83e253b719dd965" }, { "cve": "CVE-2026-46303", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a36d990f591320e9dd379ab30063ebfe91d47e1f", "subject": "isofs: validate Rock Ridge CE continuation extent against volume size", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46303", "commit_url": "https://git.kernel.org/stable/c/a36d990f591320e9dd379ab30063ebfe91d47e1f" }, { "cve": "CVE-2026-46304", "author_name": "Chaitanya Kulkarni", "author_email": "kch@nvidia.com", "fix_sha": "aade8abd8b868b6ffa9697aadaea28ec7f65bee6", "subject": "nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46304", "commit_url": "https://git.kernel.org/stable/c/aade8abd8b868b6ffa9697aadaea28ec7f65bee6" }, { "cve": "CVE-2026-46305", "author_name": "Shyam Sunder Reddy Padira", "author_email": "shyamsunderreddypadira@gmail.com", "fix_sha": "bc851db06045a40c18233dd76ef0562d7f8bb6db", "subject": "staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46305", "commit_url": "https://git.kernel.org/stable/c/bc851db06045a40c18233dd76ef0562d7f8bb6db" }, { "cve": "CVE-2026-46306", "author_name": "Qingfang Deng", "author_email": "qingfang.deng@linux.dev", "fix_sha": "d6c19b31a3c1d519fabdcf0aa239e6b6109b9473", "subject": "flow_dissector: do not dissect PPPoE PFC frames", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46306", "commit_url": "https://git.kernel.org/stable/c/d6c19b31a3c1d519fabdcf0aa239e6b6109b9473" }, { "cve": "CVE-2026-46307", "author_name": "Jiri Slaby (SUSE)", "author_email": "jirislaby@kernel.org", "fix_sha": "d748603f12baff112caa3ab7d39f50100f010dbd", "subject": "wifi: ath5k: do not access array OOB", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46307", "commit_url": "https://git.kernel.org/stable/c/d748603f12baff112caa3ab7d39f50100f010dbd" }, { "cve": "CVE-2026-46308", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "ec1fcddb3117d9452210e838fd37389ee61e10e8", "subject": "pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46308", "commit_url": "https://git.kernel.org/stable/c/ec1fcddb3117d9452210e838fd37389ee61e10e8" }, { "cve": "CVE-2026-46309", "author_name": "Jia Yao", "author_email": "jia.yao@intel.com", "fix_sha": "4e5591c2fc1b30f4ea5e2eab4c3a695acc404e39", "subject": "drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46309", "commit_url": "https://git.kernel.org/stable/c/4e5591c2fc1b30f4ea5e2eab4c3a695acc404e39" }, { "cve": "CVE-2026-46310", "author_name": "Tomi Valkeinen", "author_email": "tomi.valkeinen+renesas@ideasonboard.com", "fix_sha": "58b1e9664d8f74d55d8411cc7a7b275a76a6f24f", "subject": "media: renesas: vsp1: Fix NULL pointer deref on module unload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46310", "commit_url": "https://git.kernel.org/stable/c/58b1e9664d8f74d55d8411cc7a7b275a76a6f24f" }, { "cve": "CVE-2026-46311", "author_name": "Sunil Khatri", "author_email": "sunil.khatri@amd.com", "fix_sha": "6da7b1242da4455b11c24ce667d1cab1a348c8ea", "subject": "drm/amdgpu/userq: fix access to stale wptr mapping", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46311", "commit_url": "https://git.kernel.org/stable/c/6da7b1242da4455b11c24ce667d1cab1a348c8ea" }, { "cve": "CVE-2026-46312", "author_name": "Janne Grunau", "author_email": "j@jannau.net", "fix_sha": "7254b31a13aaa0c2c0f9ffbc335b718656117ff4", "subject": "media: videobuf2: Set vma_flags in vb2_dma_sg_mmap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46312", "commit_url": "https://git.kernel.org/stable/c/7254b31a13aaa0c2c0f9ffbc335b718656117ff4" }, { "cve": "CVE-2026-46313", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "8dd088b8b106f7b119664f965b691785998edcfb", "subject": "media: intel/ipu6: fix error pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46313", "commit_url": "https://git.kernel.org/stable/c/8dd088b8b106f7b119664f965b691785998edcfb" }, { "cve": "CVE-2026-46314", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "fb44d589bf3148e13452185a6e772a7efbf2d684", "subject": "drm/v3d: Reject empty multisync extension to prevent infinite loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46314", "commit_url": "https://git.kernel.org/stable/c/fb44d589bf3148e13452185a6e772a7efbf2d684" }, { "cve": "CVE-2026-46315", "author_name": "Heechan Kang", "author_email": "gganji11@naver.com", "fix_sha": "93d93f5f8da791e98159795c6ef683f45bd95d13", "subject": "io_uring/waitid: clear waitid info before copying it to userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46315", "commit_url": "https://git.kernel.org/stable/c/93d93f5f8da791e98159795c6ef683f45bd95d13" }, { "cve": "CVE-2026-46316", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "13031fb6b8357fbbcded2a7f4cba73e4781ee594", "subject": "KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46316", "commit_url": "https://git.kernel.org/stable/c/13031fb6b8357fbbcded2a7f4cba73e4781ee594" }, { "cve": "CVE-2026-46317", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "70543358fa08e0f7cebc3447c3b70fe97ad7aaa8", "subject": "KVM: arm64: Reassign nested_mmus array behind mmu_lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46317", "commit_url": "https://git.kernel.org/stable/c/70543358fa08e0f7cebc3447c3b70fe97ad7aaa8" }, { "cve": "CVE-2026-46318", "author_name": "Lorenzo Stoakes", "author_email": "ljs@kernel.org", "fix_sha": "83f9efcce93f8574be2279090ee2aec58b86cda7", "subject": "Revert \"mm/hugetlbfs: update hugetlbfs to use mmap_prepare\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46318", "commit_url": "https://git.kernel.org/stable/c/83f9efcce93f8574be2279090ee2aec58b86cda7" }, { "cve": "CVE-2026-46319", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "f462dca0c8415bf0058d0ffa476354c4476d0f09", "subject": "net/sched: act_ct: Only release RCU read lock after ct_ft", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46319", "commit_url": "https://git.kernel.org/stable/c/f462dca0c8415bf0058d0ffa476354c4476d0f09" }, { "cve": "CVE-2026-46320", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "3bcf7aec6a9d16438f2cec29f5d7c8d5b8edf9b2", "subject": "tap: free page on error paths in tap_get_user_xdp()", "cvss_score": 7.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46320", "commit_url": "https://git.kernel.org/stable/c/3bcf7aec6a9d16438f2cec29f5d7c8d5b8edf9b2" }, { "cve": "CVE-2026-46321", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "f4feb1e20058e407cb00f45aff47f5b7e19a6bbf", "subject": "tun: free page on short-frame rejection in tun_xdp_one()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46321", "commit_url": "https://git.kernel.org/stable/c/f4feb1e20058e407cb00f45aff47f5b7e19a6bbf" }, { "cve": "CVE-2026-46322", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "aa8963fdce667a42fb7f0bdd2909fadcab02f9a8", "subject": "tun: free page on build_skb failure in tun_xdp_one()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46322", "commit_url": "https://git.kernel.org/stable/c/aa8963fdce667a42fb7f0bdd2909fadcab02f9a8" }, { "cve": "CVE-2026-46323", "author_name": "Sabrina Dubroca", "author_email": "sd@queasysnail.net", "fix_sha": "4db79a322db8c97f7b73b8a347395ef4d685eb40", "subject": "net: gro: don't merge zcopy skbs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46323", "commit_url": "https://git.kernel.org/stable/c/4db79a322db8c97f7b73b8a347395ef4d685eb40" }, { "cve": "CVE-2026-46324", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "f3224ee463f8f6f6ced7dcdf6081add4f8128527", "subject": "netfilter: nf_tables: use list_del_rcu for netlink hooks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46324", "commit_url": "https://git.kernel.org/stable/c/f3224ee463f8f6f6ced7dcdf6081add4f8128527" }, { "cve": "CVE-2026-46325", "author_name": "Li Zhijian", "author_email": "lizhijian@fujitsu.com", "fix_sha": "12985e5915a0b8354796efadaaeb201eed115377", "subject": "RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46325", "commit_url": "https://git.kernel.org/stable/c/12985e5915a0b8354796efadaaeb201eed115377" }, { "cve": "CVE-2026-46326", "author_name": "Petre Rodan", "author_email": "petre.rodan@subdimension.ro", "fix_sha": "1e0ac56c92e26115cbc8cfc639843725cb3a7d6a", "subject": "iio: pressure: mprls0025pa: fix spi_transfer struct initialisation", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46326", "commit_url": "https://git.kernel.org/stable/c/1e0ac56c92e26115cbc8cfc639843725cb3a7d6a" }, { "cve": "CVE-2026-46327", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "24c405fdbe215c45e57bba672cc42859038491ee", "subject": "dm: fix unlocked test for dm_suspended_md", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46327", "commit_url": "https://git.kernel.org/stable/c/24c405fdbe215c45e57bba672cc42859038491ee" }, { "cve": "CVE-2026-46328", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "6ca56813f4a589f536adceb42882855d91fb1125", "subject": "apparmor: fix rlimit for posix cpu timers", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46328", "commit_url": "https://git.kernel.org/stable/c/6ca56813f4a589f536adceb42882855d91fb1125" }, { "cve": "CVE-2026-46329", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc", "subject": "erofs: handle end of filesystem properly for file-backed mounts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46329", "commit_url": "https://git.kernel.org/stable/c/bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc" }, { "cve": "CVE-2026-46330", "author_name": "D. Wythe", "author_email": "alibuda@linux.alibaba.com", "fix_sha": "df31a6b0a3057e66994ad6ccf5d95b9b9514f033", "subject": "Revert \"net/smc: Introduce TCP ULP support\"", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46330", "commit_url": "https://git.kernel.org/stable/c/df31a6b0a3057e66994ad6ccf5d95b9b9514f033" }, { "cve": "CVE-2026-46331", "author_name": "Rajat Gupta", "author_email": "rajat.gupta@oss.qualcomm.com", "fix_sha": "899ee91156e57784090c5565e4f31bd7dbffbc5a", "subject": "net/sched: fix pedit partial COW leading to page cache corruption", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331", "commit_url": "https://git.kernel.org/stable/c/899ee91156e57784090c5565e4f31bd7dbffbc5a" }, { "cve": "CVE-2026-46332", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "1214bf28965ceaf584fb20d357731264dd2e10e1", "subject": "greybus: gb-beagleplay: bound bootloader receive buffering", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46332", "commit_url": "https://git.kernel.org/stable/c/1214bf28965ceaf584fb20d357731264dd2e10e1" }, { "cve": "CVE-2026-46333", "author_name": "Linus Torvalds", "author_email": "torvalds@linux-foundation.org", "fix_sha": "31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a", "subject": "ptrace: slightly saner 'get_dumpable()' logic", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333", "commit_url": "https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a" }, { "cve": "CVE-2026-52904", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "6597ff1d8de3f583be169587efeafd8af134e138", "subject": "drm/nouveau: fix nvkm_device leak on aperture removal failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52904", "commit_url": "https://git.kernel.org/stable/c/6597ff1d8de3f583be169587efeafd8af134e138" }, { "cve": "CVE-2026-52905", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "95093e5cb4c5b50a5b1a4b79f2942b62744bd66a", "subject": "mm/damon/core: disallow non-power of two min_region_sz on damon_start()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52905", "commit_url": "https://git.kernel.org/stable/c/95093e5cb4c5b50a5b1a4b79f2942b62744bd66a" }, { "cve": "CVE-2026-52906", "author_name": "Pierre Barre", "author_email": "pierre@barre.sh", "fix_sha": "da2346a48a5a1fed86c3fe3d73c0b60e7b3027c9", "subject": "9p: fix access mode flags being ORed instead of replaced", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52906", "commit_url": "https://git.kernel.org/stable/c/da2346a48a5a1fed86c3fe3d73c0b60e7b3027c9" }, { "cve": "CVE-2026-52907", "author_name": "Dan Carpenter", "author_email": "dan.carpenter@linaro.org", "fix_sha": "e4056b84af0fc18c84b4e5741df04ecd8ca17973", "subject": "media: rockchip: rkcif: fix off by one bugs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52907", "commit_url": "https://git.kernel.org/stable/c/e4056b84af0fc18c84b4e5741df04ecd8ca17973" }, { "cve": "CVE-2026-52908", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "badad6fad60def1b9805559dd81dbab3d97b82aa", "subject": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52908", "commit_url": "https://git.kernel.org/stable/c/badad6fad60def1b9805559dd81dbab3d97b82aa" }, { "cve": "CVE-2026-52909", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "d289d5307762d1838aaece22c6b6fcad9e8865f9", "subject": "ip6_vti: set netns_immutable on the fallback device.", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52909", "commit_url": "https://git.kernel.org/stable/c/d289d5307762d1838aaece22c6b6fcad9e8865f9" }, { "cve": "CVE-2026-52910", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "18fc650ccd7fe3376eca89203668cfb8268f60df", "subject": "bpf: Free reuseport cBPF prog after RCU grace period.", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52910", "commit_url": "https://git.kernel.org/stable/c/18fc650ccd7fe3376eca89203668cfb8268f60df" }, { "cve": "CVE-2026-52911", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "b0da97c034b6107d14e537e212d4ce8b22109a58", "subject": "ksmbd: scope conn->binding slowpath to bound sessions only", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52911", "commit_url": "https://git.kernel.org/stable/c/b0da97c034b6107d14e537e212d4ce8b22109a58" }, { "cve": "CVE-2026-52912", "author_name": "Haoze Xie", "author_email": "royenheart@gmail.com", "fix_sha": "e196115ec330a18de415bdb9f5071aa9f08e53ce", "subject": "netfilter: nf_queue: hold bridge skb->dev while queued", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52912", "commit_url": "https://git.kernel.org/stable/c/e196115ec330a18de415bdb9f5071aa9f08e53ce" }, { "cve": "CVE-2026-52913", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "f8ce8b8331a1bc44ad4905886a482214d428b253", "subject": "batman-adv: v: stop OGMv2 on disabled interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52913", "commit_url": "https://git.kernel.org/stable/c/f8ce8b8331a1bc44ad4905886a482214d428b253" }, { "cve": "CVE-2026-52914", "author_name": "Ruide Cao", "author_email": "caoruide123@gmail.com", "fix_sha": "9cd3f16c320bfdadd4509358122368deb56a5741", "subject": "batman-adv: fix fragment reassembly length accounting", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52914", "commit_url": "https://git.kernel.org/stable/c/9cd3f16c320bfdadd4509358122368deb56a5741" }, { "cve": "CVE-2026-52915", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "4322dcde6b4173c2d8e8e6118ed290794263bcc8", "subject": "netfilter: ip6t_hbh: reject oversized option lists", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52915", "commit_url": "https://git.kernel.org/stable/c/4322dcde6b4173c2d8e8e6118ed290794263bcc8" }, { "cve": "CVE-2026-52916", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "bc62216dc8e221e3781afa14430f45208bfa9af9", "subject": "batman-adv: frag: disallow unicast fragment in fragment", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52916", "commit_url": "https://git.kernel.org/stable/c/bc62216dc8e221e3781afa14430f45208bfa9af9" }, { "cve": "CVE-2026-52917", "author_name": "Zhao Zhang", "author_email": "zzhan461@ucr.edu", "fix_sha": "5eba3e48d78edd7551b992cb7ba687019b3a78da", "subject": "sctp: diag: reject stale associations in dump_one path", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52917", "commit_url": "https://git.kernel.org/stable/c/5eba3e48d78edd7551b992cb7ba687019b3a78da" }, { "cve": "CVE-2026-52918", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "e83f5e24da741fa9405aeeff00b08c5ee7c37b88", "subject": "Bluetooth: serialize accept_q access", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52918", "commit_url": "https://git.kernel.org/stable/c/e83f5e24da741fa9405aeeff00b08c5ee7c37b88" }, { "cve": "CVE-2026-52919", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "94f3b133168d1c49895e7cc6afbcf1cc0b354602", "subject": "batman-adv: fix tp_meter counter underflow during shutdown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52919", "commit_url": "https://git.kernel.org/stable/c/94f3b133168d1c49895e7cc6afbcf1cc0b354602" }, { "cve": "CVE-2026-52920", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "4b2b4d7d4e203c92db8966b163edfacb1f0e1e29", "subject": "netfilter: xt_policy: fix strict mode inbound policy matching", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52920", "commit_url": "https://git.kernel.org/stable/c/4b2b4d7d4e203c92db8966b163edfacb1f0e1e29" }, { "cve": "CVE-2026-52921", "author_name": "Nan Li", "author_email": "tonanli66@gmail.com", "fix_sha": "0d3a282ab5f165fc207ff49ea5b6ad8f54616bd6", "subject": "netfilter: ipset: stop hash:* range iteration at end", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52921", "commit_url": "https://git.kernel.org/stable/c/0d3a282ab5f165fc207ff49ea5b6ad8f54616bd6" }, { "cve": "CVE-2026-52922", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "2d8826a2d3657cea66fb0370f9e521575a673871", "subject": "batman-adv: dat: handle forward allocation error", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52922", "commit_url": "https://git.kernel.org/stable/c/2d8826a2d3657cea66fb0370f9e521575a673871" }, { "cve": "CVE-2026-52923", "author_name": "Linpu Yu", "author_email": "linpu5433@gmail.com", "fix_sha": "fa0b9b2b7ae3539908d69c2b9ac0d144d9bc5139", "subject": "ipc: limit next_id allocation to the valid ID range", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52923", "commit_url": "https://git.kernel.org/stable/c/fa0b9b2b7ae3539908d69c2b9ac0d144d9bc5139" }, { "cve": "CVE-2026-52924", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "e374b22e9b07b72a25909621464ff74096151bfb", "subject": "sctp: purge outqueue on stale COOKIE-ECHO handling", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52924", "commit_url": "https://git.kernel.org/stable/c/e374b22e9b07b72a25909621464ff74096151bfb" }, { "cve": "CVE-2026-52925", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "2674d603a9e6970463b2b9ebcf8e31e90beae169", "subject": "vrf: Fix a potential NPD when removing a port from a VRF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52925", "commit_url": "https://git.kernel.org/stable/c/2674d603a9e6970463b2b9ebcf8e31e90beae169" }, { "cve": "CVE-2026-52926", "author_name": "Ruijie Li", "author_email": "ruijieli51@gmail.com", "fix_sha": "a340a51ed801eab7bb454150c226323b865263cc", "subject": "batman-adv: clear current gateway during teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52926", "commit_url": "https://git.kernel.org/stable/c/a340a51ed801eab7bb454150c226323b865263cc" }, { "cve": "CVE-2026-52927", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "f438d1786d657d57790c5d138d6db3fc9fdac392", "subject": "netfilter: ebtables: fix OOB read in compat_mtw_from_user", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52927", "commit_url": "https://git.kernel.org/stable/c/f438d1786d657d57790c5d138d6db3fc9fdac392" }, { "cve": "CVE-2026-52928", "author_name": "Jiexun Wang", "author_email": "wangjiexun2025@gmail.com", "fix_sha": "d119775f2bad827edc28071c061fdd4a91f889a5", "subject": "af_unix: Reject SIOCATMARK on non-stream sockets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52928", "commit_url": "https://git.kernel.org/stable/c/d119775f2bad827edc28071c061fdd4a91f889a5" }, { "cve": "CVE-2026-52929", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "a5f8a90ac9f77c678a9781c0a464b635e0d63e49", "subject": "sctp: stream: fully roll back denied add-stream state", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52929", "commit_url": "https://git.kernel.org/stable/c/a5f8a90ac9f77c678a9781c0a464b635e0d63e49" }, { "cve": "CVE-2026-52930", "author_name": "Yilin Zhu", "author_email": "zylzyl2333@gmail.com", "fix_sha": "2e5c6f4fd4001562781e99bbfc7f1f0127187542", "subject": "ipc/shm: serialize orphan cleanup with shm_nattch updates", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52930", "commit_url": "https://git.kernel.org/stable/c/2e5c6f4fd4001562781e99bbfc7f1f0127187542" }, { "cve": "CVE-2026-52931", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "6c65cf23d4c6170fcf5714c32aa64689718cb142", "subject": "batman-adv: tp_meter: avoid use of uninit sender vars", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52931", "commit_url": "https://git.kernel.org/stable/c/6c65cf23d4c6170fcf5714c32aa64689718cb142" }, { "cve": "CVE-2026-52932", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "7dbac7680eb629b3b4dc7e98c34f943b8814c0c8", "subject": "xfrm: ipcomp: Free destination pages on acomp errors", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52932", "commit_url": "https://git.kernel.org/stable/c/7dbac7680eb629b3b4dc7e98c34f943b8814c0c8" }, { "cve": "CVE-2026-52933", "author_name": "Longxuan Yu", "author_email": "ylong030@ucr.edu", "fix_sha": "326941b22806cbf2df1fbfe902b7908b368cce42", "subject": "io_uring/poll: fix signed comparison in io_poll_get_ownership()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52933", "commit_url": "https://git.kernel.org/stable/c/326941b22806cbf2df1fbfe902b7908b368cce42" }, { "cve": "CVE-2026-52934", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "f50487e3566358b2b982b7801945e858c78ad9ab", "subject": "batman-adv: tvlv: reject oversized TVLV packets", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52934", "commit_url": "https://git.kernel.org/stable/c/f50487e3566358b2b982b7801945e858c78ad9ab" }, { "cve": "CVE-2026-52935", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "c381039ade2e161ab08c0eda73c4f8b9a7115928", "subject": "xfrm: espintcp: do not reuse an in-progress partial send", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52935", "commit_url": "https://git.kernel.org/stable/c/c381039ade2e161ab08c0eda73c4f8b9a7115928" }, { "cve": "CVE-2026-52936", "author_name": "Haixin Xu", "author_email": "jerryxucs@gmail.com", "fix_sha": "01d798e9feb30212952d4e992801ba6bd6a82351", "subject": "crypto: jitterentropy - replace long-held spinlock with mutex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52936", "commit_url": "https://git.kernel.org/stable/c/01d798e9feb30212952d4e992801ba6bd6a82351" }, { "cve": "CVE-2026-52937", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "bddc09212c24934643bd44fc794748d2bbb3b6cd", "subject": "tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52937", "commit_url": "https://git.kernel.org/stable/c/bddc09212c24934643bd44fc794748d2bbb3b6cd" }, { "cve": "CVE-2026-52938", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "375e4e33c18dfa05c5dfd5f3dfffeb29343dd4c7", "subject": "bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52938", "commit_url": "https://git.kernel.org/stable/c/375e4e33c18dfa05c5dfd5f3dfffeb29343dd4c7" }, { "cve": "CVE-2026-52939", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "34080db3e70ddf94c38512ad2331e3c3afca6cc1", "subject": "net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52939", "commit_url": "https://git.kernel.org/stable/c/34080db3e70ddf94c38512ad2331e3c3afca6cc1" }, { "cve": "CVE-2026-52940", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "7f2fcff15e99bb852f6967396ed12b38376e2c8d", "subject": "tun: zero the whole vnet header in tun_put_user()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52940", "commit_url": "https://git.kernel.org/stable/c/7f2fcff15e99bb852f6967396ed12b38376e2c8d" }, { "cve": "CVE-2026-52941", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "7bf563badd37cb796df5477d2b78bb64148a1268", "subject": "net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52941", "commit_url": "https://git.kernel.org/stable/c/7bf563badd37cb796df5477d2b78bb64148a1268" }, { "cve": "CVE-2026-52942", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "a84b6fedbc97078788be78dbdd7517d143ad1a77", "subject": "netfilter: nf_log: validate MAC header was set before dumping it", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52942", "commit_url": "https://git.kernel.org/stable/c/a84b6fedbc97078788be78dbdd7517d143ad1a77" }, { "cve": "CVE-2026-52943", "author_name": "Minh Nguyen", "author_email": "minhnguyen.080505@gmail.com", "fix_sha": "98d0912e9f841e5529a5b89a972805f34cb1c69d", "subject": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52943", "commit_url": "https://git.kernel.org/stable/c/98d0912e9f841e5529a5b89a972805f34cb1c69d" }, { "cve": "CVE-2026-52944", "author_name": "Sean Shen", "author_email": "grayhat@foxmail.com", "fix_sha": "cc57232cae23c0df91b4a59d0f519141ce9b5b02", "subject": "ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52944", "commit_url": "https://git.kernel.org/stable/c/cc57232cae23c0df91b4a59d0f519141ce9b5b02" }, { "cve": "CVE-2026-52945", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "e94b369ff82f9bc84f090f271bd78f41c9f6ab2f", "subject": "Revert \"wireguard: device: enable threaded NAPI\"", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52945", "commit_url": "https://git.kernel.org/stable/c/e94b369ff82f9bc84f090f271bd78f41c9f6ab2f" }, { "cve": "CVE-2026-52946", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "00633c4683828acd5256fa8d5163f440d74bbe71", "subject": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52946", "commit_url": "https://git.kernel.org/stable/c/00633c4683828acd5256fa8d5163f440d74bbe71" }, { "cve": "CVE-2026-52947", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "a2171131ecda1ed61a594a1eb715e75fdad0fef5", "subject": "net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52947", "commit_url": "https://git.kernel.org/stable/c/a2171131ecda1ed61a594a1eb715e75fdad0fef5" }, { "cve": "CVE-2026-52948", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "617eb7c0961a8dfcfc811844a6396e406b2923ea", "subject": "i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52948", "commit_url": "https://git.kernel.org/stable/c/617eb7c0961a8dfcfc811844a6396e406b2923ea" }, { "cve": "CVE-2026-52949", "author_name": "Thomas Hellstr\u00f6m", "author_email": "thomas.hellstrom@linux.intel.com", "fix_sha": "1d59f36e95f7f7134db0e313c9d787cb0adb2153", "subject": "drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52949", "commit_url": "https://git.kernel.org/stable/c/1d59f36e95f7f7134db0e313c9d787cb0adb2153" }, { "cve": "CVE-2026-52950", "author_name": "Matthew Auld", "author_email": "matthew.auld@intel.com", "fix_sha": "155a372a1cc50fa93387c5d3cdfd614a61e1afd1", "subject": "drm/xe/dma-buf: fix UAF with retry loop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52950", "commit_url": "https://git.kernel.org/stable/c/155a372a1cc50fa93387c5d3cdfd614a61e1afd1" }, { "cve": "CVE-2026-52951", "author_name": "Matthew Auld", "author_email": "matthew.auld@intel.com", "fix_sha": "981bedbbe61364fcc3a3b87ebaf648a66cd07108", "subject": "drm/xe/dma-buf: handle empty bo and UAF races", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52951", "commit_url": "https://git.kernel.org/stable/c/981bedbbe61364fcc3a3b87ebaf648a66cd07108" }, { "cve": "CVE-2026-52952", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "5474e6e17a262db45c60575c73f70210f5c7001f", "subject": "iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52952", "commit_url": "https://git.kernel.org/stable/c/5474e6e17a262db45c60575c73f70210f5c7001f" }, { "cve": "CVE-2026-52953", "author_name": "Zhenzhong Duan", "author_email": "zhenzhong.duan@intel.com", "fix_sha": "a6dea58d8625c06b9654c0555f101742481335c3", "subject": "iommu/vt-d: Fix oops due to out of scope access", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52953", "commit_url": "https://git.kernel.org/stable/c/a6dea58d8625c06b9654c0555f101742481335c3" }, { "cve": "CVE-2026-52954", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "d289478cfc0bcf81c7914200d6abdcb78bd04ded", "subject": "libceph: handle rbtree insertion error in decode_choose_args()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52954", "commit_url": "https://git.kernel.org/stable/c/d289478cfc0bcf81c7914200d6abdcb78bd04ded" }, { "cve": "CVE-2026-52955", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "4c79fc2d598694bda845b46229c9d48b65042970", "subject": "libceph: Fix potential out-of-bounds access in crush_decode()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52955", "commit_url": "https://git.kernel.org/stable/c/4c79fc2d598694bda845b46229c9d48b65042970" }, { "cve": "CVE-2026-52956", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "821365487aa58d06bda65c676ba215d506ba9768", "subject": "libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52956", "commit_url": "https://git.kernel.org/stable/c/821365487aa58d06bda65c676ba215d506ba9768" }, { "cve": "CVE-2026-52957", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "28b0a2ab8c82d0bbdeb8013029c67c978ce6e4bf", "subject": "libceph: Fix potential null-ptr-deref in decode_choose_args()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52957", "commit_url": "https://git.kernel.org/stable/c/28b0a2ab8c82d0bbdeb8013029c67c978ce6e4bf" }, { "cve": "CVE-2026-52958", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "35d0ed82d03e5ee77ea4f31f20e29562a7721649", "subject": "libceph: Fix potential out-of-bounds access in osdmap_decode()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52958", "commit_url": "https://git.kernel.org/stable/c/35d0ed82d03e5ee77ea4f31f20e29562a7721649" }, { "cve": "CVE-2026-52959", "author_name": "Carlos L\u00f3pez", "author_email": "clopez@suse.de", "fix_sha": "23e6a1ca04ae44806439a5a446e62e4d42e80bb4", "subject": "virt: sev-guest: Do not use host-controlled page order in cleanup path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52959", "commit_url": "https://git.kernel.org/stable/c/23e6a1ca04ae44806439a5a446e62e4d42e80bb4" }, { "cve": "CVE-2026-52960", "author_name": "Hristo Venev", "author_email": "hristo@venev.name", "fix_sha": "544576f0f05c4a759806acddfaaeb686f14fb4b0", "subject": "ceph: put folios not suitable for writeback", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52960", "commit_url": "https://git.kernel.org/stable/c/544576f0f05c4a759806acddfaaeb686f14fb4b0" }, { "cve": "CVE-2026-52961", "author_name": "Viacheslav Dubeyko", "author_email": "slava.dubeyko@ibm.com", "fix_sha": "0c22d9511cbde746622f8e4c11aaa63fe76d45f9", "subject": "ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52961", "commit_url": "https://git.kernel.org/stable/c/0c22d9511cbde746622f8e4c11aaa63fe76d45f9" }, { "cve": "CVE-2026-52962", "author_name": "Viacheslav Dubeyko", "author_email": "slava.dubeyko@ibm.com", "fix_sha": "5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e", "subject": "ceph: fix a buffer leak in __ceph_setxattr()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52962", "commit_url": "https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e" }, { "cve": "CVE-2026-52963", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "d6854daa67be623860f4e1873fd3d3c275aba4ed", "subject": "ALSA: usb-audio: Bound MIDI endpoint descriptor scans", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52963", "commit_url": "https://git.kernel.org/stable/c/d6854daa67be623860f4e1873fd3d3c275aba4ed" }, { "cve": "CVE-2026-52964", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "918be519c7876329e1b6e2ea1c59f0b75e792dca", "subject": "ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52964", "commit_url": "https://git.kernel.org/stable/c/918be519c7876329e1b6e2ea1c59f0b75e792dca" }, { "cve": "CVE-2026-52965", "author_name": "Thomas Hellstr\u00f6m", "author_email": "thomas.hellstrom@linux.intel.com", "fix_sha": "b2ed01e7ad3de80333e9b962a44024b094bc0b2b", "subject": "drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52965", "commit_url": "https://git.kernel.org/stable/c/b2ed01e7ad3de80333e9b962a44024b094bc0b2b" }, { "cve": "CVE-2026-52966", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "dc366607c41c45fd0ae6f3db090f31dd611b644a", "subject": "drm: Replace old pointer to new idr", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52966", "commit_url": "https://git.kernel.org/stable/c/dc366607c41c45fd0ae6f3db090f31dd611b644a" }, { "cve": "CVE-2026-52967", "author_name": "Ye Bin", "author_email": "yebin10@huawei.com", "fix_sha": "7d9a7f1f96cd617ee9e75bb22217c709038e26b8", "subject": "smb/client: fix possible infinite loop and oob read in symlink_data()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52967", "commit_url": "https://git.kernel.org/stable/c/7d9a7f1f96cd617ee9e75bb22217c709038e26b8" }, { "cve": "CVE-2026-52968", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "16d990a15491cf76cd6eef0846e1b4100e63261a", "subject": "KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52968", "commit_url": "https://git.kernel.org/stable/c/16d990a15491cf76cd6eef0846e1b4100e63261a" }, { "cve": "CVE-2026-52969", "author_name": "Aaron Sacks", "author_email": "contact@xchglabs.com", "fix_sha": "577a8d3bae0531f0e5ccfac919cd8192f920a804", "subject": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52969", "commit_url": "https://git.kernel.org/stable/c/577a8d3bae0531f0e5ccfac919cd8192f920a804" }, { "cve": "CVE-2026-52970", "author_name": "Li Xiasong", "author_email": "lixiasong1@huawei.com", "fix_sha": "19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4", "subject": "netfilter: nft_ct: fix missing expect put in obj eval", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52970", "commit_url": "https://git.kernel.org/stable/c/19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4" }, { "cve": "CVE-2026-52971", "author_name": "Arthur Kiyanovski", "author_email": "akiyano@amazon.com", "fix_sha": "e42c755582f0960e684298762f0ab927b3778376", "subject": "net: ena: PHC: Fix potential use-after-free in get_timestamp", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52971", "commit_url": "https://git.kernel.org/stable/c/e42c755582f0960e684298762f0ab927b3778376" }, { "cve": "CVE-2026-52972", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "e4c06479d7059888adf2f22bc1ebcf053bf691a2", "subject": "crypto: af_alg - Cap AEAD AD length to 0x80000000", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52972", "commit_url": "https://git.kernel.org/stable/c/e4c06479d7059888adf2f22bc1ebcf053bf691a2" }, { "cve": "CVE-2026-52973", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "ee9dce44362b2d8132c32964656ab6dff7dfbc6a", "subject": "futex: Drop CLONE_THREAD requirement for private default hash alloc", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52973", "commit_url": "https://git.kernel.org/stable/c/ee9dce44362b2d8132c32964656ab6dff7dfbc6a" }, { "cve": "CVE-2026-52974", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "58689498ca3384851145a754dbb1d8ed1cf9fb54", "subject": "net: tls: fix strparser anchor skb leak on offload RX setup failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52974", "commit_url": "https://git.kernel.org/stable/c/58689498ca3384851145a754dbb1d8ed1cf9fb54" }, { "cve": "CVE-2026-52975", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "c4f050ce06c56cfb5993268af4a5cb66ed1cd04e", "subject": "bonding: 3ad: implement proper RCU rules for port->aggregator", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52975", "commit_url": "https://git.kernel.org/stable/c/c4f050ce06c56cfb5993268af4a5cb66ed1cd04e" }, { "cve": "CVE-2026-52976", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "f3cc22d4df3ed58439ea7e21daa54c3608e03b78", "subject": "drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52976", "commit_url": "https://git.kernel.org/stable/c/f3cc22d4df3ed58439ea7e21daa54c3608e03b78" }, { "cve": "CVE-2026-52977", "author_name": "Sebastian Andrzej Siewior", "author_email": "bigeasy@linutronix.de", "fix_sha": "bc7304f3ae20972d11db6e0b1b541c63feda5f05", "subject": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52977", "commit_url": "https://git.kernel.org/stable/c/bc7304f3ae20972d11db6e0b1b541c63feda5f05" }, { "cve": "CVE-2026-52978", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "b718342a7fbaa2dff5fefc31988c07af8c6cbc21", "subject": "net: psp: require admin permission for dev-set and key-rotate", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52978", "commit_url": "https://git.kernel.org/stable/c/b718342a7fbaa2dff5fefc31988c07af8c6cbc21" }, { "cve": "CVE-2026-52979", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "b89769f936a8fa9e66de72ddc1b71a9745a488e6", "subject": "net: psp: check for device unregister when creating assoc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52979", "commit_url": "https://git.kernel.org/stable/c/b89769f936a8fa9e66de72ddc1b71a9745a488e6" }, { "cve": "CVE-2026-52980", "author_name": "Zicheng Qu", "author_email": "quzicheng@huawei.com", "fix_sha": "3da56dc063cd77b9c0b40add930767fab4e389f3", "subject": "sched/fair: Clear rel_deadline when initializing forked entities", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52980", "commit_url": "https://git.kernel.org/stable/c/3da56dc063cd77b9c0b40add930767fab4e389f3" }, { "cve": "CVE-2026-52981", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "4438113be604ee67a7bf4f81da6e1cca41332ce4", "subject": "neigh: let neigh_xmit take skb ownership", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52981", "commit_url": "https://git.kernel.org/stable/c/4438113be604ee67a7bf4f81da6e1cca41332ce4" }, { "cve": "CVE-2026-52982", "author_name": "Zhan Jun", "author_email": "zhanjun@uniontech.com", "fix_sha": "23f0e34c64acba15cad4d23e50f41f533da195fa", "subject": "net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52982", "commit_url": "https://git.kernel.org/stable/c/23f0e34c64acba15cad4d23e50f41f533da195fa" }, { "cve": "CVE-2026-52983", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "2d9f5a118205da2683ffcec78b9347f1f01a820e", "subject": "net: airoha: fix BQL imbalance in TX path", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52983", "commit_url": "https://git.kernel.org/stable/c/2d9f5a118205da2683ffcec78b9347f1f01a820e" }, { "cve": "CVE-2026-52984", "author_name": "Stephen Hemminger", "author_email": "stephen@networkplumber.org", "fix_sha": "4185701fcce6b426b6c3630b25330dddd9c47b0d", "subject": "net/sched: netem: fix queue limit check to include reordered packets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52984", "commit_url": "https://git.kernel.org/stable/c/4185701fcce6b426b6c3630b25330dddd9c47b0d" }, { "cve": "CVE-2026-52985", "author_name": "Nikola Z. Ivanov", "author_email": "zlatistiv@gmail.com", "fix_sha": "35eaa6d8d6c2ee65e96f507add856e0eacf24591", "subject": "netdevsim: zero initialize struct iphdr in dummy sk_buff", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52985", "commit_url": "https://git.kernel.org/stable/c/35eaa6d8d6c2ee65e96f507add856e0eacf24591" }, { "cve": "CVE-2026-52986", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "8cf6809cddcbe301aedfc6b51bcd4944d45795f6", "subject": "netfilter: nf_conntrack_sip: don't use simple_strtoul", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52986", "commit_url": "https://git.kernel.org/stable/c/8cf6809cddcbe301aedfc6b51bcd4944d45795f6" }, { "cve": "CVE-2026-52987", "author_name": "Hongyan Xu", "author_email": "getshell@seu.edu.cn", "fix_sha": "508babf310365f1107a2e8831c267c292a286818", "subject": "drm/amdgpu: avoid double drm_exec_fini() in userq validate", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52987", "commit_url": "https://git.kernel.org/stable/c/508babf310365f1107a2e8831c267c292a286818" }, { "cve": "CVE-2026-52988", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "a6134e62dba2ea4f760b29d5226907f447c92400", "subject": "netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52988", "commit_url": "https://git.kernel.org/stable/c/a6134e62dba2ea4f760b29d5226907f447c92400" }, { "cve": "CVE-2026-52989", "author_name": "Maurizio Lombardi", "author_email": "mlombard@redhat.com", "fix_sha": "ea8e356acb165cb1fd75537a52e1f66e5e76c538", "subject": "nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52989", "commit_url": "https://git.kernel.org/stable/c/ea8e356acb165cb1fd75537a52e1f66e5e76c538" }, { "cve": "CVE-2026-52990", "author_name": "Amir Goldstein", "author_email": "amir73il@gmail.com", "fix_sha": "4aca914ac152f5d055ddcb36704d1e539ac08977", "subject": "fsnotify: fix inode reference leak in fsnotify_recalc_mask()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52990", "commit_url": "https://git.kernel.org/stable/c/4aca914ac152f5d055ddcb36704d1e539ac08977" }, { "cve": "CVE-2026-52991", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "a5b98009f16d8a5fb4a8ff9a193f5735515c38fa", "subject": "sched/psi: fix race between file release and pressure write", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52991", "commit_url": "https://git.kernel.org/stable/c/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa" }, { "cve": "CVE-2026-52992", "author_name": "Bae Yeonju", "author_email": "iwasbaeyz@gmail.com", "fix_sha": "dd9d3e16c2d5fa166e13dce07413be51f42c8f5d", "subject": "fs/adfs: validate nzones in adfs_validate_bblk()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52992", "commit_url": "https://git.kernel.org/stable/c/dd9d3e16c2d5fa166e13dce07413be51f42c8f5d" }, { "cve": "CVE-2026-52993", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "d293ca716e7d5dffdaecaf6b9b2f857a33dc3d3a", "subject": "tipc: fix double-free in tipc_buf_append()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52993", "commit_url": "https://git.kernel.org/stable/c/d293ca716e7d5dffdaecaf6b9b2f857a33dc3d3a" }, { "cve": "CVE-2026-52994", "author_name": "Stefano Garzarella", "author_email": "sgarzare@redhat.com", "fix_sha": "1cb36e252211506f51095fe7ced8286cc77b4c80", "subject": "vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52994", "commit_url": "https://git.kernel.org/stable/c/1cb36e252211506f51095fe7ced8286cc77b4c80" }, { "cve": "CVE-2026-52995", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "c88eb7e8d8397a8c1db59c425332c5a30b2a1682", "subject": "net/rds: zero per-item info buffer before handing it to visitors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52995", "commit_url": "https://git.kernel.org/stable/c/c88eb7e8d8397a8c1db59c425332c5a30b2a1682" }, { "cve": "CVE-2026-52996", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "804054d19886ac6628883d82410f6ee42a818664", "subject": "ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52996", "commit_url": "https://git.kernel.org/stable/c/804054d19886ac6628883d82410f6ee42a818664" }, { "cve": "CVE-2026-52997", "author_name": "Chia-Yu Chang", "author_email": "chia-yu.chang@nokia-bell-labs.com", "fix_sha": "478ed6b7d2577439c610f91fa8759a4c878a4264", "subject": "net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52997", "commit_url": "https://git.kernel.org/stable/c/478ed6b7d2577439c610f91fa8759a4c878a4264" }, { "cve": "CVE-2026-52998", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "711987ba281fd806322a7cd244e98e2a81903114", "subject": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52998", "commit_url": "https://git.kernel.org/stable/c/711987ba281fd806322a7cd244e98e2a81903114" }, { "cve": "CVE-2026-52999", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "f5ca450087c3baf3651055e7a6de92600f827af3", "subject": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52999", "commit_url": "https://git.kernel.org/stable/c/f5ca450087c3baf3651055e7a6de92600f827af3" }, { "cve": "CVE-2026-53000", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "6eda0d771f94267f73f57c94630aa47e90957915", "subject": "netfilter: nat: use kfree_rcu to release ops", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53000", "commit_url": "https://git.kernel.org/stable/c/6eda0d771f94267f73f57c94630aa47e90957915" }, { "cve": "CVE-2026-53001", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "b6fe26f86a1649f84e057f3f15605b08eda15497", "subject": "netfilter: xtables: restrict several matches to inet family", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53001", "commit_url": "https://git.kernel.org/stable/c/b6fe26f86a1649f84e057f3f15605b08eda15497" }, { "cve": "CVE-2026-53002", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "6e7066bdb481a87fe88c4fa563e348c03b2d373d", "subject": "netfilter: conntrack: remove sprintf usage", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53002", "commit_url": "https://git.kernel.org/stable/c/6e7066bdb481a87fe88c4fa563e348c03b2d373d" }, { "cve": "CVE-2026-53003", "author_name": "Qingfang Deng", "author_email": "qingfang.deng@linux.dev", "fix_sha": "cc1ff87bce1ccd38410ab10960f576dcd17db679", "subject": "pppoe: drop PFC frames", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53003", "commit_url": "https://git.kernel.org/stable/c/cc1ff87bce1ccd38410ab10960f576dcd17db679" }, { "cve": "CVE-2026-53004", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "0cf004ffb61cd32d140531c3a84afe975f9fc7ea", "subject": "sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53004", "commit_url": "https://git.kernel.org/stable/c/0cf004ffb61cd32d140531c3a84afe975f9fc7ea" }, { "cve": "CVE-2026-53005", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "965dc93481d1b80d341bdd16c27b16fe197175ee", "subject": "af_unix: Drop all SCM attributes for SOCKMAP.", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53005", "commit_url": "https://git.kernel.org/stable/c/965dc93481d1b80d341bdd16c27b16fe197175ee" }, { "cve": "CVE-2026-53006", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "f996edd7615e686ada141b7f3395025729ff8ccb", "subject": "ipv6: fix possible UAF in icmpv6_rcv()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53006", "commit_url": "https://git.kernel.org/stable/c/f996edd7615e686ada141b7f3395025729ff8ccb" }, { "cve": "CVE-2026-53007", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "fa28351f970fa5138c7c5dedfe5dea480a0ee065", "subject": "ice: fix potential NULL pointer deref in error path of ice_set_ringparam()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53007", "commit_url": "https://git.kernel.org/stable/c/fa28351f970fa5138c7c5dedfe5dea480a0ee065" }, { "cve": "CVE-2026-53008", "author_name": "Keita Morisaki", "author_email": "kmta1236@gmail.com", "fix_sha": "7c72ec18c2a4111204c2e915f8e4f6d849ce9398", "subject": "ice: fix race condition in TX timestamp ring cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53008", "commit_url": "https://git.kernel.org/stable/c/7c72ec18c2a4111204c2e915f8e4f6d849ce9398" }, { "cve": "CVE-2026-53009", "author_name": "Michal Schmidt", "author_email": "mschmidt@redhat.com", "fix_sha": "1a303baa715e6b78d6a406aaf335f87ff35acfcd", "subject": "ice: fix double-free of tx_buf skb", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53009", "commit_url": "https://git.kernel.org/stable/c/1a303baa715e6b78d6a406aaf335f87ff35acfcd" }, { "cve": "CVE-2026-53010", "author_name": "Akif", "author_email": "akif.sait111@gmail.com", "fix_sha": "1baff47b81f94f9231c91236aa511420d0e266b9", "subject": "ksmbd: fix use-after-free in smb2_open during durable reconnect", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53010", "commit_url": "https://git.kernel.org/stable/c/1baff47b81f94f9231c91236aa511420d0e266b9" }, { "cve": "CVE-2026-53011", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "105425b1969c5affe532713cfac1c0b320d7ac2b", "subject": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53011", "commit_url": "https://git.kernel.org/stable/c/105425b1969c5affe532713cfac1c0b320d7ac2b" }, { "cve": "CVE-2026-53012", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "29c95185ba32b621fbc3800fb86e7dc3edf5c2be", "subject": "nexthop: fix IPv6 route referencing IPv4 nexthop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53012", "commit_url": "https://git.kernel.org/stable/c/29c95185ba32b621fbc3800fb86e7dc3edf5c2be" }, { "cve": "CVE-2026-53013", "author_name": "Dudu Lu", "author_email": "phx0fer@gmail.com", "fix_sha": "fa92a77b0ed4d5f11a71665a232ac5a54a4b055d", "subject": "macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53013", "commit_url": "https://git.kernel.org/stable/c/fa92a77b0ed4d5f11a71665a232ac5a54a4b055d" }, { "cve": "CVE-2026-53014", "author_name": "Dudu Lu", "author_email": "phx0fer@gmail.com", "fix_sha": "4510d140524ca7d6e772db962e013f26f09a63b1", "subject": "net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53014", "commit_url": "https://git.kernel.org/stable/c/4510d140524ca7d6e772db962e013f26f09a63b1" }, { "cve": "CVE-2026-53015", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "2d8c7edcb661812249469f4a5b62e9339118846f", "subject": "erofs: unify lcn as u64 for 32-bit platforms", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53015", "commit_url": "https://git.kernel.org/stable/c/2d8c7edcb661812249469f4a5b62e9339118846f" }, { "cve": "CVE-2026-53016", "author_name": "Paul Moses", "author_email": "p@1g4.org", "fix_sha": "a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4", "subject": "crypto: ccp - copy IV using skcipher ivsize", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53016", "commit_url": "https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4" }, { "cve": "CVE-2026-53017", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "238e14eb7226f883b72caccd2d37bf5707df066b", "subject": "f2fs: fix data loss caused by incorrect use of nat_entry flag", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53017", "commit_url": "https://git.kernel.org/stable/c/238e14eb7226f883b72caccd2d37bf5707df066b" }, { "cve": "CVE-2026-53018", "author_name": "Jianan Huang", "author_email": "huangjianan@xiaomi.com", "fix_sha": "570e2ccc7cb35fe720106964e65060602d3d2ac4", "subject": "f2fs: avoid reading already updated pages during GC", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53018", "commit_url": "https://git.kernel.org/stable/c/570e2ccc7cb35fe720106964e65060602d3d2ac4" }, { "cve": "CVE-2026-53019", "author_name": "Shuwei Wu", "author_email": "shuwei.wu@mailbox.org", "fix_sha": "54e97360b44bed6b4399dd3be3d65f392df940fa", "subject": "clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53019", "commit_url": "https://git.kernel.org/stable/c/54e97360b44bed6b4399dd3be3d65f392df940fa" }, { "cve": "CVE-2026-53020", "author_name": "Tiwei Bie", "author_email": "tiwei.btw@antgroup.com", "fix_sha": "102331b66bcaf1f41f50b9c4cd5c36e46bafa9f3", "subject": "um: Fix potential race condition in TLB sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53020", "commit_url": "https://git.kernel.org/stable/c/102331b66bcaf1f41f50b9c4cd5c36e46bafa9f3" }, { "cve": "CVE-2026-53021", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "2bf2d65f76697820dbc4227d13866293576dd90a", "subject": "scsi: target: core: Fix integer overflow in UNMAP bounds check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53021", "commit_url": "https://git.kernel.org/stable/c/2bf2d65f76697820dbc4227d13866293576dd90a" }, { "cve": "CVE-2026-53022", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "3c34471c26abc52a37f5ad90949e2e4b8027eb14", "subject": "platform/x86: dell-wmi-sysman: bound enumeration string aggregation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53022", "commit_url": "https://git.kernel.org/stable/c/3c34471c26abc52a37f5ad90949e2e4b8027eb14" }, { "cve": "CVE-2026-53023", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "a6cd43fe9b083fa23fe1595666d5738856cb261a", "subject": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53023", "commit_url": "https://git.kernel.org/stable/c/a6cd43fe9b083fa23fe1595666d5738856cb261a" }, { "cve": "CVE-2026-53024", "author_name": "Damien Ri\u00e9gel", "author_email": "damien.riegel@silabs.com", "fix_sha": "84265cbd96b97058ef67e3f8be3933667a000835", "subject": "greybus: raw: fix use-after-free if write is called after disconnect", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53024", "commit_url": "https://git.kernel.org/stable/c/84265cbd96b97058ef67e3f8be3933667a000835" }, { "cve": "CVE-2026-53025", "author_name": "Damien Ri\u00e9gel", "author_email": "damien.riegel@silabs.com", "fix_sha": "983cc2c7efbce04ecbf6328448d895044dd6ab31", "subject": "greybus: raw: fix use-after-free on cdev close", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53025", "commit_url": "https://git.kernel.org/stable/c/983cc2c7efbce04ecbf6328448d895044dd6ab31" }, { "cve": "CVE-2026-53026", "author_name": "Dai Ngo", "author_email": "dai.ngo@oracle.com", "fix_sha": "b48f44f36e6607b2f818560f19deb86b4a9c717b", "subject": "NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53026", "commit_url": "https://git.kernel.org/stable/c/b48f44f36e6607b2f818560f19deb86b4a9c717b" }, { "cve": "CVE-2026-53027", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "d7ea8495fd307b58f8867acd81a1b40075b1d3ba", "subject": "fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53027", "commit_url": "https://git.kernel.org/stable/c/d7ea8495fd307b58f8867acd81a1b40075b1d3ba" }, { "cve": "CVE-2026-53028", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "f2529d08fcb429ea01bb87c326342f41483f8b2f", "subject": "usb: typec: Fix error pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53028", "commit_url": "https://git.kernel.org/stable/c/f2529d08fcb429ea01bb87c326342f41483f8b2f" }, { "cve": "CVE-2026-53029", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "e98266e823a1fa06fe6499df61aeaac2fd6f7a49", "subject": "fs/ntfs3: prevent uninitialized lcn caused by zero len", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53029", "commit_url": "https://git.kernel.org/stable/c/e98266e823a1fa06fe6499df61aeaac2fd6f7a49" }, { "cve": "CVE-2026-53030", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "d7665c3b4f575251e449e2656879392346ca612b", "subject": "i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53030", "commit_url": "https://git.kernel.org/stable/c/d7665c3b4f575251e449e2656879392346ca612b" }, { "cve": "CVE-2026-53031", "author_name": "Puranjay Mohan", "author_email": "puranjay@kernel.org", "fix_sha": "2845989f2ebaf7848e4eccf9a779daf3156ea0a5", "subject": "bpf: Validate node_id in arena_alloc_pages()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53031", "commit_url": "https://git.kernel.org/stable/c/2845989f2ebaf7848e4eccf9a779daf3156ea0a5" }, { "cve": "CVE-2026-53032", "author_name": "Mykyta Yatsenko", "author_email": "yatsenko@meta.com", "fix_sha": "4d0a375887ab4d49e4da1ff10f9606cab8f7c3ad", "subject": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53032", "commit_url": "https://git.kernel.org/stable/c/4d0a375887ab4d49e4da1ff10f9606cab8f7c3ad" }, { "cve": "CVE-2026-53033", "author_name": "Michal Luczaj", "author_email": "mhal@rbox.co", "fix_sha": "64c2f93fc3254d3bf5de4445fb732ee5c451edb6", "subject": "bpf, sockmap: Take state lock for af_unix iter", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53033", "commit_url": "https://git.kernel.org/stable/c/64c2f93fc3254d3bf5de4445fb732ee5c451edb6" }, { "cve": "CVE-2026-53034", "author_name": "Michal Luczaj", "author_email": "mhal@rbox.co", "fix_sha": "dca38b7734d2ea00af4818ff3ae836fab33d5d5a", "subject": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53034", "commit_url": "https://git.kernel.org/stable/c/dca38b7734d2ea00af4818ff3ae836fab33d5d5a" }, { "cve": "CVE-2026-53035", "author_name": "Michal Luczaj", "author_email": "mhal@rbox.co", "fix_sha": "4d328dd695383224aa750ddee6b4ad40c0f8d205", "subject": "bpf, sockmap: Fix af_unix iter deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53035", "commit_url": "https://git.kernel.org/stable/c/4d328dd695383224aa750ddee6b4ad40c0f8d205" }, { "cve": "CVE-2026-53036", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "1dd8be4ec722ce54e4cace59f3a4ba658111b3ec", "subject": "bpf, arm64: Fix off-by-one in check_imm signed range check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53036", "commit_url": "https://git.kernel.org/stable/c/1dd8be4ec722ce54e4cace59f3a4ba658111b3ec" }, { "cve": "CVE-2026-53037", "author_name": "Oliver Neukum", "author_email": "oneukum@suse.com", "fix_sha": "8df2c1b47ee3cd50fd454f75c7a7e2ae8a6adf72", "subject": "HID: usbhid: fix deadlock in hid_post_reset()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53037", "commit_url": "https://git.kernel.org/stable/c/8df2c1b47ee3cd50fd454f75c7a7e2ae8a6adf72" }, { "cve": "CVE-2026-53038", "author_name": "Dmitry Safonov", "author_email": "dima@arista.com", "fix_sha": "d7bd8cf0b348d3edae7bee33e74a32b21668b181", "subject": "ima_fs: Correctly create securityfs files for unsupported hash algos", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53038", "commit_url": "https://git.kernel.org/stable/c/d7bd8cf0b348d3edae7bee33e74a32b21668b181" }, { "cve": "CVE-2026-53039", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "70b672833f4025341c11b22c7f83778a5cd611bc", "subject": "ocfs2: validate group add input before caching", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53039", "commit_url": "https://git.kernel.org/stable/c/70b672833f4025341c11b22c7f83778a5cd611bc" }, { "cve": "CVE-2026-53040", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "8f687eeed3da3012152b0f9473f578869de0cd7b", "subject": "ocfs2: validate bg_bits during freefrag scan", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53040", "commit_url": "https://git.kernel.org/stable/c/8f687eeed3da3012152b0f9473f578869de0cd7b" }, { "cve": "CVE-2026-53041", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "d12f558e6200b3f47dbef9331ed6d115d2410e59", "subject": "ocfs2: fix listxattr handling when the buffer is full", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53041", "commit_url": "https://git.kernel.org/stable/c/d12f558e6200b3f47dbef9331ed6d115d2410e59" }, { "cve": "CVE-2026-53042", "author_name": "Richard Cheng", "author_email": "icheng@nvidia.com", "fix_sha": "a55f80233f384dc89ef3425b2e1dd0e6d44bcf29", "subject": "fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53042", "commit_url": "https://git.kernel.org/stable/c/a55f80233f384dc89ef3425b2e1dd0e6d44bcf29" }, { "cve": "CVE-2026-53043", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "7ab3fbb01bc6d79091bc375e5235d360cd9b78be", "subject": "ocfs2/dlm: validate qr_numregions in dlm_match_regions()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53043", "commit_url": "https://git.kernel.org/stable/c/7ab3fbb01bc6d79091bc375e5235d360cd9b78be" }, { "cve": "CVE-2026-53044", "author_name": "Sumit Gupta", "author_email": "sumitg@nvidia.com", "fix_sha": "499f7e5ebbdd9ff0c4d532b1c432f8a61ff585b3", "subject": "soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53044", "commit_url": "https://git.kernel.org/stable/c/499f7e5ebbdd9ff0c4d532b1c432f8a61ff585b3" }, { "cve": "CVE-2026-53045", "author_name": "Mikko Perttunen", "author_email": "mperttunen@nvidia.com", "fix_sha": "9597ab9a8296ab337e6820f8a717ff621078b632", "subject": "memory: tegra124-emc: Fix dll_change check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53045", "commit_url": "https://git.kernel.org/stable/c/9597ab9a8296ab337e6820f8a717ff621078b632" }, { "cve": "CVE-2026-53046", "author_name": "Joshua Klinesmith", "author_email": "joshuaklinesmith@gmail.com", "fix_sha": "3e298897f41c61450c2e7a4f457e8b2485eb35b3", "subject": "ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53046", "commit_url": "https://git.kernel.org/stable/c/3e298897f41c61450c2e7a4f457e8b2485eb35b3" }, { "cve": "CVE-2026-53047", "author_name": "Thomas Huth", "author_email": "thuth@redhat.com", "fix_sha": "48a428215782321b56956974f23593e40ce84b7a", "subject": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53047", "commit_url": "https://git.kernel.org/stable/c/48a428215782321b56956974f23593e40ce84b7a" }, { "cve": "CVE-2026-53048", "author_name": "Andreas Gruenbacher", "author_email": "agruenba@redhat.com", "fix_sha": "74b4dbb946060a3233604d91859a9abd3708141d", "subject": "gfs2: prevent NULL pointer dereference during unmount", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53048", "commit_url": "https://git.kernel.org/stable/c/74b4dbb946060a3233604d91859a9abd3708141d" }, { "cve": "CVE-2026-53049", "author_name": "Andreas Gruenbacher", "author_email": "agruenba@redhat.com", "fix_sha": "fe2c8d051150b90b3ccb85f89e3b1d636cb88ec8", "subject": "gfs2: add some missing log locking", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53049", "commit_url": "https://git.kernel.org/stable/c/fe2c8d051150b90b3ccb85f89e3b1d636cb88ec8" }, { "cve": "CVE-2026-53050", "author_name": "Jan Kara", "author_email": "jack@suse.cz", "fix_sha": "e93ab401da4b2e2c1b8ef2424de2f238d51c8b2d", "subject": "quota: Fix race of dquot_scan_active() with quota deactivation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53050", "commit_url": "https://git.kernel.org/stable/c/e93ab401da4b2e2c1b8ef2424de2f238d51c8b2d" }, { "cve": "CVE-2026-53051", "author_name": "Manikanta Maddireddy", "author_email": "mmaddireddy@nvidia.com", "fix_sha": "34b3eef48d980cd37b876e128bbf314f69fb5d70", "subject": "PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53051", "commit_url": "https://git.kernel.org/stable/c/34b3eef48d980cd37b876e128bbf314f69fb5d70" }, { "cve": "CVE-2026-53052", "author_name": "Srinivas Kandagatla", "author_email": "srinivas.kandagatla@oss.qualcomm.com", "fix_sha": "d5bfdd28e0cdd45043ae6e0ac168a451d59283dc", "subject": "ASoC: qcom: qdsp6: topology: check widget type before accessing data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53052", "commit_url": "https://git.kernel.org/stable/c/d5bfdd28e0cdd45043ae6e0ac168a451d59283dc" }, { "cve": "CVE-2026-53053", "author_name": "Vasant Hegde", "author_email": "vasant.hegde@amd.com", "fix_sha": "faad224fe0f0857a04ff2eb3c90f0de57f47d0f3", "subject": "iommu/amd: Fix clone_alias() to use the original device's devid", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53053", "commit_url": "https://git.kernel.org/stable/c/faad224fe0f0857a04ff2eb3c90f0de57f47d0f3" }, { "cve": "CVE-2026-53054", "author_name": "Rob Clark", "author_email": "robin.clark@oss.qualcomm.com", "fix_sha": "85042c2cd970a6b0e686329387096fe19989ae62", "subject": "drm/msm: Fix VM_BIND UNMAP locking", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53054", "commit_url": "https://git.kernel.org/stable/c/85042c2cd970a6b0e686329387096fe19989ae62" }, { "cve": "CVE-2026-53055", "author_name": "Wenkai Lin", "author_email": "linwenkai6@hisilicon.com", "fix_sha": "67b53a660e6bf0da2fa8d8872e897a14d8059eaf", "subject": "crypto: hisilicon/sec2 - prevent req used-after-free for sec", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53055", "commit_url": "https://git.kernel.org/stable/c/67b53a660e6bf0da2fa8d8872e897a14d8059eaf" }, { "cve": "CVE-2026-53056", "author_name": "Yuanjie Yang", "author_email": "yuanjie.yang@oss.qualcomm.com", "fix_sha": "bc1dccc518cc5ab5140fba06c27e7188e0ed342b", "subject": "drm/msm/dpu: fix mismatch between power and frequency", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53056", "commit_url": "https://git.kernel.org/stable/c/bc1dccc518cc5ab5140fba06c27e7188e0ed342b" }, { "cve": "CVE-2026-53057", "author_name": "Fangyu Yu", "author_email": "fangyu.yu@linux.alibaba.com", "fix_sha": "f5c262b544975e067ea265fc7403aefbbea8563e", "subject": "iommu/riscv: Add IOTINVAL after updating DDT/PDT entries", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53057", "commit_url": "https://git.kernel.org/stable/c/f5c262b544975e067ea265fc7403aefbbea8563e" }, { "cve": "CVE-2026-53058", "author_name": "Jayesh Choudhary", "author_email": "j-choudhary@ti.com", "fix_sha": "43d6508ddbf9fb974fbc359a033154f78c9d4c8b", "subject": "drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53058", "commit_url": "https://git.kernel.org/stable/c/43d6508ddbf9fb974fbc359a033154f78c9d4c8b" }, { "cve": "CVE-2026-53059", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "c20e36b7631d83e7535877f08af8b0af72c44b1a", "subject": "dm log: fix out-of-bounds write due to region_count overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53059", "commit_url": "https://git.kernel.org/stable/c/c20e36b7631d83e7535877f08af8b0af72c44b1a" }, { "cve": "CVE-2026-53060", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "044ca491d4086dc5bf233e9fcb71db52df32f633", "subject": "dm cache metadata: fix memory leak on metadata abort retry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53060", "commit_url": "https://git.kernel.org/stable/c/044ca491d4086dc5bf233e9fcb71db52df32f633" }, { "cve": "CVE-2026-53061", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "322586745bd1a0e5f3559fd1635fdeb4dbd1d6b8", "subject": "dm cache: fix dirty mapping checking in passthrough mode switching", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53061", "commit_url": "https://git.kernel.org/stable/c/322586745bd1a0e5f3559fd1635fdeb4dbd1d6b8" }, { "cve": "CVE-2026-53062", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "2d1f7b65f5deedd2e6b09fdc6ea27f8375f24b45", "subject": "dm cache policy smq: fix missing locks in invalidating cache blocks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53062", "commit_url": "https://git.kernel.org/stable/c/2d1f7b65f5deedd2e6b09fdc6ea27f8375f24b45" }, { "cve": "CVE-2026-53063", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b", "subject": "dm cache: fix write hang in passthrough mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53063", "commit_url": "https://git.kernel.org/stable/c/4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b" }, { "cve": "CVE-2026-53064", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "7d1f98d668ee34c1d15bdc0420fdd062f24a27c0", "subject": "dm cache: fix null-deref with concurrent writes in passthrough mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53064", "commit_url": "https://git.kernel.org/stable/c/7d1f98d668ee34c1d15bdc0420fdd062f24a27c0" }, { "cve": "CVE-2026-53065", "author_name": "Sander Vanheule", "author_email": "sander@svanheule.net", "fix_sha": "1696fad8b259a2d46e51cd6e17e4bcdbe02279fa", "subject": "ASoC: sti: use managed regmap_field allocations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53065", "commit_url": "https://git.kernel.org/stable/c/1696fad8b259a2d46e51cd6e17e4bcdbe02279fa" }, { "cve": "CVE-2026-53066", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "06277983eca4a31d3c2114fa33d99a6e82484b11", "subject": "drm/sun4i: backend: fix error pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53066", "commit_url": "https://git.kernel.org/stable/c/06277983eca4a31d3c2114fa33d99a6e82484b11" }, { "cve": "CVE-2026-53067", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "1cba96c0a795124c3229293ed7b5b5765e66f259", "subject": "PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53067", "commit_url": "https://git.kernel.org/stable/c/1cba96c0a795124c3229293ed7b5b5765e66f259" }, { "cve": "CVE-2026-53068", "author_name": "Alexander Konyukhov", "author_email": "alexander.konyukhov@kaspersky.com", "fix_sha": "779ec12c85c9e4547519e3903a371a3b26a289de", "subject": "drm/komeda: fix integer overflow in AFBC framebuffer size check", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53068", "commit_url": "https://git.kernel.org/stable/c/779ec12c85c9e4547519e3903a371a3b26a289de" }, { "cve": "CVE-2026-53069", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "1921f91298d1388a0bb9db8f83800c998b649cb3", "subject": "net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53069", "commit_url": "https://git.kernel.org/stable/c/1921f91298d1388a0bb9db8f83800c998b649cb3" }, { "cve": "CVE-2026-53070", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "2cd7e6971fc2787408ceef17906ea152791448cf", "subject": "sctp: disable BH before calling udp_tunnel_xmit_skb()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53070", "commit_url": "https://git.kernel.org/stable/c/2cd7e6971fc2787408ceef17906ea152791448cf" }, { "cve": "CVE-2026-53071", "author_name": "Dudu Lu", "author_email": "phx0fer@gmail.com", "fix_sha": "42776497cdbc9a665b384a6dcb85f0d4bd927eab", "subject": "Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53071", "commit_url": "https://git.kernel.org/stable/c/42776497cdbc9a665b384a6dcb85f0d4bd927eab" }, { "cve": "CVE-2026-53072", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "5c7209a341ff2ac338b2b0375c34a307b37c9ac2", "subject": "Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53072", "commit_url": "https://git.kernel.org/stable/c/5c7209a341ff2ac338b2b0375c34a307b37c9ac2" }, { "cve": "CVE-2026-53073", "author_name": "Jonathan Rissanen", "author_email": "jonathan.rissanen@axis.com", "fix_sha": "68d39ea5e0adc9ecaea1ce8abd842ec972eb8718", "subject": "Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53073", "commit_url": "https://git.kernel.org/stable/c/68d39ea5e0adc9ecaea1ce8abd842ec972eb8718" }, { "cve": "CVE-2026-53074", "author_name": "Sun Jian", "author_email": "sun.jian.kdev@gmail.com", "fix_sha": "12bec2bd4b76d81c5d3996bd14ec1b7f4d983747", "subject": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53074", "commit_url": "https://git.kernel.org/stable/c/12bec2bd4b76d81c5d3996bd14ec1b7f4d983747" }, { "cve": "CVE-2026-53075", "author_name": "Taegu Ha", "author_email": "hataegu0826@gmail.com", "fix_sha": "2bb6379416fd19f44c3423a00bfd8626259f6067", "subject": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53075", "commit_url": "https://git.kernel.org/stable/c/2bb6379416fd19f44c3423a00bfd8626259f6067" }, { "cve": "CVE-2026-53076", "author_name": "Lang Xu", "author_email": "xulang@uniontech.com", "fix_sha": "576afddfee8d1108ee299bf10f581593540d1a36", "subject": "bpf: Fix OOB in pcpu_init_value", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53076", "commit_url": "https://git.kernel.org/stable/c/576afddfee8d1108ee299bf10f581593540d1a36" }, { "cve": "CVE-2026-53077", "author_name": "Greg Jumper", "author_email": "greg.jumper@oracle.com", "fix_sha": "ebf71dd4aff46e8e421d455db3e231ba43d2fa8a", "subject": "net/rds: Restrict use of RDS/IB to the initial network namespace", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53077", "commit_url": "https://git.kernel.org/stable/c/ebf71dd4aff46e8e421d455db3e231ba43d2fa8a" }, { "cve": "CVE-2026-53078", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "10f86a2a5c91fc4c4d001960f1c21abe52545ef6", "subject": "bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53078", "commit_url": "https://git.kernel.org/stable/c/10f86a2a5c91fc4c4d001960f1c21abe52545ef6" }, { "cve": "CVE-2026-53079", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "a6bd339dbb3514bce690fdcf252e788dfab4ee76", "subject": "net_sched: fix skb memory leak in deferred qdisc drops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53079", "commit_url": "https://git.kernel.org/stable/c/a6bd339dbb3514bce690fdcf252e788dfab4ee76" }, { "cve": "CVE-2026-53080", "author_name": "Davide Caratti", "author_email": "dcaratti@redhat.com", "fix_sha": "65782b2db7321d5f97c16718c4c7f6c7205a56be", "subject": "net/sched: cls_fw: fix NULL dereference of \"old\" filters before change()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53080", "commit_url": "https://git.kernel.org/stable/c/65782b2db7321d5f97c16718c4c7f6c7205a56be" }, { "cve": "CVE-2026-53081", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "2f2ec8e7730e21fc9bd49e0de9cdd58213ea24d0", "subject": "bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53081", "commit_url": "https://git.kernel.org/stable/c/2f2ec8e7730e21fc9bd49e0de9cdd58213ea24d0" }, { "cve": "CVE-2026-53082", "author_name": "Mashiro Chen", "author_email": "mashiro.chen@mailbox.org", "fix_sha": "bf9a38803b2626b01cc769aaf13485d8650f576f", "subject": "net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53082", "commit_url": "https://git.kernel.org/stable/c/bf9a38803b2626b01cc769aaf13485d8650f576f" }, { "cve": "CVE-2026-53083", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "4406942e65ca128c56c67443832988873c21d2e9", "subject": "bpf: Fix RCU stall in bpf_fd_array_map_clear()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53083", "commit_url": "https://git.kernel.org/stable/c/4406942e65ca128c56c67443832988873c21d2e9" }, { "cve": "CVE-2026-53084", "author_name": "Puranjay Mohan", "author_email": "puranjay@kernel.org", "fix_sha": "4cbee026db54cad39c39db4d356100cb133412b3", "subject": "bpf: return VMA snapshot from task_vma iterator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53084", "commit_url": "https://git.kernel.org/stable/c/4cbee026db54cad39c39db4d356100cb133412b3" }, { "cve": "CVE-2026-53085", "author_name": "Puranjay Mohan", "author_email": "puranjay@kernel.org", "fix_sha": "d8e27d2d22b6e2df3a0125b8c08e9aace38c954c", "subject": "bpf: fix mm lifecycle in open-coded task_vma iterator", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53085", "commit_url": "https://git.kernel.org/stable/c/d8e27d2d22b6e2df3a0125b8c08e9aace38c954c" }, { "cve": "CVE-2026-53086", "author_name": "Justin Chen", "author_email": "justin.chen@broadcom.com", "fix_sha": "5393b2b5bee2ac51a0043dc7f4ac3475f053d08d", "subject": "net: bcmgenet: fix racing timeout handler", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53086", "commit_url": "https://git.kernel.org/stable/c/5393b2b5bee2ac51a0043dc7f4ac3475f053d08d" }, { "cve": "CVE-2026-53087", "author_name": "Justin Chen", "author_email": "justin.chen@broadcom.com", "fix_sha": "3f3168300efb839028328d720ab3962f91d6a0d0", "subject": "net: bcmgenet: fix leaking free_bds", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53087", "commit_url": "https://git.kernel.org/stable/c/3f3168300efb839028328d720ab3962f91d6a0d0" }, { "cve": "CVE-2026-53088", "author_name": "Justin Chen", "author_email": "justin.chen@broadcom.com", "fix_sha": "57f3f53d2c9c5a9e133596e2f7bc1c50688a6d38", "subject": "net: bcmgenet: fix off-by-one in bcmgenet_put_txcb", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53088", "commit_url": "https://git.kernel.org/stable/c/57f3f53d2c9c5a9e133596e2f7bc1c50688a6d38" }, { "cve": "CVE-2026-53089", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "a0c584fc18056709c8e047a82a6045d6c209f4ce", "subject": "bpf: Fix use-after-free in offloaded map/prog info fill", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53089", "commit_url": "https://git.kernel.org/stable/c/a0c584fc18056709c8e047a82a6045d6c209f4ce" }, { "cve": "CVE-2026-53090", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "ee861486e377edc55361c08dcbceab3f6b6577bd", "subject": "bpf: Fix ld_{abs,ind} failure path analysis in subprogs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53090", "commit_url": "https://git.kernel.org/stable/c/ee861486e377edc55361c08dcbceab3f6b6577bd" }, { "cve": "CVE-2026-53091", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7fb4c19670110f052c04e1ec1d2b953b9f4f57e4", "subject": "net: pull headers in qdisc_pkt_len_segs_init()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53091", "commit_url": "https://git.kernel.org/stable/c/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4" }, { "cve": "CVE-2026-53092", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "d7f14173c0d5866c3cae759dee560ad1bed10d2e", "subject": "bpf: Fix linked reg delta tracking when src_reg == dst_reg", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53092", "commit_url": "https://git.kernel.org/stable/c/d7f14173c0d5866c3cae759dee560ad1bed10d2e" }, { "cve": "CVE-2026-53093", "author_name": "Ethan Tidmore", "author_email": "ethantidmore06@gmail.com", "fix_sha": "dd8592fc6007a451c3e4b9025de365e39de8178a", "subject": "wifi: brcmfmac: Fix error pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53093", "commit_url": "https://git.kernel.org/stable/c/dd8592fc6007a451c3e4b9025de365e39de8178a" }, { "cve": "CVE-2026-53094", "author_name": "MingTao Huang", "author_email": "mintaohuang@tencent.com", "fix_sha": "a1aa9ef47c299c5bbc30594d3c2f0589edf908e6", "subject": "bpf: Fix stale offload->prog pointer after constant blinding", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53094", "commit_url": "https://git.kernel.org/stable/c/a1aa9ef47c299c5bbc30594d3c2f0589edf908e6" }, { "cve": "CVE-2026-53095", "author_name": "Leon Hwang", "author_email": "leon.hwang@linux.dev", "fix_sha": "611fe4b79af72d00d80f2223354284447daafae9", "subject": "bpf: Fix abuse of kprobe_write_ctx via freplace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53095", "commit_url": "https://git.kernel.org/stable/c/611fe4b79af72d00d80f2223354284447daafae9" }, { "cve": "CVE-2026-53096", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "8ed82f807bb09d2c8455aaa665f2c6cb17bc6a19", "subject": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53096", "commit_url": "https://git.kernel.org/stable/c/8ed82f807bb09d2c8455aaa665f2c6cb17bc6a19" }, { "cve": "CVE-2026-53097", "author_name": "Duoming Zhou", "author_email": "duoming@zju.edu.cn", "fix_sha": "c8f62f73bbced3a79894655bdb0b625462d956fc", "subject": "wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53097", "commit_url": "https://git.kernel.org/stable/c/c8f62f73bbced3a79894655bdb0b625462d956fc" }, { "cve": "CVE-2026-53098", "author_name": "Duoming Zhou", "author_email": "duoming@zju.edu.cn", "fix_sha": "1146d0946b5358fad24812bd39d68f31cd40cc34", "subject": "wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53098", "commit_url": "https://git.kernel.org/stable/c/1146d0946b5358fad24812bd39d68f31cd40cc34" }, { "cve": "CVE-2026-53099", "author_name": "Carlos Llamas", "author_email": "cmllamas@google.com", "fix_sha": "9b0cf064ea0a6bac5e1a5fb43b004fd52fbe2b3b", "subject": "bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53099", "commit_url": "https://git.kernel.org/stable/c/9b0cf064ea0a6bac5e1a5fb43b004fd52fbe2b3b" }, { "cve": "CVE-2026-53100", "author_name": "Chad Monroe", "author_email": "chad@monroe.io", "fix_sha": "6939b97ddad3cf3dfbb3b5a0a12ef79cb886747e", "subject": "wifi: mt76: fix deadlock in remain-on-channel", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53100", "commit_url": "https://git.kernel.org/stable/c/6939b97ddad3cf3dfbb3b5a0a12ef79cb886747e" }, { "cve": "CVE-2026-53101", "author_name": "Sean Wang", "author_email": "sean.wang@mediatek.com", "fix_sha": "d5059e52fd8bc624ec4255c9fa01a266513d126b", "subject": "wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53101", "commit_url": "https://git.kernel.org/stable/c/d5059e52fd8bc624ec4255c9fa01a266513d126b" }, { "cve": "CVE-2026-53102", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "c41075ce8cf05ed8c0e7b7efef000dce548ffc42", "subject": "wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53102", "commit_url": "https://git.kernel.org/stable/c/c41075ce8cf05ed8c0e7b7efef000dce548ffc42" }, { "cve": "CVE-2026-53103", "author_name": "Sean Wang", "author_email": "sean.wang@mediatek.com", "fix_sha": "dd08ca3f092f4185ece69ce2a835c23198b1628a", "subject": "wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53103", "commit_url": "https://git.kernel.org/stable/c/dd08ca3f092f4185ece69ce2a835c23198b1628a" }, { "cve": "CVE-2026-53104", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "6b470f36616e3448d44b0ef4b1de2a3e3a31b5be", "subject": "wifi: mt76: Fix memory leak destroying device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53104", "commit_url": "https://git.kernel.org/stable/c/6b470f36616e3448d44b0ef4b1de2a3e3a31b5be" }, { "cve": "CVE-2026-53105", "author_name": "Ming Yen Hsieh", "author_email": "mingyen.hsieh@mediatek.com", "fix_sha": "962eb04e67552be406c906c83099c1d736aae3b6", "subject": "wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53105", "commit_url": "https://git.kernel.org/stable/c/962eb04e67552be406c906c83099c1d736aae3b6" }, { "cve": "CVE-2026-53106", "author_name": "Amery Hung", "author_email": "ameryhung@gmail.com", "fix_sha": "350de5b8a9befaa2a68861c51f671d4f5f751ca5", "subject": "bpf: Do not allow deleting local storage in NMI", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53106", "commit_url": "https://git.kernel.org/stable/c/350de5b8a9befaa2a68861c51f671d4f5f751ca5" }, { "cve": "CVE-2026-53107", "author_name": "Heitor Alves de Siqueira", "author_email": "halves@igalia.com", "fix_sha": "7c5c2b661bdb78c1472b8833265c9ed1ee880039", "subject": "wifi: libertas: don't kill URBs in interrupt context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53107", "commit_url": "https://git.kernel.org/stable/c/7c5c2b661bdb78c1472b8833265c9ed1ee880039" }, { "cve": "CVE-2026-53108", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "bbcbf045d6c778e82b47a35fc8728387708e9a3d", "subject": "powerpc/64s: Fix unmap race with PMD migration entries", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53108", "commit_url": "https://git.kernel.org/stable/c/bbcbf045d6c778e82b47a35fc8728387708e9a3d" }, { "cve": "CVE-2026-53109", "author_name": "Ritesh Harjani (IBM)", "author_email": "ritesh.list@gmail.com", "fix_sha": "fda4d71651f71c44b35829d13f3c8bf920032f77", "subject": "powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53109", "commit_url": "https://git.kernel.org/stable/c/fda4d71651f71c44b35829d13f3c8bf920032f77" }, { "cve": "CVE-2026-53110", "author_name": "Ilya Leoshkevich", "author_email": "iii@linux.ibm.com", "fix_sha": "202e42e4aa890172366354b233c42c73107a3f59", "subject": "s390/bpf: Zero-extend bpf prog return values and kfunc arguments", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53110", "commit_url": "https://git.kernel.org/stable/c/202e42e4aa890172366354b233c42c73107a3f59" }, { "cve": "CVE-2026-53111", "author_name": "Feng Yang", "author_email": "yangfeng@kylinos.cn", "fix_sha": "972787479ee73006fddb5e59ab5c8e733810ff42", "subject": "bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53111", "commit_url": "https://git.kernel.org/stable/c/972787479ee73006fddb5e59ab5c8e733810ff42" }, { "cve": "CVE-2026-53112", "author_name": "Duoming Zhou", "author_email": "duoming@zju.edu.cn", "fix_sha": "039cd522dc70151da13329a5e3ae19b1736f468a", "subject": "wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53112", "commit_url": "https://git.kernel.org/stable/c/039cd522dc70151da13329a5e3ae19b1736f468a" }, { "cve": "CVE-2026-53113", "author_name": "Zilin Guan", "author_email": "zilin@seu.edu.cn", "fix_sha": "ff49eba595df500e4ddccc593088c8a4ab5f2c27", "subject": "wifi: ath11k: fix memory leaks in beacon template setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53113", "commit_url": "https://git.kernel.org/stable/c/ff49eba595df500e4ddccc593088c8a4ab5f2c27" }, { "cve": "CVE-2026-53114", "author_name": "Ravi Bangoria", "author_email": "ravi.bangoria@amd.com", "fix_sha": "b0a09142622a994c4f4088c3f61db5da87cfc711", "subject": "perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53114", "commit_url": "https://git.kernel.org/stable/c/b0a09142622a994c4f4088c3f61db5da87cfc711" }, { "cve": "CVE-2026-53115", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "6c8dfb0362732bf1e4829867a2a5239fedc592d0", "subject": "bus: fsl-mc: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53115", "commit_url": "https://git.kernel.org/stable/c/6c8dfb0362732bf1e4829867a2a5239fedc592d0" }, { "cve": "CVE-2026-53116", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "81d6f7c3a70b10ff757ee8b5f8114a190871cf1e", "subject": "s390/ap: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53116", "commit_url": "https://git.kernel.org/stable/c/81d6f7c3a70b10ff757ee8b5f8114a190871cf1e" }, { "cve": "CVE-2026-53117", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "ac4d8bb6e2e13e8684a76ea48d13ebaaaf5c24c4", "subject": "s390/cio: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53117", "commit_url": "https://git.kernel.org/stable/c/ac4d8bb6e2e13e8684a76ea48d13ebaaaf5c24c4" }, { "cve": "CVE-2026-53118", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "85bb534ff12aab6916058897b39c748940a7a4c6", "subject": "vdpa: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53118", "commit_url": "https://git.kernel.org/stable/c/85bb534ff12aab6916058897b39c748940a7a4c6" }, { "cve": "CVE-2026-53119", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "8a700b1fc94df4d847a04f14ebc7f8532592b367", "subject": "platform/wmi: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53119", "commit_url": "https://git.kernel.org/stable/c/8a700b1fc94df4d847a04f14ebc7f8532592b367" }, { "cve": "CVE-2026-53120", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "10a4206a24013be4d558d476010cbf2eb4c9fa64", "subject": "PCI: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53120", "commit_url": "https://git.kernel.org/stable/c/10a4206a24013be4d558d476010cbf2eb4c9fa64" }, { "cve": "CVE-2026-53121", "author_name": "Gautham R. Shenoy", "author_email": "gautham.shenoy@amd.com", "fix_sha": "beda3b363546a423e4e29a7395e04c0ac4ff677e", "subject": "amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53121", "commit_url": "https://git.kernel.org/stable/c/beda3b363546a423e4e29a7395e04c0ac4ff677e" }, { "cve": "CVE-2026-53122", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "b48c980b6a7e409050bb3067165db31cc6205e3e", "subject": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53122", "commit_url": "https://git.kernel.org/stable/c/b48c980b6a7e409050bb3067165db31cc6205e3e" }, { "cve": "CVE-2026-53123", "author_name": "Yu Kuai", "author_email": "yukuai@fnnas.com", "fix_sha": "cf86bb53b9c92354904a328e947a05ffbfdd1840", "subject": "md: wake raid456 reshape waiters before suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53123", "commit_url": "https://git.kernel.org/stable/c/cf86bb53b9c92354904a328e947a05ffbfdd1840" }, { "cve": "CVE-2026-53124", "author_name": "Uday Shankar", "author_email": "ushankar@purestorage.com", "fix_sha": "0842186d2c4e67d2f8c8c2d1d779e8acffd41b5b", "subject": "ublk: reset per-IO canceled flag on each fetch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53124", "commit_url": "https://git.kernel.org/stable/c/0842186d2c4e67d2f8c8c2d1d779e8acffd41b5b" }, { "cve": "CVE-2026-53125", "author_name": "Yu Kuai", "author_email": "yukuai3@huawei.com", "fix_sha": "2aa72276fab9851dbd59c2daeb4b590c5a113908", "subject": "md: fix array_state=clear sysfs deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53125", "commit_url": "https://git.kernel.org/stable/c/2aa72276fab9851dbd59c2daeb4b590c5a113908" }, { "cve": "CVE-2026-53126", "author_name": "Jackie Liu", "author_email": "liuyun01@kylinos.cn", "fix_sha": "23308af722fefed00af5f238024c11710938fba3", "subject": "blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53126", "commit_url": "https://git.kernel.org/stable/c/23308af722fefed00af5f238024c11710938fba3" }, { "cve": "CVE-2026-53127", "author_name": "Jackie Liu", "author_email": "liuyun01@kylinos.cn", "fix_sha": "2a2f520fda824b5a25c93f2249578ea150c24e06", "subject": "block: fix zones_cond memory leak on zone revalidation error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53127", "commit_url": "https://git.kernel.org/stable/c/2a2f520fda824b5a25c93f2249578ea150c24e06" }, { "cve": "CVE-2026-53128", "author_name": "Bart Van Assche", "author_email": "bvanassche@acm.org", "fix_sha": "2b31e86387e60b3689339f0f0fbb4d3623d9d494", "subject": "drbd: Balance RCU calls in drbd_adm_dump_devices()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53128", "commit_url": "https://git.kernel.org/stable/c/2b31e86387e60b3689339f0f0fbb4d3623d9d494" }, { "cve": "CVE-2026-53129", "author_name": "HyungJung Joo", "author_email": "jhj140711@gmail.com", "fix_sha": "d227786ab1119669df4dc333a61510c52047cce4", "subject": "fs/mbcache: cancel shrink work before destroying the cache", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53129", "commit_url": "https://git.kernel.org/stable/c/d227786ab1119669df4dc333a61510c52047cce4" }, { "cve": "CVE-2026-53130", "author_name": "HyungJung Joo", "author_email": "jhj140711@gmail.com", "fix_sha": "0621c385fda1376e967f37ccd534c26c3e511d14", "subject": "fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53130", "commit_url": "https://git.kernel.org/stable/c/0621c385fda1376e967f37ccd534c26c3e511d14" }, { "cve": "CVE-2026-53131", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "62443dc21114c0bbc476fa62973db89743f2f137", "subject": "netfilter: require Ethernet MAC header before using eth_hdr()", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53131", "commit_url": "https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137" }, { "cve": "CVE-2026-53132", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "059b7dbd20a6f0c539a45ddff1573cb8946685b5", "subject": "vsock/virtio: fix potential unbounded skb queue", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53132", "commit_url": "https://git.kernel.org/stable/c/059b7dbd20a6f0c539a45ddff1573cb8946685b5" }, { "cve": "CVE-2026-53133", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "15fe76e23615f502d051ef0768f86babaf08746c", "subject": "RDMA/umem: Fix truncation for block sizes >= 4G", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53133", "commit_url": "https://git.kernel.org/stable/c/15fe76e23615f502d051ef0768f86babaf08746c" }, { "cve": "CVE-2026-53134", "author_name": "Davide Ornaghi", "author_email": "d.ornaghi97@gmail.com", "fix_sha": "ab185e0c4fb82dfba6fb86f8271e06f931d9c64c", "subject": "netfilter: nft_fib: fix stale stack leak via the OIFNAME register", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53134", "commit_url": "https://git.kernel.org/stable/c/ab185e0c4fb82dfba6fb86f8271e06f931d9c64c" }, { "cve": "CVE-2026-53135", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "adf67034b1f61f7119295208085bfd43f85f56af", "subject": "drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53135", "commit_url": "https://git.kernel.org/stable/c/adf67034b1f61f7119295208085bfd43f85f56af" }, { "cve": "CVE-2026-53136", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "fb0707ce00eef4e2d60c3020e1c0432739703e4a", "subject": "drm/amd/display: Clamp VBIOS HDMI retimer register count to array size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53136", "commit_url": "https://git.kernel.org/stable/c/fb0707ce00eef4e2d60c3020e1c0432739703e4a" }, { "cve": "CVE-2026-53137", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "f0f3981c43b32cadfe373d636d9e9ca522bb3702", "subject": "drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53137", "commit_url": "https://git.kernel.org/stable/c/f0f3981c43b32cadfe373d636d9e9ca522bb3702" }, { "cve": "CVE-2026-53138", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "ff287df16a1a58aca78b08d1f3ee09fc44da0351", "subject": "drm/amd/display: Bound VBIOS record-chain walk loops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53138", "commit_url": "https://git.kernel.org/stable/c/ff287df16a1a58aca78b08d1f3ee09fc44da0351" }, { "cve": "CVE-2026-53139", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "7f93fad5ea0affc9e1505dd0f7596c0fdb496213", "subject": "drm/v3d: Skip CSD when it has zeroed workgroups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53139", "commit_url": "https://git.kernel.org/stable/c/7f93fad5ea0affc9e1505dd0f7596c0fdb496213" }, { "cve": "CVE-2026-53140", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "ae7676952790f421c40918e2586a2c9f12a682b6", "subject": "drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53140", "commit_url": "https://git.kernel.org/stable/c/ae7676952790f421c40918e2586a2c9f12a682b6" }, { "cve": "CVE-2026-53141", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "6bf7e2affc6e62da7add393d7f352d4040f5bc27", "subject": "drm/v3d: Fix global performance monitor reference counting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53141", "commit_url": "https://git.kernel.org/stable/c/6bf7e2affc6e62da7add393d7f352d4040f5bc27" }, { "cve": "CVE-2026-53142", "author_name": "Jani Nikula", "author_email": "jani.nikula@intel.com", "fix_sha": "68938cc08e23a94fd881e845837ff918de005ce7", "subject": "drm/xe/display: fix oops in suspend/shutdown without display", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53142", "commit_url": "https://git.kernel.org/stable/c/68938cc08e23a94fd881e845837ff918de005ce7" }, { "cve": "CVE-2026-53143", "author_name": "Andrew Martin", "author_email": "andrew.martin@amd.com", "fix_sha": "352ea59028ea48a6fff77f19ae28f98f71946a80", "subject": "drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53143", "commit_url": "https://git.kernel.org/stable/c/352ea59028ea48a6fff77f19ae28f98f71946a80" }, { "cve": "CVE-2026-53144", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "2bd550b547deabef98bd3b017ff743b7c34d3a6d", "subject": "drm/amdkfd: fix NULL dereference in get_queue_ids()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53144", "commit_url": "https://git.kernel.org/stable/c/2bd550b547deabef98bd3b017ff743b7c34d3a6d" }, { "cve": "CVE-2026-53145", "author_name": "Simona Vetter", "author_email": "simona.vetter@ffwll.ch", "fix_sha": "1a4f03d22fb655e5f192244fb2c87d8066fcfca2", "subject": "drm/gem: Try to fix change_handle ioctl, attempt 4", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53145", "commit_url": "https://git.kernel.org/stable/c/1a4f03d22fb655e5f192244fb2c87d8066fcfca2" }, { "cve": "CVE-2026-53146", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "4db2bd2ed4785dbadaeeab9f4e346b21ac5fb8eb", "subject": "thunderbolt: Limit XDomain response copy to actual frame size", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53146", "commit_url": "https://git.kernel.org/stable/c/4db2bd2ed4785dbadaeeab9f4e346b21ac5fb8eb" }, { "cve": "CVE-2026-53147", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a504b9f2797b739e0304d537e8aa4ce883ecce39", "subject": "thunderbolt: Validate XDomain request packet size before type cast", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53147", "commit_url": "https://git.kernel.org/stable/c/a504b9f2797b739e0304d537e8aa4ce883ecce39" }, { "cve": "CVE-2026-53148", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "322e93448d908434ae5545660fcbe8f5a7a8e141", "subject": "thunderbolt: Clamp XDomain response data copy to allocation size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53148", "commit_url": "https://git.kernel.org/stable/c/322e93448d908434ae5545660fcbe8f5a7a8e141" }, { "cve": "CVE-2026-53149", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "65423079c7420e3dbf9a7aa345c243a3f5752e5d", "subject": "thunderbolt: Bound root directory content to block size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53149", "commit_url": "https://git.kernel.org/stable/c/65423079c7420e3dbf9a7aa345c243a3f5752e5d" }, { "cve": "CVE-2026-53150", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "cff8eb65d1eafe7793e54b4d0cf6bf831644630b", "subject": "thunderbolt: Reject zero-length property entries in validator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53150", "commit_url": "https://git.kernel.org/stable/c/cff8eb65d1eafe7793e54b4d0cf6bf831644630b" }, { "cve": "CVE-2026-53151", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "333b6d5bb9f87827ac2639c737bf9613dbae7253", "subject": "rxrpc: Fix the ACK parser to extract the SACK table for parsing", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53151", "commit_url": "https://git.kernel.org/stable/c/333b6d5bb9f87827ac2639c737bf9613dbae7253" }, { "cve": "CVE-2026-53152", "author_name": "Heiko Stuebner", "author_email": "heiko@sntech.de", "fix_sha": "1e9a4850afa0ceb63984fb1a9f3e86d0fc4fd18f", "subject": "mmc: dw_mmc-rockchip: Add missing private data for very old controllers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53152", "commit_url": "https://git.kernel.org/stable/c/1e9a4850afa0ceb63984fb1a9f3e86d0fc4fd18f" }, { "cve": "CVE-2026-53153", "author_name": "Shakeel Butt", "author_email": "shakeel.butt@linux.dev", "fix_sha": "98733f3f0becb1ae0701d021c1748e974e5fa55c", "subject": "mm/list_lru: drain before clearing xarray entry on reparent", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53153", "commit_url": "https://git.kernel.org/stable/c/98733f3f0becb1ae0701d021c1748e974e5fa55c" }, { "cve": "CVE-2026-53154", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "40c81856e622a9dc59294a90d169ac07ea25b0b0", "subject": "mm/hugetlb: restore reservation on error in hugetlb folio copy paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53154", "commit_url": "https://git.kernel.org/stable/c/40c81856e622a9dc59294a90d169ac07ea25b0b0" }, { "cve": "CVE-2026-53155", "author_name": "Lorenzo Stoakes", "author_email": "ljs@kernel.org", "fix_sha": "43e7f189769c512c843184a8a5892ac779a6bd90", "subject": "mm/huge_memory: use correct flags for device private PMD entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53155", "commit_url": "https://git.kernel.org/stable/c/43e7f189769c512c843184a8a5892ac779a6bd90" }, { "cve": "CVE-2026-53156", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "5b6b6fc491899d583eaa75344e094796ae9b530b", "subject": "nvmem: core: fix use-after-free bugs in error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53156", "commit_url": "https://git.kernel.org/stable/c/5b6b6fc491899d583eaa75344e094796ae9b530b" }, { "cve": "CVE-2026-53157", "author_name": "Santosh Kalluri", "author_email": "santosh.kalluri129@gmail.com", "fix_sha": "71de0177b28da751f407581a4515cf4d762f6296", "subject": "net: phonet: free phonet_device after RCU grace period", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53157", "commit_url": "https://git.kernel.org/stable/c/71de0177b28da751f407581a4515cf4d762f6296" }, { "cve": "CVE-2026-53158", "author_name": "Mukesh Ojha", "author_email": "mukesh.ojha@oss.qualcomm.com", "fix_sha": "5401fb4fe10fac6134c308495df18ed74aebb9c4", "subject": "misc: fastrpc: Fix NULL pointer dereference in rpmsg callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53158", "commit_url": "https://git.kernel.org/stable/c/5401fb4fe10fac6134c308495df18ed74aebb9c4" }, { "cve": "CVE-2026-53159", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "464c6ad2aa16e1e1df9d559289199356493d1e00", "subject": "misc: fastrpc: fix DMA address corruption due to find_vma misuse", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53159", "commit_url": "https://git.kernel.org/stable/c/464c6ad2aa16e1e1df9d559289199356493d1e00" }, { "cve": "CVE-2026-53160", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "07ebe87915d8accdaba20c4f88c5ae430fe62fbb", "subject": "misc: fastrpc: fix use-after-free race in fastrpc_map_create", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53160", "commit_url": "https://git.kernel.org/stable/c/07ebe87915d8accdaba20c4f88c5ae430fe62fbb" }, { "cve": "CVE-2026-53161", "author_name": "Anandu Krishnan E", "author_email": "anandu.e@oss.qualcomm.com", "fix_sha": "e85eb5feca8e254905ffa6c57a3c99c89a674a0f", "subject": "misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53161", "commit_url": "https://git.kernel.org/stable/c/e85eb5feca8e254905ffa6c57a3c99c89a674a0f" }, { "cve": "CVE-2026-53162", "author_name": "Shakeel Butt", "author_email": "shakeel.butt@linux.dev", "fix_sha": "c0cafe24d3f6534294c4b2bc2d47734ff7cbd313", "subject": "memcg: use round-robin victim selection in refill_stock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53162", "commit_url": "https://git.kernel.org/stable/c/c0cafe24d3f6534294c4b2bc2d47734ff7cbd313" }, { "cve": "CVE-2026-53163", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "40a25d59e85b3c8709ac2424d44f65610467871e", "subject": "locking/rtmutex: Skip remove_waiter() when waiter is not enqueued", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53163", "commit_url": "https://git.kernel.org/stable/c/40a25d59e85b3c8709ac2424d44f65610467871e" }, { "cve": "CVE-2026-53164", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "6ec91df8aff77e2e8fe3179c1f3fc15b43a40ba3", "subject": "iommu/dma: Do not try to iommu_map a 0 length region in swiotlb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53164", "commit_url": "https://git.kernel.org/stable/c/6ec91df8aff77e2e8fe3179c1f3fc15b43a40ba3" }, { "cve": "CVE-2026-53165", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "2eea7f44b9c8b42fd7d3a1a87c06a7cd1b99c327", "subject": "iomap: avoid potential null folio->mapping deref during error reporting", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53165", "commit_url": "https://git.kernel.org/stable/c/2eea7f44b9c8b42fd7d3a1a87c06a7cd1b99c327" }, { "cve": "CVE-2026-53167", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "4e3d1b2c48ca6c55f1e9ca7f8dccc76f120f276c", "subject": "fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53167", "commit_url": "https://git.kernel.org/stable/c/4e3d1b2c48ca6c55f1e9ca7f8dccc76f120f276c" }, { "cve": "CVE-2026-53168", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "9c954499d43aefac01c5dfb57a82b13d2dcf4b94", "subject": "fuse: reject fuse_notify() pagecache ops on directories", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53168", "commit_url": "https://git.kernel.org/stable/c/9c954499d43aefac01c5dfb57a82b13d2dcf4b94" }, { "cve": "CVE-2026-53169", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "ef911805d86a05363d3ec2fa9835a41def83bb7e", "subject": "accel/ethosu: reject NPU_OP_RESIZE commands from userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53169", "commit_url": "https://git.kernel.org/stable/c/ef911805d86a05363d3ec2fa9835a41def83bb7e" }, { "cve": "CVE-2026-53170", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "d9d021218162b6c4fe0bdf42b2b340f1aae23a12", "subject": "accel/ethosu: reject DMA commands with uninitialized length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53170", "commit_url": "https://git.kernel.org/stable/c/d9d021218162b6c4fe0bdf42b2b340f1aae23a12" }, { "cve": "CVE-2026-53171", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "ee6d9b6e51626f259c6f0e38d94f91be4fd14754", "subject": "accel/ethosu: fix arithmetic issues in dma_length()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53171", "commit_url": "https://git.kernel.org/stable/c/ee6d9b6e51626f259c6f0e38d94f91be4fd14754" }, { "cve": "CVE-2026-53172", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "00f547e0dfecf83014fb32bcba587c6b684c1362", "subject": "accel/ethosu: fix IFM region index out-of-bounds in command stream parser", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53172", "commit_url": "https://git.kernel.org/stable/c/00f547e0dfecf83014fb32bcba587c6b684c1362" }, { "cve": "CVE-2026-53173", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "c0837b9cf6eabbad8b8cbddaff1a46a6d0a2e29d", "subject": "accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53173", "commit_url": "https://git.kernel.org/stable/c/c0837b9cf6eabbad8b8cbddaff1a46a6d0a2e29d" }, { "cve": "CVE-2026-53174", "author_name": "Nirmoy Das", "author_email": "nirmoyd@nvidia.com", "fix_sha": "1711b6ed6953cee5940ca4c3a6e77f1b3798cee2", "subject": "ovl: keep err zero after successful ovl_cache_get()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53174", "commit_url": "https://git.kernel.org/stable/c/1711b6ed6953cee5940ca4c3a6e77f1b3798cee2" }, { "cve": "CVE-2026-53175", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "32594b09854970d7ba83eb2dc8c69a2edd158c8e", "subject": "inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53175", "commit_url": "https://git.kernel.org/stable/c/32594b09854970d7ba83eb2dc8c69a2edd158c8e" }, { "cve": "CVE-2026-53176", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "29e7b925ae6df64894e82ab6419994dc25580a8a", "subject": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53176", "commit_url": "https://git.kernel.org/stable/c/29e7b925ae6df64894e82ab6419994dc25580a8a" }, { "cve": "CVE-2026-53177", "author_name": "Kyle Meyer", "author_email": "kyle.meyer@hpe.com", "fix_sha": "d930276f2cddd0b7294cac7a8fe7b877f6d9e08d", "subject": "bnxt_en: Fix NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53177", "commit_url": "https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d" }, { "cve": "CVE-2026-53178", "author_name": "Salman Alghamdi", "author_email": "me@cipherat.com", "fix_sha": "88e994c57a79f62d5338231d8d37ee8dd98baffe", "subject": "staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53178", "commit_url": "https://git.kernel.org/stable/c/88e994c57a79f62d5338231d8d37ee8dd98baffe" }, { "cve": "CVE-2026-53179", "author_name": "Salman Alghamdi", "author_email": "me@cipherat.com", "fix_sha": "514ab98364595007d4557ecc85d7e5f012c504d3", "subject": "staging: rtl8723bs: fix buffer over-read in rtw_update_protection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53179", "commit_url": "https://git.kernel.org/stable/c/514ab98364595007d4557ecc85d7e5f012c504d3" }, { "cve": "CVE-2026-53180", "author_name": "Amit Matityahu", "author_email": "amitmat@amazon.com", "fix_sha": "d486b4934a8e504376b85cdb3766f306d57aff5b", "subject": "timers/migration: Fix livelock in tmigr_handle_remote_up()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53180", "commit_url": "https://git.kernel.org/stable/c/d486b4934a8e504376b85cdb3766f306d57aff5b" }, { "cve": "CVE-2026-53181", "author_name": "Raf Dickson", "author_email": "rafdog35@gmail.com", "fix_sha": "c05fa14db43ebef3bd862ca9d073981c0358b3f0", "subject": "vsock/vmci: fix sk_ack_backlog leak on failed handshake", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53181", "commit_url": "https://git.kernel.org/stable/c/c05fa14db43ebef3bd862ca9d073981c0358b3f0" }, { "cve": "CVE-2026-53182", "author_name": "Yuqi Xu", "author_email": "xuyuqiabc@gmail.com", "fix_sha": "4cd92957e8f8cc4ebfe8a5d4203c14c592fde6b1", "subject": "wifi: nl80211: reject oversized EMA RNR lists", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53182", "commit_url": "https://git.kernel.org/stable/c/4cd92957e8f8cc4ebfe8a5d4203c14c592fde6b1" }, { "cve": "CVE-2026-53183", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "da23be77e1292cd611e736c3aa17da633d7ddce7", "subject": "mptcp: allow subflow rcv wnd to shrink", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53183", "commit_url": "https://git.kernel.org/stable/c/da23be77e1292cd611e736c3aa17da633d7ddce7" }, { "cve": "CVE-2026-53184", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "3c94f241f776562c489876ff506f366224565c21", "subject": "udp: clear skb->dev before running a sockmap verdict", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53184", "commit_url": "https://git.kernel.org/stable/c/3c94f241f776562c489876ff506f366224565c21" }, { "cve": "CVE-2026-53185", "author_name": "Cunlong Li", "author_email": "shenxiaogll@gmail.com", "fix_sha": "732fd9f0b9c1cdc6dfd77162ded60df005182cc0", "subject": "zram: fix use-after-free in zram_bvec_write_partial()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53185", "commit_url": "https://git.kernel.org/stable/c/732fd9f0b9c1cdc6dfd77162ded60df005182cc0" }, { "cve": "CVE-2026-53186", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "13e91fd076306f5d0cdfa14f53d69e37274723c4", "subject": "RDMA/srp: bound SRP_RSP sense copy by the received length", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53186", "commit_url": "https://git.kernel.org/stable/c/13e91fd076306f5d0cdfa14f53d69e37274723c4" }, { "cve": "CVE-2026-53187", "author_name": "Yishai Hadas", "author_email": "yishaih@nvidia.com", "fix_sha": "323c98a4ff06aa28114f2bf658fb43eb3b536bbc", "subject": "RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53187", "commit_url": "https://git.kernel.org/stable/c/323c98a4ff06aa28114f2bf658fb43eb3b536bbc" }, { "cve": "CVE-2026-53188", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee", "subject": "RDMA/core: Validate the passed in fops for ib_get_ucaps()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53188", "commit_url": "https://git.kernel.org/stable/c/4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee" }, { "cve": "CVE-2026-53189", "author_name": "Yin Tirui", "author_email": "yintirui@huawei.com", "fix_sha": "8d878059924f12c1bc24556a92ec56add74de3c8", "subject": "mm/huge_memory: update file PMD counter before folio_put()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53189", "commit_url": "https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8" }, { "cve": "CVE-2026-53190", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "3f26bb732cc136ab20176697c92f32c9c84cb125", "subject": "drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53190", "commit_url": "https://git.kernel.org/stable/c/3f26bb732cc136ab20176697c92f32c9c84cb125" }, { "cve": "CVE-2026-53191", "author_name": "Cl\u00e9ment L\u00e9ger", "author_email": "cleger@meta.com", "fix_sha": "ed46f39c47eb5530a9c161481a2080d3a869cfaf", "subject": "io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53191", "commit_url": "https://git.kernel.org/stable/c/ed46f39c47eb5530a9c161481a2080d3a869cfaf" }, { "cve": "CVE-2026-53192", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "053a401b592be424fea9d57c789f66cd5d8cec11", "subject": "ALSA: timer: Fix UAF at snd_timer_user_params()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53192", "commit_url": "https://git.kernel.org/stable/c/053a401b592be424fea9d57c789f66cd5d8cec11" }, { "cve": "CVE-2026-53193", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "da3039e91d1f835874ed6e9a33ea19ee80c2cb92", "subject": "ALSA: timer: Forcibly close timer instances at closing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53193", "commit_url": "https://git.kernel.org/stable/c/da3039e91d1f835874ed6e9a33ea19ee80c2cb92" }, { "cve": "CVE-2026-53194", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "96d47e40bf9db4a9efd5c8fb53287a508d165f14", "subject": "USB: serial: kl5kusb105: fix bulk-out buffer overflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53194", "commit_url": "https://git.kernel.org/stable/c/96d47e40bf9db4a9efd5c8fb53287a508d165f14" }, { "cve": "CVE-2026-53195", "author_name": "Adrian Korwel", "author_email": "adriank20047@gmail.com", "fix_sha": "0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae", "subject": "USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53195", "commit_url": "https://git.kernel.org/stable/c/0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae" }, { "cve": "CVE-2026-53196", "author_name": "Adrian Korwel", "author_email": "adriank20047@gmail.com", "fix_sha": "183c1076eca43bbb3e7bdf597456f91d81c73e74", "subject": "USB: serial: io_ti: fix heap overflow in get_manuf_info()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53196", "commit_url": "https://git.kernel.org/stable/c/183c1076eca43bbb3e7bdf597456f91d81c73e74" }, { "cve": "CVE-2026-53197", "author_name": "Tristan Madani", "author_email": "tristmd@gmail.com", "fix_sha": "c8a8a75b733467b00c08b91a38dbaf207a08ed6e", "subject": "xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53197", "commit_url": "https://git.kernel.org/stable/c/c8a8a75b733467b00c08b91a38dbaf207a08ed6e" }, { "cve": "CVE-2026-53198", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "f580d27e8928828693df44ba2db0fffdbe11dfea", "subject": "ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53198", "commit_url": "https://git.kernel.org/stable/c/f580d27e8928828693df44ba2db0fffdbe11dfea" }, { "cve": "CVE-2026-53199", "author_name": "Anton Leontev", "author_email": "leontyevantony@gmail.com", "fix_sha": "004e9ecfe6c5384f9e0b2f6f6389d42ec22789af", "subject": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53199", "commit_url": "https://git.kernel.org/stable/c/004e9ecfe6c5384f9e0b2f6f6389d42ec22789af" }, { "cve": "CVE-2026-53200", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "49b32ddb87a3a109afecea89e55d70f73956b8bc", "subject": "KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53200", "commit_url": "https://git.kernel.org/stable/c/49b32ddb87a3a109afecea89e55d70f73956b8bc" }, { "cve": "CVE-2026-53201", "author_name": "Tangudu Tilak Tirumalesh", "author_email": "tilak.tirumalesh.tangudu@intel.com", "fix_sha": "fa7c84726dc217ce0c183926ef9411636c7a2213", "subject": "Revert \"drm/xe: Skip exec queue schedule toggle if queue is idle during suspend\"", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53201", "commit_url": "https://git.kernel.org/stable/c/fa7c84726dc217ce0c183926ef9411636c7a2213" }, { "cve": "CVE-2026-53202", "author_name": "Andrzej Kacprowski", "author_email": "andrzej.kacprowski@linux.intel.com", "fix_sha": "d9faef564438d1e4579c692c046603e7ada7bdf4", "subject": "accel/ivpu: Fix signed integer truncation in IPC receive", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53202", "commit_url": "https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4" }, { "cve": "CVE-2026-53203", "author_name": "Andrzej Kacprowski", "author_email": "andrzej.kacprowski@linux.intel.com", "fix_sha": "fb176425837693f50c5c9fc8db6fbb04af22bd0a", "subject": "accel/ivpu: Add buffer overflow check in MS get_info_ioctl", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53203", "commit_url": "https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a" }, { "cve": "CVE-2026-53204", "author_name": "Dinh Nguyen", "author_email": "dinguyen@kernel.org", "fix_sha": "bfd2eb9bba548a8f63c3339bb1fb9a2031a42d86", "subject": "firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53204", "commit_url": "https://git.kernel.org/stable/c/bfd2eb9bba548a8f63c3339bb1fb9a2031a42d86" }, { "cve": "CVE-2026-53205", "author_name": "Andrzej Kacprowski", "author_email": "andrzej.kacprowski@linux.intel.com", "fix_sha": "dd1311bcf0e62f0c515115f46a3813370f4a4bb1", "subject": "accel/ivpu: Add bounds checks for firmware log indices", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53205", "commit_url": "https://git.kernel.org/stable/c/dd1311bcf0e62f0c515115f46a3813370f4a4bb1" }, { "cve": "CVE-2026-53206", "author_name": "Andrzej Kacprowski", "author_email": "andrzej.kacprowski@linux.intel.com", "fix_sha": "1d0b597facdd3c0239c88e8797c1014e1ea0ef15", "subject": "accel/ivpu: Add bounds check for firmware runtime memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53206", "commit_url": "https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15" }, { "cve": "CVE-2026-53207", "author_name": "Wupeng Ma", "author_email": "mawupeng1@huawei.com", "fix_sha": "3c2d42b8ee345b17a4ba56b0f6492d1ff4c1178e", "subject": "mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53207", "commit_url": "https://git.kernel.org/stable/c/3c2d42b8ee345b17a4ba56b0f6492d1ff4c1178e" }, { "cve": "CVE-2026-53208", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "dd214733544427587a95f66dbf3adff072568990", "subject": "Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53208", "commit_url": "https://git.kernel.org/stable/c/dd214733544427587a95f66dbf3adff072568990" }, { "cve": "CVE-2026-53209", "author_name": "Yuqi Xu", "author_email": "xuyq21@lenovo.com", "fix_sha": "5c65b96b549ea2dcfde497436bf9e048deb87758", "subject": "Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53209", "commit_url": "https://git.kernel.org/stable/c/5c65b96b549ea2dcfde497436bf9e048deb87758" }, { "cve": "CVE-2026-53210", "author_name": "Georgiy Osokin", "author_email": "g.osokin@auroraos.dev", "fix_sha": "26682f5efc276e3ad96d102019472bfbf03833b2", "subject": "tee: shm: fix shm leak in register_shm_helper()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53210", "commit_url": "https://git.kernel.org/stable/c/26682f5efc276e3ad96d102019472bfbf03833b2" }, { "cve": "CVE-2026-53211", "author_name": "Davide Ornaghi", "author_email": "d.ornaghi97@gmail.com", "fix_sha": "c7d573551f9286100a055ef696cde6af54549677", "subject": "netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53211", "commit_url": "https://git.kernel.org/stable/c/c7d573551f9286100a055ef696cde6af54549677" }, { "cve": "CVE-2026-53212", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "c32b26aaa2f9216520a38b3f4bfeec846eb3eb8a", "subject": "netfilter: nft_tunnel: fix use-after-free on object destroy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53212", "commit_url": "https://git.kernel.org/stable/c/c32b26aaa2f9216520a38b3f4bfeec846eb3eb8a" }, { "cve": "CVE-2026-53213", "author_name": "Alexander A. Klimov", "author_email": "grandmaster@al2klimov.de", "fix_sha": "5d563a5da8717629ae72f9eadf1e0e340bd1658b", "subject": "drm/vc4: fix krealloc() memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53213", "commit_url": "https://git.kernel.org/stable/c/5d563a5da8717629ae72f9eadf1e0e340bd1658b" }, { "cve": "CVE-2026-53214", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "b70c687b7cf267fb08586667a3946c8851cad672", "subject": "ipv6: Fix a potential NPD in cleanup_prefix_route()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53214", "commit_url": "https://git.kernel.org/stable/c/b70c687b7cf267fb08586667a3946c8851cad672" }, { "cve": "CVE-2026-53215", "author_name": "Til Kaiser", "author_email": "mail@tk154.de", "fix_sha": "5e8e2a9624df72fca7c736b2966b2cbf6c9c3ff6", "subject": "net: mvpp2: refill RX buffers before XDP or skb use", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53215", "commit_url": "https://git.kernel.org/stable/c/5e8e2a9624df72fca7c736b2966b2cbf6c9c3ff6" }, { "cve": "CVE-2026-53216", "author_name": "Til Kaiser", "author_email": "mail@tk154.de", "fix_sha": "f3c6aa078927e6fe8121c9c591ddee8716c5305a", "subject": "net: mvpp2: limit XDP frame size to the RX buffer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53216", "commit_url": "https://git.kernel.org/stable/c/f3c6aa078927e6fe8121c9c591ddee8716c5305a" }, { "cve": "CVE-2026-53217", "author_name": "Til Kaiser", "author_email": "mail@tk154.de", "fix_sha": "180235600934bef6add3be637c296d6cf3272e67", "subject": "net: mvpp2: sync RX data at the hardware packet offset", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53217", "commit_url": "https://git.kernel.org/stable/c/180235600934bef6add3be637c296d6cf3272e67" }, { "cve": "CVE-2026-53218", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "772cecf198da732faebb5dcfc46d66a505be8495", "subject": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53218", "commit_url": "https://git.kernel.org/stable/c/772cecf198da732faebb5dcfc46d66a505be8495" }, { "cve": "CVE-2026-53219", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "f7f2fbb0e893a0238dc464f8d8c0f5609bec584f", "subject": "netfilter: x_tables: avoid leaking percpu counter pointers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53219", "commit_url": "https://git.kernel.org/stable/c/f7f2fbb0e893a0238dc464f8d8c0f5609bec584f" }, { "cve": "CVE-2026-53220", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "ccb9fd4b87538ccf19ccff78ee26700526d94867", "subject": "netfilter: revalidate bridge ports", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53220", "commit_url": "https://git.kernel.org/stable/c/ccb9fd4b87538ccf19ccff78ee26700526d94867" }, { "cve": "CVE-2026-53221", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "a5c0359f5cbc51a2e2b114d6041e0f3c73f903e9", "subject": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53221", "commit_url": "https://git.kernel.org/stable/c/a5c0359f5cbc51a2e2b114d6041e0f3c73f903e9" }, { "cve": "CVE-2026-53222", "author_name": "Vadim Fedorenko", "author_email": "vadim.fedorenko@linux.dev", "fix_sha": "627366c51145a07f675b1800fb5ea2ec960bd900", "subject": "ptp: ocp: fix resource freeing order", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53222", "commit_url": "https://git.kernel.org/stable/c/627366c51145a07f675b1800fb5ea2ec960bd900" }, { "cve": "CVE-2026-53223", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "1ee90b77b727df903033db873c75caac5c27ec98", "subject": "net: guard timestamp cmsgs to real error queue skbs", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53223", "commit_url": "https://git.kernel.org/stable/c/1ee90b77b727df903033db873c75caac5c27ec98" }, { "cve": "CVE-2026-53224", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "6f4c80a2a7e6d06753b89a578b710a2499a5e62b", "subject": "sctp: validate embedded INIT chunk and address list lengths in cookie", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53224", "commit_url": "https://git.kernel.org/stable/c/6f4c80a2a7e6d06753b89a578b710a2499a5e62b" }, { "cve": "CVE-2026-53225", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "f8373d7090b745728de66308deeecc67e8d319ce", "subject": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53225", "commit_url": "https://git.kernel.org/stable/c/f8373d7090b745728de66308deeecc67e8d319ce" }, { "cve": "CVE-2026-53226", "author_name": "Marco Scardovi", "author_email": "scardracs@disroot.org", "fix_sha": "1c1e0fc88d6ef65bf15d517853251f75ab9d18c3", "subject": "gpio: rockchip: fix generic IRQ chip leak on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53226", "commit_url": "https://git.kernel.org/stable/c/1c1e0fc88d6ef65bf15d517853251f75ab9d18c3" }, { "cve": "CVE-2026-53227", "author_name": "Adrian Moreno", "author_email": "amorenoz@redhat.com", "fix_sha": "ee30dd2909d8b98619f4341c70ec8dc8e155ab02", "subject": "net: openvswitch: fix possible kfree_skb of ERR_PTR", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53227", "commit_url": "https://git.kernel.org/stable/c/ee30dd2909d8b98619f4341c70ec8dc8e155ab02" }, { "cve": "CVE-2026-53228", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "f0e42f0c4337b1f220de1ddd63f47197c7dee4de", "subject": "ipv6: sit: reload inner IPv6 header after GSO offloads", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53228", "commit_url": "https://git.kernel.org/stable/c/f0e42f0c4337b1f220de1ddd63f47197c7dee4de" }, { "cve": "CVE-2026-53229", "author_name": "Dragos Tatulea", "author_email": "dtatulea@nvidia.com", "fix_sha": "b69004f5a6ad32da84d8aa5b23b9c0caafe6252e", "subject": "net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53229", "commit_url": "https://git.kernel.org/stable/c/b69004f5a6ad32da84d8aa5b23b9c0caafe6252e" }, { "cve": "CVE-2026-53230", "author_name": "Dragos Tatulea", "author_email": "dtatulea@nvidia.com", "fix_sha": "894e036a24a26a6dd7b17d8d3fb5c53ab48a6074", "subject": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list", "cvss_score": 8.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53230", "commit_url": "https://git.kernel.org/stable/c/894e036a24a26a6dd7b17d8d3fb5c53ab48a6074" }, { "cve": "CVE-2026-53231", "author_name": "Maxime Chevallier", "author_email": "maxime.chevallier@bootlin.com", "fix_sha": "5a0082ec20a05ef2378410323a5089a8f1786f4a", "subject": "net: phy: don't try to setup PHY-driven SFP cages when using genphy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53231", "commit_url": "https://git.kernel.org/stable/c/5a0082ec20a05ef2378410323a5089a8f1786f4a" }, { "cve": "CVE-2026-53232", "author_name": "Maxime Chevallier", "author_email": "maxime.chevallier@bootlin.com", "fix_sha": "48774e87bbaa0056819d4b52301e4692e50e3252", "subject": "net: phy: clean the sfp upstream if phy probing fails", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53232", "commit_url": "https://git.kernel.org/stable/c/48774e87bbaa0056819d4b52301e4692e50e3252" }, { "cve": "CVE-2026-53233", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "c849de7d8757a7af801fc4a4058f71d481d367f2", "subject": "netdev: fix double-free in netdev_nl_bind_rx_doit()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53233", "commit_url": "https://git.kernel.org/stable/c/c849de7d8757a7af801fc4a4058f71d481d367f2" }, { "cve": "CVE-2026-53234", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "a0130d682222ae21afc395aead7cd2d87e1a8358", "subject": "net: ibm: emac: Fix use-after-free during device removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53234", "commit_url": "https://git.kernel.org/stable/c/a0130d682222ae21afc395aead7cd2d87e1a8358" }, { "cve": "CVE-2026-53235", "author_name": "HanQuan", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "f2bb3434544454099a5b6dec213567267b05d79d", "subject": "net: add pskb_may_pull() to skb_gro_receive_list()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53235", "commit_url": "https://git.kernel.org/stable/c/f2bb3434544454099a5b6dec213567267b05d79d" }, { "cve": "CVE-2026-53236", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "5d39580f68e6ddeedd15e587282207489dfb3da2", "subject": "tcp: restrict SO_ATTACH_FILTER to priv users", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53236", "commit_url": "https://git.kernel.org/stable/c/5d39580f68e6ddeedd15e587282207489dfb3da2" }, { "cve": "CVE-2026-53237", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "b9ad50d7505ebd48282ec3630258dc820fc85c81", "subject": "gpio: mvebu: fix NULL pointer dereference in suspend/resume", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53237", "commit_url": "https://git.kernel.org/stable/c/b9ad50d7505ebd48282ec3630258dc820fc85c81" }, { "cve": "CVE-2026-53238", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "9772589b57e44aedc240211c5c3f7a684a034d3a", "subject": "netlabel: validate unlabeled address and mask attribute lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53238", "commit_url": "https://git.kernel.org/stable/c/9772589b57e44aedc240211c5c3f7a684a034d3a" }, { "cve": "CVE-2026-53239", "author_name": "Sanghyun Park", "author_email": "sanghyun.park.cnu@gmail.com", "fix_sha": "7f2d76c9c03257c0782afef9d95321fa04096f60", "subject": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53239", "commit_url": "https://git.kernel.org/stable/c/7f2d76c9c03257c0782afef9d95321fa04096f60" }, { "cve": "CVE-2026-53240", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "eb48730bb827d1550401a5d391903f9d90b493c8", "subject": "xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53240", "commit_url": "https://git.kernel.org/stable/c/eb48730bb827d1550401a5d391903f9d90b493c8" }, { "cve": "CVE-2026-53241", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "2b5ff4db5d7aa5b981d966df02e687f79ad7b311", "subject": "ALSA: seq: dummy: fix UMP event stack overread", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53241", "commit_url": "https://git.kernel.org/stable/c/2b5ff4db5d7aa5b981d966df02e687f79ad7b311" }, { "cve": "CVE-2026-53242", "author_name": "Ji'an Zhou", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "88fe2e3658726cb21ff2dcf9770bf672f9b9d31b", "subject": "ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53242", "commit_url": "https://git.kernel.org/stable/c/88fe2e3658726cb21ff2dcf9770bf672f9b9d31b" }, { "cve": "CVE-2026-53243", "author_name": "Qing Wang", "author_email": "wangqing7171@gmail.com", "fix_sha": "6d99479799c69c3cb588fcda19c81d8f61d64ecd", "subject": "rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53243", "commit_url": "https://git.kernel.org/stable/c/6d99479799c69c3cb588fcda19c81d8f61d64ecd" }, { "cve": "CVE-2026-53244", "author_name": "NeilBrown", "author_email": "neilb@ownmail.net", "fix_sha": "e824bbd4d224cce4b5fb59cc9dcd3447fe0b7e44", "subject": "VFS: fix possible failure to unlock in nfsd4_create_file()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53244", "commit_url": "https://git.kernel.org/stable/c/e824bbd4d224cce4b5fb59cc9dcd3447fe0b7e44" }, { "cve": "CVE-2026-53245", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "7561c7fbc694308da73300f036719e63e42bf0b4", "subject": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53245", "commit_url": "https://git.kernel.org/stable/c/7561c7fbc694308da73300f036719e63e42bf0b4" }, { "cve": "CVE-2026-53246", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "0861615c28de668669d748ef4eb913ea9262d13b", "subject": "sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53246", "commit_url": "https://git.kernel.org/stable/c/0861615c28de668669d748ef4eb913ea9262d13b" }, { "cve": "CVE-2026-53247", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "80df409e1a483676826a6c66e693dba6ac507751", "subject": "net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53247", "commit_url": "https://git.kernel.org/stable/c/80df409e1a483676826a6c66e693dba6ac507751" }, { "cve": "CVE-2026-53248", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "b38cae85d1c45ff189d7ecb6ac36f41cdc3d84d0", "subject": "net: airoha: Fix use-after-free in metadata dst teardown", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53248", "commit_url": "https://git.kernel.org/stable/c/b38cae85d1c45ff189d7ecb6ac36f41cdc3d84d0" }, { "cve": "CVE-2026-53249", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "d3915a1f5a4bc0ac911032903c3c6ab8df9fcc7c", "subject": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53249", "commit_url": "https://git.kernel.org/stable/c/d3915a1f5a4bc0ac911032903c3c6ab8df9fcc7c" }, { "cve": "CVE-2026-53250", "author_name": "Jason Xing", "author_email": "kernelxing@tencent.com", "fix_sha": "22ba97ea9cc1f63a0d0244fae38057ed452b6ac7", "subject": "xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53250", "commit_url": "https://git.kernel.org/stable/c/22ba97ea9cc1f63a0d0244fae38057ed452b6ac7" }, { "cve": "CVE-2026-53251", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "5cbf290b79351971f20c7a533247e8d58a3f970c", "subject": "Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53251", "commit_url": "https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c" }, { "cve": "CVE-2026-53252", "author_name": "Bharath Reddy", "author_email": "kbreddy.rpbc@gmail.com", "fix_sha": "37b3009bf5976e8ab77c8b9a9bc3bbd7ff49e37f", "subject": "Bluetooth: fix memory leak in error path of hci_alloc_dev()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53252", "commit_url": "https://git.kernel.org/stable/c/37b3009bf5976e8ab77c8b9a9bc3bbd7ff49e37f" }, { "cve": "CVE-2026-53253", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "6770d3a8acdf9151769180cc3710346c4cfbe6f0", "subject": "Bluetooth: bnep: reject short frames before parsing", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53253", "commit_url": "https://git.kernel.org/stable/c/6770d3a8acdf9151769180cc3710346c4cfbe6f0" }, { "cve": "CVE-2026-53254", "author_name": "SeungJu Cheon", "author_email": "suunj1331@gmail.com", "fix_sha": "23882b828c3c8c51d0c946446a396b10abb3b16b", "subject": "Bluetooth: RFCOMM: validate skb length in MCC handlers", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53254", "commit_url": "https://git.kernel.org/stable/c/23882b828c3c8c51d0c946446a396b10abb3b16b" }, { "cve": "CVE-2026-53255", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "de23fb62259aa01d294f77238ae3b835eb674413", "subject": "Bluetooth: MGMT: validate advertising TLV before type checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53255", "commit_url": "https://git.kernel.org/stable/c/de23fb62259aa01d294f77238ae3b835eb674413" }, { "cve": "CVE-2026-53256", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "43c441edacf953b39517a44f5e5e10a93618b226", "subject": "Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53256", "commit_url": "https://git.kernel.org/stable/c/43c441edacf953b39517a44f5e5e10a93618b226" }, { "cve": "CVE-2026-53257", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "cb9959ab5f99611d27a06586add84811fe8102dc", "subject": "wifi: cfg80211: enforce HE/EHT cap/oper consistency", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53257", "commit_url": "https://git.kernel.org/stable/c/cb9959ab5f99611d27a06586add84811fe8102dc" }, { "cve": "CVE-2026-53258", "author_name": "Fedor Pchelkin", "author_email": "pchelkin@ispras.ru", "fix_sha": "e8694f7cc29287e843648d1075177b9a2000d957", "subject": "wifi: fix leak if split 6 GHz scanning fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53258", "commit_url": "https://git.kernel.org/stable/c/e8694f7cc29287e843648d1075177b9a2000d957" }, { "cve": "CVE-2026-53259", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "f723ccaff2fb72b71ae8a9fd283f0dee4d9ae7a3", "subject": "ipv6: anycast: insert aca into global hash under idev->lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53259", "commit_url": "https://git.kernel.org/stable/c/f723ccaff2fb72b71ae8a9fd283f0dee4d9ae7a3" }, { "cve": "CVE-2026-53260", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "e10902df24488ca722303133acfc82490f7d59ad", "subject": "tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53260", "commit_url": "https://git.kernel.org/stable/c/e10902df24488ca722303133acfc82490f7d59ad" }, { "cve": "CVE-2026-53261", "author_name": "Mark Bloch", "author_email": "mbloch@nvidia.com", "fix_sha": "3522b21fd7e1863d0734537737bd59f1b90d0190", "subject": "devlink: Release nested relation on devlink free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53261", "commit_url": "https://git.kernel.org/stable/c/3522b21fd7e1863d0734537737bd59f1b90d0190" }, { "cve": "CVE-2026-53262", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "a213a8950414c684999dcf03edeea6c46ede172e", "subject": "l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53262", "commit_url": "https://git.kernel.org/stable/c/a213a8950414c684999dcf03edeea6c46ede172e" }, { "cve": "CVE-2026-53263", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "2a58899d11009bffc7b4b32a571858f381121837", "subject": "6lowpan: fix off-by-one in multicast context address compression", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53263", "commit_url": "https://git.kernel.org/stable/c/2a58899d11009bffc7b4b32a571858f381121837" }, { "cve": "CVE-2026-53264", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "5057e1aca011e51ef51498c940ef96f3d3e8a305", "subject": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53264", "commit_url": "https://git.kernel.org/stable/c/5057e1aca011e51ef51498c940ef96f3d3e8a305" }, { "cve": "CVE-2026-53265", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "d3f0a606b9f278ece8a0df626ded9c4044071235", "subject": "dm cache policy smq: check allocation under invalidate lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53265", "commit_url": "https://git.kernel.org/stable/c/d3f0a606b9f278ece8a0df626ded9c4044071235" }, { "cve": "CVE-2026-53266", "author_name": "Yiming Qian", "author_email": "yimingqian591@gmail.com", "fix_sha": "67ba971ae02514d85818fe0c32549ab4bfa3bf49", "subject": "netfilter: bridge: make ebt_snat ARP rewrite writable", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53266", "commit_url": "https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49" }, { "cve": "CVE-2026-53267", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "3027ecbdb5fdf9200251c21d4818e4c447ef78e1", "subject": "netfilter: nft_ct: bail out on template ct in get eval", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53267", "commit_url": "https://git.kernel.org/stable/c/3027ecbdb5fdf9200251c21d4818e4c447ef78e1" }, { "cve": "CVE-2026-53268", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "66eba0ffce3b7e11449946b4cbbef8ea36112f56", "subject": "netfilter: conntrack_irc: fix possible out-of-bounds read", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53268", "commit_url": "https://git.kernel.org/stable/c/66eba0ffce3b7e11449946b4cbbef8ea36112f56" }, { "cve": "CVE-2026-53269", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "2fcba19caaeb2a33017459d3430f057967bb91b6", "subject": "netfilter: synproxy: add mutex to guard hook reference counting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53269", "commit_url": "https://git.kernel.org/stable/c/2fcba19caaeb2a33017459d3430f057967bb91b6" }, { "cve": "CVE-2026-53270", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "193989cc6d80dd8e0460fb3992e69fa03bf0ff9b", "subject": "ipvs: clear the svc scheduler ptr early on edit", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53270", "commit_url": "https://git.kernel.org/stable/c/193989cc6d80dd8e0460fb3992e69fa03bf0ff9b" }, { "cve": "CVE-2026-53271", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "b003086d76968298f22e7cf62239833b5a3a06b1", "subject": "ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53271", "commit_url": "https://git.kernel.org/stable/c/b003086d76968298f22e7cf62239833b5a3a06b1" }, { "cve": "CVE-2026-53272", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "1aee05e814d292064bf5fa15733741040cdc48ba", "subject": "erofs: fix use-after-free on sbi->sync_decompress", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53272", "commit_url": "https://git.kernel.org/stable/c/1aee05e814d292064bf5fa15733741040cdc48ba" }, { "cve": "CVE-2026-53273", "author_name": "Amirreza Zarrabi", "author_email": "amirreza.zarrabi@oss.qualcomm.com", "fix_sha": "387a926ee166814611acecb960207fe2f3c4fd3e", "subject": "tee: optee: prevent use-after-free when the client exits before the supplicant", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53273", "commit_url": "https://git.kernel.org/stable/c/387a926ee166814611acecb960207fe2f3c4fd3e" }, { "cve": "CVE-2026-53274", "author_name": "Nicol\u00f2 Coccia", "author_email": "n.coccia96@gmail.com", "fix_sha": "a3fdd924d88c30b9f488636ce0e4696012cf5511", "subject": "net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53274", "commit_url": "https://git.kernel.org/stable/c/a3fdd924d88c30b9f488636ce0e4696012cf5511" }, { "cve": "CVE-2026-53275", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "791c91dc7a9dfb2457d5e29b8216a6484b9c4b40", "subject": "ipv6: mcast: Fix use-after-free when processing MLD queries", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53275", "commit_url": "https://git.kernel.org/stable/c/791c91dc7a9dfb2457d5e29b8216a6484b9c4b40" }, { "cve": "CVE-2026-53276", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "f50331f2a1441ec49988832c3a95f2edacc47322", "subject": "Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53276", "commit_url": "https://git.kernel.org/stable/c/f50331f2a1441ec49988832c3a95f2edacc47322" }, { "cve": "CVE-2026-53277", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "f2ca45b50d4216c9cc7ffabf50d9ad1932209251", "subject": "KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53277", "commit_url": "https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251" }, { "cve": "CVE-2026-53278", "author_name": "James Morse", "author_email": "james.morse@arm.com", "fix_sha": "6ccbb613b42a1f1ba7bfd547a148f644a902a25c", "subject": "arm_mpam: Check whether the config array is allocated before destroying it", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53278", "commit_url": "https://git.kernel.org/stable/c/6ccbb613b42a1f1ba7bfd547a148f644a902a25c" }, { "cve": "CVE-2026-53279", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "657a091ab6d01d0091b77660c75cfed573c9a53e", "subject": "drm/gma500/oaktrail_lvds: fix hang on init failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53279", "commit_url": "https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e" }, { "cve": "CVE-2026-53280", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "d769711fcddd005f1e654b3bde547140917fe696", "subject": "iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53280", "commit_url": "https://git.kernel.org/stable/c/d769711fcddd005f1e654b3bde547140917fe696" }, { "cve": "CVE-2026-53281", "author_name": "Zhenzhong Duan", "author_email": "zhenzhong.duan@intel.com", "fix_sha": "79ea2feb917b05366b49d85573c9c5331f043b2c", "subject": "iommu/vt-d: Avoid NULL pointer dereference or refcount corruption", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53281", "commit_url": "https://git.kernel.org/stable/c/79ea2feb917b05366b49d85573c9c5331f043b2c" }, { "cve": "CVE-2026-53282", "author_name": "David Woodhouse", "author_email": "dwmw@amazon.co.uk", "fix_sha": "786a45757dcdf8f2beb9d4a6db605db16c18b2b4", "subject": "x86/kexec: Push kjump return address even for non-kjump kexec", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53282", "commit_url": "https://git.kernel.org/stable/c/786a45757dcdf8f2beb9d4a6db605db16c18b2b4" }, { "cve": "CVE-2026-53283", "author_name": "Jose Fernandez (Anthropic)", "author_email": "jose.fernandez@linux.dev", "fix_sha": "07d0f496fe7ec5abe3bee7e38be709521567bb33", "subject": "iommu/amd: Bounds-check devid in __rlookup_amd_iommu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53283", "commit_url": "https://git.kernel.org/stable/c/07d0f496fe7ec5abe3bee7e38be709521567bb33" }, { "cve": "CVE-2026-53284", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "4066c55e109475a06d18a1f127c939d551211956", "subject": "btrfs: only release the dirty pages io tree after successful writes", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53284", "commit_url": "https://git.kernel.org/stable/c/4066c55e109475a06d18a1f127c939d551211956" }, { "cve": "CVE-2026-53285", "author_name": "Mikhail Gavrilov", "author_email": "mikhail.v.gavrilov@gmail.com", "fix_sha": "183182235f6d53bac62c6c39014738a54a68dfa6", "subject": "drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53285", "commit_url": "https://git.kernel.org/stable/c/183182235f6d53bac62c6c39014738a54a68dfa6" }, { "cve": "CVE-2026-53286", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "6c77b9510829a424d1b74409b7db9456e3522871", "subject": "idpf: fix double free and use-after-free in aux device error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53286", "commit_url": "https://git.kernel.org/stable/c/6c77b9510829a424d1b74409b7db9456e3522871" }, { "cve": "CVE-2026-53287", "author_name": "Sergio Correia", "author_email": "scorreia@redhat.com", "fix_sha": "e4a640475e43f406fdfd56d370b1f34b0cbbc18d", "subject": "audit: fix incorrect inheritable capability in CAPSET records", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53287", "commit_url": "https://git.kernel.org/stable/c/e4a640475e43f406fdfd56d370b1f34b0cbbc18d" }, { "cve": "CVE-2026-53288", "author_name": "Zhaoyang Huang", "author_email": "zhaoyang.huang@unisoc.com", "fix_sha": "4d8e74ad4585672489da6145b3328d415f50db82", "subject": "arm64: Reserve an extra page for early kernel mapping", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53288", "commit_url": "https://git.kernel.org/stable/c/4d8e74ad4585672489da6145b3328d415f50db82" }, { "cve": "CVE-2026-53289", "author_name": "Petr Oros", "author_email": "poros@redhat.com", "fix_sha": "54ef02487914c24170c7e1c061e45212dc55365e", "subject": "ice: fix NULL pointer dereference in ice_reset_all_vfs()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53289", "commit_url": "https://git.kernel.org/stable/c/54ef02487914c24170c7e1c061e45212dc55365e" }, { "cve": "CVE-2026-53290", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "dc2d9842c67d883d3200ae33b9c3859dd9492408", "subject": "drm/xe/eustall: Fix drm_dev_put called before stream disable in close", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53290", "commit_url": "https://git.kernel.org/stable/c/dc2d9842c67d883d3200ae33b9c3859dd9492408" }, { "cve": "CVE-2026-53291", "author_name": "wangdicheng", "author_email": "wangdicheng@kylinos.cn", "fix_sha": "b0e2333a231107adedd38c6fcfe1adc6162716fc", "subject": "ALSA: hda/conexant: Fix missing error check for jack detection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53291", "commit_url": "https://git.kernel.org/stable/c/b0e2333a231107adedd38c6fcfe1adc6162716fc" }, { "cve": "CVE-2026-53292", "author_name": "Morduan Zang", "author_email": "zhangdandan@uniontech.com", "fix_sha": "5b0c911bcdbd982f7748d11c0b39ec5808eae2de", "subject": "net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53292", "commit_url": "https://git.kernel.org/stable/c/5b0c911bcdbd982f7748d11c0b39ec5808eae2de" }, { "cve": "CVE-2026-53293", "author_name": "Christian K\u00f6nig", "author_email": "christian.koenig@amd.com", "fix_sha": "0ef196a208385b7d7da79f411c161b04e97283e2", "subject": "drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53293", "commit_url": "https://git.kernel.org/stable/c/0ef196a208385b7d7da79f411c161b04e97283e2" }, { "cve": "CVE-2026-53294", "author_name": "Wolfram Sang", "author_email": "wsa+renesas@sang-engineering.com", "fix_sha": "88ebadbf0deefdaccdab868b44ff70a0a257f473", "subject": "mailbox: mailbox-test: don't free the reused channel", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53294", "commit_url": "https://git.kernel.org/stable/c/88ebadbf0deefdaccdab868b44ff70a0a257f473" }, { "cve": "CVE-2026-53295", "author_name": "Wolfram Sang", "author_email": "wsa+renesas@sang-engineering.com", "fix_sha": "c1aad75595fb67edc7fda8af249d3b886efa1be9", "subject": "mailbox: add sanity check for channel array", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53295", "commit_url": "https://git.kernel.org/stable/c/c1aad75595fb67edc7fda8af249d3b886efa1be9" }, { "cve": "CVE-2026-53296", "author_name": "Wolfram Sang", "author_email": "wsa+renesas@sang-engineering.com", "fix_sha": "c02053a9055d5fdfd32432287cca8958db1d5bc5", "subject": "mailbox: mailbox-test: free channels on probe error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53296", "commit_url": "https://git.kernel.org/stable/c/c02053a9055d5fdfd32432287cca8958db1d5bc5" }, { "cve": "CVE-2026-53297", "author_name": "Erni Sri Satya Vennela", "author_email": "ernis@linux.microsoft.com", "fix_sha": "50271d7ec95144d26808025b508f463780517d3c", "subject": "net: mana: Guard mana_remove against double invocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53297", "commit_url": "https://git.kernel.org/stable/c/50271d7ec95144d26808025b508f463780517d3c" }, { "cve": "CVE-2026-53298", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "379050947a1828826ad7ea50c95245a56929b35a", "subject": "net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53298", "commit_url": "https://git.kernel.org/stable/c/379050947a1828826ad7ea50c95245a56929b35a" }, { "cve": "CVE-2026-53299", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "f329924bb49458c65297f1361f545816a5b90998", "subject": "net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53299", "commit_url": "https://git.kernel.org/stable/c/f329924bb49458c65297f1361f545816a5b90998" }, { "cve": "CVE-2026-53300", "author_name": "Wei Fang", "author_email": "wei.fang@nxp.com", "fix_sha": "3cade698881eb238f88cbbfec82acc2110440a3f", "subject": "net: enetc: fix NTMP DMA use-after-free issue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53300", "commit_url": "https://git.kernel.org/stable/c/3cade698881eb238f88cbbfec82acc2110440a3f" }, { "cve": "CVE-2026-53301", "author_name": "Ronald Claveau", "author_email": "linux-kernel-dev@aliel.fr", "fix_sha": "9797524ef2b69c6b187b55bd844eb72a8c1cbd99", "subject": "reset: amlogic: t7: Fix null reset ops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53301", "commit_url": "https://git.kernel.org/stable/c/9797524ef2b69c6b187b55bd844eb72a8c1cbd99" }, { "cve": "CVE-2026-53302", "author_name": "Aleksander Jan Bajkowski", "author_email": "olek2@wp.pl", "fix_sha": "3ba3b02f897b14e34977e1886d95ffe64d907204", "subject": "crypto: eip93 - fix hmac setkey algo selection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53302", "commit_url": "https://git.kernel.org/stable/c/3ba3b02f897b14e34977e1886d95ffe64d907204" }, { "cve": "CVE-2026-53303", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "5909bedbed38c558bee7cb6758ceedf9bc3a9194", "subject": "f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53303", "commit_url": "https://git.kernel.org/stable/c/5909bedbed38c558bee7cb6758ceedf9bc3a9194" }, { "cve": "CVE-2026-53304", "author_name": "Yang Erkun", "author_email": "yangerkun@huawei.com", "fix_sha": "d06a310b45e153872033dd0cf19d5a2279121099", "subject": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53304", "commit_url": "https://git.kernel.org/stable/c/d06a310b45e153872033dd0cf19d5a2279121099" }, { "cve": "CVE-2026-53305", "author_name": "Mostafa Saleh", "author_email": "smostafa@google.com", "fix_sha": "381133848a033c2086cf9cafb226f425bd0414ff", "subject": "usb: typec: ps883x: Fix Oops at unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53305", "commit_url": "https://git.kernel.org/stable/c/381133848a033c2086cf9cafb226f425bd0414ff" }, { "cve": "CVE-2026-53306", "author_name": "Randy Dunlap", "author_email": "rdunlap@infradead.org", "fix_sha": "f2a880e802ad12d1e38039d1334fb1475d0f5241", "subject": "tty: hvc_iucv: fix off-by-one in number of supported devices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53306", "commit_url": "https://git.kernel.org/stable/c/f2a880e802ad12d1e38039d1334fb1475d0f5241" }, { "cve": "CVE-2026-53307", "author_name": "Andy Shevchenko", "author_email": "andriy.shevchenko@linux.intel.com", "fix_sha": "c98324ea7849b6e5baa1774f71709b375a2c2f9e", "subject": "pinctrl: pinconf-generic: Fully validate 'pinmux' property", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53307", "commit_url": "https://git.kernel.org/stable/c/c98324ea7849b6e5baa1774f71709b375a2c2f9e" }, { "cve": "CVE-2026-53308", "author_name": "Krzysztof Kozlowski", "author_email": "krzysztof.kozlowski@oss.qualcomm.com", "fix_sha": "1e668baadefb16e81269dbfebf3ffc2672e3a3bb", "subject": "power: supply: max77705: Free allocated workqueue and fix removal order", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53308", "commit_url": "https://git.kernel.org/stable/c/1e668baadefb16e81269dbfebf3ffc2672e3a3bb" }, { "cve": "CVE-2026-53309", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "01b61e8dda9b0fdb0d4cda43de25f4e390554d7b", "subject": "ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53309", "commit_url": "https://git.kernel.org/stable/c/01b61e8dda9b0fdb0d4cda43de25f4e390554d7b" }, { "cve": "CVE-2026-53310", "author_name": "Sumit Gupta", "author_email": "sumitg@nvidia.com", "fix_sha": "a5f51b04cbb3ae0f9cb2c4488952b775ebb0ccbf", "subject": "soc/tegra: cbb: Fix cross-fabric target timeout lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53310", "commit_url": "https://git.kernel.org/stable/c/a5f51b04cbb3ae0f9cb2c4488952b775ebb0ccbf" }, { "cve": "CVE-2026-53311", "author_name": "Luis Henriques", "author_email": "luis@igalia.com", "fix_sha": "5a6baf204610589f8a5b5a1cd69d1fe661d9d3cd", "subject": "fuse: fix uninit-value in fuse_dentry_revalidate()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53311", "commit_url": "https://git.kernel.org/stable/c/5a6baf204610589f8a5b5a1cd69d1fe661d9d3cd" }, { "cve": "CVE-2026-53312", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "40a13b49957937427bc23e78eb50679df4396a47", "subject": "iommu/riscv: Remove overflows on the invalidation path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53312", "commit_url": "https://git.kernel.org/stable/c/40a13b49957937427bc23e78eb50679df4396a47" }, { "cve": "CVE-2026-53313", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "4ae3e16f4b3bf64140f773629b765d605ee079a9", "subject": "drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53313", "commit_url": "https://git.kernel.org/stable/c/4ae3e16f4b3bf64140f773629b765d605ee079a9" }, { "cve": "CVE-2026-53314", "author_name": "Daniel Jordan", "author_email": "daniel.m.jordan@oracle.com", "fix_sha": "c8c4a2972f83c8b68ff03b43cecdb898939ff851", "subject": "padata: Put CPU offline callback in ONLINE section to allow failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53314", "commit_url": "https://git.kernel.org/stable/c/c8c4a2972f83c8b68ff03b43cecdb898939ff851" }, { "cve": "CVE-2026-53315", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "2b8101cc3b34d4d80d799360d2744829d5964479", "subject": "drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53315", "commit_url": "https://git.kernel.org/stable/c/2b8101cc3b34d4d80d799360d2744829d5964479" }, { "cve": "CVE-2026-53316", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "6b606216e03fa2b53cc179d8383b683a140fe6e1", "subject": "drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53316", "commit_url": "https://git.kernel.org/stable/c/6b606216e03fa2b53cc179d8383b683a140fe6e1" }, { "cve": "CVE-2026-53317", "author_name": "Rory Little", "author_email": "rory@candelatech.com", "fix_sha": "4d0bf21e3e20619d51d06c0c36207aabab8b712c", "subject": "wifi: mt76: mt7921: Place upper limit on station AID", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53317", "commit_url": "https://git.kernel.org/stable/c/4d0bf21e3e20619d51d06c0c36207aabab8b712c" }, { "cve": "CVE-2026-53318", "author_name": "Ming Yen Hsieh", "author_email": "mingyen.hsieh@mediatek.com", "fix_sha": "83ae3a18ba957257b4c406273d2da2caeea2b439", "subject": "wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53318", "commit_url": "https://git.kernel.org/stable/c/83ae3a18ba957257b4c406273d2da2caeea2b439" }, { "cve": "CVE-2026-53319", "author_name": "Yuto Ohnuki", "author_email": "ytohnuki@amazon.com", "fix_sha": "e9b004ff83067cdf96774b45aea4b239ace99a2f", "subject": "blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53319", "commit_url": "https://git.kernel.org/stable/c/e9b004ff83067cdf96774b45aea4b239ace99a2f" }, { "cve": "CVE-2026-53320", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "be3e5d10643d3be1cbac9d9939f220a99253f980", "subject": "nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53320", "commit_url": "https://git.kernel.org/stable/c/be3e5d10643d3be1cbac9d9939f220a99253f980" }, { "cve": "CVE-2026-53321", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "df8599ee18c0e5fe343ffe0b4c379636b8bb839a", "subject": "io_uring/napi: cap busy_poll_to 10 msec", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53321", "commit_url": "https://git.kernel.org/stable/c/df8599ee18c0e5fe343ffe0b4c379636b8bb839a" }, { "cve": "CVE-2026-53322", "author_name": "Matt Evans", "author_email": "mattev@meta.com", "fix_sha": "d97708701434ce72968e771976aaf9d3438fcafd", "subject": "vfio/pci: Clean up DMABUFs before disabling function", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53322", "commit_url": "https://git.kernel.org/stable/c/d97708701434ce72968e771976aaf9d3438fcafd" }, { "cve": "CVE-2026-53323", "author_name": "Stanislav Fomichev", "author_email": "sdf.kernel@gmail.com", "fix_sha": "0f99e0c3e19badaf3fdced0d3feba623e59eed41", "subject": "net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53323", "commit_url": "https://git.kernel.org/stable/c/0f99e0c3e19badaf3fdced0d3feba623e59eed41" }, { "cve": "CVE-2026-53324", "author_name": "Erni Sri Satya Vennela", "author_email": "ernis@linux.microsoft.com", "fix_sha": "c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559", "subject": "net: mana: Use pci_name() for debugfs directory naming", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53324", "commit_url": "https://git.kernel.org/stable/c/c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559" }, { "cve": "CVE-2026-53325", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "b08472db93b1ccff84a7adec5779d47f0e9d3a30", "subject": "agp/amd64: Fix broken error propagation in agp_amd64_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53325", "commit_url": "https://git.kernel.org/stable/c/b08472db93b1ccff84a7adec5779d47f0e9d3a30" }, { "cve": "CVE-2026-53326", "author_name": "Waiman Long", "author_email": "longman@redhat.com", "fix_sha": "0d046ae106255cba5eb83b23f78ee93f3620247d", "subject": "debugobjects: Don't call fill_pool() in early boot hardirq context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53326", "commit_url": "https://git.kernel.org/stable/c/0d046ae106255cba5eb83b23f78ee93f3620247d" }, { "cve": "CVE-2026-53327", "author_name": "Helen Koike", "author_email": "koike@igalia.com", "fix_sha": "5f41161059fd0f1bbf18c90f3180e38cc45a14eb", "subject": "debugobjects: Do not fill_pool() if pi_blocked_on", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53327", "commit_url": "https://git.kernel.org/stable/c/5f41161059fd0f1bbf18c90f3180e38cc45a14eb" }, { "cve": "CVE-2026-53328", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "02e545c4297a26dbbc41df81b831e7f605bcd306", "subject": "sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53328", "commit_url": "https://git.kernel.org/stable/c/02e545c4297a26dbbc41df81b831e7f605bcd306" }, { "cve": "CVE-2026-53329", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "da48bc4461b8a5ebfb9264c9b191a701d8e99009", "subject": "drm/amd/display: Use krealloc_array() in dal_vector_reserve()", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53329", "commit_url": "https://git.kernel.org/stable/c/da48bc4461b8a5ebfb9264c9b191a701d8e99009" }, { "cve": "CVE-2026-53330", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "e8b4d37eba05141ee01794fc6b7f2da808cee83b", "subject": "drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53330", "commit_url": "https://git.kernel.org/stable/c/e8b4d37eba05141ee01794fc6b7f2da808cee83b" }, { "cve": "CVE-2026-53331", "author_name": "Bjorn Andersson", "author_email": "bjorn.andersson@oss.qualcomm.com", "fix_sha": "55f2ea9ff83cc27a85526b14bc9b32f96a08d6ec", "subject": "slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53331", "commit_url": "https://git.kernel.org/stable/c/55f2ea9ff83cc27a85526b14bc9b32f96a08d6ec" }, { "cve": "CVE-2026-53332", "author_name": "Bjorn Andersson", "author_email": "bjorn.andersson@oss.qualcomm.com", "fix_sha": "2a9d50e9ea406e0c8735938484adc20515ef1b47", "subject": "slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53332", "commit_url": "https://git.kernel.org/stable/c/2a9d50e9ea406e0c8735938484adc20515ef1b47" }, { "cve": "CVE-2026-53333", "author_name": "Usama Arif", "author_email": "usama.arif@linux.dev", "fix_sha": "0c25b8734367574e21aeb8468c2e522713134da7", "subject": "mm/mincore: handle non-swap entries before !CONFIG_SWAP guard", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53333", "commit_url": "https://git.kernel.org/stable/c/0c25b8734367574e21aeb8468c2e522713134da7" }, { "cve": "CVE-2026-53334", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "7e2ed8a29427af534bf2cb9b8bc51762b8b6e654", "subject": "mm/damon/reclaim: handle ctx allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53334", "commit_url": "https://git.kernel.org/stable/c/7e2ed8a29427af534bf2cb9b8bc51762b8b6e654" }, { "cve": "CVE-2026-53335", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "ab04340b5ae5d52c1d46b750538febcde9d889e7", "subject": "mm/damon/lru_sort: handle ctx allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53335", "commit_url": "https://git.kernel.org/stable/c/ab04340b5ae5d52c1d46b750538febcde9d889e7" }, { "cve": "CVE-2026-53336", "author_name": "Andre Heider", "author_email": "a.heider@gmail.com", "fix_sha": "ea41020b9018e31c2ea7e9d89021e3e6d7470883", "subject": "nvmem: layouts: onie-tlv: fix hang on unknown types", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53336", "commit_url": "https://git.kernel.org/stable/c/ea41020b9018e31c2ea7e9d89021e3e6d7470883" }, { "cve": "CVE-2026-53337", "author_name": "ZhaoJinming", "author_email": "zhaojinming@uniontech.com", "fix_sha": "a764b0e8317a863006e05732e1aefe821b9d8c2d", "subject": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53337", "commit_url": "https://git.kernel.org/stable/c/a764b0e8317a863006e05732e1aefe821b9d8c2d" }, { "cve": "CVE-2026-53338", "author_name": "ZhaoJinming", "author_email": "zhaojinming@uniontech.com", "fix_sha": "f9f25118faa4dd2b6e3d14a03d123bbdbd59925d", "subject": "net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53338", "commit_url": "https://git.kernel.org/stable/c/f9f25118faa4dd2b6e3d14a03d123bbdbd59925d" }, { "cve": "CVE-2026-53339", "author_name": "Vladimir Zapolskiy", "author_email": "vladimir.zapolskiy@linaro.org", "fix_sha": "729ac5a4b966aac42e08a94dea966f4429008548", "subject": "i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53339", "commit_url": "https://git.kernel.org/stable/c/729ac5a4b966aac42e08a94dea966f4429008548" }, { "cve": "CVE-2026-53340", "author_name": "Carlos Song", "author_email": "carlos.song@nxp.com", "fix_sha": "8783fb8031799f1230997c16df8c8dce9fcd1841", "subject": "i2c: imx: fix clock and pinctrl state inconsistency in runtime PM", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53340", "commit_url": "https://git.kernel.org/stable/c/8783fb8031799f1230997c16df8c8dce9fcd1841" }, { "cve": "CVE-2026-53341", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "40ab6644b99685755f740b872c00ef40d9aa870e", "subject": "fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53341", "commit_url": "https://git.kernel.org/stable/c/40ab6644b99685755f740b872c00ef40d9aa870e" }, { "cve": "CVE-2026-53342", "author_name": "Alistair Popple", "author_email": "apopple@nvidia.com", "fix_sha": "c594b83457ccdee76d458416fb3bc9348a37592f", "subject": "arm64: mm: call pagetable dtor when freeing hot-removed page tables", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53342", "commit_url": "https://git.kernel.org/stable/c/c594b83457ccdee76d458416fb3bc9348a37592f" }, { "cve": "CVE-2026-53343", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "77a1f6883dc6e837bb2cb30b9b02e2f94338e2c6", "subject": "ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53343", "commit_url": "https://git.kernel.org/stable/c/77a1f6883dc6e837bb2cb30b9b02e2f94338e2c6" }, { "cve": "CVE-2026-53344", "author_name": "Judith Mendez", "author_email": "jm@ti.com", "fix_sha": "8473c3a197b57ff01396f7a2ec6ddf65383820d4", "subject": "pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53344", "commit_url": "https://git.kernel.org/stable/c/8473c3a197b57ff01396f7a2ec6ddf65383820d4" }, { "cve": "CVE-2026-53345", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "8618004d3e897c0f1b71d9a9ab860461289bb89a", "subject": "KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53345", "commit_url": "https://git.kernel.org/stable/c/8618004d3e897c0f1b71d9a9ab860461289bb89a" }, { "cve": "CVE-2026-53346", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "ac35b5580ace12e5d0a0b5e61e36d2c4e1ffa29c", "subject": "rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53346", "commit_url": "https://git.kernel.org/stable/c/ac35b5580ace12e5d0a0b5e61e36d2c4e1ffa29c" }, { "cve": "CVE-2026-53347", "author_name": "Dmitry Osipenko", "author_email": "dmitry.osipenko@collabora.com", "fix_sha": "f329e8325e054bd6d84d10904f8dd51137281b92", "subject": "drm/virtio: Fix driver removal with disabled KMS", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53347", "commit_url": "https://git.kernel.org/stable/c/f329e8325e054bd6d84d10904f8dd51137281b92" }, { "cve": "CVE-2026-53348", "author_name": "Kean Ren", "author_email": "rh_king@163.com", "fix_sha": "e4c60a1d4b6ccc66aefb3789cd908d4f9482eefd", "subject": "ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53348", "commit_url": "https://git.kernel.org/stable/c/e4c60a1d4b6ccc66aefb3789cd908d4f9482eefd" }, { "cve": "CVE-2026-53349", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "c3009418f9fa1dcb3eb86f4d8c92583537b5faa3", "subject": "netfilter: nf_conntrack: destroy stale expectfn expectations on unregister", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53349", "commit_url": "https://git.kernel.org/stable/c/c3009418f9fa1dcb3eb86f4d8c92583537b5faa3" }, { "cve": "CVE-2026-53350", "author_name": "Richard Fitzgerald", "author_email": "rf@opensource.cirrus.com", "fix_sha": "7d3fb78b550301e43fdc60312aed733069694426", "subject": "ASoC: wm_adsp: Fix NULL dereference when removing firmware controls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53350", "commit_url": "https://git.kernel.org/stable/c/7d3fb78b550301e43fdc60312aed733069694426" }, { "cve": "CVE-2026-53351", "author_name": "Andreas Schwab", "author_email": "schwab@suse.de", "fix_sha": "e3573f739e3dadab57ec80488d07e05c8f6e82d3", "subject": "riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53351", "commit_url": "https://git.kernel.org/stable/c/e3573f739e3dadab57ec80488d07e05c8f6e82d3" }, { "cve": "CVE-2026-53352", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "90918794a4e2c3b440f8fcf3847765a8b1d81b25", "subject": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53352", "commit_url": "https://git.kernel.org/stable/c/90918794a4e2c3b440f8fcf3847765a8b1d81b25" }, { "cve": "CVE-2026-53353", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "afd0f17ca46258cec3a5cc48b8df9327fe772490", "subject": "hsr: Remove WARN_ONCE() in hsr_addr_is_self().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53353", "commit_url": "https://git.kernel.org/stable/c/afd0f17ca46258cec3a5cc48b8df9327fe772490" }, { "cve": "CVE-2026-53354", "author_name": "Mark Rutland", "author_email": "mark.rutland@arm.com", "fix_sha": "cfd391e74134db664feb499d43af286380b10ba8", "subject": "arm64: errata: Mitigate TLBI errata on various Arm CPUs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53354", "commit_url": "https://git.kernel.org/stable/c/cfd391e74134db664feb499d43af286380b10ba8" }, { "cve": "CVE-2026-53355", "author_name": "Yuqi Xu", "author_email": "xuyq21@lenovo.com", "fix_sha": "20cf0fb715c41111469577e85e35d15f099473e0", "subject": "net: rds: clear i_sends on setup unwind", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53355", "commit_url": "https://git.kernel.org/stable/c/20cf0fb715c41111469577e85e35d15f099473e0" }, { "cve": "CVE-2026-53356", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "d21ad938398bca695a511307de38a65889e3b354", "subject": "drm/i915/gem: Fix phys BO pread/pwrite with offset", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53356", "commit_url": "https://git.kernel.org/stable/c/d21ad938398bca695a511307de38a65889e3b354" }, { "cve": "CVE-2026-53357", "author_name": "Safa Karaku\u015f", "author_email": "safa.karakus@secunnix.com", "fix_sha": "ab1513597c6cf17cd1ad2a21e3b045421b48e022", "subject": "Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53357", "commit_url": "https://git.kernel.org/stable/c/ab1513597c6cf17cd1ad2a21e3b045421b48e022" }, { "cve": "CVE-2026-53358", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "8c8e620467a7b51562dbcefbd1f09f288d7d710d", "subject": "Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53358", "commit_url": "https://git.kernel.org/stable/c/8c8e620467a7b51562dbcefbd1f09f288d7d710d" }, { "cve": "CVE-2026-53359", "author_name": "Paolo Bonzini", "author_email": "pbonzini@redhat.com", "fix_sha": "81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb", "subject": "KVM: x86: Fix shadow paging use-after-free due to unexpected role", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53359", "commit_url": "https://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb" }, { "cve": "CVE-2026-53360", "author_name": "Michael Roth", "author_email": "michael.roth@amd.com", "fix_sha": "db3f2195d29344a3cf1e9dd9ab7f21ced7308cf7", "subject": "KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53360", "commit_url": "https://git.kernel.org/stable/c/db3f2195d29344a3cf1e9dd9ab7f21ced7308cf7" }, { "cve": "CVE-2026-53361", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "d82ba05263c69fa2437fe93e4e561cc40f4c03af", "subject": "af_unix: Set gc_in_progress to true in unix_gc().", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53361", "commit_url": "https://git.kernel.org/stable/c/d82ba05263c69fa2437fe93e4e561cc40f4c03af" }, { "cve": "CVE-2026-53362", "author_name": "Wongi Lee", "author_email": "qw3rtyp0@gmail.com", "fix_sha": "736b380e28d0480c7bc3e022f1950f31fe53a7c5", "subject": "ipv6: account for fraggap on the paged allocation path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53362", "commit_url": "https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5" }, { "cve": "CVE-2026-53363", "author_name": "Takao Sato", "author_email": "takaosato1997@gmail.com", "fix_sha": "e9096a5a170e7ecd6467bc2e08668ec39897cda7", "subject": "xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53363", "commit_url": "https://git.kernel.org/stable/c/e9096a5a170e7ecd6467bc2e08668ec39897cda7" }, { "cve": "CVE-2026-53364", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "bfa9d28960ed677d556bdf097073bc3129686229", "subject": "Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53364", "commit_url": "https://git.kernel.org/stable/c/bfa9d28960ed677d556bdf097073bc3129686229" }, { "cve": "CVE-2026-53365", "author_name": "Stefano Garzarella", "author_email": "sgarzare@redhat.com", "fix_sha": "ae38d9179190a956e2a87a69ef1dd6f451b51c4d", "subject": "vsock/virtio: fix zerocopy completion for multi-skb sends", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53365", "commit_url": "https://git.kernel.org/stable/c/ae38d9179190a956e2a87a69ef1dd6f451b51c4d" }, { "cve": "CVE-2026-53366", "author_name": "Wongi Lee", "author_email": "qw3rtyp0@gmail.com", "fix_sha": "eca856950f7cb1a221e02b99d758409f2c5cec42", "subject": "ipv4: account for fraggap on the paged allocation path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53366", "commit_url": "https://git.kernel.org/stable/c/eca856950f7cb1a221e02b99d758409f2c5cec42" }, { "cve": "CVE-2026-53367", "author_name": "Stephen Smalley", "author_email": "stephen.smalley.work@gmail.com", "fix_sha": "f92d542577db878acfd21cc18dab23d03023b217", "subject": "selinux: fix avdcache auditing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53367", "commit_url": "https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217" }, { "cve": "CVE-2026-53368", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "019f9dda7f66e55eb94cd32e1d3fff5835f73fbc", "subject": "f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53368", "commit_url": "https://git.kernel.org/stable/c/019f9dda7f66e55eb94cd32e1d3fff5835f73fbc" }, { "cve": "CVE-2026-53369", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "55d41b0a20128e86b9e960dd2e3f0a2d69a18df7", "subject": "udf: reject descriptors with oversized CRC length", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53369", "commit_url": "https://git.kernel.org/stable/c/55d41b0a20128e86b9e960dd2e3f0a2d69a18df7" }, { "cve": "CVE-2026-53370", "author_name": "Dapeng Mi", "author_email": "dapeng1.mi@linux.intel.com", "fix_sha": "5ad732a56be46aabf158c16aa0c095291727aaef", "subject": "perf/x86/intel: Improve validation and configuration of ACR masks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53370", "commit_url": "https://git.kernel.org/stable/c/5ad732a56be46aabf158c16aa0c095291727aaef" }, { "cve": "CVE-2026-53371", "author_name": "Kai Zen", "author_email": "kai.aizen.dev@gmail.com", "fix_sha": "654a27f25530d052eeedf086e6c3e2d585c203bd", "subject": "RDMA/ionic: bound node_desc sysfs read with %.64s", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53371", "commit_url": "https://git.kernel.org/stable/c/654a27f25530d052eeedf086e6c3e2d585c203bd" }, { "cve": "CVE-2026-53372", "author_name": "Zhenzhong Duan", "author_email": "zhenzhong.duan@intel.com", "fix_sha": "cc5bd898ff70710ffc41cd8e5c2741cb64750047", "subject": "iommu/vt-d: Block PASID attachment to nested domain with dirty tracking", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53372", "commit_url": "https://git.kernel.org/stable/c/cc5bd898ff70710ffc41cd8e5c2741cb64750047" }, { "cve": "CVE-2026-53373", "author_name": "Lorenzo Stoakes", "author_email": "ljs@kernel.org", "fix_sha": "619eab23e1ce7c97e54bfc5a417306d94b3f6f13", "subject": "mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53373", "commit_url": "https://git.kernel.org/stable/c/619eab23e1ce7c97e54bfc5a417306d94b3f6f13" }, { "cve": "CVE-2026-53374", "author_name": "Philip Yang", "author_email": "philip.yang@amd.com", "fix_sha": "e6c2e6c2e1fa066968a16aca1cb66cd1bdde7741", "subject": "drm/amdgpu: zero-initialize GART table on allocation", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53374", "commit_url": "https://git.kernel.org/stable/c/e6c2e6c2e1fa066968a16aca1cb66cd1bdde7741" }, { "cve": "CVE-2026-53375", "author_name": "Benjamin Cheng", "author_email": "benjamin.cheng@amd.com", "fix_sha": "de2a02cc28d6d5d37db07d00a9a684c754a5fd74", "subject": "drm/amdgpu/vce: Prevent partial address patches", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53375", "commit_url": "https://git.kernel.org/stable/c/de2a02cc28d6d5d37db07d00a9a684c754a5fd74" }, { "cve": "CVE-2026-53376", "author_name": "Alysa Liu", "author_email": "alysa.liu@amd.com", "fix_sha": "74b73fa56a395d46745e4f245225963e9f8be7f1", "subject": "drm/amdkfd: Add upper bound check for num_of_nodes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53376", "commit_url": "https://git.kernel.org/stable/c/74b73fa56a395d46745e4f245225963e9f8be7f1" }, { "cve": "CVE-2026-53377", "author_name": "Anna Maniscalco", "author_email": "anna.maniscalco2000@gmail.com", "fix_sha": "01a0d6cd7032e9993feea19fadb03ef9d5b488f2", "subject": "drm/msm: always recover the gpu", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53377", "commit_url": "https://git.kernel.org/stable/c/01a0d6cd7032e9993feea19fadb03ef9d5b488f2" }, { "cve": "CVE-2026-53378", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "235b333e2878d791cee09e1e72f44611a9400114", "subject": "drm/colorop: Fix blob property reference tracking in state lifecycle", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53378", "commit_url": "https://git.kernel.org/stable/c/235b333e2878d791cee09e1e72f44611a9400114" }, { "cve": "CVE-2026-53379", "author_name": "Alexander Koskovich", "author_email": "akoskovich@pm.me", "fix_sha": "f75e160745663ce9b13362ae6e90bd439c58df69", "subject": "media: i2c: ov8856: free control handler on error in ov8856_init_controls()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53379", "commit_url": "https://git.kernel.org/stable/c/f75e160745663ce9b13362ae6e90bd439c58df69" }, { "cve": "CVE-2026-53380", "author_name": "Barnab\u00e1s P\u0151cze", "author_email": "barnabas.pocze+renesas@ideasonboard.com", "fix_sha": "72773ff1cdfaebc593f53b1719b2c1773ecf8c43", "subject": "media: rzv2h-ivc: Fix concurrent buffer list access", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53380", "commit_url": "https://git.kernel.org/stable/c/72773ff1cdfaebc593f53b1719b2c1773ecf8c43" }, { "cve": "CVE-2026-53381", "author_name": "Miklos Szeredi", "author_email": "mszeredi@redhat.com", "fix_sha": "06b41351779e9289e8785694ade9042ae85e41ea", "subject": "virtiofs: fix UAF on submount umount", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53381", "commit_url": "https://git.kernel.org/stable/c/06b41351779e9289e8785694ade9042ae85e41ea" }, { "cve": "CVE-2026-53382", "author_name": "Ruslan Valiyev", "author_email": "linuxoid@gmail.com", "fix_sha": "7d8bf3d8f91073f4db347ed3aa6302b56107499c", "subject": "media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53382", "commit_url": "https://git.kernel.org/stable/c/7d8bf3d8f91073f4db347ed3aa6302b56107499c" }, { "cve": "CVE-2026-53383", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "609ca17d869d04ba249e32cdcbf13c0b1c66f43c", "subject": "ksmbd: reject non-VALID session in compound request branch", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53383", "commit_url": "https://git.kernel.org/stable/c/609ca17d869d04ba249e32cdcbf13c0b1c66f43c" }, { "cve": "CVE-2026-53384", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "10fc708b4de7f86002d2d735a2dbf3b5b7f65692", "subject": "serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53384", "commit_url": "https://git.kernel.org/stable/c/10fc708b4de7f86002d2d735a2dbf3b5b7f65692" }, { "cve": "CVE-2026-53385", "author_name": "Yi Yang", "author_email": "yiyang13@huawei.com", "fix_sha": "a287620312dc6dcb9a093417a0e589bf30fcf38a", "subject": "vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53385", "commit_url": "https://git.kernel.org/stable/c/a287620312dc6dcb9a093417a0e589bf30fcf38a" }, { "cve": "CVE-2026-53386", "author_name": "Sam Daly", "author_email": "sam@samdaly.ie", "fix_sha": "95e8a48d7a85d4226934020e57815a3316d3a14b", "subject": "iio: adc: ti-ads1298: add bounds check to pga_settings index", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53386", "commit_url": "https://git.kernel.org/stable/c/95e8a48d7a85d4226934020e57815a3316d3a14b" }, { "cve": "CVE-2026-53387", "author_name": "Sam Daly", "author_email": "sam@samdaly.ie", "fix_sha": "307dc4240bd41852d9e0912921e298160db1c109", "subject": "iio: light: veml6075: add bounds check to veml6075_it_ms index", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53387", "commit_url": "https://git.kernel.org/stable/c/307dc4240bd41852d9e0912921e298160db1c109" }, { "cve": "CVE-2026-53388", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "a078484921052d0badd827fcc2770b5cfc1d4120", "subject": "fuse: re-lock request before replacing page cache folio", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53388", "commit_url": "https://git.kernel.org/stable/c/a078484921052d0badd827fcc2770b5cfc1d4120" }, { "cve": "CVE-2026-53389", "author_name": "HanQuan", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "5ba9950bc9078e19b69cca1e56d1553b125c6857", "subject": "net/tcp-ao: fix use-after-free of key in del_async path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53389", "commit_url": "https://git.kernel.org/stable/c/5ba9950bc9078e19b69cca1e56d1553b125c6857" }, { "cve": "CVE-2026-53390", "author_name": "Hem Parekh", "author_email": "hemparekh1596@gmail.com", "fix_sha": "1ef06004ed4bd6d3ed8c840d9d1a376b66d4935b", "subject": "ksmbd: fix out-of-bounds read in smb_check_perm_dacl()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53390", "commit_url": "https://git.kernel.org/stable/c/1ef06004ed4bd6d3ed8c840d9d1a376b66d4935b" }, { "cve": "CVE-2026-53391", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "41fe0f7b84f0cb822ae10ab08592996a592b2a25", "subject": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53391", "commit_url": "https://git.kernel.org/stable/c/41fe0f7b84f0cb822ae10ab08592996a592b2a25" }, { "cve": "CVE-2026-53392", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2c6bb3c40bc24f6aa8dfbe6fe98c3ad6389203f2", "subject": "NFSv4/flexfiles: reject zero filehandle version count", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53392", "commit_url": "https://git.kernel.org/stable/c/2c6bb3c40bc24f6aa8dfbe6fe98c3ad6389203f2" }, { "cve": "CVE-2026-53393", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "2090b05803faab8a9fa62fbff871007862cac1b7", "subject": "nfsd: reset write verifier on deferred writeback errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53393", "commit_url": "https://git.kernel.org/stable/c/2090b05803faab8a9fa62fbff871007862cac1b7" }, { "cve": "CVE-2026-53394", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "57aee7a35bb12753057c5b65d72d1f46c0e95b07", "subject": "nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53394", "commit_url": "https://git.kernel.org/stable/c/57aee7a35bb12753057c5b65d72d1f46c0e95b07" }, { "cve": "CVE-2026-53395", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "a60f25a800846ab8e5a13f8a9d05111f2aee55a7", "subject": "nfsd: fix dead ACL conflict guard in nfsd4_create", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53395", "commit_url": "https://git.kernel.org/stable/c/a60f25a800846ab8e5a13f8a9d05111f2aee55a7" }, { "cve": "CVE-2026-53396", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "24c975bbdd564d7d0ad90294bfa69729830345de", "subject": "nfsd: fix posix_acl leak and ignored error in nfsd4_create_file", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53396", "commit_url": "https://git.kernel.org/stable/c/24c975bbdd564d7d0ad90294bfa69729830345de" }, { "cve": "CVE-2026-53397", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "0853ac544c590880d797b04daa33fcb72b6be0e1", "subject": "nfsd: fix posix_acl leak on SETACL decode failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53397", "commit_url": "https://git.kernel.org/stable/c/0853ac544c590880d797b04daa33fcb72b6be0e1" }, { "cve": "CVE-2026-53398", "author_name": "Guannan Wang", "author_email": "wgnbuaa@gmail.com", "fix_sha": "9e18e83b8846a5c3fe13fc8a464b4865d33996c6", "subject": "NFSD: Fix SECINFO_NO_NAME decode error cleanup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53398", "commit_url": "https://git.kernel.org/stable/c/9e18e83b8846a5c3fe13fc8a464b4865d33996c6" }, { "cve": "CVE-2026-53399", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "30d55c8aabb261bc3f427d6b9aae7ef6206063f9", "subject": "nfsd: release layout stid on setlease failure", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53399", "commit_url": "https://git.kernel.org/stable/c/30d55c8aabb261bc3f427d6b9aae7ef6206063f9" }, { "cve": "CVE-2026-53400", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "ba14d7cf2fe7284610a29854bdff22b2537d3ce6", "subject": "i2c: core: fix adapter registration race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53400", "commit_url": "https://git.kernel.org/stable/c/ba14d7cf2fe7284610a29854bdff22b2537d3ce6" }, { "cve": "CVE-2026-53401", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "7958e67375aa111522086286bba13cfc0816ce8d", "subject": "fbdev: omap2: fix use-after-free in omapfb_mmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53401", "commit_url": "https://git.kernel.org/stable/c/7958e67375aa111522086286bba13cfc0816ce8d" }, { "cve": "CVE-2026-53402", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "8fdc8c2057eea08d40ce2c8eed41ff9e451c65c2", "subject": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53402", "commit_url": "https://git.kernel.org/stable/c/8fdc8c2057eea08d40ce2c8eed41ff9e451c65c2" }, { "cve": "CVE-2026-53403", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "7f08fc10fa3d3366dc3af723970bd03d7d6d10e3", "subject": "fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53403", "commit_url": "https://git.kernel.org/stable/c/7f08fc10fa3d3366dc3af723970bd03d7d6d10e3" }, { "cve": "CVE-2026-63793", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "e9e50ce4f13dc721014af622613409455c734942", "subject": "ntfs: serialize volume label accesses", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63793", "commit_url": "https://git.kernel.org/stable/c/e9e50ce4f13dc721014af622613409455c734942" }, { "cve": "CVE-2026-63794", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "78ee2d50185a037b3d2452a97f3dad69c3f7f389", "subject": "KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63794", "commit_url": "https://git.kernel.org/stable/c/78ee2d50185a037b3d2452a97f3dad69c3f7f389" }, { "cve": "CVE-2026-63795", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "1a3860d46e3eb47dbd60339783cdad7904486b9f", "subject": "9p: avoid putting oldfid in p9_client_walk() error path", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63795", "commit_url": "https://git.kernel.org/stable/c/1a3860d46e3eb47dbd60339783cdad7904486b9f" }, { "cve": "CVE-2026-63796", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "9bd541e09dffff27e5bec0f9f45b0228173a5375", "subject": "ocfs2: reject oversized group bitmap descriptors", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63796", "commit_url": "https://git.kernel.org/stable/c/9bd541e09dffff27e5bec0f9f45b0228173a5375" }, { "cve": "CVE-2026-63797", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "1ff3f528e67d20e2b1483dcaba899dc7832b2e6b", "subject": "rpmsg: char: Fix use-after-free on probe error path", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63797", "commit_url": "https://git.kernel.org/stable/c/1ff3f528e67d20e2b1483dcaba899dc7832b2e6b" }, { "cve": "CVE-2026-63798", "author_name": "Qingshuang Fu", "author_email": "fuqingshuang@kylinos.cn", "fix_sha": "37738fdf2ab1e504d1c63ce5bc0aeb6452d8f057", "subject": "irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63798", "commit_url": "https://git.kernel.org/stable/c/37738fdf2ab1e504d1c63ce5bc0aeb6452d8f057" }, { "cve": "CVE-2026-63799", "author_name": "Rik van Riel", "author_email": "riel@surriel.com", "fix_sha": "de3ab9bd3133899efb92e4cd05ba4203e58fc0a3", "subject": "sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63799", "commit_url": "https://git.kernel.org/stable/c/de3ab9bd3133899efb92e4cd05ba4203e58fc0a3" }, { "cve": "CVE-2026-63800", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "13e198a90ca4050f4bee8a3f23680389a6563ccc", "subject": "pNFS: Fix use-after-free in pnfs_update_layout()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63800", "commit_url": "https://git.kernel.org/stable/c/13e198a90ca4050f4bee8a3f23680389a6563ccc" }, { "cve": "CVE-2026-63801", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "bda3348872a2ef0d19f2df6aa8cb5025adce2f20", "subject": "tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63801", "commit_url": "https://git.kernel.org/stable/c/bda3348872a2ef0d19f2df6aa8cb5025adce2f20" }, { "cve": "CVE-2026-63802", "author_name": "Michal Koutn\u00fd", "author_email": "mkoutny@suse.com", "fix_sha": "0ab5ee5a1badb58cbb2242617cb01a4972b1f2a2", "subject": "blk-cgroup: fix UAF in __blkcg_rstat_flush()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63802", "commit_url": "https://git.kernel.org/stable/c/0ab5ee5a1badb58cbb2242617cb01a4972b1f2a2" }, { "cve": "CVE-2026-63803", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "c78a4e41ab5ead6193ad8a2dd92e8906bae659fa", "subject": "hdlc_ppp: sync per-proto timers before freeing hdlc state", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63803", "commit_url": "https://git.kernel.org/stable/c/c78a4e41ab5ead6193ad8a2dd92e8906bae659fa" }, { "cve": "CVE-2026-63804", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "f9c9ec2c319f843b70ecdf939d48b52d189bc081", "subject": "gfs2: fix use-after-free in gfs2_qd_dealloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63804", "commit_url": "https://git.kernel.org/stable/c/f9c9ec2c319f843b70ecdf939d48b52d189bc081" }, { "cve": "CVE-2026-63805", "author_name": "Sam James", "author_email": "sam@gentoo.org", "fix_sha": "4e67f504ee9ded15e256b64f4fde150e917381d7", "subject": "crypto: nx - fix nx_crypto_ctx_exit argument", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63805", "commit_url": "https://git.kernel.org/stable/c/4e67f504ee9ded15e256b64f4fde150e917381d7" }, { "cve": "CVE-2026-63806", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "f1edbed787ba67988ed34e0132ca128b052b6ce8", "subject": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63806", "commit_url": "https://git.kernel.org/stable/c/f1edbed787ba67988ed34e0132ca128b052b6ce8" }, { "cve": "CVE-2026-63807", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "ef057cbf825e03b63f6edf5980f96abf3c53089d", "subject": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63807", "commit_url": "https://git.kernel.org/stable/c/ef057cbf825e03b63f6edf5980f96abf3c53089d" }, { "cve": "CVE-2026-63808", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3f5f8ee9917cc2b9076ac533492d8a200edcabb8", "subject": "exfat: fix potential use-after-free in exfat_find_dir_entry()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63808", "commit_url": "https://git.kernel.org/stable/c/3f5f8ee9917cc2b9076ac533492d8a200edcabb8" }, { "cve": "CVE-2026-63809", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "4c21b5927d4364bfe7365f2700da5fea0ed0d004", "subject": "bpf: use kvfree() for replaced sysctl write buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63809", "commit_url": "https://git.kernel.org/stable/c/4c21b5927d4364bfe7365f2700da5fea0ed0d004" }, { "cve": "CVE-2026-63810", "author_name": "Denis Arefev", "author_email": "arefev@swemel.ru", "fix_sha": "f73aa66dffcb8e61e78f01b56163ec16a15d06d2", "subject": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63810", "commit_url": "https://git.kernel.org/stable/c/f73aa66dffcb8e61e78f01b56163ec16a15d06d2" }, { "cve": "CVE-2026-63811", "author_name": "Mikhail Lobanov", "author_email": "m.lobanov@rosa.ru", "fix_sha": "a41075acde0124d2f8a5f563068a5d63e8ffd57b", "subject": "f2fs: read COW data with the original inode during atomic write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63811", "commit_url": "https://git.kernel.org/stable/c/a41075acde0124d2f8a5f563068a5d63e8ffd57b" }, { "cve": "CVE-2026-63812", "author_name": "Yongpeng Yang", "author_email": "yangyongpeng@xiaomi.com", "fix_sha": "1f70ddb28a3c71df124da5fa4040c808116d6bb9", "subject": "f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63812", "commit_url": "https://git.kernel.org/stable/c/1f70ddb28a3c71df124da5fa4040c808116d6bb9" }, { "cve": "CVE-2026-63813", "author_name": "Zhaoyang Huang", "author_email": "zhaoyang.huang@unisoc.com", "fix_sha": "ccaba785821970f422c47770331c7e3271763f17", "subject": "Revert \"f2fs: remove non-uptodate folio from the page cache in move_data_block\"", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63813", "commit_url": "https://git.kernel.org/stable/c/ccaba785821970f422c47770331c7e3271763f17" }, { "cve": "CVE-2026-63814", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "c4810ada31e80cbe4011467c4f3b1e93f94134f3", "subject": "f2fs: validate ACL entry sizes in f2fs_acl_from_disk()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63814", "commit_url": "https://git.kernel.org/stable/c/c4810ada31e80cbe4011467c4f3b1e93f94134f3" }, { "cve": "CVE-2026-63815", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "378acf3cf19b6af6cba55e8dd1154c4e1504bae8", "subject": "f2fs: bound i_inline_xattr_size for non-inline-xattr inodes", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63815", "commit_url": "https://git.kernel.org/stable/c/378acf3cf19b6af6cba55e8dd1154c4e1504bae8" }, { "cve": "CVE-2026-63816", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "e0288584baa5dc41df4a829a023c4c1b33fe53d7", "subject": "f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63816", "commit_url": "https://git.kernel.org/stable/c/e0288584baa5dc41df4a829a023c4c1b33fe53d7" }, { "cve": "CVE-2026-63817", "author_name": "Wenjie Qi", "author_email": "qwjhust@gmail.com", "fix_sha": "5073c66a96a9c23c0c2533ed4ed06e42f9021208", "subject": "f2fs: validate compress cache inode only when enabled", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63817", "commit_url": "https://git.kernel.org/stable/c/5073c66a96a9c23c0c2533ed4ed06e42f9021208" }, { "cve": "CVE-2026-63818", "author_name": "Wenjie Qi", "author_email": "qwjhust@gmail.com", "fix_sha": "846c499a65816d13f1186e3090e825e8bb8bcb8b", "subject": "f2fs: validate orphan inode entry count", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63818", "commit_url": "https://git.kernel.org/stable/c/846c499a65816d13f1186e3090e825e8bb8bcb8b" }, { "cve": "CVE-2026-63819", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "8712353ed80f87271d732297567dcdbe4b84e8c7", "subject": "f2fs: fix to do sanity check on f2fs_get_node_folio_ra()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63819", "commit_url": "https://git.kernel.org/stable/c/8712353ed80f87271d732297567dcdbe4b84e8c7" }, { "cve": "CVE-2026-63820", "author_name": "Wenjie Qi", "author_email": "qiwenjie@xiaomi.com", "fix_sha": "74c8d2ec95c59a5651ecd975c466998af1961fd4", "subject": "f2fs: fix missing read bio submission on large folio error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63820", "commit_url": "https://git.kernel.org/stable/c/74c8d2ec95c59a5651ecd975c466998af1961fd4" }, { "cve": "CVE-2026-63821", "author_name": "Luka Gejak", "author_email": "luka.gejak@linux.dev", "fix_sha": "6b964941bbfe6e0f18b1a5e008486dbb62df440a", "subject": "wifi: rtw88: usb: fix memory leaks on USB write failures", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63821", "commit_url": "https://git.kernel.org/stable/c/6b964941bbfe6e0f18b1a5e008486dbb62df440a" }, { "cve": "CVE-2026-63822", "author_name": "Jose Ignacio Tornos Martinez", "author_email": "jtornosm@redhat.com", "fix_sha": "8b7a26b6681922a38cd5a7829ace61f8e54df9b7", "subject": "wifi: ath11k: fix warning when unbinding", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63822", "commit_url": "https://git.kernel.org/stable/c/8b7a26b6681922a38cd5a7829ace61f8e54df9b7" }, { "cve": "CVE-2026-63823", "author_name": "Shaomin Chen", "author_email": "eeesssooo020@gmail.com", "fix_sha": "fd15b457a86939c38aa12116adabd8ff686c5e51", "subject": "keys: Pin request_key_auth payload in instantiate paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63823", "commit_url": "https://git.kernel.org/stable/c/fd15b457a86939c38aa12116adabd8ff686c5e51" }, { "cve": "CVE-2026-63824", "author_name": "Jarkko Sakkinen", "author_email": "jarkko@kernel.org", "fix_sha": "cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0b", "subject": "KEYS: fix overflow in keyctl_pkey_params_get_2()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63824", "commit_url": "https://git.kernel.org/stable/c/cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0b" }, { "cve": "CVE-2026-63825", "author_name": "Konstantin Khorenko", "author_email": "khorenko@virtuozzo.com", "fix_sha": "56cb9b7d96b28a1173a510ab25354b6599ad3a33", "subject": "gcov: use atomic counter updates to fix concurrent access crashes", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63825", "commit_url": "https://git.kernel.org/stable/c/56cb9b7d96b28a1173a510ab25354b6599ad3a33" }, { "cve": "CVE-2026-63826", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "2c1c805c65fb7dc7524e20376d6987721e73a0b1", "subject": "fbdev: fix use-after-free in store_modes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63826", "commit_url": "https://git.kernel.org/stable/c/2c1c805c65fb7dc7524e20376d6987721e73a0b1" }, { "cve": "CVE-2026-63827", "author_name": "Ruslan Valiyev", "author_email": "linuxoid@gmail.com", "fix_sha": "6f060496d03e4dc560a40f73770bd08335cb7a27", "subject": "apparmor: fix use-after-free in rawdata dedup loop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63827", "commit_url": "https://git.kernel.org/stable/c/6f060496d03e4dc560a40f73770bd08335cb7a27" }, { "cve": "CVE-2026-63828", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4d587cd8a72155089a627130bbd4716ec0856e21", "subject": "apparmor: mediate the implicit connect of TCP fast open sendmsg", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63828", "commit_url": "https://git.kernel.org/stable/c/4d587cd8a72155089a627130bbd4716ec0856e21" }, { "cve": "CVE-2026-63829", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "8165f7ff57d9667d2bb477ef6af83ede7fed4ad7", "subject": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63829", "commit_url": "https://git.kernel.org/stable/c/8165f7ff57d9667d2bb477ef6af83ede7fed4ad7" }, { "cve": "CVE-2026-63830", "author_name": "Yiming Qian", "author_email": "yimingqian591@gmail.com", "fix_sha": "406e8a651a7b854c41fecd5117bb282b3a6c2c6b", "subject": "net: skmsg: preserve sg.copy across SG transforms", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63830", "commit_url": "https://git.kernel.org/stable/c/406e8a651a7b854c41fecd5117bb282b3a6c2c6b" }, { "cve": "CVE-2026-63831", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "84a04eb5b210643bd67aab81ff805d32f62aa865", "subject": "mac802154: llsec: add skb_cow_data() before in-place crypto", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63831", "commit_url": "https://git.kernel.org/stable/c/84a04eb5b210643bd67aab81ff805d32f62aa865" }, { "cve": "CVE-2026-63832", "author_name": "Jiajia Liu", "author_email": "liujiajia@kylinos.cn", "fix_sha": "20b126920a259df4d7dcae19fcfe2c57a74d6b2e", "subject": "wifi: mt76: add wcid publish check in mt76_sta_add", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63832", "commit_url": "https://git.kernel.org/stable/c/20b126920a259df4d7dcae19fcfe2c57a74d6b2e" }, { "cve": "CVE-2026-63833", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "5b08dccecf825cbf905f348bc6ccb497507e28e2", "subject": "ntfs3: reject direct userspace writes to reserved $LX* xattrs", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63833", "commit_url": "https://git.kernel.org/stable/c/5b08dccecf825cbf905f348bc6ccb497507e28e2" }, { "cve": "CVE-2026-63834", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "e7c775110e1858e5a7471a23a9c9658c0af9df89", "subject": "batman-adv: tp_meter: restrict number of unacked list entries", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63834", "commit_url": "https://git.kernel.org/stable/c/e7c775110e1858e5a7471a23a9c9658c0af9df89" }, { "cve": "CVE-2026-63835", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "d11c00b95b2a3b3934007fc003dccc6fdcc061ad", "subject": "batman-adv: v: prevent OGM aggregation on disabled hardif", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63835", "commit_url": "https://git.kernel.org/stable/c/d11c00b95b2a3b3934007fc003dccc6fdcc061ad" }, { "cve": "CVE-2026-63836", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "33ccd52f3cc9ed46ce395199f89aa3234dc83314", "subject": "batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63836", "commit_url": "https://git.kernel.org/stable/c/33ccd52f3cc9ed46ce395199f89aa3234dc83314" }, { "cve": "CVE-2026-63837", "author_name": "Arthur Kiyanovski", "author_email": "akiyano@amazon.com", "fix_sha": "24a08d7d6218d60c033015cf4870b6096446e734", "subject": "net: ena: PHC: Check return code before setting timestamp output", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63837", "commit_url": "https://git.kernel.org/stable/c/24a08d7d6218d60c033015cf4870b6096446e734" }, { "cve": "CVE-2026-63838", "author_name": "Denis Rastyogin", "author_email": "gerben@altlinux.org", "fix_sha": "f9e437cddf6cf9e603bdaefe148c1f4792aaf39c", "subject": "ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63838", "commit_url": "https://git.kernel.org/stable/c/f9e437cddf6cf9e603bdaefe148c1f4792aaf39c" }, { "cve": "CVE-2026-63839", "author_name": "Rong Zhang", "author_email": "i@rong.moe", "fix_sha": "0c3887a134f191723b53e2a47e501b534c8723ee", "subject": "platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63839", "commit_url": "https://git.kernel.org/stable/c/0c3887a134f191723b53e2a47e501b534c8723ee" }, { "cve": "CVE-2026-63840", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "3b0ea2021351b6b813b34fac940957f1f4fad85b", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63840", "commit_url": "https://git.kernel.org/stable/c/3b0ea2021351b6b813b34fac940957f1f4fad85b" }, { "cve": "CVE-2026-63841", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "2f8e3da71a1b469b6e157aa3972f1448b3157840", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63841", "commit_url": "https://git.kernel.org/stable/c/2f8e3da71a1b469b6e157aa3972f1448b3157840" }, { "cve": "CVE-2026-63842", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "ea7c61c5f895e8f9ea0ffffa180498ef9c740152", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63842", "commit_url": "https://git.kernel.org/stable/c/ea7c61c5f895e8f9ea0ffffa180498ef9c740152" }, { "cve": "CVE-2026-63843", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "b65b7f3f3c18f797f81a2af7c97e2079900ad6db", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63843", "commit_url": "https://git.kernel.org/stable/c/b65b7f3f3c18f797f81a2af7c97e2079900ad6db" }, { "cve": "CVE-2026-63844", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "83e37c0987ca92f9e87789b46dd311dcf5a4a6c8", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63844", "commit_url": "https://git.kernel.org/stable/c/83e37c0987ca92f9e87789b46dd311dcf5a4a6c8" }, { "cve": "CVE-2026-63845", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "e7e90b5839aeb8805ec83bb4da610b8dab8e184d", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63845", "commit_url": "https://git.kernel.org/stable/c/e7e90b5839aeb8805ec83bb4da610b8dab8e184d" }, { "cve": "CVE-2026-63846", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "a2baf12eec41f246689e6a3f8619af1200031576", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63846", "commit_url": "https://git.kernel.org/stable/c/a2baf12eec41f246689e6a3f8619af1200031576" }, { "cve": "CVE-2026-63847", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "79405e774ede411c6b47ed41c651e40b92de64a2", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63847", "commit_url": "https://git.kernel.org/stable/c/79405e774ede411c6b47ed41c651e40b92de64a2" }, { "cve": "CVE-2026-63848", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "e5f612dc91650561fe2b5b76dd6d2898ec9ad480", "subject": "drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63848", "commit_url": "https://git.kernel.org/stable/c/e5f612dc91650561fe2b5b76dd6d2898ec9ad480" }, { "cve": "CVE-2026-63849", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "8f4954722eab88e10c4ea0c0d3b1269c31421d3a", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63849", "commit_url": "https://git.kernel.org/stable/c/8f4954722eab88e10c4ea0c0d3b1269c31421d3a" }, { "cve": "CVE-2026-63850", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "8cae0ce77de492d7c31c1532a2e80c0c6e7e58cb", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63850", "commit_url": "https://git.kernel.org/stable/c/8cae0ce77de492d7c31c1532a2e80c0c6e7e58cb" }, { "cve": "CVE-2026-63851", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "589a254bf3e88204c8402b9cbccd5e23a0af990f", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63851", "commit_url": "https://git.kernel.org/stable/c/589a254bf3e88204c8402b9cbccd5e23a0af990f" }, { "cve": "CVE-2026-63852", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "4532b52b34e4e4310386e6fdf6a643368599f522", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63852", "commit_url": "https://git.kernel.org/stable/c/4532b52b34e4e4310386e6fdf6a643368599f522" }, { "cve": "CVE-2026-63853", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "51f694221047c84fa185be98210eb2c354ffb8c6", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63853", "commit_url": "https://git.kernel.org/stable/c/51f694221047c84fa185be98210eb2c354ffb8c6" }, { "cve": "CVE-2026-63854", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "f1e5a6660d7cbf006079126d9babbf0ccf538c6b", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63854", "commit_url": "https://git.kernel.org/stable/c/f1e5a6660d7cbf006079126d9babbf0ccf538c6b" }, { "cve": "CVE-2026-63855", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "4f317863a3ab212a027d8c8c3cc3af4e3fb95704", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63855", "commit_url": "https://git.kernel.org/stable/c/4f317863a3ab212a027d8c8c3cc3af4e3fb95704" }, { "cve": "CVE-2026-63856", "author_name": "Yinjie Yao", "author_email": "yinjie.yao@amd.com", "fix_sha": "8d80b293b41fcb5e9396db93e788b0f4ebcbafb7", "subject": "drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63856", "commit_url": "https://git.kernel.org/stable/c/8d80b293b41fcb5e9396db93e788b0f4ebcbafb7" }, { "cve": "CVE-2026-63857", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "bde34e84edc8b5571fbde7e941e175a4293ee1eb", "subject": "net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63857", "commit_url": "https://git.kernel.org/stable/c/bde34e84edc8b5571fbde7e941e175a4293ee1eb" }, { "cve": "CVE-2026-63858", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "10f79dbd7719d1da9f5884d13060322d8729f091", "subject": "netfilter: nf_tables: add hook transactions for device deletions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63858", "commit_url": "https://git.kernel.org/stable/c/10f79dbd7719d1da9f5884d13060322d8729f091" }, { "cve": "CVE-2026-63859", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "3309965fe44c00fd65af7cef5016e9e782c021a7", "subject": "net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63859", "commit_url": "https://git.kernel.org/stable/c/3309965fe44c00fd65af7cef5016e9e782c021a7" }, { "cve": "CVE-2026-63860", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "6ed3d14fc45d3da6025e7fe4a6a09066856698e2", "subject": "RDMA/core: Prefer NLA_NUL_STRING", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63860", "commit_url": "https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2" }, { "cve": "CVE-2026-63861", "author_name": "Pei Xiao", "author_email": "xiaopei01@kylinos.cn", "fix_sha": "ab00febad191d7a4400aa1c3468279fb508258d4", "subject": "spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63861", "commit_url": "https://git.kernel.org/stable/c/ab00febad191d7a4400aa1c3468279fb508258d4" }, { "cve": "CVE-2026-63862", "author_name": "Chen-Yu Tsai", "author_email": "wenst@chromium.org", "fix_sha": "5573c44cb3fd01a9f62d569ae9ac870ef5f0e0ba", "subject": "PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63862", "commit_url": "https://git.kernel.org/stable/c/5573c44cb3fd01a9f62d569ae9ac870ef5f0e0ba" }, { "cve": "CVE-2026-63863", "author_name": "Maciej Patelczyk", "author_email": "maciej.patelczyk@intel.com", "fix_sha": "d287dee565c3c32e1ed76ec1847af46809c29b90", "subject": "drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63863", "commit_url": "https://git.kernel.org/stable/c/d287dee565c3c32e1ed76ec1847af46809c29b90" }, { "cve": "CVE-2026-63864", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "6bd96e40f31dde8f8cd79772b4df0f171cf8a915", "subject": "bpf: Propagate error from visit_tailcall_insn", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63864", "commit_url": "https://git.kernel.org/stable/c/6bd96e40f31dde8f8cd79772b4df0f171cf8a915" }, { "cve": "CVE-2026-63865", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "beaf0e96b1da74549a6cabd040f9667d83b2e97e", "subject": "bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63865", "commit_url": "https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e" }, { "cve": "CVE-2026-63866", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "88973240dc7c976dd320b36a9e6d925c9be083ae", "subject": "wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63866", "commit_url": "https://git.kernel.org/stable/c/88973240dc7c976dd320b36a9e6d925c9be083ae" }, { "cve": "CVE-2026-63867", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "8ab24fdebc369c0dfb90f82c1650b1e66662bb45", "subject": "mptcp: close TOCTOU race while computing rcv_wnd", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63867", "commit_url": "https://git.kernel.org/stable/c/8ab24fdebc369c0dfb90f82c1650b1e66662bb45" }, { "cve": "CVE-2026-63868", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "16e408e607a94b646fb14a2a98422c6877ae4b3c", "subject": "net: garp: fix unsigned integer underflow in garp_pdu_parse_attr", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63868", "commit_url": "https://git.kernel.org/stable/c/16e408e607a94b646fb14a2a98422c6877ae4b3c" }, { "cve": "CVE-2026-63869", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "6c0cf89f36ac0c0fd8687a4ccdce2efb23a9c663", "subject": "wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap", "cvss_score": 7.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63869", "commit_url": "https://git.kernel.org/stable/c/6c0cf89f36ac0c0fd8687a4ccdce2efb23a9c663" }, { "cve": "CVE-2026-63870", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3", "subject": "ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63870", "commit_url": "https://git.kernel.org/stable/c/3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3" }, { "cve": "CVE-2026-63871", "author_name": "SeungJu Cheon", "author_email": "suunj1331@gmail.com", "fix_sha": "9ca7053d6215d89c33f28893bfd1625a32919d3f", "subject": "Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63871", "commit_url": "https://git.kernel.org/stable/c/9ca7053d6215d89c33f28893bfd1625a32919d3f" }, { "cve": "CVE-2026-63873", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "2f41af638c92bac6f1f9275ea2d1901baef578f3", "subject": "accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63873", "commit_url": "https://git.kernel.org/stable/c/2f41af638c92bac6f1f9275ea2d1901baef578f3" }, { "cve": "CVE-2026-63874", "author_name": "Jeremy Kerr", "author_email": "jk@codeconstruct.com.au", "fix_sha": "54665dce982689e2fd99b32e9a0dcc204fda8a51", "subject": "net: mctp: usb: fix race between urb completion and rx_retry cancellation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63874", "commit_url": "https://git.kernel.org/stable/c/54665dce982689e2fd99b32e9a0dcc204fda8a51" }, { "cve": "CVE-2026-63875", "author_name": "Zeng Heng", "author_email": "zengheng4@huawei.com", "fix_sha": "c2ff4764e03e7a8d758352f4aceb8fe1be6ac971", "subject": "arm64: tlb: Flush walk cache when unsharing PMD tables", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63875", "commit_url": "https://git.kernel.org/stable/c/c2ff4764e03e7a8d758352f4aceb8fe1be6ac971" }, { "cve": "CVE-2026-63876", "author_name": "Maciej W. Rozycki", "author_email": "macro@orcam.me.uk", "fix_sha": "7cac59d08a73cb866ec51a483a6f3fe0f531947c", "subject": "serial: zs: Convert to use a platform device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63876", "commit_url": "https://git.kernel.org/stable/c/7cac59d08a73cb866ec51a483a6f3fe0f531947c" }, { "cve": "CVE-2026-63877", "author_name": "Maciej W. Rozycki", "author_email": "macro@orcam.me.uk", "fix_sha": "5d7a49d60b8fda66da60e240fd7315232fa1754f", "subject": "serial: dz: Convert to use a platform device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63877", "commit_url": "https://git.kernel.org/stable/c/5d7a49d60b8fda66da60e240fd7315232fa1754f" }, { "cve": "CVE-2026-63878", "author_name": "Ziyi Guo", "author_email": "n7l8m4@u.northwestern.edu", "fix_sha": "a1ba4594232c87c3b8defd6f89a2e40f8b08395d", "subject": "drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63878", "commit_url": "https://git.kernel.org/stable/c/a1ba4594232c87c3b8defd6f89a2e40f8b08395d" }, { "cve": "CVE-2026-63879", "author_name": "Christian K\u00f6nig", "author_email": "christian.koenig@amd.com", "fix_sha": "962d684b5dc0741dcd93485d41b450de402d5592", "subject": "drm/amdgpu: fix amdgpu_hmm_range_get_pages", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63879", "commit_url": "https://git.kernel.org/stable/c/962d684b5dc0741dcd93485d41b450de402d5592" }, { "cve": "CVE-2026-63880", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2e7f55eb408c3f72ee1957a0d0ad11d8648a6379", "subject": "drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63880", "commit_url": "https://git.kernel.org/stable/c/2e7f55eb408c3f72ee1957a0d0ad11d8648a6379" }, { "cve": "CVE-2026-63881", "author_name": "Eric Huang", "author_email": "jinhuieric.huang@amd.com", "fix_sha": "93f5534b35a05ef8a0109c1eefa800062fee810a", "subject": "drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63881", "commit_url": "https://git.kernel.org/stable/c/93f5534b35a05ef8a0109c1eefa800062fee810a" }, { "cve": "CVE-2026-63882", "author_name": "Eric Huang", "author_email": "jinhuieric.huang@amd.com", "fix_sha": "e984d61d92e702096058f0f828f4b2b8563b88ce", "subject": "drm/amdkfd: fix NULL pointer bug in svm_range_set_attr", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63882", "commit_url": "https://git.kernel.org/stable/c/e984d61d92e702096058f0f828f4b2b8563b88ce" }, { "cve": "CVE-2026-63883", "author_name": "Viken Dadhaniya", "author_email": "viken.dadhaniya@oss.qualcomm.com", "fix_sha": "452d6fa37ae9b021f4f6d397dbae077f7296f6f4", "subject": "serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63883", "commit_url": "https://git.kernel.org/stable/c/452d6fa37ae9b021f4f6d397dbae077f7296f6f4" }, { "cve": "CVE-2026-63884", "author_name": "Janusz Krzysztofik", "author_email": "janusz.krzysztofik@linux.intel.com", "fix_sha": "5c4063c87a619e4df954c179d24628636f5db15f", "subject": "drm/i915: Fix potential UAF in TTM object purge", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63884", "commit_url": "https://git.kernel.org/stable/c/5c4063c87a619e4df954c179d24628636f5db15f" }, { "cve": "CVE-2026-63885", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "7164d78559b0ff29931a366a840a9e5dd53d4b7c", "subject": "drm/gem: fix race between change_handle and handle_delete", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63885", "commit_url": "https://git.kernel.org/stable/c/7164d78559b0ff29931a366a840a9e5dd53d4b7c" }, { "cve": "CVE-2026-63886", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "85db7391310b1304d2dc8ae3b0b12105a9567147", "subject": "scsi: target: iscsi: Validate CHAP_R length before base64 decode", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63886", "commit_url": "https://git.kernel.org/stable/c/85db7391310b1304d2dc8ae3b0b12105a9567147" }, { "cve": "CVE-2026-63887", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "bf33e01f88388c43e285492a63e539df6ffed64c", "subject": "scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63887", "commit_url": "https://git.kernel.org/stable/c/bf33e01f88388c43e285492a63e539df6ffed64c" }, { "cve": "CVE-2026-63888", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "778c2ab142c625a8a8afa570e0f9b7873f445d99", "subject": "scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63888", "commit_url": "https://git.kernel.org/stable/c/778c2ab142c625a8a8afa570e0f9b7873f445d99" }, { "cve": "CVE-2026-63889", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a9a39233ec1fc9f97ea1340a4d09bb7ec2be5153", "subject": "scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63889", "commit_url": "https://git.kernel.org/stable/c/a9a39233ec1fc9f97ea1340a4d09bb7ec2be5153" }, { "cve": "CVE-2026-63890", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9eed1bd59937e6828b00d2f2dfef631d964f3636", "subject": "scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63890", "commit_url": "https://git.kernel.org/stable/c/9eed1bd59937e6828b00d2f2dfef631d964f3636" }, { "cve": "CVE-2026-63891", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "928abe19fbf0127003abcb1ea69cabc1c897d0ab", "subject": "thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63891", "commit_url": "https://git.kernel.org/stable/c/928abe19fbf0127003abcb1ea69cabc1c897d0ab" }, { "cve": "CVE-2026-63892", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "de21b59c29e31c5108ddc04210631bbfab81b997", "subject": "thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63892", "commit_url": "https://git.kernel.org/stable/c/de21b59c29e31c5108ddc04210631bbfab81b997" }, { "cve": "CVE-2026-63893", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "01deda0152066c6c955f0619114ea6afa070aaec", "subject": "thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63893", "commit_url": "https://git.kernel.org/stable/c/01deda0152066c6c955f0619114ea6afa070aaec" }, { "cve": "CVE-2026-63894", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2796646f6d892c1eb6818c7ca41fdfa12568e8d1", "subject": "usb: gadget: f_fs: serialize DMABUF cancel against request completion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63894", "commit_url": "https://git.kernel.org/stable/c/2796646f6d892c1eb6818c7ca41fdfa12568e8d1" }, { "cve": "CVE-2026-63895", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "4e036c10e7f4df5d951c69cc3697bc8e209c6d02", "subject": "usb: gadget: f_fs: copy only received bytes on short ep0 read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63895", "commit_url": "https://git.kernel.org/stable/c/4e036c10e7f4df5d951c69cc3697bc8e209c6d02" }, { "cve": "CVE-2026-63896", "author_name": "Jeremy Erazo", "author_email": "mendozayt13@gmail.com", "fix_sha": "6c5dbc104dadd79fc2923497c20bae759a18758c", "subject": "usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63896", "commit_url": "https://git.kernel.org/stable/c/6c5dbc104dadd79fc2923497c20bae759a18758c" }, { "cve": "CVE-2026-63897", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "245aba83e3c288e176ed037a1f6b618b09e92ed8", "subject": "USB: serial: mct_u232: fix missing interrupt-in transfer sanity check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63897", "commit_url": "https://git.kernel.org/stable/c/245aba83e3c288e176ed037a1f6b618b09e92ed8" }, { "cve": "CVE-2026-63898", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "915b36d701950503c4ea0f6e314b10868e59fce3", "subject": "USB: serial: mct_u232: fix memory corruption with small endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63898", "commit_url": "https://git.kernel.org/stable/c/915b36d701950503c4ea0f6e314b10868e59fce3" }, { "cve": "CVE-2026-63899", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "4085f0dbb1ce2251c9a5938d693de6593f0ab2bd", "subject": "USB: serial: mxuport: fix memory corruption with small endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63899", "commit_url": "https://git.kernel.org/stable/c/4085f0dbb1ce2251c9a5938d693de6593f0ab2bd" }, { "cve": "CVE-2026-63900", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "ab8336a7e414f018430aa1af3a46944032f7ff96", "subject": "USB: serial: keyspan: fix missing indat transfer sanity check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63900", "commit_url": "https://git.kernel.org/stable/c/ab8336a7e414f018430aa1af3a46944032f7ff96" }, { "cve": "CVE-2026-63901", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5", "subject": "USB: serial: digi_acceleport: fix memory corruption with small endpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63901", "commit_url": "https://git.kernel.org/stable/c/cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5" }, { "cve": "CVE-2026-63902", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "9f9bfc80c67f35a275820da7e83a35dface08281", "subject": "USB: serial: cypress_m8: validate interrupt packet headers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63902", "commit_url": "https://git.kernel.org/stable/c/9f9bfc80c67f35a275820da7e83a35dface08281" }, { "cve": "CVE-2026-63903", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "4ce058df2ee02cc2a0f0fd5cd64ce6f1482a0b65", "subject": "USB: serial: belkin_sa: validate interrupt status length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63903", "commit_url": "https://git.kernel.org/stable/c/4ce058df2ee02cc2a0f0fd5cd64ce6f1482a0b65" }, { "cve": "CVE-2026-63904", "author_name": "Heitor Alves de Siqueira", "author_email": "halves@igalia.com", "fix_sha": "52f2ad3f7e5eb3b5908e1d685d4342519dc9cfcd", "subject": "usb: usbtmc: check URB actual_length for interrupt-IN notifications", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63904", "commit_url": "https://git.kernel.org/stable/c/52f2ad3f7e5eb3b5908e1d685d4342519dc9cfcd" }, { "cve": "CVE-2026-63905", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d96209626a29ea64666be98c30b30ac82e5f1be6", "subject": "usbip: vudc: Fix use after free bug in vudc_remove due to race condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63905", "commit_url": "https://git.kernel.org/stable/c/d96209626a29ea64666be98c30b30ac82e5f1be6" }, { "cve": "CVE-2026-63906", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "e194ce048f5a6c549b3a23a8c568c6470f40f772", "subject": "usb: musb: omap2430: Fix use-after-free in omap2430_probe()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63906", "commit_url": "https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772" }, { "cve": "CVE-2026-63907", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "f74c8696f14149d5e43cc28b015326a759c48f00", "subject": "uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63907", "commit_url": "https://git.kernel.org/stable/c/f74c8696f14149d5e43cc28b015326a759c48f00" }, { "cve": "CVE-2026-63908", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "baa0210fb6a9dc3882509a9411b6d284d88fe30e", "subject": "Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63908", "commit_url": "https://git.kernel.org/stable/c/baa0210fb6a9dc3882509a9411b6d284d88fe30e" }, { "cve": "CVE-2026-63909", "author_name": "Ali Ganiyev", "author_email": "ali.qaniyev@gmail.com", "fix_sha": "0e60dafe97eca61721f3db456f97d97a80c6c8ae", "subject": "ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63909", "commit_url": "https://git.kernel.org/stable/c/0e60dafe97eca61721f3db456f97d97a80c6c8ae" }, { "cve": "CVE-2026-63910", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "ead6680f354f83966c796fc7f9463a3171789616", "subject": "dma-buf: fix UAF in dma_buf_fd() tracepoint", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63910", "commit_url": "https://git.kernel.org/stable/c/ead6680f354f83966c796fc7f9463a3171789616" }, { "cve": "CVE-2026-63911", "author_name": "Shaomin Chen", "author_email": "eeesssooo020@gmail.com", "fix_sha": "7f83d174073234839aea176f265e517e0d50a1d2", "subject": "xfrm: iptfs: reset runtime state when cloning SAs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63911", "commit_url": "https://git.kernel.org/stable/c/7f83d174073234839aea176f265e517e0d50a1d2" }, { "cve": "CVE-2026-63912", "author_name": "Jingguo Tan", "author_email": "tanjingguo@huawei.com", "fix_sha": "dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40", "subject": "xfrm: esp: restore combined single-frag length gate", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63912", "commit_url": "https://git.kernel.org/stable/c/dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40" }, { "cve": "CVE-2026-63913", "author_name": "Hamza Mahfooz", "author_email": "hamzamahfooz@linux.microsoft.com", "fix_sha": "bed6e04be8e6b9133d8b16d5a42d0e0ce674fa9a", "subject": "netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63913", "commit_url": "https://git.kernel.org/stable/c/bed6e04be8e6b9133d8b16d5a42d0e0ce674fa9a" }, { "cve": "CVE-2026-63914", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "7e2a4f7ca0952820731ef7bdadfc9a9e9d3571b4", "subject": "xfrm: route MIGRATE notifications to caller's netns", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63914", "commit_url": "https://git.kernel.org/stable/c/7e2a4f7ca0952820731ef7bdadfc9a9e9d3571b4" }, { "cve": "CVE-2026-63915", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "f040e590c035bfd9553fe79ee9585caf1b14d67b", "subject": "nfc: hci: fix out-of-bounds read in HCP header parsing", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63915", "commit_url": "https://git.kernel.org/stable/c/f040e590c035bfd9553fe79ee9585caf1b14d67b" }, { "cve": "CVE-2026-63916", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "c0a8899e02ddebd51e2589835182c239c2e224ae", "subject": "HID: wacom: Fix OOB write in wacom_hid_set_device_mode()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63916", "commit_url": "https://git.kernel.org/stable/c/c0a8899e02ddebd51e2589835182c239c2e224ae" }, { "cve": "CVE-2026-63917", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "11b326fb0a374f4654f9be22d0f0f7abd9f7d3fe", "subject": "ip6: vti: Use ip6_tnl.net in vti6_changelink().", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63917", "commit_url": "https://git.kernel.org/stable/c/11b326fb0a374f4654f9be22d0f0f7abd9f7d3fe" }, { "cve": "CVE-2026-63918", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "05f95729ca844704d15e49ce14868af4b403b32b", "subject": "l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63918", "commit_url": "https://git.kernel.org/stable/c/05f95729ca844704d15e49ce14868af4b403b32b" }, { "cve": "CVE-2026-63919", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "c16f74dc1d75d0e2e7670076d5375deda110ebeb", "subject": "xfrm: input: hold netns during deferred transport reinjection", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63919", "commit_url": "https://git.kernel.org/stable/c/c16f74dc1d75d0e2e7670076d5375deda110ebeb" }, { "cve": "CVE-2026-63920", "author_name": "Qi Tang", "author_email": "tpluszz77@gmail.com", "fix_sha": "dd433671fef381fdaf7b530c631e6b782d66e224", "subject": "ipv6: validate extension header length before copying to cmsg", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63920", "commit_url": "https://git.kernel.org/stable/c/dd433671fef381fdaf7b530c631e6b782d66e224" }, { "cve": "CVE-2026-63921", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "8b484efd5cb4eeef9021a661e198edc5349dacf6", "subject": "ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63921", "commit_url": "https://git.kernel.org/stable/c/8b484efd5cb4eeef9021a661e198edc5349dacf6" }, { "cve": "CVE-2026-63922", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "f7b52afe3592eae66e160586b45a3f2242972c63", "subject": "ipv6: exthdrs: refresh nh after handling HAO option", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63922", "commit_url": "https://git.kernel.org/stable/c/f7b52afe3592eae66e160586b45a3f2242972c63" }, { "cve": "CVE-2026-63923", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2156a29aecfffa2eb7c558255690084efbe9f3b0", "subject": "octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63923", "commit_url": "https://git.kernel.org/stable/c/2156a29aecfffa2eb7c558255690084efbe9f3b0" }, { "cve": "CVE-2026-63924", "author_name": "Justin Iurman", "author_email": "justin.iurman@gmail.com", "fix_sha": "d47548a36639095939f4747d4c43f2271366f565", "subject": "ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63924", "commit_url": "https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565" }, { "cve": "CVE-2026-63925", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "e68842b3356471ba56c882209f324613dac47f64", "subject": "macsec: fix replay protection at XPN lower-PN wrap", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63925", "commit_url": "https://git.kernel.org/stable/c/e68842b3356471ba56c882209f324613dac47f64" }, { "cve": "CVE-2026-63926", "author_name": "Yuqi Xu", "author_email": "xuyq21@lenovo.com", "fix_sha": "f72eed9b84fb771019a955908132410a9ba9ea3f", "subject": "bpf: sockmap: fix tail fragment offset in bpf_msg_push_data", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63926", "commit_url": "https://git.kernel.org/stable/c/f72eed9b84fb771019a955908132410a9ba9ea3f" }, { "cve": "CVE-2026-63927", "author_name": "Dan Carpenter", "author_email": "error27@gmail.com", "fix_sha": "9ea06a3fbf9f16e0d98c52cb3b99642be15ec281", "subject": "usb: dwc2: Fix use after free in debug code", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63927", "commit_url": "https://git.kernel.org/stable/c/9ea06a3fbf9f16e0d98c52cb3b99642be15ec281" }, { "cve": "CVE-2026-63928", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "60df93d30f9bdd27db17c4d80ed80ef718d7226b", "subject": "USB: serial: omninet: fix memory corruption with small endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63928", "commit_url": "https://git.kernel.org/stable/c/60df93d30f9bdd27db17c4d80ed80ef718d7226b" }, { "cve": "CVE-2026-63929", "author_name": "Beno\u00eet Monin", "author_email": "benoit.monin@bootlin.com", "fix_sha": "a093999355084bdbfe6e97f1dd232e58a1525f0b", "subject": "iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63929", "commit_url": "https://git.kernel.org/stable/c/a093999355084bdbfe6e97f1dd232e58a1525f0b" }, { "cve": "CVE-2026-63930", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "6f5ed4f2c7c83f33344e0ba179f72a12e5dad4a4", "subject": "iio: buffer: hw-consumer: fix use-after-free in error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63930", "commit_url": "https://git.kernel.org/stable/c/6f5ed4f2c7c83f33344e0ba179f72a12e5dad4a4" }, { "cve": "CVE-2026-63931", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "5aba4f94b225617a55fed442a70329b2ee19c0a5", "subject": "iio: chemical: scd30: fix division by zero in write_raw", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63931", "commit_url": "https://git.kernel.org/stable/c/5aba4f94b225617a55fed442a70329b2ee19c0a5" }, { "cve": "CVE-2026-63932", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "673478bc29cf72010faaf293c1c8c667393335a0", "subject": "iio: chemical: mhz19b: reject oversized serial replies", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63932", "commit_url": "https://git.kernel.org/stable/c/673478bc29cf72010faaf293c1c8c667393335a0" }, { "cve": "CVE-2026-63933", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "761e8b489e6cf166c574034b70637f8a7eadd0ee", "subject": "iio: gyro: adis16260: fix division by zero in write_raw", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63933", "commit_url": "https://git.kernel.org/stable/c/761e8b489e6cf166c574034b70637f8a7eadd0ee" }, { "cve": "CVE-2026-63934", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "6bdc3023d62ed5c7d591f0eb27a5adb37fb892ae", "subject": "iio: gyro: itg3200: fix i2c read into the wrong stack location", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63934", "commit_url": "https://git.kernel.org/stable/c/6bdc3023d62ed5c7d591f0eb27a5adb37fb892ae" }, { "cve": "CVE-2026-63935", "author_name": "Antoniu Miclaus", "author_email": "antoniu.miclaus@analog.com", "fix_sha": "a9aba21a539c668a66b58eeb08ad3909e5a54c2a", "subject": "iio: adc: nxp-sar-adc: fix division by zero in write_raw", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63935", "commit_url": "https://git.kernel.org/stable/c/a9aba21a539c668a66b58eeb08ad3909e5a54c2a" }, { "cve": "CVE-2026-63936", "author_name": "Salah Triki", "author_email": "salah.triki@gmail.com", "fix_sha": "f9bbd943c34a9ad60e593a4b99ce2394e4e2381b", "subject": "iio: adc: mt6359: fix unchecked return value in mt6358_read_imp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63936", "commit_url": "https://git.kernel.org/stable/c/f9bbd943c34a9ad60e593a4b99ce2394e4e2381b" }, { "cve": "CVE-2026-63937", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "c8cc238093ca6c99267032f6cfe78f59389f3157", "subject": "KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63937", "commit_url": "https://git.kernel.org/stable/c/c8cc238093ca6c99267032f6cfe78f59389f3157" }, { "cve": "CVE-2026-63938", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "121d88de56bc5c0ba0ce2f6381af67f948a7e7c1", "subject": "KVM: SEV: Check PSC request indices against the actual size of the buffer", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63938", "commit_url": "https://git.kernel.org/stable/c/121d88de56bc5c0ba0ce2f6381af67f948a7e7c1" }, { "cve": "CVE-2026-63939", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "5867d7e202e09f037cefe77f7af4413c7c0fa088", "subject": "KVM: SEV: Compute the correct max length of the in-GHCB scratch area", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63939", "commit_url": "https://git.kernel.org/stable/c/5867d7e202e09f037cefe77f7af4413c7c0fa088" }, { "cve": "CVE-2026-63940", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "3988bd2723de407ae90fa7a6f6029b4e60238c58", "subject": "KVM: SEV: Ignore Port I/O requests of length '0'", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63940", "commit_url": "https://git.kernel.org/stable/c/3988bd2723de407ae90fa7a6f6029b4e60238c58" }, { "cve": "CVE-2026-63941", "author_name": "Mark Brown", "author_email": "broonie@kernel.org", "fix_sha": "83726330748981372bde86ed5411d7b306612991", "subject": "KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63941", "commit_url": "https://git.kernel.org/stable/c/83726330748981372bde86ed5411d7b306612991" }, { "cve": "CVE-2026-63942", "author_name": "Ben Hutchings", "author_email": "benh@debian.org", "fix_sha": "ef15ccbb3e8640a723c42ad90eaf81d66ae02017", "subject": "parport: Fix race between port and client registration", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63942", "commit_url": "https://git.kernel.org/stable/c/ef15ccbb3e8640a723c42ad90eaf81d66ae02017" }, { "cve": "CVE-2026-63943", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "6cdc46b38cf146ce81d4831b6472dbf7731849a2", "subject": "Input: xpad - fix out-of-bounds access for Share button", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63943", "commit_url": "https://git.kernel.org/stable/c/6cdc46b38cf146ce81d4831b6472dbf7731849a2" }, { "cve": "CVE-2026-63944", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "bfea6091e0fffb270c20e74384b660910277eb6c", "subject": "Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63944", "commit_url": "https://git.kernel.org/stable/c/bfea6091e0fffb270c20e74384b660910277eb6c" }, { "cve": "CVE-2026-63945", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "4b5f8e608749b7e8fa386c6e4301cf9272595859", "subject": "Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63945", "commit_url": "https://git.kernel.org/stable/c/4b5f8e608749b7e8fa386c6e4301cf9272595859" }, { "cve": "CVE-2026-63946", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "47f23a259517abbdb8032c057a1e8a6bf3734878", "subject": "Bluetooth: ISO: fix UAF in iso_recv_frame", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63946", "commit_url": "https://git.kernel.org/stable/c/47f23a259517abbdb8032c057a1e8a6bf3734878" }, { "cve": "CVE-2026-63947", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "2a3ac9ee11dbb9845f3947cef4a79dba658cf6f6", "subject": "Bluetooth: HIDP: fix missing length checks in hidp_input_report()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63947", "commit_url": "https://git.kernel.org/stable/c/2a3ac9ee11dbb9845f3947cef4a79dba658cf6f6" }, { "cve": "CVE-2026-63948", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "9dbd84990394c51f5cee1e8871bb5ff8af5ed939", "subject": "Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63948", "commit_url": "https://git.kernel.org/stable/c/9dbd84990394c51f5cee1e8871bb5ff8af5ed939" }, { "cve": "CVE-2026-63949", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "a7511dcd9dd4bc55d123f9b800c8a4ed2662e5c6", "subject": "auxdisplay: line-display: fix OOB read on zero-length message_store()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63949", "commit_url": "https://git.kernel.org/stable/c/a7511dcd9dd4bc55d123f9b800c8a4ed2662e5c6" }, { "cve": "CVE-2026-63950", "author_name": "Dev Jain", "author_email": "dev.jain@arm.com", "fix_sha": "3f8968e9cbf95d5d87d32218906cab0b9b9eddbe", "subject": "mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63950", "commit_url": "https://git.kernel.org/stable/c/3f8968e9cbf95d5d87d32218906cab0b9b9eddbe" }, { "cve": "CVE-2026-63951", "author_name": "Richard Chang", "author_email": "richardycc@google.com", "fix_sha": "bf62f69574b19720ae5fbbbcdf24a0c4e3e05e43", "subject": "zram: fix use-after-free in zram_writeback_endio", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63951", "commit_url": "https://git.kernel.org/stable/c/bf62f69574b19720ae5fbbbcdf24a0c4e3e05e43" }, { "cve": "CVE-2026-63952", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "3b041514cb6eae45869b020f743c14d983363222", "subject": "memfd: deny writeable mappings when implying SEAL_WRITE", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63952", "commit_url": "https://git.kernel.org/stable/c/3b041514cb6eae45869b020f743c14d983363222" }, { "cve": "CVE-2026-63953", "author_name": "Sunny Patel", "author_email": "nueralspacetech@gmail.com", "fix_sha": "2c6f81d58741349298f51ff697d988cb42881453", "subject": "mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63953", "commit_url": "https://git.kernel.org/stable/c/2c6f81d58741349298f51ff697d988cb42881453" }, { "cve": "CVE-2026-63954", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "974820a59efde7c1a7e1260bcfe9bb81f833cc9f", "subject": "hpfs: fix a crash if hpfs_map_dnode_bitmap fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63954", "commit_url": "https://git.kernel.org/stable/c/974820a59efde7c1a7e1260bcfe9bb81f833cc9f" }, { "cve": "CVE-2026-63955", "author_name": "Uladzislau Rezki (Sony)", "author_email": "urezki@gmail.com", "fix_sha": "04aa71da5f35aacdc9ae9cb5150947daa624f641", "subject": "mm/vmalloc: do not trigger BUG() on BH disabled context", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63955", "commit_url": "https://git.kernel.org/stable/c/04aa71da5f35aacdc9ae9cb5150947daa624f641" }, { "cve": "CVE-2026-63956", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "e1a9d791fd66ab2431b9e6f6f835823809869047", "subject": "USB: serial: cypress_m8: fix memory corruption with small endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63956", "commit_url": "https://git.kernel.org/stable/c/e1a9d791fd66ab2431b9e6f6f835823809869047" }, { "cve": "CVE-2026-63957", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "438061ed1ad85e6743e2dce826671772d81089ec", "subject": "USB: serial: safe_serial: fix memory corruption with small endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63957", "commit_url": "https://git.kernel.org/stable/c/438061ed1ad85e6743e2dce826671772d81089ec" }, { "cve": "CVE-2026-63958", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "288a81a8507052bcfbf884d39a463c44c42c5fd9", "subject": "usb: typec: ucsi: validate connector number in ucsi_connector_change()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63958", "commit_url": "https://git.kernel.org/stable/c/288a81a8507052bcfbf884d39a463c44c42c5fd9" }, { "cve": "CVE-2026-63959", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "aa2f716327be1818e1cb156da8a2844804aaec2f", "subject": "usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63959", "commit_url": "https://git.kernel.org/stable/c/aa2f716327be1818e1cb156da8a2844804aaec2f" }, { "cve": "CVE-2026-63960", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "4af7ad0e6d7aa4403dbb1dac7b9659b0421efcaa", "subject": "usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63960", "commit_url": "https://git.kernel.org/stable/c/4af7ad0e6d7aa4403dbb1dac7b9659b0421efcaa" }, { "cve": "CVE-2026-63961", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "8a18f896e667df491331371b55d4ad644dc51d60", "subject": "usb: typec: altmodes/displayport: validate count before reading Status Update VDO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63961", "commit_url": "https://git.kernel.org/stable/c/8a18f896e667df491331371b55d4ad644dc51d60" }, { "cve": "CVE-2026-63962", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "3389c149c68c3fea61910ad5d34f7bf3bff44e32", "subject": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63962", "commit_url": "https://git.kernel.org/stable/c/3389c149c68c3fea61910ad5d34f7bf3bff44e32" }, { "cve": "CVE-2026-63963", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "8fbc349e8383125dd2d8de1c1e926279d398ab17", "subject": "usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63963", "commit_url": "https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17" }, { "cve": "CVE-2026-63964", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "d7486952bf74e546ee3748fb14b2d07881fa6273", "subject": "usb: typec: ucsi: ccg: reject firmware images without a ':' record header", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63964", "commit_url": "https://git.kernel.org/stable/c/d7486952bf74e546ee3748fb14b2d07881fa6273" }, { "cve": "CVE-2026-63965", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "387c86b582e0782ab332e7bfcd4e6e3f93922961", "subject": "iio: pressure: bmp280: fix stack leak in bmp580 trigger handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63965", "commit_url": "https://git.kernel.org/stable/c/387c86b582e0782ab332e7bfcd4e6e3f93922961" }, { "cve": "CVE-2026-63966", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "474f8928d50b09f7dcf507049f08732640b88b49", "subject": "iio: imu: adis16550: fix stack leak in trigger handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63966", "commit_url": "https://git.kernel.org/stable/c/474f8928d50b09f7dcf507049f08732640b88b49" }, { "cve": "CVE-2026-63967", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "c9d8e9adaa63150ef7e833480b799d0bab83a276", "subject": "iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63967", "commit_url": "https://git.kernel.org/stable/c/c9d8e9adaa63150ef7e833480b799d0bab83a276" }, { "cve": "CVE-2026-63968", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "9c7da87c2dc860bb17ca1ece942495d28b1ce3b9", "subject": "ipv6: fix possible infinite loop in fib6_select_path()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63968", "commit_url": "https://git.kernel.org/stable/c/9c7da87c2dc860bb17ca1ece942495d28b1ce3b9" }, { "cve": "CVE-2026-63969", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "9f72412bcf60144f252b0d6205106abf14344abc", "subject": "ipv6: fix possible infinite loop in rt6_fill_node()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63969", "commit_url": "https://git.kernel.org/stable/c/9f72412bcf60144f252b0d6205106abf14344abc" }, { "cve": "CVE-2026-63970", "author_name": "Jingguo Tan", "author_email": "tanjingguo@huawei.com", "fix_sha": "1e584c304cfb94a759417130b1fc6d30b30c4cce", "subject": "vsock/virtio: bind uarg before filling zerocopy skb", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63970", "commit_url": "https://git.kernel.org/stable/c/1e584c304cfb94a759417130b1fc6d30b30c4cce" }, { "cve": "CVE-2026-63971", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "f14fe6395a8b3d961a61e138ad7b36ba3626dd4e", "subject": "sctp: fix race between sctp_wait_for_connect and peeloff", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63971", "commit_url": "https://git.kernel.org/stable/c/f14fe6395a8b3d961a61e138ad7b36ba3626dd4e" }, { "cve": "CVE-2026-63972", "author_name": "Dipayaan Roy", "author_email": "dipayanroy@linux.microsoft.com", "fix_sha": "5b05aa36ee24297d7296ca58dfd8c448d0e4cda3", "subject": "net: mana: Skip redundant detach on already-detached port", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63972", "commit_url": "https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3" }, { "cve": "CVE-2026-63973", "author_name": "Dipayaan Roy", "author_email": "dipayanroy@linux.microsoft.com", "fix_sha": "17bfe0a8c014ee1d542ad352cd6a0a505361664a", "subject": "net: mana: Add NULL guards in teardown path to prevent panic on attach failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63973", "commit_url": "https://git.kernel.org/stable/c/17bfe0a8c014ee1d542ad352cd6a0a505361664a" }, { "cve": "CVE-2026-63974", "author_name": "Heitor Alves de Siqueira", "author_email": "halves@igalia.com", "fix_sha": "525daaea459fc215f432de1b8debbd9144bf97b0", "subject": "Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63974", "commit_url": "https://git.kernel.org/stable/c/525daaea459fc215f432de1b8debbd9144bf97b0" }, { "cve": "CVE-2026-63975", "author_name": "Luiz Augusto von Dentz", "author_email": "luiz.von.dentz@intel.com", "fix_sha": "41c2713b204e6cb6a94587bc6bf6935107df5479", "subject": "Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63975", "commit_url": "https://git.kernel.org/stable/c/41c2713b204e6cb6a94587bc6bf6935107df5479" }, { "cve": "CVE-2026-63976", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "00e1950716c6ed67d74777b2db286b0fa23b4be9", "subject": "Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63976", "commit_url": "https://git.kernel.org/stable/c/00e1950716c6ed67d74777b2db286b0fa23b4be9" }, { "cve": "CVE-2026-63977", "author_name": "Ivan Vecera", "author_email": "ivecera@redhat.com", "fix_sha": "d733f519f6443540f8359461a34e3b0042099bbe", "subject": "dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63977", "commit_url": "https://git.kernel.org/stable/c/d733f519f6443540f8359461a34e3b0042099bbe" }, { "cve": "CVE-2026-63978", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "ea5fe6a73ca57e5150b8a38b341aef2636eb72f0", "subject": "net/handshake: Drain pending requests at net namespace exit", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63978", "commit_url": "https://git.kernel.org/stable/c/ea5fe6a73ca57e5150b8a38b341aef2636eb72f0" }, { "cve": "CVE-2026-63979", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "f4251190e58b209999c1ba9e6d2976136a1be055", "subject": "net/handshake: hand off the pinned file reference to accept_doit", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63979", "commit_url": "https://git.kernel.org/stable/c/f4251190e58b209999c1ba9e6d2976136a1be055" }, { "cve": "CVE-2026-63980", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "cc993e0927ec8bd98ea33377ada03295fcda0f24", "subject": "net/handshake: Use spin_lock_bh for hn_lock", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63980", "commit_url": "https://git.kernel.org/stable/c/cc993e0927ec8bd98ea33377ada03295fcda0f24" }, { "cve": "CVE-2026-63981", "author_name": "Kito Xu (veritas501)", "author_email": "hxzene@gmail.com", "fix_sha": "a005fa5d7502eefec7ee6e1c01adadc06de2f9ad", "subject": "net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63981", "commit_url": "https://git.kernel.org/stable/c/a005fa5d7502eefec7ee6e1c01adadc06de2f9ad" }, { "cve": "CVE-2026-63982", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "db875221ab08d213a83bf30196ae8b64d55a3403", "subject": "net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63982", "commit_url": "https://git.kernel.org/stable/c/db875221ab08d213a83bf30196ae8b64d55a3403" }, { "cve": "CVE-2026-63983", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "9552b11e3edabc97cfcd9f29103d5afbce7ae183", "subject": "net/sched: fix packet loop on netem when duplicate is on", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63983", "commit_url": "https://git.kernel.org/stable/c/9552b11e3edabc97cfcd9f29103d5afbce7ae183" }, { "cve": "CVE-2026-63984", "author_name": "Rahul Chandelkar", "author_email": "rc@rexion.ai", "fix_sha": "9d5e7a46a9f6d8f503b41bfefef70659845f1679", "subject": "ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63984", "commit_url": "https://git.kernel.org/stable/c/9d5e7a46a9f6d8f503b41bfefef70659845f1679" }, { "cve": "CVE-2026-63985", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "67cfdd9210b99f260b3e0afeb9525e0acc7be31e", "subject": "ethtool: eeprom: add more safeties to EEPROM Netlink fallback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63985", "commit_url": "https://git.kernel.org/stable/c/67cfdd9210b99f260b3e0afeb9525e0acc7be31e" }, { "cve": "CVE-2026-63986", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "c3fc9976f686f9a95baf87db9d387f218fd65394", "subject": "ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63986", "commit_url": "https://git.kernel.org/stable/c/c3fc9976f686f9a95baf87db9d387f218fd65394" }, { "cve": "CVE-2026-63987", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "7281b096b072f6c6e30420e3467d738f2e4c4b57", "subject": "ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63987", "commit_url": "https://git.kernel.org/stable/c/7281b096b072f6c6e30420e3467d738f2e4c4b57" }, { "cve": "CVE-2026-63988", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "6d34594cc619d0d4b07d5afcad8b5984f3526dcf", "subject": "bridge: Fix sleep in atomic context in sysfs path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63988", "commit_url": "https://git.kernel.org/stable/c/6d34594cc619d0d4b07d5afcad8b5984f3526dcf" }, { "cve": "CVE-2026-63989", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "5eec4427b89c2fb2beac54920101e55a2f1c0c21", "subject": "bridge: Fix sleep in atomic context in netlink path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63989", "commit_url": "https://git.kernel.org/stable/c/5eec4427b89c2fb2beac54920101e55a2f1c0c21" }, { "cve": "CVE-2026-63990", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "8ba68464e4787b6a7ec938826e16124df20fd23d", "subject": "bonding: refuse to enslave CAN devices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63990", "commit_url": "https://git.kernel.org/stable/c/8ba68464e4787b6a7ec938826e16124df20fd23d" }, { "cve": "CVE-2026-63991", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "3c40d381ce04f9575a5d8b542898183c3b4b38dc", "subject": "Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63991", "commit_url": "https://git.kernel.org/stable/c/3c40d381ce04f9575a5d8b542898183c3b4b38dc" }, { "cve": "CVE-2026-63992", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "509323077ef79a26ba0c60bb556e45c12c398b2d", "subject": "tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63992", "commit_url": "https://git.kernel.org/stable/c/509323077ef79a26ba0c60bb556e45c12c398b2d" }, { "cve": "CVE-2026-63993", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7d9ef0cb271555d8cf39fefe6c981e1493b25ecf", "subject": "vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63993", "commit_url": "https://git.kernel.org/stable/c/7d9ef0cb271555d8cf39fefe6c981e1493b25ecf" }, { "cve": "CVE-2026-63994", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "b4bc94353050b1fa7b702bd4c6600710dd926cff", "subject": "tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63994", "commit_url": "https://git.kernel.org/stable/c/b4bc94353050b1fa7b702bd4c6600710dd926cff" }, { "cve": "CVE-2026-63995", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "12c2496a71f82f63617971ca9b730dffa05cf58b", "subject": "ethtool: cmis: validate start_cmd_payload_size from module", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63995", "commit_url": "https://git.kernel.org/stable/c/12c2496a71f82f63617971ca9b730dffa05cf58b" }, { "cve": "CVE-2026-63996", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "6c3f999a9d1338c6c89a9ff4549eafe72bc2e7b1", "subject": "ethtool: cmis: require exact CDB reply length", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63996", "commit_url": "https://git.kernel.org/stable/c/6c3f999a9d1338c6c89a9ff4549eafe72bc2e7b1" }, { "cve": "CVE-2026-63997", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "fb7f511d62692661846c47f199e0afe25c2982db", "subject": "ethtool: module: avoid leaking a netdev ref on module flash errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63997", "commit_url": "https://git.kernel.org/stable/c/fb7f511d62692661846c47f199e0afe25c2982db" }, { "cve": "CVE-2026-63998", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "84371fb58423f997939aacdcbc02d128d76a54e5", "subject": "ethtool: module: call ethnl_ops_complete() on module flash errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63998", "commit_url": "https://git.kernel.org/stable/c/84371fb58423f997939aacdcbc02d128d76a54e5" }, { "cve": "CVE-2026-63999", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "266297692f97008ca48bc311775c087c59bd7fe3", "subject": "ethtool: rss: fix indir_table and hkey leak on get_rxfh failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63999", "commit_url": "https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3" }, { "cve": "CVE-2026-64000", "author_name": "Luka Gejak", "author_email": "luka.gejak@linux.dev", "fix_sha": "f229426072fc865654a60978bb7fda790a051ff3", "subject": "net: hsr: fix potential OOB access in supervision frame handling", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64000", "commit_url": "https://git.kernel.org/stable/c/f229426072fc865654a60978bb7fda790a051ff3" }, { "cve": "CVE-2026-64001", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "4cc54bdd54b337e77115be5b55577d1c58608eae", "subject": "ALSA: pcm: oss: Fix setup list UAF on proc write error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64001", "commit_url": "https://git.kernel.org/stable/c/4cc54bdd54b337e77115be5b55577d1c58608eae" }, { "cve": "CVE-2026-64002", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "87a1e0fe7776da7ab411be332b4be58ac8840d10", "subject": "ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64002", "commit_url": "https://git.kernel.org/stable/c/87a1e0fe7776da7ab411be332b4be58ac8840d10" }, { "cve": "CVE-2026-64003", "author_name": "David Jeffery", "author_email": "djeffery@redhat.com", "fix_sha": "7205b58702273baf21d6ba7992e6ba15852325f7", "subject": "scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64003", "commit_url": "https://git.kernel.org/stable/c/7205b58702273baf21d6ba7992e6ba15852325f7" }, { "cve": "CVE-2026-64004", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "3589d20a666caf30ad100c960a2de7de390fce88", "subject": "net/iucv: fix locking in .getsockopt", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64004", "commit_url": "https://git.kernel.org/stable/c/3589d20a666caf30ad100c960a2de7de390fce88" }, { "cve": "CVE-2026-64005", "author_name": "Alexandra Winter", "author_email": "wintera@linux.ibm.com", "fix_sha": "9e4389b0038781f19f97895186ed941ff8ac1678", "subject": "net/smc: Do not re-initialize smc hashtables", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64005", "commit_url": "https://git.kernel.org/stable/c/9e4389b0038781f19f97895186ed941ff8ac1678" }, { "cve": "CVE-2026-64006", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "18014147d3ee7831dce53fe65d7fc8d428b02552", "subject": "netfilter: nf_tables: fix dst corruption in same register operation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64006", "commit_url": "https://git.kernel.org/stable/c/18014147d3ee7831dce53fe65d7fc8d428b02552" }, { "cve": "CVE-2026-64007", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "92170e6afe927ab2792a3f71902845789c8e31b1", "subject": "netfilter: synproxy: refresh tcphdr after skb_ensure_writable", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64007", "commit_url": "https://git.kernel.org/stable/c/92170e6afe927ab2792a3f71902845789c8e31b1" }, { "cve": "CVE-2026-64008", "author_name": "Dhabaleshwar Das", "author_email": "dhabal123@gmail.com", "fix_sha": "f706e6a4ce75585af979aec3dcbdce68bc76306b", "subject": "accel/rocket: fix UAF via dangling GEM handle in create_bo", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64008", "commit_url": "https://git.kernel.org/stable/c/f706e6a4ce75585af979aec3dcbdce68bc76306b" }, { "cve": "CVE-2026-64009", "author_name": "David Ahern", "author_email": "dahern@nvidia.com", "fix_sha": "742b04d0550b0ec89dcbc99537ec88653bd1ad90", "subject": "xfrm: Check for underflow in xfrm_state_mtu", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64009", "commit_url": "https://git.kernel.org/stable/c/742b04d0550b0ec89dcbc99537ec88653bd1ad90" }, { "cve": "CVE-2026-64010", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "b493ea2765cc17cb8aa7e7544a4b6dcb05b6ed77", "subject": "nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64010", "commit_url": "https://git.kernel.org/stable/c/b493ea2765cc17cb8aa7e7544a4b6dcb05b6ed77" }, { "cve": "CVE-2026-64011", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "f4268b466190dae95a7585f69b4f1f8ad097632c", "subject": "nfc: llcp: Fix use-after-free in llcp_sock_release()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64011", "commit_url": "https://git.kernel.org/stable/c/f4268b466190dae95a7585f69b4f1f8ad097632c" }, { "cve": "CVE-2026-64012", "author_name": "Victor Nogueria", "author_email": "victor@mojatatu.com", "fix_sha": "1b9bc71153b01dbde8045b9edede4240f4f5520e", "subject": "net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64012", "commit_url": "https://git.kernel.org/stable/c/1b9bc71153b01dbde8045b9edede4240f4f5520e" }, { "cve": "CVE-2026-64013", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "fe80251152fed5b185f795ef2cd9f7fe9c3162e0", "subject": "ACPI: button: Fix ACPI GPE handler leak during removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64013", "commit_url": "https://git.kernel.org/stable/c/fe80251152fed5b185f795ef2cd9f7fe9c3162e0" }, { "cve": "CVE-2026-64014", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "2905281cbda52ec9df540113b35b835feb5fafd3", "subject": "Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64014", "commit_url": "https://git.kernel.org/stable/c/2905281cbda52ec9df540113b35b835feb5fafd3" }, { "cve": "CVE-2026-64015", "author_name": "Linus Torvalds", "author_email": "torvalds@linux-foundation.org", "fix_sha": "43a1e3744548e6fd85873e6fb43e293eb4010694", "subject": "security/keys: fix missed RCU read section on lookup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64015", "commit_url": "https://git.kernel.org/stable/c/43a1e3744548e6fd85873e6fb43e293eb4010694" }, { "cve": "CVE-2026-64016", "author_name": "Junyi Liu", "author_email": "moss80199@gmail.com", "fix_sha": "3515503322f4819277091839eed46b695096aca5", "subject": "ksmbd: fix durable reconnect error path file lifetime", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64016", "commit_url": "https://git.kernel.org/stable/c/3515503322f4819277091839eed46b695096aca5" }, { "cve": "CVE-2026-64017", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "dc278e9bf2b9513a763353e6b9cc21e0f532954e", "subject": "blk-mq: pop cached request if it is usable", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64017", "commit_url": "https://git.kernel.org/stable/c/dc278e9bf2b9513a763353e6b9cc21e0f532954e" }, { "cve": "CVE-2026-64018", "author_name": "Aditya Garg", "author_email": "gargaditya@linux.microsoft.com", "fix_sha": "b809d0409991b75a6cff846a5ac27c3062953f84", "subject": "net: mana: validate rx_req_idx to prevent out-of-bounds array access", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64018", "commit_url": "https://git.kernel.org/stable/c/b809d0409991b75a6cff846a5ac27c3062953f84" }, { "cve": "CVE-2026-64019", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "1bf86336e4b6cf40873fda47a7fe191446864937", "subject": "nvme-pci: fix dma mapping leak on data setup error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64019", "commit_url": "https://git.kernel.org/stable/c/1bf86336e4b6cf40873fda47a7fe191446864937" }, { "cve": "CVE-2026-64020", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "85686c72966c5ee637893f124ddb31a1cace7bee", "subject": "nvme-pci: fix dma_vecs leak on p2p memory", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64020", "commit_url": "https://git.kernel.org/stable/c/85686c72966c5ee637893f124ddb31a1cace7bee" }, { "cve": "CVE-2026-64021", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "4d25342543c01310fc4e0cba7cb17c775e2421e2", "subject": "drm/xe/oa: Fix exec_queue leak on width check in stream open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64021", "commit_url": "https://git.kernel.org/stable/c/4d25342543c01310fc4e0cba7cb17c775e2421e2" }, { "cve": "CVE-2026-64022", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "61fef83f239ecace1cce716135762a2d9b7b1fc6", "subject": "gpio: aggregator: remove the software node when deactivating the aggregator", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64022", "commit_url": "https://git.kernel.org/stable/c/61fef83f239ecace1cce716135762a2d9b7b1fc6" }, { "cve": "CVE-2026-64023", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "30c073cab97afb31901f94de9605177b6b84367e", "subject": "gpio: aggregator: fix a potential use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64023", "commit_url": "https://git.kernel.org/stable/c/30c073cab97afb31901f94de9605177b6b84367e" }, { "cve": "CVE-2026-64024", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "1bbf0ced1d9db73ac7893c2187f3459288603e0d", "subject": "tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64024", "commit_url": "https://git.kernel.org/stable/c/1bbf0ced1d9db73ac7893c2187f3459288603e0d" }, { "cve": "CVE-2026-64025", "author_name": "Xingwang Xiang", "author_email": "v3rdant.xiang@gmail.com", "fix_sha": "ddf8029623a1af20e984c040e89ff918158397ab", "subject": "bpf, skmsg: fix verdict sk_data_ready racing with ktls rx", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64025", "commit_url": "https://git.kernel.org/stable/c/ddf8029623a1af20e984c040e89ff918158397ab" }, { "cve": "CVE-2026-64026", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "d2bc90cf6c75cb96d2ce549be6c35efa3099d25b", "subject": "rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64026", "commit_url": "https://git.kernel.org/stable/c/d2bc90cf6c75cb96d2ce549be6c35efa3099d25b" }, { "cve": "CVE-2026-64027", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "b8d7519352ba8c6df83259295d4a3bad093cae90", "subject": "net: shaper: rework the VALID marking (again)", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64027", "commit_url": "https://git.kernel.org/stable/c/b8d7519352ba8c6df83259295d4a3bad093cae90" }, { "cve": "CVE-2026-64028", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "576ec047d20b368b43c4d5db98c4f2e0f3c101ec", "subject": "tracing: Avoid NULL return from hist_field_name() on truncation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64028", "commit_url": "https://git.kernel.org/stable/c/576ec047d20b368b43c4d5db98c4f2e0f3c101ec" }, { "cve": "CVE-2026-64029", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "60a1969fae6209644698fca91c185d153674f631", "subject": "ALSA: seq: Serialize UMP output teardown with event_input", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64029", "commit_url": "https://git.kernel.org/stable/c/60a1969fae6209644698fca91c185d153674f631" }, { "cve": "CVE-2026-64030", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "f718506edd2d9c6a308ded9d13c632bf7b7d5a2c", "subject": "wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64030", "commit_url": "https://git.kernel.org/stable/c/f718506edd2d9c6a308ded9d13c632bf7b7d5a2c" }, { "cve": "CVE-2026-64031", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "649932fc3815eda2f24eb4de4b3a5e94886ee0b9", "subject": "erofs: fix managed cache race for unaligned extents", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64031", "commit_url": "https://git.kernel.org/stable/c/649932fc3815eda2f24eb4de4b3a5e94886ee0b9" }, { "cve": "CVE-2026-64032", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "4df78ff02629c7729168f0696a7a2123c389818d", "subject": "bridge: mcast: Fix a possible use-after-free when removing a bridge port", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64032", "commit_url": "https://git.kernel.org/stable/c/4df78ff02629c7729168f0696a7a2123c389818d" }, { "cve": "CVE-2026-64033", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "5b74373390113fba798a76b483837029ab010fef", "subject": "RDMA/rtrs: Fix use-after-free in path file creation cleanup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64033", "commit_url": "https://git.kernel.org/stable/c/5b74373390113fba798a76b483837029ab010fef" }, { "cve": "CVE-2026-64034", "author_name": "Erni Sri Satya Vennela", "author_email": "ernis@linux.microsoft.com", "fix_sha": "35f0f0a2536a4d604b4dbad92c85c4a8fdebb870", "subject": "net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64034", "commit_url": "https://git.kernel.org/stable/c/35f0f0a2536a4d604b4dbad92c85c4a8fdebb870" }, { "cve": "CVE-2026-64035", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "5acc641e590e008caaed480ed9ffae47cf7ecbdf", "subject": "igc: set tx buffer type for SMD frames", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64035", "commit_url": "https://git.kernel.org/stable/c/5acc641e590e008caaed480ed9ffae47cf7ecbdf" }, { "cve": "CVE-2026-64036", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "8817005efbdfdf5d4e4814cb5dc52b53d12917d7", "subject": "cgroup/rstat: validate cpu before css_rstat_cpu() access", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64036", "commit_url": "https://git.kernel.org/stable/c/8817005efbdfdf5d4e4814cb5dc52b53d12917d7" }, { "cve": "CVE-2026-64037", "author_name": "Cole Leavitt", "author_email": "cole@unwrap.rs", "fix_sha": "92cee08dc4f00e77fd1317e4343c5d458b0abab7", "subject": "wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64037", "commit_url": "https://git.kernel.org/stable/c/92cee08dc4f00e77fd1317e4343c5d458b0abab7" }, { "cve": "CVE-2026-64038", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "b09a45601094c7f4ec4db8090b825fa61e169d93", "subject": "hwmon: (lm90) Stop work before releasing hwmon device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64038", "commit_url": "https://git.kernel.org/stable/c/b09a45601094c7f4ec4db8090b825fa61e169d93" }, { "cve": "CVE-2026-64039", "author_name": "Dmitry Baryshkov", "author_email": "dmitry.baryshkov@oss.qualcomm.com", "fix_sha": "76824d2467feb1828b745d6add2541918d7be3da", "subject": "drm/msm/snapshot: fix dumping of the unaligned regions", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64039", "commit_url": "https://git.kernel.org/stable/c/76824d2467feb1828b745d6add2541918d7be3da" }, { "cve": "CVE-2026-64040", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "8a220d1c312c66194f4a33dd52d1fba42bc2b341", "subject": "cachefiles: Fix error return when vfs_mkdir() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64040", "commit_url": "https://git.kernel.org/stable/c/8a220d1c312c66194f4a33dd52d1fba42bc2b341" }, { "cve": "CVE-2026-64041", "author_name": "Alexander A. Klimov", "author_email": "grandmaster@al2klimov.de", "fix_sha": "0d435a7ebcd4e97e47673c1ab6fb27f973a053ec", "subject": "ASoC: codecs: fs210x: fix possible buffer overflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64041", "commit_url": "https://git.kernel.org/stable/c/0d435a7ebcd4e97e47673c1ab6fb27f973a053ec" }, { "cve": "CVE-2026-64042", "author_name": "Matt Evans", "author_email": "mattev@meta.com", "fix_sha": "702809dabdecca807bdd50cfdcc1c980feb2ba62", "subject": "vfio/pci: Check BAR resources before exporting a DMABUF", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64042", "commit_url": "https://git.kernel.org/stable/c/702809dabdecca807bdd50cfdcc1c980feb2ba62" }, { "cve": "CVE-2026-64043", "author_name": "Antonio Quartulli", "author_email": "antonio@openvpn.net", "fix_sha": "982422b11e6f95f766a8cd2c2b1cbdb77e234a61", "subject": "ovpn: fix race between deleting interface and adding new peer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64043", "commit_url": "https://git.kernel.org/stable/c/982422b11e6f95f766a8cd2c2b1cbdb77e234a61" }, { "cve": "CVE-2026-64044", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "1fef6614673ff0846d30acdeeaf3cf98bb5f6116", "subject": "ovpn: respect peer refcount in CMD_NEW_PEER error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64044", "commit_url": "https://git.kernel.org/stable/c/1fef6614673ff0846d30acdeeaf3cf98bb5f6116" }, { "cve": "CVE-2026-64045", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "775d8d7ad02aa345e1588424a6a8b9ae49fb9012", "subject": "ovpn: tcp - use cached peer pointer in ovpn_tcp_close()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64045", "commit_url": "https://git.kernel.org/stable/c/775d8d7ad02aa345e1588424a6a8b9ae49fb9012" }, { "cve": "CVE-2026-64046", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "ff26a0e8377dec07e4a7230db7675bed1b9a6d03", "subject": "net: tls: prevent chain-after-chain in plain text SG", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64046", "commit_url": "https://git.kernel.org/stable/c/ff26a0e8377dec07e4a7230db7675bed1b9a6d03" }, { "cve": "CVE-2026-64047", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "285943c6e7ca309bbea84b253745154241d9788a", "subject": "net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64047", "commit_url": "https://git.kernel.org/stable/c/285943c6e7ca309bbea84b253745154241d9788a" }, { "cve": "CVE-2026-64048", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "277740023def559a4a2ddc3e8e784ee37a0f16a9", "subject": "net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64048", "commit_url": "https://git.kernel.org/stable/c/277740023def559a4a2ddc3e8e784ee37a0f16a9" }, { "cve": "CVE-2026-64049", "author_name": "Dmitry Baryshkov", "author_email": "dmitry.baryshkov@oss.qualcomm.com", "fix_sha": "2b4abf879360ea00a9e2b46d2d15dcdbc0687eed", "subject": "drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64049", "commit_url": "https://git.kernel.org/stable/c/2b4abf879360ea00a9e2b46d2d15dcdbc0687eed" }, { "cve": "CVE-2026-64050", "author_name": "Dmitry Baryshkov", "author_email": "dmitry.baryshkov@oss.qualcomm.com", "fix_sha": "c0c70a11365cba7fba25a77463582bcec0f7846e", "subject": "drm/msm/dpu: don't mix devm and drmm functions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64050", "commit_url": "https://git.kernel.org/stable/c/c0c70a11365cba7fba25a77463582bcec0f7846e" }, { "cve": "CVE-2026-64051", "author_name": "Zack McKevitt", "author_email": "zachary.mckevitt@oss.qualcomm.com", "fix_sha": "aa16b2bc0f02709919e2435f531406531e5bcc69", "subject": "accel/qaic: Add overflow check to remap_pfn_range during mmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64051", "commit_url": "https://git.kernel.org/stable/c/aa16b2bc0f02709919e2435f531406531e5bcc69" }, { "cve": "CVE-2026-64052", "author_name": "Sungwoo Kim", "author_email": "iam@sung-woo.kim", "fix_sha": "8582792cf23b3d94674d4d838f7cde9a28d0fcaf", "subject": "block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64052", "commit_url": "https://git.kernel.org/stable/c/8582792cf23b3d94674d4d838f7cde9a28d0fcaf" }, { "cve": "CVE-2026-64053", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "637ad3a56a3b889527d1dacea6fea2a8bd648140", "subject": "block: don't overwrite bip_vcnt in bio_integrity_copy_user()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64053", "commit_url": "https://git.kernel.org/stable/c/637ad3a56a3b889527d1dacea6fea2a8bd648140" }, { "cve": "CVE-2026-64054", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "a9a2fa1da619f276580b0d4c5d12efac89e8642b", "subject": "net: shaper: reject duplicate leaves in GROUP request", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64054", "commit_url": "https://git.kernel.org/stable/c/a9a2fa1da619f276580b0d4c5d12efac89e8642b" }, { "cve": "CVE-2026-64055", "author_name": "Linus Walleij", "author_email": "linusw@kernel.org", "fix_sha": "ebd8ec2b309e3a447851b456ccaf8fb39f3661e7", "subject": "net: ethernet: cortina: Carry over frag counter", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64055", "commit_url": "https://git.kernel.org/stable/c/ebd8ec2b309e3a447851b456ccaf8fb39f3661e7" }, { "cve": "CVE-2026-64056", "author_name": "Linus Walleij", "author_email": "linusw@kernel.org", "fix_sha": "06937db21ee311ed07eba47954447245041a982d", "subject": "net: ethernet: cortina: Make RX SKB per-port", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64056", "commit_url": "https://git.kernel.org/stable/c/06937db21ee311ed07eba47954447245041a982d" }, { "cve": "CVE-2026-64057", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "c0410adf3da6db46f3513411fcf95e63c2f1d1ad", "subject": "afs: Fix the locking used by afs_get_link()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64057", "commit_url": "https://git.kernel.org/stable/c/c0410adf3da6db46f3513411fcf95e63c2f1d1ad" }, { "cve": "CVE-2026-64058", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "ded0c6f1606061148c202825f7e53d711f9f84cf", "subject": "netfs: Fix netfs_read_folio() to wait on writeback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64058", "commit_url": "https://git.kernel.org/stable/c/ded0c6f1606061148c202825f7e53d711f9f84cf" }, { "cve": "CVE-2026-64059", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "ccde2ac757c713535b224233a296de40efe5212d", "subject": "netfs: Fix folio->private handling in netfs_perform_write()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64059", "commit_url": "https://git.kernel.org/stable/c/ccde2ac757c713535b224233a296de40efe5212d" }, { "cve": "CVE-2026-64060", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "5046a34f0643441f05b0253ea64e1a3af87efe14", "subject": "netfs: Fix leak of request in netfs_write_begin() error handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64060", "commit_url": "https://git.kernel.org/stable/c/5046a34f0643441f05b0253ea64e1a3af87efe14" }, { "cve": "CVE-2026-64061", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "3e5dd91b87a8b1450217b56a336bee315f40da7d", "subject": "netfs: Fix early put of sink folio in netfs_read_gaps()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64061", "commit_url": "https://git.kernel.org/stable/c/3e5dd91b87a8b1450217b56a336bee315f40da7d" }, { "cve": "CVE-2026-64062", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "b6a4ae1634b3ad2aaa05222e53d36da532852faf", "subject": "netfs: Fix potential deadlock in write-through mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64062", "commit_url": "https://git.kernel.org/stable/c/b6a4ae1634b3ad2aaa05222e53d36da532852faf" }, { "cve": "CVE-2026-64063", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "7b4dcf1b9455a6e52ac7478b4057dbe10359576d", "subject": "netfs: Fix streaming write being overwritten", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64063", "commit_url": "https://git.kernel.org/stable/c/7b4dcf1b9455a6e52ac7478b4057dbe10359576d" }, { "cve": "CVE-2026-64064", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "156ac2ec2ee77c44c4eb7439d6d165247ba12247", "subject": "netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64064", "commit_url": "https://git.kernel.org/stable/c/156ac2ec2ee77c44c4eb7439d6d165247ba12247" }, { "cve": "CVE-2026-64065", "author_name": "Viacheslav Dubeyko", "author_email": "slava.dubeyko@ibm.com", "fix_sha": "dc7832d05deb4d632e8035e3299e31a3528fa0d0", "subject": "netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64065", "commit_url": "https://git.kernel.org/stable/c/dc7832d05deb4d632e8035e3299e31a3528fa0d0" }, { "cve": "CVE-2026-64066", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "8a8c0cfdf4658fc5b295b7fc87be56e0d76741f4", "subject": "netfs: Fix netfs_read_to_pagecache() to pause on subreq failure", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64066", "commit_url": "https://git.kernel.org/stable/c/8a8c0cfdf4658fc5b295b7fc87be56e0d76741f4" }, { "cve": "CVE-2026-64067", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "b5782e2d462c028096f922abca46318cec890670", "subject": "netfs: Fix missing barriers when accessing stream->subrequests locklessly", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64067", "commit_url": "https://git.kernel.org/stable/c/b5782e2d462c028096f922abca46318cec890670" }, { "cve": "CVE-2026-64068", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "cce18c263e9623872327ba3c956012f73c1179cc", "subject": "netfs: Fix missing locking around retry adding new subreqs", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64068", "commit_url": "https://git.kernel.org/stable/c/cce18c263e9623872327ba3c956012f73c1179cc" }, { "cve": "CVE-2026-64069", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "6f0f7ac1915abc0d202f0eb4b003a6548a5ba60d", "subject": "netfs: Fix cancellation of a DIO and single read subrequests", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64069", "commit_url": "https://git.kernel.org/stable/c/6f0f7ac1915abc0d202f0eb4b003a6548a5ba60d" }, { "cve": "CVE-2026-64070", "author_name": "Aboorva Devarajan", "author_email": "aboorvad@linux.ibm.com", "fix_sha": "dbc30a57bd8e026995e9fa8e8c31cffd18542c01", "subject": "powerpc/hv-gpci: fix preempt count leak in sysfs show paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64070", "commit_url": "https://git.kernel.org/stable/c/dbc30a57bd8e026995e9fa8e8c31cffd18542c01" }, { "cve": "CVE-2026-64071", "author_name": "Chia-Lin Kao (AceLan)", "author_email": "acelan.kao@canonical.com", "fix_sha": "b35a13036755c5803168a7cb93bc66035c3e65b8", "subject": "nvme-pci: fix use-after-free in nvme_free_host_mem()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64071", "commit_url": "https://git.kernel.org/stable/c/b35a13036755c5803168a7cb93bc66035c3e65b8" }, { "cve": "CVE-2026-64072", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "2279cd9c61a330e5de4d6eb0bc422820dd6fdf36", "subject": "nvme: fix bio leak on mapping failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64072", "commit_url": "https://git.kernel.org/stable/c/2279cd9c61a330e5de4d6eb0bc422820dd6fdf36" }, { "cve": "CVE-2026-64073", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "91840be8f710370607f949a627e070896faeddb8", "subject": "irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64073", "commit_url": "https://git.kernel.org/stable/c/91840be8f710370607f949a627e070896faeddb8" }, { "cve": "CVE-2026-64074", "author_name": "Junyoung Jang", "author_email": "graypanda.inzag@gmail.com", "fix_sha": "a3bf0f28d4ba16e1f35f8c983bb04426b87e2a78", "subject": "fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64074", "commit_url": "https://git.kernel.org/stable/c/a3bf0f28d4ba16e1f35f8c983bb04426b87e2a78" }, { "cve": "CVE-2026-64075", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "657b594b2084b39a4bc6d8493aa2140cb00cea49", "subject": "fprobe: Fix unregister_fprobe() to wait for RCU grace period", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64075", "commit_url": "https://git.kernel.org/stable/c/657b594b2084b39a4bc6d8493aa2140cb00cea49" }, { "cve": "CVE-2026-64076", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "27414ff1b287ea9a2a11675149ec28e05539f3cc", "subject": "netfilter: bridge: eb_tables: close module init race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64076", "commit_url": "https://git.kernel.org/stable/c/27414ff1b287ea9a2a11675149ec28e05539f3cc" }, { "cve": "CVE-2026-64077", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "b7f0544d86d439cb946515d2ef6a0a75e8626710", "subject": "netfilter: ebtables: move to two-stage removal scheme", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64077", "commit_url": "https://git.kernel.org/stable/c/b7f0544d86d439cb946515d2ef6a0a75e8626710" }, { "cve": "CVE-2026-64078", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "b4597d5fd7d2f8cebfffd40dffb5e003cc78964c", "subject": "netfilter: x_tables: add and use xtables_unregister_table_exit", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64078", "commit_url": "https://git.kernel.org/stable/c/b4597d5fd7d2f8cebfffd40dffb5e003cc78964c" }, { "cve": "CVE-2026-64079", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "b62eb8dcf2c47d4d676a434efbd57c4f776f7829", "subject": "netfilter: x_tables: allocate hook ops while under mutex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64079", "commit_url": "https://git.kernel.org/stable/c/b62eb8dcf2c47d4d676a434efbd57c4f776f7829" }, { "cve": "CVE-2026-64080", "author_name": "Sudeep Holla", "author_email": "sudeep.holla@kernel.org", "fix_sha": "38290b180a4d5746baed796d49f88d56d2f336cd", "subject": "firmware: arm_ffa: Snapshot notifier callbacks under lock", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64080", "commit_url": "https://git.kernel.org/stable/c/38290b180a4d5746baed796d49f88d56d2f336cd" }, { "cve": "CVE-2026-64081", "author_name": "Sudeep Holla", "author_email": "sudeep.holla@kernel.org", "fix_sha": "4a1cc9e96b311d2609a6f963a5e35bd4ae730d97", "subject": "firmware: arm_ffa: Validate framework notification message layout", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64081", "commit_url": "https://git.kernel.org/stable/c/4a1cc9e96b311d2609a6f963a5e35bd4ae730d97" }, { "cve": "CVE-2026-64082", "author_name": "Michael Neuling", "author_email": "mikey@neuling.org", "fix_sha": "6ebcbb53fc9bc30843054ed99fd60b8e542628f4", "subject": "riscv: Fix register corruption from uninitialized cregs on error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64082", "commit_url": "https://git.kernel.org/stable/c/6ebcbb53fc9bc30843054ed99fd60b8e542628f4" }, { "cve": "CVE-2026-64083", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "a7232f68c43ca62f545049b7f5fbfc75137b843b", "subject": "hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64083", "commit_url": "https://git.kernel.org/stable/c/a7232f68c43ca62f545049b7f5fbfc75137b843b" }, { "cve": "CVE-2026-64084", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "d7834d92251baade796812876e95555e2066fa9f", "subject": "hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64084", "commit_url": "https://git.kernel.org/stable/c/d7834d92251baade796812876e95555e2066fa9f" }, { "cve": "CVE-2026-64085", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "43cae21424ff8e33894a0f86c6b80b840c049fd7", "subject": "hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64085", "commit_url": "https://git.kernel.org/stable/c/43cae21424ff8e33894a0f86c6b80b840c049fd7" }, { "cve": "CVE-2026-64086", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "487566cb1ccdf3756fdd7bf8d875e612ff3169bb", "subject": "hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64086", "commit_url": "https://git.kernel.org/stable/c/487566cb1ccdf3756fdd7bf8d875e612ff3169bb" }, { "cve": "CVE-2026-64087", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "4afca954622d672ea65ed961bed01cf91caa034e", "subject": "hwmon: (pmbus/adm1266) reject implausible blackbox record_count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64087", "commit_url": "https://git.kernel.org/stable/c/4afca954622d672ea65ed961bed01cf91caa034e" }, { "cve": "CVE-2026-64088", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "b64963a2ceeb7529310b6cf253a1e540784422f4", "subject": "batman-adv: tt: fix negative tt_buff_len", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64088", "commit_url": "https://git.kernel.org/stable/c/b64963a2ceeb7529310b6cf253a1e540784422f4" }, { "cve": "CVE-2026-64089", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "fc92cdfcb295cefa4344d71a527d61b638b7bfc4", "subject": "batman-adv: tt: fix negative last_changeset_len", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64089", "commit_url": "https://git.kernel.org/stable/c/fc92cdfcb295cefa4344d71a527d61b638b7bfc4" }, { "cve": "CVE-2026-64090", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "fa1bd704940b5bcbc32c0b28db9167405c8ee5e0", "subject": "batman-adv: tt: avoid empty VLAN responses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64090", "commit_url": "https://git.kernel.org/stable/c/fa1bd704940b5bcbc32c0b28db9167405c8ee5e0" }, { "cve": "CVE-2026-64091", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "94d27005016be15ffc638b2ecbc4d58805ad7b48", "subject": "batman-adv: tt: fix TOCTOU race for reported vlans", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64091", "commit_url": "https://git.kernel.org/stable/c/94d27005016be15ffc638b2ecbc4d58805ad7b48" }, { "cve": "CVE-2026-64092", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "77098e4bea37af51d3962efa88a5af2ea5e1ac57", "subject": "batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64092", "commit_url": "https://git.kernel.org/stable/c/77098e4bea37af51d3962efa88a5af2ea5e1ac57" }, { "cve": "CVE-2026-64093", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "d5487249a81ea658717614009c8f46acc5b7101a", "subject": "batman-adv: tp_meter: directly shut down timer on cleanup", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64093", "commit_url": "https://git.kernel.org/stable/c/d5487249a81ea658717614009c8f46acc5b7101a" }, { "cve": "CVE-2026-64094", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "f80d3d98d2ff78d9e2fe5d68b1f45948c4f7bd24", "subject": "batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64094", "commit_url": "https://git.kernel.org/stable/c/f80d3d98d2ff78d9e2fe5d68b1f45948c4f7bd24" }, { "cve": "CVE-2026-64095", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "83ab69bd12b80f6ea169c8bea6977701b53a043d", "subject": "batman-adv: bla: avoid double decrement of bla.num_requests", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64095", "commit_url": "https://git.kernel.org/stable/c/83ab69bd12b80f6ea169c8bea6977701b53a043d" }, { "cve": "CVE-2026-64096", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "20c2d6a20ca936f5aaa6dd40f73f262ac45c87cc", "subject": "batman-adv: mcast: fix use-after-free in orig_node RCU release", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64096", "commit_url": "https://git.kernel.org/stable/c/20c2d6a20ca936f5aaa6dd40f73f262ac45c87cc" }, { "cve": "CVE-2026-64097", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "86d2b20644b11d21fe52c596e6e922b4590a3e3f", "subject": "drm/amd/display: Validate GPIO pin LUT table size before iterating", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64097", "commit_url": "https://git.kernel.org/stable/c/86d2b20644b11d21fe52c596e6e922b4590a3e3f" }, { "cve": "CVE-2026-64098", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "9af1b6e175c82daf4b423da339a722d8e67a735a", "subject": "drm/virtio: use uninterruptible resv lock for plane updates", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64098", "commit_url": "https://git.kernel.org/stable/c/9af1b6e175c82daf4b423da339a722d8e67a735a" }, { "cve": "CVE-2026-64099", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "b0fe80c0b9250b35e2211bf3117e7aca814a21b0", "subject": "drm/v3d: Fix use-after-free of CPU job query arrays on error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64099", "commit_url": "https://git.kernel.org/stable/c/b0fe80c0b9250b35e2211bf3117e7aca814a21b0" }, { "cve": "CVE-2026-64100", "author_name": "Daniel J Blueman", "author_email": "daniel@quora.org", "fix_sha": "3392291fc509d8ad6e4ad90f15b0a193f721cbc9", "subject": "drm/msm: Fix shrinker deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64100", "commit_url": "https://git.kernel.org/stable/c/3392291fc509d8ad6e4ad90f15b0a193f721cbc9" }, { "cve": "CVE-2026-64101", "author_name": "Heechan Kang", "author_email": "gganji11@naver.com", "fix_sha": "e7537735028c3ad4b0bfc02ff8fa2a1a28aa04fe", "subject": "fwctl: pds: Validate RPC input size before parsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64101", "commit_url": "https://git.kernel.org/stable/c/e7537735028c3ad4b0bfc02ff8fa2a1a28aa04fe" }, { "cve": "CVE-2026-64102", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "0ce1bc9e46ecabe84772bb561e373c0d9876d6f2", "subject": "RDMA/siw: Reject MPA FPDU length underflow before signed receive math", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64102", "commit_url": "https://git.kernel.org/stable/c/0ce1bc9e46ecabe84772bb561e373c0d9876d6f2" }, { "cve": "CVE-2026-64103", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "b52a8d52c3125ec9a93106ed816582368de34426", "subject": "scsi: isci: Fix use-after-free in device removal path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64103", "commit_url": "https://git.kernel.org/stable/c/b52a8d52c3125ec9a93106ed816582368de34426" }, { "cve": "CVE-2026-64104", "author_name": "Carlos L\u00f3pez", "author_email": "clopez@suse.de", "fix_sha": "fd948c3f96b18ff9ba7d3e8eae13d196593e1aaf", "subject": "virt: sev-guest: Explicitly leak pages in unknown state", "cvss_score": 8.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64104", "commit_url": "https://git.kernel.org/stable/c/fd948c3f96b18ff9ba7d3e8eae13d196593e1aaf" }, { "cve": "CVE-2026-64105", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "f19c354dbd457759dfcf1195ab4bdba2bb568323", "subject": "KVM: arm64: vgic: Free private_irqs when init fails after allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64105", "commit_url": "https://git.kernel.org/stable/c/f19c354dbd457759dfcf1195ab4bdba2bb568323" }, { "cve": "CVE-2026-64106", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9ce754ed8e7ab4e3999767ce1505f85c449ccb07", "subject": "KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits", "cvss_score": 9.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64106", "commit_url": "https://git.kernel.org/stable/c/9ce754ed8e7ab4e3999767ce1505f85c449ccb07" }, { "cve": "CVE-2026-64107", "author_name": "Jeongjun Park", "author_email": "aha310510@gmail.com", "fix_sha": "09e8f9a9aa19aa8c1b0cc7a0ebc68f6ecf86a660", "subject": "ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64107", "commit_url": "https://git.kernel.org/stable/c/09e8f9a9aa19aa8c1b0cc7a0ebc68f6ecf86a660" }, { "cve": "CVE-2026-64108", "author_name": "Zhihao Cheng", "author_email": "chengzhihao1@huawei.com", "fix_sha": "c68337442f03953237a94577beb468ab2662a851", "subject": "cifs: Fix busy dentry used after unmounting", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64108", "commit_url": "https://git.kernel.org/stable/c/c68337442f03953237a94577beb468ab2662a851" }, { "cve": "CVE-2026-64109", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "be309f8eae8b474a4a617eaae01324da996fc719", "subject": "af_unix: Fix UAF read of tail->len in unix_stream_data_wait()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64109", "commit_url": "https://git.kernel.org/stable/c/be309f8eae8b474a4a617eaae01324da996fc719" }, { "cve": "CVE-2026-64110", "author_name": "Kohei Enju", "author_email": "kohei@enjuk.jp", "fix_sha": "e935c37b8a94bb256fada6395a5d05e1c0c6bdaf", "subject": "igc: fix potential skb leak in igc_fpe_xmit_smd_frame()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64110", "commit_url": "https://git.kernel.org/stable/c/e935c37b8a94bb256fada6395a5d05e1c0c6bdaf" }, { "cve": "CVE-2026-64111", "author_name": "Stephen Smalley", "author_email": "stephen.smalley.work@gmail.com", "fix_sha": "4a9b16541ad3faf8bccb398532bf3f8b6bbf1188", "subject": "lsm: hold cred_guard_mutex for lsm_set_self_attr()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64111", "commit_url": "https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188" }, { "cve": "CVE-2026-64112", "author_name": "Ilya Dryomov", "author_email": "idryomov@gmail.com", "fix_sha": "9fc75b71fdd38465c76c6f6a884cdd4ae3c72d90", "subject": "rbd: eliminate a race in lock_dwork draining on unmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64112", "commit_url": "https://git.kernel.org/stable/c/9fc75b71fdd38465c76c6f6a884cdd4ae3c72d90" }, { "cve": "CVE-2026-64113", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "5d49b568c188dc77199d8d2b959c91da8cc27cf1", "subject": "ixgbevf: fix use-after-free in VEPA multicast source pruning", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64113", "commit_url": "https://git.kernel.org/stable/c/5d49b568c188dc77199d8d2b959c91da8cc27cf1" }, { "cve": "CVE-2026-64114", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "915fab69823a14c170dbaa3b41978768e0fe62fc", "subject": "ipv4: raw: reject IP_HDRINCL packets with ihl < 5", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64114", "commit_url": "https://git.kernel.org/stable/c/915fab69823a14c170dbaa3b41978768e0fe62fc" }, { "cve": "CVE-2026-64115", "author_name": "Minh Nguyen", "author_email": "minhnguyen.080505@gmail.com", "fix_sha": "99e22ddf4edb63dc8382bc028af928056d3450cf", "subject": "vsock/vmci: fix UAF when peer resets connection during handshake", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64115", "commit_url": "https://git.kernel.org/stable/c/99e22ddf4edb63dc8382bc028af928056d3450cf" }, { "cve": "CVE-2026-64116", "author_name": "Justin Iurman", "author_email": "justin.iurman@gmail.com", "fix_sha": "d4ea0dfd75011b78cebf3808f98ac4c4f51a6fb9", "subject": "ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64116", "commit_url": "https://git.kernel.org/stable/c/d4ea0dfd75011b78cebf3808f98ac4c4f51a6fb9" }, { "cve": "CVE-2026-64117", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "d71c841be5d9e586ee7f36c0dc8ed4db0d9a1349", "subject": "wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64117", "commit_url": "https://git.kernel.org/stable/c/d71c841be5d9e586ee7f36c0dc8ed4db0d9a1349" }, { "cve": "CVE-2026-64118", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "2bccfb8476ca5f3548afbd623dc7a6980d4e77de", "subject": "qed: fix double free in qed_cxt_tables_alloc()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64118", "commit_url": "https://git.kernel.org/stable/c/2bccfb8476ca5f3548afbd623dc7a6980d4e77de" }, { "cve": "CVE-2026-64119", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "979c017803c40829b03acd9e5236e354b7622360", "subject": "l2tp: use list_del_rcu in l2tp_session_unhash", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64119", "commit_url": "https://git.kernel.org/stable/c/979c017803c40829b03acd9e5236e354b7622360" }, { "cve": "CVE-2026-64120", "author_name": "Quan Sun", "author_email": "2022090917019@std.uestc.edu.cn", "fix_sha": "4908f1395fb1b832ceec11584af649874a2732ea", "subject": "net: ethtool: fix NULL pointer dereference in phy_reply_size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64120", "commit_url": "https://git.kernel.org/stable/c/4908f1395fb1b832ceec11584af649874a2732ea" }, { "cve": "CVE-2026-64121", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "5db89c99566fc4728cc92e941d8e1975711e24b5", "subject": "net: ifb: report ethtool stats over num_tx_queues", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64121", "commit_url": "https://git.kernel.org/stable/c/5db89c99566fc4728cc92e941d8e1975711e24b5" }, { "cve": "CVE-2026-64122", "author_name": "Matt Fleming", "author_email": "mfleming@cloudflare.com", "fix_sha": "7d260c5d2d89eb2c8c528d54b576b3aae3e20231", "subject": "net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64122", "commit_url": "https://git.kernel.org/stable/c/7d260c5d2d89eb2c8c528d54b576b3aae3e20231" }, { "cve": "CVE-2026-64123", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "aaec7096f9961eb223b5b149abe9495525c205d9", "subject": "net: hsr: defer node table free until after RCU readers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64123", "commit_url": "https://git.kernel.org/stable/c/aaec7096f9961eb223b5b149abe9495525c205d9" }, { "cve": "CVE-2026-64124", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "4eb82ba543421e9e38cc14e4e82058b78850df50", "subject": "net: devmem: reject dma-buf bind with non-page-aligned size or SG length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64124", "commit_url": "https://git.kernel.org/stable/c/4eb82ba543421e9e38cc14e4e82058b78850df50" }, { "cve": "CVE-2026-64125", "author_name": "Nicolai Buchwitz", "author_email": "nb@tipi-net.de", "fix_sha": "9a1730245e416d11ad5c0f2c100061d61cc43f60", "subject": "net: bcmgenet: keep RBUF EEE/PM disabled", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64125", "commit_url": "https://git.kernel.org/stable/c/9a1730245e416d11ad5c0f2c100061d61cc43f60" }, { "cve": "CVE-2026-64126", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d3f7d17960ed50df3a6709c5158caff989c8c905", "subject": "Bluetooth: MGMT: validate Add Extended Advertising Data length", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64126", "commit_url": "https://git.kernel.org/stable/c/d3f7d17960ed50df3a6709c5158caff989c8c905" }, { "cve": "CVE-2026-64127", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3374ef8cf99368a40f7efd51a2a375a4c5dc6f0d", "subject": "Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64127", "commit_url": "https://git.kernel.org/stable/c/3374ef8cf99368a40f7efd51a2a375a4c5dc6f0d" }, { "cve": "CVE-2026-64128", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "84c24fb151fc1179355296d7ff29129ac7c42129", "subject": "Bluetooth: ISO: drop ISO_END frames received without prior ISO_START", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64128", "commit_url": "https://git.kernel.org/stable/c/84c24fb151fc1179355296d7ff29129ac7c42129" }, { "cve": "CVE-2026-64129", "author_name": "Sunny Patel", "author_email": "nueralspacetech@gmail.com", "fix_sha": "63451de16e0a08be40f9ab5e7c5c8f5c79676fb1", "subject": "mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64129", "commit_url": "https://git.kernel.org/stable/c/63451de16e0a08be40f9ab5e7c5c8f5c79676fb1" }, { "cve": "CVE-2026-64130", "author_name": "David Hildenbrand (Arm)", "author_email": "david@kernel.org", "fix_sha": "6a288a4ddb4a994490505ab5f41c445f8e6b6467", "subject": "mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64130", "commit_url": "https://git.kernel.org/stable/c/6a288a4ddb4a994490505ab5f41c445f8e6b6467" }, { "cve": "CVE-2026-64131", "author_name": "Alistair Popple", "author_email": "apopple@nvidia.com", "fix_sha": "be3f38d05cc5a7c3f13e51994c5dd043ab604d28", "subject": "mm/memory: fix spurious warning when unmapping device-private/exclusive pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64131", "commit_url": "https://git.kernel.org/stable/c/be3f38d05cc5a7c3f13e51994c5dd043ab604d28" }, { "cve": "CVE-2026-64132", "author_name": "Justin Iurman", "author_email": "justin.iurman@gmail.com", "fix_sha": "e46e6bc97fb1f339730ff1ba74267fbf48e7a422", "subject": "ipv6: ioam: refresh hdr pointer before ioam6_event()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64132", "commit_url": "https://git.kernel.org/stable/c/e46e6bc97fb1f339730ff1ba74267fbf48e7a422" }, { "cve": "CVE-2026-64133", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f", "subject": "ALSA: asihpi: Fix potential OOB array access at reading cache", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64133", "commit_url": "https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f" }, { "cve": "CVE-2026-64134", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "e4d3386b74fba8e01280484b67ee481ece00201e", "subject": "ALSA: pcm: Don't setup bogus iov_iter for silencing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64134", "commit_url": "https://git.kernel.org/stable/c/e4d3386b74fba8e01280484b67ee481ece00201e" }, { "cve": "CVE-2026-64135", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "eee213daa1e1b402eb631bcd1b8c5aa340a6b081", "subject": "hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64135", "commit_url": "https://git.kernel.org/stable/c/eee213daa1e1b402eb631bcd1b8c5aa340a6b081" }, { "cve": "CVE-2026-64136", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "4d8690dace005a38e6dbde9ecce2da3ad85c7c41", "subject": "smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64136", "commit_url": "https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41" }, { "cve": "CVE-2026-64137", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d1ebfce2c1d161186a82e77590bf7da2ea1bce91", "subject": "smb: client: require net admin for CIFS SWN netlink", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64137", "commit_url": "https://git.kernel.org/stable/c/d1ebfce2c1d161186a82e77590bf7da2ea1bce91" }, { "cve": "CVE-2026-64138", "author_name": "Junyi Liu", "author_email": "moss80199@gmail.com", "fix_sha": "69f030cf95488ae1186c72ac8c66fd279664ea7f", "subject": "ksmbd: validate SID in parent security descriptor during ACL inheritance", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64138", "commit_url": "https://git.kernel.org/stable/c/69f030cf95488ae1186c72ac8c66fd279664ea7f" }, { "cve": "CVE-2026-64139", "author_name": "Ferry Meng", "author_email": "mengferry@linux.alibaba.com", "fix_sha": "af92ee994cc7f7e83a41c2025f32257a2f82a7ef", "subject": "ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64139", "commit_url": "https://git.kernel.org/stable/c/af92ee994cc7f7e83a41c2025f32257a2f82a7ef" }, { "cve": "CVE-2026-64140", "author_name": "Jeremy Laratro", "author_email": "research@aradex.io", "fix_sha": "904901561e61a2b559070b20c74a8c95491f30aa", "subject": "ksmbd: fix null pointer dereference in proc_show_files()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64140", "commit_url": "https://git.kernel.org/stable/c/904901561e61a2b559070b20c74a8c95491f30aa" }, { "cve": "CVE-2026-64141", "author_name": "Jeremy Laratro", "author_email": "research@aradex.io", "fix_sha": "4b83cbc4c15f09b000cc06f033f64b0824b6dc87", "subject": "ksmbd: fix null pointer dereference in compare_guid_key()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64141", "commit_url": "https://git.kernel.org/stable/c/4b83cbc4c15f09b000cc06f033f64b0824b6dc87" }, { "cve": "CVE-2026-64142", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "bf736184d063da1a552ffeff0481813599a182cc", "subject": "ksmbd: close durable scavenger races against m_fp_list lookups", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64142", "commit_url": "https://git.kernel.org/stable/c/bf736184d063da1a552ffeff0481813599a182cc" }, { "cve": "CVE-2026-64143", "author_name": "Armin Wolf", "author_email": "w_armin@gmx.de", "fix_sha": "26cbe119f99c86dcb4a0136d2bc73c0c716d80e4", "subject": "platform/x86: uniwill-laptop: Do not enable the charging limit even when forced", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64143", "commit_url": "https://git.kernel.org/stable/c/26cbe119f99c86dcb4a0136d2bc73c0c716d80e4" }, { "cve": "CVE-2026-64144", "author_name": "Jiajia Liu", "author_email": "liujiajia@kylinos.cn", "fix_sha": "dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd", "subject": "Bluetooth: btmtk: fix urb->setup_packet leak in error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64144", "commit_url": "https://git.kernel.org/stable/c/dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd" }, { "cve": "CVE-2026-64145", "author_name": "Shitalkumar Gandhi", "author_email": "shital.gandhi45@gmail.com", "fix_sha": "dd7b6a8671939708cc4b7a46786d8c11297e8f69", "subject": "wifi: wilc1000: fix dma_buffer leak on bus acquire failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64145", "commit_url": "https://git.kernel.org/stable/c/dd7b6a8671939708cc4b7a46786d8c11297e8f69" }, { "cve": "CVE-2026-64146", "author_name": "Jia Zhu", "author_email": "zhujia.zj@bytedance.com", "fix_sha": "79b09c54c6563df9846ca3094bcfd72082c3e1d7", "subject": "erofs: fix metabuf leak in inode xattr initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64146", "commit_url": "https://git.kernel.org/stable/c/79b09c54c6563df9846ca3094bcfd72082c3e1d7" }, { "cve": "CVE-2026-64147", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "dc416e32baaeb620b9809e9e25fc7b30889686e9", "subject": "pds_core: fix debugfs_lookup dentry leak and error handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64147", "commit_url": "https://git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9" }, { "cve": "CVE-2026-64148", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "0e46b6635b03d29807f810c3b415c4755a3f958d", "subject": "pds_core: fix error handling in pdsc_devcmd_wait", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64148", "commit_url": "https://git.kernel.org/stable/c/0e46b6635b03d29807f810c3b415c4755a3f958d" }, { "cve": "CVE-2026-64149", "author_name": "Jianpeng Chang", "author_email": "jianpeng.chang.cn@windriver.com", "fix_sha": "af0c3f05866237f7592219bfe05387bc3bfc99b5", "subject": "dma-mapping: move dma_map_resource() sanity check into debug code", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64149", "commit_url": "https://git.kernel.org/stable/c/af0c3f05866237f7592219bfe05387bc3bfc99b5" }, { "cve": "CVE-2026-64150", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "a6cb3ff979855f7f0ee9450a947fe8f96c2ba37a", "subject": "netfilter: nft_inner: release local_lock before re-enabling softirqs", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64150", "commit_url": "https://git.kernel.org/stable/c/a6cb3ff979855f7f0ee9450a947fe8f96c2ba37a" }, { "cve": "CVE-2026-64151", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "8ef3f77c440005c7f04229a75976bfc078364247", "subject": "iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64151", "commit_url": "https://git.kernel.org/stable/c/8ef3f77c440005c7f04229a75976bfc078364247" }, { "cve": "CVE-2026-64152", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "0735c54804c709d1b292f3b6947cfb560b2ce552", "subject": "iommu: Handle unmap error when iommu_debug is enabled", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64152", "commit_url": "https://git.kernel.org/stable/c/0735c54804c709d1b292f3b6947cfb560b2ce552" }, { "cve": "CVE-2026-64153", "author_name": "Mikko Perttunen", "author_email": "mperttunen@nvidia.com", "fix_sha": "55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851", "subject": "drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64153", "commit_url": "https://git.kernel.org/stable/c/55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851" }, { "cve": "CVE-2026-64154", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "e64bca63647db1d5518198d6c5ca2dbcc66b182b", "subject": "drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64154", "commit_url": "https://git.kernel.org/stable/c/e64bca63647db1d5518198d6c5ca2dbcc66b182b" }, { "cve": "CVE-2026-64155", "author_name": "Nicolas Escande", "author_email": "nico.escande@gmail.com", "fix_sha": "55dda532bbc261aef495e403c8900c5e2ab5fa34", "subject": "wifi: ath11k: fix error path leaks in some WMI WOW calls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64155", "commit_url": "https://git.kernel.org/stable/c/55dda532bbc261aef495e403c8900c5e2ab5fa34" }, { "cve": "CVE-2026-64156", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "9871938f99cc6cb266a77265491660e2375271f5", "subject": "netfs, afs: Fix write skipping in dir/link writepages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64156", "commit_url": "https://git.kernel.org/stable/c/9871938f99cc6cb266a77265491660e2375271f5" }, { "cve": "CVE-2026-64157", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "6d91acc7fb85d33ea58fca9b964a32a453937f4b", "subject": "netfs: Fix partial invalidation of streaming-write folio", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64157", "commit_url": "https://git.kernel.org/stable/c/6d91acc7fb85d33ea58fca9b964a32a453937f4b" }, { "cve": "CVE-2026-64159", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "4543a4d737944134a1394afe797622546fbcc98a", "subject": "netfs: Fix zeropoint update where i_size > remote_i_size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64159", "commit_url": "https://git.kernel.org/stable/c/4543a4d737944134a1394afe797622546fbcc98a" }, { "cve": "CVE-2026-64160", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "2c8f4742bb76117d735f92a3932d85239b16c494", "subject": "netfs: Fix potential for tearing in ->remote_i_size and ->zero_point", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64160", "commit_url": "https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494" }, { "cve": "CVE-2026-64161", "author_name": "Shitalkumar Gandhi", "author_email": "shital.gandhi45@gmail.com", "fix_sha": "6635fa84403c3a59455b66007c019a7cc632db30", "subject": "net: ti: icssm-prueth: fix eth_ports_node leak in probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64161", "commit_url": "https://git.kernel.org/stable/c/6635fa84403c3a59455b66007c019a7cc632db30" }, { "cve": "CVE-2026-64162", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "da4f76b6a84ede14a71282ef841768299ead0221", "subject": "idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64162", "commit_url": "https://git.kernel.org/stable/c/da4f76b6a84ede14a71282ef841768299ead0221" }, { "cve": "CVE-2026-64163", "author_name": "Martin Kaiser", "author_email": "martin@kaiser.cx", "fix_sha": "ef5581bb30efb939cc2bf093475c6cc85258e5cd", "subject": "test_kprobes: clear kprobes between test runs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64163", "commit_url": "https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd" }, { "cve": "CVE-2026-64164", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "c73370c677646e86fc4b1780fb07027bdf847375", "subject": "btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64164", "commit_url": "https://git.kernel.org/stable/c/c73370c677646e86fc4b1780fb07027bdf847375" }, { "cve": "CVE-2026-64165", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "90d77b30a666049ad24df463f52e5d529c44e8cd", "subject": "ARM: integrator: Fix early initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64165", "commit_url": "https://git.kernel.org/stable/c/90d77b30a666049ad24df463f52e5d529c44e8cd" }, { "cve": "CVE-2026-64166", "author_name": "Sudeep Holla", "author_email": "sudeep.holla@kernel.org", "fix_sha": "0a5e695095c557d2380131b613dea4e8d90371be", "subject": "firmware: arm_ffa: Check for NULL FF-A ID table while driver registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64166", "commit_url": "https://git.kernel.org/stable/c/0a5e695095c557d2380131b613dea4e8d90371be" }, { "cve": "CVE-2026-64167", "author_name": "Evangelos Petrongonas", "author_email": "epetron@amazon.de", "fix_sha": "a6715d7ec472a476db17787697a4abda62962284", "subject": "kho: skip KHO for crash kernel", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64167", "commit_url": "https://git.kernel.org/stable/c/a6715d7ec472a476db17787697a4abda62962284" }, { "cve": "CVE-2026-64168", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "3d67fffb74267772d461c02c67f1eff893ad547d", "subject": "spi: sprd: fix error pointer deref after DMA setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64168", "commit_url": "https://git.kernel.org/stable/c/3d67fffb74267772d461c02c67f1eff893ad547d" }, { "cve": "CVE-2026-64169", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "5e121a81667a83e9a01d62b429e340f5a4a84abc", "subject": "spi: ep93xx: fix error pointer deref after DMA setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64169", "commit_url": "https://git.kernel.org/stable/c/5e121a81667a83e9a01d62b429e340f5a4a84abc" }, { "cve": "CVE-2026-64170", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "a7e8f3efd50a165ba0189f6dc57f7e51a7d149db", "subject": "spi: qup: fix error pointer deref after DMA setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64170", "commit_url": "https://git.kernel.org/stable/c/a7e8f3efd50a165ba0189f6dc57f7e51a7d149db" }, { "cve": "CVE-2026-64171", "author_name": "Saurav Sachidanand", "author_email": "sauravsc@amazon.com", "fix_sha": "57cf4e8d6a57dc2ef5810f4852a23ba4c71b74bb", "subject": "i2c: tegra: fix pm_runtime leak on mutex_lock failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64171", "commit_url": "https://git.kernel.org/stable/c/57cf4e8d6a57dc2ef5810f4852a23ba4c71b74bb" }, { "cve": "CVE-2026-64172", "author_name": "Tina Zhang", "author_email": "zhang_wei@open-hieco.net", "fix_sha": "9a12fa5213cfc391e0eed63902d3be98f0913765", "subject": "KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64172", "commit_url": "https://git.kernel.org/stable/c/9a12fa5213cfc391e0eed63902d3be98f0913765" }, { "cve": "CVE-2026-64173", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "8f0f5c4fb9df0e19a341e0c6ed8dc4fda9124f03", "subject": "tracing: Do not call map->ops->elt_free() if elt_alloc() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64173", "commit_url": "https://git.kernel.org/stable/c/8f0f5c4fb9df0e19a341e0c6ed8dc4fda9124f03" }, { "cve": "CVE-2026-64174", "author_name": "John Walker", "author_email": "johnwalker0@gmail.com", "fix_sha": "7666dbb1bacc4ba522b96740cba7283d243d16e1", "subject": "wifi: cfg80211: advance loop vars in cfg80211_merge_profile()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64174", "commit_url": "https://git.kernel.org/stable/c/7666dbb1bacc4ba522b96740cba7283d243d16e1" }, { "cve": "CVE-2026-64175", "author_name": "Sheroz Juraev", "author_email": "goodmartiandev@gmail.com", "fix_sha": "2becb38a3e217ef2b2f42fddd7db7a25905ec291", "subject": "wifi: iwlwifi: mld: stop TX during firmware restart", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64175", "commit_url": "https://git.kernel.org/stable/c/2becb38a3e217ef2b2f42fddd7db7a25905ec291" }, { "cve": "CVE-2026-64176", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "fb84b5cbcaab3ca0f4e961d92a40ed7f3aac483b", "subject": "wifi: iwlwifi: mvm: fix driver-set TX rates on old devices", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64176", "commit_url": "https://git.kernel.org/stable/c/fb84b5cbcaab3ca0f4e961d92a40ed7f3aac483b" }, { "cve": "CVE-2026-64177", "author_name": "Zijing Yin", "author_email": "yzjaurora@gmail.com", "fix_sha": "dbc81608e3a653dea6cf403f20cae35468b8ab9c", "subject": "phonet/pep: disable BH around forwarded sk_receive_skb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64177", "commit_url": "https://git.kernel.org/stable/c/dbc81608e3a653dea6cf403f20cae35468b8ab9c" }, { "cve": "CVE-2026-64178", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "59e932ded949fa6f0340bf7c6d7818f962fa4fd2", "subject": "Bluetooth: bnep: Fix UAF read of dev->name", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64178", "commit_url": "https://git.kernel.org/stable/c/59e932ded949fa6f0340bf7c6d7818f962fa4fd2" }, { "cve": "CVE-2026-64179", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "c5d93b2c40355e999715262a824965aac025a427", "subject": "net: wwan: iosm: fix potential memory leaks in ipc_imem_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64179", "commit_url": "https://git.kernel.org/stable/c/c5d93b2c40355e999715262a824965aac025a427" }, { "cve": "CVE-2026-64180", "author_name": "Muchun Song", "author_email": "songmuchun@bytedance.com", "fix_sha": "93866f55f7e292fe3d47d36c9efe5ee10213a06b", "subject": "mm/memory_hotplug: fix memory block reference leak on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64180", "commit_url": "https://git.kernel.org/stable/c/93866f55f7e292fe3d47d36c9efe5ee10213a06b" }, { "cve": "CVE-2026-64181", "author_name": "David Hildenbrand (Arm)", "author_email": "david@kernel.org", "fix_sha": "c0c6ccd9828c3a1950623b546fa57292a77b5c73", "subject": "mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64181", "commit_url": "https://git.kernel.org/stable/c/c0c6ccd9828c3a1950623b546fa57292a77b5c73" }, { "cve": "CVE-2026-64182", "author_name": "Muchun Song", "author_email": "songmuchun@bytedance.com", "fix_sha": "03a2cc1756a0570f887d624cd6c535ea0cbd4951", "subject": "drivers/base/memory: fix memory block reference leak in poison accounting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64182", "commit_url": "https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951" }, { "cve": "CVE-2026-64183", "author_name": "Ard Biesheuvel", "author_email": "ardb@kernel.org", "fix_sha": "13c6da02e767152c9ac4330962247a5e47011035", "subject": "efi: Allocate runtime workqueue before ACPI init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64183", "commit_url": "https://git.kernel.org/stable/c/13c6da02e767152c9ac4330962247a5e47011035" }, { "cve": "CVE-2026-64184", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "d4e7b5c4cc353f154d5ab8bb2e1ce7714d77a6e9", "subject": "mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64184", "commit_url": "https://git.kernel.org/stable/c/d4e7b5c4cc353f154d5ab8bb2e1ce7714d77a6e9" }, { "cve": "CVE-2026-64185", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "237557b8a81ab948e8332f7c0058e758f081c0a3", "subject": "sysfs: don't remove existing directory on update failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64185", "commit_url": "https://git.kernel.org/stable/c/237557b8a81ab948e8332f7c0058e758f081c0a3" }, { "cve": "CVE-2026-64186", "author_name": "Eder Zulian", "author_email": "ezulian@redhat.com", "fix_sha": "8dfd3d8d74435344ee8dc9237596959c8b2a6cbe", "subject": "iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64186", "commit_url": "https://git.kernel.org/stable/c/8dfd3d8d74435344ee8dc9237596959c8b2a6cbe" }, { "cve": "CVE-2026-64187", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "2094dab19d45c487285617b7b68913d0cc0c1211", "subject": "xfs: fail recovery on a committed log item with no regions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64187", "commit_url": "https://git.kernel.org/stable/c/2094dab19d45c487285617b7b68913d0cc0c1211" }, { "cve": "CVE-2026-64188", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "d00c953a8f69921f484b629801766da68f27f658", "subject": "net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64188", "commit_url": "https://git.kernel.org/stable/c/d00c953a8f69921f484b629801766da68f27f658" }, { "cve": "CVE-2026-64189", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "7cd9103283b26b917360ec99d7d2f2d761bcf1ab", "subject": "netfilter: ipset: fix race between dump and ip_set_list resize", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64189", "commit_url": "https://git.kernel.org/stable/c/7cd9103283b26b917360ec99d7d2f2d761bcf1ab" }, { "cve": "CVE-2026-64190", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "25fe708bbc59289d3d1ea4b126fbc1b460a072a5", "subject": "net: team: fix NULL pointer dereference in team_xmit during mode change", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64190", "commit_url": "https://git.kernel.org/stable/c/25fe708bbc59289d3d1ea4b126fbc1b460a072a5" }, { "cve": "CVE-2026-64191", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "6036b5067a8199ba7a2dc7b377d4b9dd276d5f9e", "subject": "i2c: stub: Reject I2C block transfers with invalid length", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64191", "commit_url": "https://git.kernel.org/stable/c/6036b5067a8199ba7a2dc7b377d4b9dd276d5f9e" }, { "cve": "CVE-2026-64192", "author_name": "Matt Bobrowski", "author_email": "mattbobrowski@google.com", "fix_sha": "a6f0643e4f63cfaa0d5d4a69de4f132eac4b8fe4", "subject": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64192", "commit_url": "https://git.kernel.org/stable/c/a6f0643e4f63cfaa0d5d4a69de4f132eac4b8fe4" }, { "cve": "CVE-2026-64205", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "10dd1a736d557e310a77117832874729a0175d57", "subject": "i2c: i801: fix hardware state machine corruption in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64205", "commit_url": "https://git.kernel.org/stable/c/10dd1a736d557e310a77117832874729a0175d57" }, { "cve": "CVE-2026-64206", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "2641a9e0a1dd4af2e21995470a21d55dd35e5203", "subject": "Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64206", "commit_url": "https://git.kernel.org/stable/c/2641a9e0a1dd4af2e21995470a21d55dd35e5203" }, { "cve": "CVE-2026-64207", "author_name": "Xingquan Liu", "author_email": "b1n@b1n.io", "fix_sha": "05ed733b65ab977dd931e7f7ac0f62fdb81205c2", "subject": "net/sched: dualpi2: fix GSO backlog accounting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64207", "commit_url": "https://git.kernel.org/stable/c/05ed733b65ab977dd931e7f7ac0f62fdb81205c2" }, { "cve": "CVE-2026-64208", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "2b50aceafe6606ea52ed42aadd1b4d44a188aade", "subject": "crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64208", "commit_url": "https://git.kernel.org/stable/c/2b50aceafe6606ea52ed42aadd1b4d44a188aade" }, { "cve": "CVE-2026-64209", "author_name": "Xiangxu Yin", "author_email": "xiangxu.yin@oss.qualcomm.com", "fix_sha": "ea17fc4d7dc2ba6459b1a318962960520201baf1", "subject": "phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64209", "commit_url": "https://git.kernel.org/stable/c/ea17fc4d7dc2ba6459b1a318962960520201baf1" }, { "cve": "CVE-2026-64210", "author_name": "Dragos Tatulea", "author_email": "dtatulea@nvidia.com", "fix_sha": "c326f9c68921e2f14dfcecb2f6b4216313d50248", "subject": "net/mlx5e: xsk: Fix unlocked writing to ICOSQ", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64210", "commit_url": "https://git.kernel.org/stable/c/c326f9c68921e2f14dfcecb2f6b4216313d50248" }, { "cve": "CVE-2026-64211", "author_name": "Paul E. McKenney", "author_email": "paulmck@kernel.org", "fix_sha": "593889c401426004bd0ea0f6d4fcece728b03420", "subject": "srcu: Don't queue workqueue handlers to never-online CPUs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64211", "commit_url": "https://git.kernel.org/stable/c/593889c401426004bd0ea0f6d4fcece728b03420" }, { "cve": "CVE-2026-64212", "author_name": "Miri Korenblit", "author_email": "miriam.rachel.korenblit@intel.com", "fix_sha": "d733ed481fd20a8e7bfe5119c4e77761ba3f87ee", "subject": "wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64212", "commit_url": "https://git.kernel.org/stable/c/d733ed481fd20a8e7bfe5119c4e77761ba3f87ee" }, { "cve": "CVE-2026-64213", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "873e919e3101063a7a75989510ccfc125a4391cf", "subject": "hwmon: (lm90) Add lock protection to lm90_alert", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64213", "commit_url": "https://git.kernel.org/stable/c/873e919e3101063a7a75989510ccfc125a4391cf" }, { "cve": "CVE-2026-64214", "author_name": "Sayali Patil", "author_email": "sayalip@linux.ibm.com", "fix_sha": "31467b23823ffec1f6fff407f8e3ca9af8b7491a", "subject": "powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64214", "commit_url": "https://git.kernel.org/stable/c/31467b23823ffec1f6fff407f8e3ca9af8b7491a" }, { "cve": "CVE-2026-64215", "author_name": "Chen Ni", "author_email": "nichen@iscas.ac.cn", "fix_sha": "b5c7a7f452b885bfbe102bd3a057a5f496802f8b", "subject": "drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64215", "commit_url": "https://git.kernel.org/stable/c/b5c7a7f452b885bfbe102bd3a057a5f496802f8b" }, { "cve": "CVE-2026-64216", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "dbe556972100fabb8e5a1b3d2163831ff07b1e8e", "subject": "netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64216", "commit_url": "https://git.kernel.org/stable/c/dbe556972100fabb8e5a1b3d2163831ff07b1e8e" }, { "cve": "CVE-2026-64217", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "0ef37eef83fad3542ee06db2940433ae1a92b39d", "subject": "netfs: Fix overrun check in netfs_extract_user_iter()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64217", "commit_url": "https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d" }, { "cve": "CVE-2026-64218", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "0459430add32ea41f3e2ef9351610e6d33627a6b", "subject": "batman-adv: bla: fix report_work leak on backbone_gw purge", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64218", "commit_url": "https://git.kernel.org/stable/c/0459430add32ea41f3e2ef9351610e6d33627a6b" }, { "cve": "CVE-2026-64219", "author_name": "Harry Wentland", "author_email": "harry.wentland@amd.com", "fix_sha": "6c92f6d9600efa3ef0d9e560a2b52776d9803c29", "subject": "drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64219", "commit_url": "https://git.kernel.org/stable/c/6c92f6d9600efa3ef0d9e560a2b52776d9803c29" }, { "cve": "CVE-2026-64220", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "215c90ee656114f5e8c32408228d97082f8e0eef", "subject": "device property: set fwnode->secondary to NULL in fwnode_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64220", "commit_url": "https://git.kernel.org/stable/c/215c90ee656114f5e8c32408228d97082f8e0eef" }, { "cve": "CVE-2026-64221", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "ea6ec3343e05f7937a53eb6d7617b3abdb4abc19", "subject": "spi: ti-qspi: fix use-after-free after DMA setup failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64221", "commit_url": "https://git.kernel.org/stable/c/ea6ec3343e05f7937a53eb6d7617b3abdb4abc19" }, { "cve": "CVE-2026-64222", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "9b244c242bec48b37e82b89787afd6a4c43457e1", "subject": "octeontx2-pf: avoid double free of pool->stack on AQ init failure", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64222", "commit_url": "https://git.kernel.org/stable/c/9b244c242bec48b37e82b89787afd6a4c43457e1" }, { "cve": "CVE-2026-64223", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a6e6ccd5bd07155c2add6c74ce1a5e68ad3b95ea", "subject": "wifi: mac80211: consume only present negotiated TTLM maps", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64223", "commit_url": "https://git.kernel.org/stable/c/a6e6ccd5bd07155c2add6c74ce1a5e68ad3b95ea" }, { "cve": "CVE-2026-64224", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "e8fb3de2a8effcaf62bec2c56b93d8bb480371d1", "subject": "octeontx2-pf: fix double free in rvu_rep_rsrc_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64224", "commit_url": "https://git.kernel.org/stable/c/e8fb3de2a8effcaf62bec2c56b93d8bb480371d1" }, { "cve": "CVE-2026-64225", "author_name": "Sam Daly", "author_email": "sam@samdaly.ie", "fix_sha": "c0bf0a4f3f1f5f57aa83e1400ba4f56f0abfd542", "subject": "octeontx2-af: CGX: add bounds check to cgx_speed_mbps index", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64225", "commit_url": "https://git.kernel.org/stable/c/c0bf0a4f3f1f5f57aa83e1400ba4f56f0abfd542" }, { "cve": "CVE-2026-64226", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "9a415cc53711f2238e0f0ca8a6bcc796c003b127", "subject": "sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64226", "commit_url": "https://git.kernel.org/stable/c/9a415cc53711f2238e0f0ca8a6bcc796c003b127" }, { "cve": "CVE-2026-64227", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "e4865a56d013e86e46ea6acea15bb6eae01898ff", "subject": "ACPI: driver: Check ACPI_COMPANION() against NULL during probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64227", "commit_url": "https://git.kernel.org/stable/c/e4865a56d013e86e46ea6acea15bb6eae01898ff" }, { "cve": "CVE-2026-64228", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "e3adf69f8eb121a9128c2b0029efd050d3649153", "subject": "net: ethtool: phy: avoid NULL deref when PHY driver is unbound", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64228", "commit_url": "https://git.kernel.org/stable/c/e3adf69f8eb121a9128c2b0029efd050d3649153" }, { "cve": "CVE-2026-64229", "author_name": "Tom Lendacky", "author_email": "thomas.lendacky@amd.com", "fix_sha": "44126343d58c68adaa8343fbf1c07dd20078c35e", "subject": "x86/mm: Disable broadcast TLB flush when PCID is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64229", "commit_url": "https://git.kernel.org/stable/c/44126343d58c68adaa8343fbf1c07dd20078c35e" }, { "cve": "CVE-2026-64230", "author_name": "Alexander Sverdlin", "author_email": "alexander.sverdlin@siemens.com", "fix_sha": "f9b2d3b703d13df50c630997dfdc25648e96db0d", "subject": "regulator: tps65219: fix irq_data.rdev not being assigned", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64230", "commit_url": "https://git.kernel.org/stable/c/f9b2d3b703d13df50c630997dfdc25648e96db0d" }, { "cve": "CVE-2026-64231", "author_name": "Dmitry Baryshkov", "author_email": "dmitry.baryshkov@oss.qualcomm.com", "fix_sha": "5b49a46baa853b26dbefa65c6c75dd9ff69f63d4", "subject": "drm/msm/dsi: don't dump registers past the mapped region", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64231", "commit_url": "https://git.kernel.org/stable/c/5b49a46baa853b26dbefa65c6c75dd9ff69f63d4" }, { "cve": "CVE-2026-64232", "author_name": "Casey Chen", "author_email": "cachen@purestorage.com", "fix_sha": "2c6e6a18a37b905cb584eb0dda3ae482162a81ca", "subject": "block: recompute nr_integrity_segments in blk_insert_cloned_request", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64232", "commit_url": "https://git.kernel.org/stable/c/2c6e6a18a37b905cb584eb0dda3ae482162a81ca" }, { "cve": "CVE-2026-64233", "author_name": "Kai Aizen", "author_email": "kai.aizen.dev@gmail.com", "fix_sha": "68aa70648b625fa684bc0b71bbfd905f4943ca20", "subject": "usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64233", "commit_url": "https://git.kernel.org/stable/c/68aa70648b625fa684bc0b71bbfd905f4943ca20" }, { "cve": "CVE-2026-64234", "author_name": "Zhaoyang Yu", "author_email": "2426767509@qq.com", "fix_sha": "6fe472c1bbbe238e91141f7cabc1226e96a60d43", "subject": "tty: serial: pch_uart: add check for dma_alloc_coherent()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64234", "commit_url": "https://git.kernel.org/stable/c/6fe472c1bbbe238e91141f7cabc1226e96a60d43" }, { "cve": "CVE-2026-64235", "author_name": "Alexis Lothor\u00e9 (eBPF Foundation)", "author_email": "alexis.lothore@bootlin.com", "fix_sha": "a17dc12bfed8868e6a86f3b45c16065a70641acb", "subject": "x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64235", "commit_url": "https://git.kernel.org/stable/c/a17dc12bfed8868e6a86f3b45c16065a70641acb" }, { "cve": "CVE-2026-64236", "author_name": "Chaitanya Sabnis", "author_email": "chaitanya.msabnis@gmail.com", "fix_sha": "030675aa54cf757769b3db65642433d626b3ed7c", "subject": "i2c: davinci: fix division by zero on missing clock-frequency", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64236", "commit_url": "https://git.kernel.org/stable/c/030675aa54cf757769b3db65642433d626b3ed7c" }, { "cve": "CVE-2026-64237", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634", "subject": "Input: elan_i2c - validate firmware size before use", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64237", "commit_url": "https://git.kernel.org/stable/c/76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634" }, { "cve": "CVE-2026-64238", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "a1b836607304f71051f9f9dcccf8b5097b86a1fb", "subject": "gpio: shared: fix deadlock on shared proxy's parent removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64238", "commit_url": "https://git.kernel.org/stable/c/a1b836607304f71051f9f9dcccf8b5097b86a1fb" }, { "cve": "CVE-2026-64239", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "441f92f7d386b85bad16de49db95a307cba048a2", "subject": "mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64239", "commit_url": "https://git.kernel.org/stable/c/441f92f7d386b85bad16de49db95a307cba048a2" }, { "cve": "CVE-2026-64240", "author_name": "Henri A", "author_email": "contact@henrialfonso.com", "fix_sha": "171022c7d594c133a45f92357a2a91475edabe20", "subject": "media: rc: igorplugusb: fix control request setup packet", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64240", "commit_url": "https://git.kernel.org/stable/c/171022c7d594c133a45f92357a2a91475edabe20" }, { "cve": "CVE-2026-64241", "author_name": "Marco Scardovi", "author_email": "scardracs@disroot.org", "fix_sha": "9500077678230e36d22bf16d2b9539c13e59a801", "subject": "gpio: rockchip: teardown bugs and resource leaks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64241", "commit_url": "https://git.kernel.org/stable/c/9500077678230e36d22bf16d2b9539c13e59a801" }, { "cve": "CVE-2026-64242", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "c8547c74988e0b5f4cbb1b895e2a57aae084f070", "subject": "usb: gadget: net2280: Fix double free in probe error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64242", "commit_url": "https://git.kernel.org/stable/c/c8547c74988e0b5f4cbb1b895e2a57aae084f070" }, { "cve": "CVE-2026-64243", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "f63ad68e18d774a5d15cd7e405ead63f6b322679", "subject": "ASoC: codecs: simple-mux: Fix enum control bounds check", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64243", "commit_url": "https://git.kernel.org/stable/c/f63ad68e18d774a5d15cd7e405ead63f6b322679" }, { "cve": "CVE-2026-64244", "author_name": "Georgi Djakov", "author_email": "georgi.djakov@oss.qualcomm.com", "fix_sha": "a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a", "subject": "drivers/base/memory: set mem->altmap after successful device registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64244", "commit_url": "https://git.kernel.org/stable/c/a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a" }, { "cve": "CVE-2026-64245", "author_name": "Tuo Li", "author_email": "islituo@gmail.com", "fix_sha": "85b6256469cebdac395e7447147e06b2e151014f", "subject": "fbdev: modedb: fix a possible UAF in fb_find_mode()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64245", "commit_url": "https://git.kernel.org/stable/c/85b6256469cebdac395e7447147e06b2e151014f" }, { "cve": "CVE-2026-64246", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd", "subject": "power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64246", "commit_url": "https://git.kernel.org/stable/c/8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd" }, { "cve": "CVE-2026-64247", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "4721f8160f17554b003e8928bb61e6c9b2fe92a3", "subject": "KVM: x86: hyper-v: Bound the bank index when querying sparse banks", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64247", "commit_url": "https://git.kernel.org/stable/c/4721f8160f17554b003e8928bb61e6c9b2fe92a3" }, { "cve": "CVE-2026-64248", "author_name": "Jonas Jelonek", "author_email": "jelonek.jonas@gmail.com", "fix_sha": "9f3f3bdc6d9dac1a5a8262ee7ad0f2ff1527a7e7", "subject": "MIPS: smp: report dying CPU to RCU in stop_this_cpu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64248", "commit_url": "https://git.kernel.org/stable/c/9f3f3bdc6d9dac1a5a8262ee7ad0f2ff1527a7e7" }, { "cve": "CVE-2026-64249", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3", "subject": "fpga: region: fix use-after-free in child_regions_with_firmware()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64249", "commit_url": "https://git.kernel.org/stable/c/54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3" }, { "cve": "CVE-2026-64250", "author_name": "Huacai Chen", "author_email": "chenhuacai@loongson.cn", "fix_sha": "f2539c56c74691e7a88af6372ba2b48c06ed2fe4", "subject": "LoongArch: Report dying CPU to RCU in stop_this_cpu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64250", "commit_url": "https://git.kernel.org/stable/c/f2539c56c74691e7a88af6372ba2b48c06ed2fe4" }, { "cve": "CVE-2026-64251", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "257595adf9dac15ae1edd9d07753fbc576a7583d", "subject": "pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64251", "commit_url": "https://git.kernel.org/stable/c/257595adf9dac15ae1edd9d07753fbc576a7583d" }, { "cve": "CVE-2026-64252", "author_name": "Maciej W. Rozycki", "author_email": "macro@orcam.me.uk", "fix_sha": "7fb13fd35110ebe95eb053faf79d018f51144d85", "subject": "MIPS: DEC: Prevent initial console buffer from landing in XKPHYS", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64252", "commit_url": "https://git.kernel.org/stable/c/7fb13fd35110ebe95eb053faf79d018f51144d85" }, { "cve": "CVE-2026-64253", "author_name": "Usama Arif", "author_email": "usama.arif@linux.dev", "fix_sha": "fd38b75c4b43295b10d69772a46d1c74dbd6fc81", "subject": "kernel/fork: clear PF_BLOCK_TS in copy_process()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64253", "commit_url": "https://git.kernel.org/stable/c/fd38b75c4b43295b10d69772a46d1c74dbd6fc81" }, { "cve": "CVE-2026-64254", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "d876153680e3d721d385e554def919bce3d18c74", "subject": "NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64254", "commit_url": "https://git.kernel.org/stable/c/d876153680e3d721d385e554def919bce3d18c74" }, { "cve": "CVE-2026-64255", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "f056fc2b927448d37eca6b6cacc3d1b0f67b20d2", "subject": "wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64255", "commit_url": "https://git.kernel.org/stable/c/f056fc2b927448d37eca6b6cacc3d1b0f67b20d2" }, { "cve": "CVE-2026-64256", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "d766e4e5e85d829629c3ba503802fe1303d7b591", "subject": "xfs: don't wrap around quota ids in dqiterate", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64256", "commit_url": "https://git.kernel.org/stable/c/d766e4e5e85d829629c3ba503802fe1303d7b591" }, { "cve": "CVE-2026-64257", "author_name": "Shoichiro Miyamoto", "author_email": "shoichiro.miyamoto@gmail.com", "fix_sha": "8986c932905ea508d66da421eb2eb6e676ace1fe", "subject": "smb: client: reject overlapping data areas in SMB2 responses", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64257", "commit_url": "https://git.kernel.org/stable/c/8986c932905ea508d66da421eb2eb6e676ace1fe" }, { "cve": "CVE-2026-64258", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "1c57a69be962d459c5e705f5cb4355b841b3461c", "subject": "fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64258", "commit_url": "https://git.kernel.org/stable/c/1c57a69be962d459c5e705f5cb4355b841b3461c" }, { "cve": "CVE-2026-64259", "author_name": "Bernd Schubert", "author_email": "bernd@bsbernd.com", "fix_sha": "1efd3d474fc0ba74dfd984249bca78807d739812", "subject": "fuse-uring: make a fuse_req on SQE commit only findable after memcpy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64259", "commit_url": "https://git.kernel.org/stable/c/1efd3d474fc0ba74dfd984249bca78807d739812" }, { "cve": "CVE-2026-64260", "author_name": "Bernd Schubert", "author_email": "bernd@bsbernd.com", "fix_sha": "b70a3aca16934c196f92abb17b01c1647b9bb63c", "subject": "fuse-uring: Avoid queue->stopped races and set/read that value under lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64260", "commit_url": "https://git.kernel.org/stable/c/b70a3aca16934c196f92abb17b01c1647b9bb63c" }, { "cve": "CVE-2026-64261", "author_name": "Bernd Schubert", "author_email": "bernd@bsbernd.com", "fix_sha": "d351da75066955144515cb2f9aa959f24a04287a", "subject": "fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64261", "commit_url": "https://git.kernel.org/stable/c/d351da75066955144515cb2f9aa959f24a04287a" }, { "cve": "CVE-2026-64262", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "bea4fe98204b6ce7eb8e29f7bf867dd7619b3ddd", "subject": "fuse-uring: end fuse_req on io-uring cancel task work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64262", "commit_url": "https://git.kernel.org/stable/c/bea4fe98204b6ce7eb8e29f7bf867dd7619b3ddd" }, { "cve": "CVE-2026-64263", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "198f45eeb9f78b2a2d6d8be95e4e43468eb2c6bc", "subject": "fuse-uring: fix moving cancelled entry to ent_in_userspace list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64263", "commit_url": "https://git.kernel.org/stable/c/198f45eeb9f78b2a2d6d8be95e4e43468eb2c6bc" }, { "cve": "CVE-2026-64264", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "3a0a8bc51a13951c5141262bf770eeea3e0b6228", "subject": "fuse-uring: fix EFAULT clobber in fuse_uring_commit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64264", "commit_url": "https://git.kernel.org/stable/c/3a0a8bc51a13951c5141262bf770eeea3e0b6228" }, { "cve": "CVE-2026-64265", "author_name": "Ji'an Zhou", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "f8fce75fedf73ac72aa09163deb8f4291fdcaad2", "subject": "fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64265", "commit_url": "https://git.kernel.org/stable/c/f8fce75fedf73ac72aa09163deb8f4291fdcaad2" }, { "cve": "CVE-2026-64266", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "b5befa80fdbe287a98480effed9564712924add5", "subject": "fuse: re-lock request before returning from fuse_ref_folio()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64266", "commit_url": "https://git.kernel.org/stable/c/b5befa80fdbe287a98480effed9564712924add5" }, { "cve": "CVE-2026-64267", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "54243797cedf55447b4c5d560e8cd709900061ae", "subject": "fuse: avoid 32-bit prune notification count wrap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64267", "commit_url": "https://git.kernel.org/stable/c/54243797cedf55447b4c5d560e8cd709900061ae" }, { "cve": "CVE-2026-64268", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "7d29f7e9dbd844cae4d3e559cf78324b9642fd6b", "subject": "RDMA/siw: bound Read Response placement to the RREAD length", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64268", "commit_url": "https://git.kernel.org/stable/c/7d29f7e9dbd844cae4d3e559cf78324b9642fd6b" }, { "cve": "CVE-2026-64269", "author_name": "Zhenhao Wan", "author_email": "whi4ed0g@gmail.com", "fix_sha": "963af8d97a8c6a117134a8d0db1415e0489200b1", "subject": "RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64269", "commit_url": "https://git.kernel.org/stable/c/963af8d97a8c6a117134a8d0db1415e0489200b1" }, { "cve": "CVE-2026-64270", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "66725039f7090afe14c31bd259e2059a68f04023", "subject": "Input: mms114 - reject an oversized device packet size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64270", "commit_url": "https://git.kernel.org/stable/c/66725039f7090afe14c31bd259e2059a68f04023" }, { "cve": "CVE-2026-64271", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "478cdd736f2ce3114f90e775d7358136d3977b94", "subject": "Input: touchwin - reset the packet index on every complete packet", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64271", "commit_url": "https://git.kernel.org/stable/c/478cdd736f2ce3114f90e775d7358136d3977b94" }, { "cve": "CVE-2026-64272", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "a6ac4e24c1a8a533bb61035184fdcc7eede4cc8d", "subject": "Input: mms114 - fix touch indexing for MMS134S and MMS136", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64272", "commit_url": "https://git.kernel.org/stable/c/a6ac4e24c1a8a533bb61035184fdcc7eede4cc8d" }, { "cve": "CVE-2026-64273", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "0e9943d2e4c63496b6ca84bc66fd3c71d40558e2", "subject": "Input: iforce - bound the device-reported force-feedback effect index", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64273", "commit_url": "https://git.kernel.org/stable/c/0e9943d2e4c63496b6ca84bc66fd3c71d40558e2" }, { "cve": "CVE-2026-64274", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "5ed62a96e06be4e94b8296b7932afee550a70e04", "subject": "Input: goodix - clamp the device-reported contact count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64274", "commit_url": "https://git.kernel.org/stable/c/5ed62a96e06be4e94b8296b7932afee550a70e04" }, { "cve": "CVE-2026-64275", "author_name": "Ranjan Kumar", "author_email": "kumarranja@chromium.org", "fix_sha": "df2b818fa009c10ff6ba875a1663ff001cda9558", "subject": "Input: elan_i2c - prevent division by zero and arithmetic underflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64275", "commit_url": "https://git.kernel.org/stable/c/df2b818fa009c10ff6ba875a1663ff001cda9558" }, { "cve": "CVE-2026-64276", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d577e46785d45484b2ab7e7309c49b18764bf56c", "subject": "Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64276", "commit_url": "https://git.kernel.org/stable/c/d577e46785d45484b2ab7e7309c49b18764bf56c" }, { "cve": "CVE-2026-64277", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "57c10915f2c16c90e0d46ad00876bf39ece40fc2", "subject": "Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64277", "commit_url": "https://git.kernel.org/stable/c/57c10915f2c16c90e0d46ad00876bf39ece40fc2" }, { "cve": "CVE-2026-64278", "author_name": "Carlos Song", "author_email": "carlos.song@nxp.com", "fix_sha": "218cfe364b55b2768221629bd4a69ad190b7fbbc", "subject": "i2c: imx-lpi2c: mark I2C adapter when hardware is powered down", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64278", "commit_url": "https://git.kernel.org/stable/c/218cfe364b55b2768221629bd4a69ad190b7fbbc" }, { "cve": "CVE-2026-64279", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "b1a58ed9eab146b36f41a55db8f5d7ce9fdedf3f", "subject": "i2c: core: fix adapter deregistration race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64279", "commit_url": "https://git.kernel.org/stable/c/b1a58ed9eab146b36f41a55db8f5d7ce9fdedf3f" }, { "cve": "CVE-2026-64280", "author_name": "Sebastian Alba Vives", "author_email": "sebasjosue84@gmail.com", "fix_sha": "fc3b071a7c8dc0f5d56defddf6e6fd5aaa3e1e27", "subject": "fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64280", "commit_url": "https://git.kernel.org/stable/c/fc3b071a7c8dc0f5d56defddf6e6fd5aaa3e1e27" }, { "cve": "CVE-2026-64281", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "e5248a7426030db1e126363f72afdb3b71339a5c", "subject": "svcrdma: wake sq waiters when the transport closes", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64281", "commit_url": "https://git.kernel.org/stable/c/e5248a7426030db1e126363f72afdb3b71339a5c" }, { "cve": "CVE-2026-64282", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "9f76b039a72d7e06374aa96862f0232ed53f7787", "subject": "KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64282", "commit_url": "https://git.kernel.org/stable/c/9f76b039a72d7e06374aa96862f0232ed53f7787" }, { "cve": "CVE-2026-64283", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6", "subject": "KVM: guest_memfd: Treat memslot binding offset+size as unsigned values", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64283", "commit_url": "https://git.kernel.org/stable/c/eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6" }, { "cve": "CVE-2026-64284", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "0ffedf43910e44b76c2c1db4e9fbf12b268190c1", "subject": "KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64284", "commit_url": "https://git.kernel.org/stable/c/0ffedf43910e44b76c2c1db4e9fbf12b268190c1" }, { "cve": "CVE-2026-64285", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "f13e900599089b10113ceb36013423f0837c6792", "subject": "KVM: SEV: Pin source page for write when adding CPUID data for SNP guest", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64285", "commit_url": "https://git.kernel.org/stable/c/f13e900599089b10113ceb36013423f0837c6792" }, { "cve": "CVE-2026-64286", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "e8042f6e1d7befb2fb6b10a75918642bcd0acf9a", "subject": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64286", "commit_url": "https://git.kernel.org/stable/c/e8042f6e1d7befb2fb6b10a75918642bcd0acf9a" }, { "cve": "CVE-2026-64287", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "8cc8bbbfab14c22c5551d0dd19b208a44b141c76", "subject": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64287", "commit_url": "https://git.kernel.org/stable/c/8cc8bbbfab14c22c5551d0dd19b208a44b141c76" }, { "cve": "CVE-2026-64288", "author_name": "Marc Zyngier", "author_email": "maz@kernel.org", "fix_sha": "4be6cbeb93d26994bd1827ddbce391e3c4395c8f", "subject": "KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64288", "commit_url": "https://git.kernel.org/stable/c/4be6cbeb93d26994bd1827ddbce391e3c4395c8f" }, { "cve": "CVE-2026-64289", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "4d70986002f2f3eaaed89124fb2522bded38b016", "subject": "iommufd: Set upper bounds on cache invalidation entry_num and entry_len", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64289", "commit_url": "https://git.kernel.org/stable/c/4d70986002f2f3eaaed89124fb2522bded38b016" }, { "cve": "CVE-2026-64290", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "172fc8b19825a0f5884c38f2289188284e2d45ee", "subject": "iommufd: Break the loop on failure in iommufd_fault_fops_read()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64290", "commit_url": "https://git.kernel.org/stable/c/172fc8b19825a0f5884c38f2289188284e2d45ee" }, { "cve": "CVE-2026-64291", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "6ebf2eb46fbd5b40393ff8fbb847ba96925beaff", "subject": "iommufd: Set veventq_depth upper bound", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64291", "commit_url": "https://git.kernel.org/stable/c/6ebf2eb46fbd5b40393ff8fbb847ba96925beaff" }, { "cve": "CVE-2026-64292", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "47443565d10c51366c9382dbc8597cd6c460b8a2", "subject": "iommufd: Move vevent memory allocation outside spinlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64292", "commit_url": "https://git.kernel.org/stable/c/47443565d10c51366c9382dbc8597cd6c460b8a2" }, { "cve": "CVE-2026-64293", "author_name": "Kai Aizen", "author_email": "kai.aizen.dev@gmail.com", "fix_sha": "be93d186ae88a92e7aa77e122d4e661fa57b1e39", "subject": "iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64293", "commit_url": "https://git.kernel.org/stable/c/be93d186ae88a92e7aa77e122d4e661fa57b1e39" }, { "cve": "CVE-2026-64294", "author_name": "Pedro Falcato", "author_email": "pfalcato@suse.de", "fix_sha": "e187bc02f8fa4226d62814592cf064ee4557c470", "subject": "mm: do file ownership checks with the proper mount idmap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64294", "commit_url": "https://git.kernel.org/stable/c/e187bc02f8fa4226d62814592cf064ee4557c470" }, { "cve": "CVE-2026-64295", "author_name": "Ketan", "author_email": "ketan.kishore@oss.qualcomm.com", "fix_sha": "ffd017237cfe99e6e5602ab14179b0e6878a0840", "subject": "mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64295", "commit_url": "https://git.kernel.org/stable/c/ffd017237cfe99e6e5602ab14179b0e6878a0840" }, { "cve": "CVE-2026-64296", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "3a1230e7b043c62737b05a3e9275ca83a43ad20a", "subject": "exfat: bound uniname advance in exfat_find_dir_entry()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64296", "commit_url": "https://git.kernel.org/stable/c/3a1230e7b043c62737b05a3e9275ca83a43ad20a" }, { "cve": "CVE-2026-64297", "author_name": "Andrii Kuchmenko", "author_email": "capyenglishlite@gmail.com", "fix_sha": "786d2d84416a9a1c1a47b71a68d679d886284be2", "subject": "module: decompress: check return value of module_extend_max_pages()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64297", "commit_url": "https://git.kernel.org/stable/c/786d2d84416a9a1c1a47b71a68d679d886284be2" }, { "cve": "CVE-2026-64298", "author_name": "Benjamin Coddington", "author_email": "ben.coddington@hammerspace.com", "fix_sha": "5140f099ecd8a2f2808b7f7b720ee1bad8468974", "subject": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64298", "commit_url": "https://git.kernel.org/stable/c/5140f099ecd8a2f2808b7f7b720ee1bad8468974" }, { "cve": "CVE-2026-64299", "author_name": "Huihui Huang", "author_email": "hhhuang@smu.edu.sg", "fix_sha": "0a6070839b1ef276d5b05bedfb787743e140fb17", "subject": "tracing: Prevent out-of-bounds read in glob matching", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64299", "commit_url": "https://git.kernel.org/stable/c/0a6070839b1ef276d5b05bedfb787743e140fb17" }, { "cve": "CVE-2026-64300", "author_name": "Lee Jia Jie", "author_email": "jiajie.lee@starlabs.sg", "fix_sha": "5948aaf64f81f217a25dcc2bf6c0779bca19566c", "subject": "perf/aux: Fix page UAF in map_range()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64300", "commit_url": "https://git.kernel.org/stable/c/5948aaf64f81f217a25dcc2bf6c0779bca19566c" }, { "cve": "CVE-2026-64301", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "fa11039d6cdff84584a3ef8cc1f5e1b56e045da2", "subject": "regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64301", "commit_url": "https://git.kernel.org/stable/c/fa11039d6cdff84584a3ef8cc1f5e1b56e045da2" }, { "cve": "CVE-2026-64302", "author_name": "David Hildenbrand (Arm)", "author_email": "david@kernel.org", "fix_sha": "39406c05f8f150f1685839acd38ffdd69ff92031", "subject": "x86/mm: Fix freeing of PMD-sized vmemmap pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64302", "commit_url": "https://git.kernel.org/stable/c/39406c05f8f150f1685839acd38ffdd69ff92031" }, { "cve": "CVE-2026-64303", "author_name": "Carlos Song", "author_email": "carlos.song@nxp.com", "fix_sha": "01980b5da56e573d62798d0ff6c86bcaa2b22cbe", "subject": "spi: fsl-lpspi: terminate the RX channel on TX prepare failure path", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64303", "commit_url": "https://git.kernel.org/stable/c/01980b5da56e573d62798d0ff6c86bcaa2b22cbe" }, { "cve": "CVE-2026-64304", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "b3ac78756588059729b9195fcc9f4b37d54057a5", "subject": "crypto: qat - validate RSA CRT component lengths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64304", "commit_url": "https://git.kernel.org/stable/c/b3ac78756588059729b9195fcc9f4b37d54057a5" }, { "cve": "CVE-2026-64305", "author_name": "Ahsan Atta", "author_email": "ahsan.atta@intel.com", "fix_sha": "5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e", "subject": "crypto: qat - protect service table iterations with service_lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64305", "commit_url": "https://git.kernel.org/stable/c/5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e" }, { "cve": "CVE-2026-64306", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b", "subject": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64306", "commit_url": "https://git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b" }, { "cve": "CVE-2026-64307", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "08f0e65e784c4b20e6e620dd4f68d8636073a3d2", "subject": "crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64307", "commit_url": "https://git.kernel.org/stable/c/08f0e65e784c4b20e6e620dd4f68d8636073a3d2" }, { "cve": "CVE-2026-64308", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "f91e9dbb5845d1e5abf1028e6df57dcf61583e1b", "subject": "crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64308", "commit_url": "https://git.kernel.org/stable/c/f91e9dbb5845d1e5abf1028e6df57dcf61583e1b" }, { "cve": "CVE-2026-64309", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "5a1364da2f04217a36e2fdfa2db4ee025b383a20", "subject": "crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64309", "commit_url": "https://git.kernel.org/stable/c/5a1364da2f04217a36e2fdfa2db4ee025b383a20" }, { "cve": "CVE-2026-64310", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "fb1758e74b8061aacfbce7bbb7a7cc650537e167", "subject": "crypto: ccp - Do not initialize SNP for SEV ioctls", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64310", "commit_url": "https://git.kernel.org/stable/c/fb1758e74b8061aacfbce7bbb7a7cc650537e167" }, { "cve": "CVE-2026-64311", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "af3d1bb9a09daf928fc3f173689fb7904d6a6d4f", "subject": "crypto: loongson - Remove broken and unused loongson-rng", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64311", "commit_url": "https://git.kernel.org/stable/c/af3d1bb9a09daf928fc3f173689fb7904d6a6d4f" }, { "cve": "CVE-2026-64312", "author_name": "Ruijie Li", "author_email": "ruijieli51@gmail.com", "fix_sha": "ed459fe319376e876de433d12b6c6772e612ca36", "subject": "crypto: pcrypt - restore callback for non-parallel fallback", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64312", "commit_url": "https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36" }, { "cve": "CVE-2026-64313", "author_name": "Anastasia Tishchenko", "author_email": "sv3iry@gmail.com", "fix_sha": "27b536a2ec8e2f85a0380c2d13c9ecbc7aaab406", "subject": "crypto: ecc - Fix carry overflow in vli multiplication", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64313", "commit_url": "https://git.kernel.org/stable/c/27b536a2ec8e2f85a0380c2d13c9ecbc7aaab406" }, { "cve": "CVE-2026-64314", "author_name": "Xiaonan Zhao", "author_email": "ngochuongbui67@gmail.com", "fix_sha": "265b861bece38318b8e0fc8fac0643d4ef906d31", "subject": "crypto: chacha20poly1305 - validate poly1305 template argument", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64314", "commit_url": "https://git.kernel.org/stable/c/265b861bece38318b8e0fc8fac0643d4ef906d31" }, { "cve": "CVE-2026-64315", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "8005dc808bcce7d6cc2ae015a3cde1683bee602d", "subject": "crypto: caam - use print_hex_dump_devel to guard key hex dumps", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64315", "commit_url": "https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d" }, { "cve": "CVE-2026-64316", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "3f57657b6ea23f933371f2c2846322f441773cee", "subject": "crypto: caam - use print_hex_dump_devel to guard key hex dumps", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64316", "commit_url": "https://git.kernel.org/stable/c/3f57657b6ea23f933371f2c2846322f441773cee" }, { "cve": "CVE-2026-64317", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "5fa1d6a5ec2356d2107dead614437c66fa7138b1", "subject": "isofs: bound Rock Ridge symlink components to the SL record", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64317", "commit_url": "https://git.kernel.org/stable/c/5fa1d6a5ec2356d2107dead614437c66fa7138b1" }, { "cve": "CVE-2026-64318", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "2dc0bfd2fe355fb930de63c2f2eb8ced8570c579", "subject": "partitions: aix: bound the pp_count scan to the ppe array", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64318", "commit_url": "https://git.kernel.org/stable/c/2dc0bfd2fe355fb930de63c2f2eb8ced8570c579" }, { "cve": "CVE-2026-64319", "author_name": "Tianchu Chen", "author_email": "flynnnchen@tencent.com", "fix_sha": "3a413ece2504c70aa34a20be4dafec04e8c741f9", "subject": "nvmet-auth: validate reply message payload bounds against transfer length", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64319", "commit_url": "https://git.kernel.org/stable/c/3a413ece2504c70aa34a20be4dafec04e8c741f9" }, { "cve": "CVE-2026-64320", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "53cd102a7a56079b11b897835bd9b94c14e6322c", "subject": "nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64320", "commit_url": "https://git.kernel.org/stable/c/53cd102a7a56079b11b897835bd9b94c14e6322c" }, { "cve": "CVE-2026-64321", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "badc53620fe813b3a9f727ef9526f98567c2c898", "subject": "nvme: target: rdma: fix ndev refcount leak on queue connect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64321", "commit_url": "https://git.kernel.org/stable/c/badc53620fe813b3a9f727ef9526f98567c2c898" }, { "cve": "CVE-2026-64322", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "3ec997bd5508e9b25210b5bbec89031629cdb093", "subject": "udf: validate sparing table length as an entry count, not a byte count", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64322", "commit_url": "https://git.kernel.org/stable/c/3ec997bd5508e9b25210b5bbec89031629cdb093" }, { "cve": "CVE-2026-64323", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d8202786b3d75125c84ebc4de6d946f92fde0ee8", "subject": "udf: validate VAT header length against the VAT inode size", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64323", "commit_url": "https://git.kernel.org/stable/c/d8202786b3d75125c84ebc4de6d946f92fde0ee8" }, { "cve": "CVE-2026-64324", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "5f0419457f89dce1a3f1c8e62a3adf2f39ab8168", "subject": "udf: validate free block extents against the partition length", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64324", "commit_url": "https://git.kernel.org/stable/c/5f0419457f89dce1a3f1c8e62a3adf2f39ab8168" }, { "cve": "CVE-2026-64326", "author_name": "Chao Shi", "author_email": "coshi036@gmail.com", "fix_sha": "49f06cff50a4ccf3b7a1a662ceb892b3b21a527a", "subject": "block: skip sync_blockdev() on surprise removal in bdev_mark_dead()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64326", "commit_url": "https://git.kernel.org/stable/c/49f06cff50a4ccf3b7a1a662ceb892b3b21a527a" }, { "cve": "CVE-2026-64327", "author_name": "Neill Kapron", "author_email": "nkapron@google.com", "fix_sha": "82cfd4739011bdc7e87b5d585703427e89ddfaa5", "subject": "usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64327", "commit_url": "https://git.kernel.org/stable/c/82cfd4739011bdc7e87b5d585703427e89ddfaa5" }, { "cve": "CVE-2026-64328", "author_name": "Paul Cercueil", "author_email": "paul@crapouillou.net", "fix_sha": "baa6b6068a3f2bf2ed525a1cb37975905dadc658", "subject": "usb: gadget: f_fs: Fix DMA fence leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64328", "commit_url": "https://git.kernel.org/stable/c/baa6b6068a3f2bf2ed525a1cb37975905dadc658" }, { "cve": "CVE-2026-64329", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "1f0bdc2884b67de337215079bba166df0cdf4ac5", "subject": "usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64329", "commit_url": "https://git.kernel.org/stable/c/1f0bdc2884b67de337215079bba166df0cdf4ac5" }, { "cve": "CVE-2026-64330", "author_name": "Badhri Jagan Sridharan", "author_email": "badhri@google.com", "fix_sha": "7b681dd5fbf60b24a13c14661e5b7735759fb491", "subject": "usb: typec: tcpm: Validate SVID index in svdm_consume_modes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64330", "commit_url": "https://git.kernel.org/stable/c/7b681dd5fbf60b24a13c14661e5b7735759fb491" }, { "cve": "CVE-2026-64331", "author_name": "Sam Day", "author_email": "me@samcday.com", "fix_sha": "c5371e0b91b24159a3ebaa61e70b0980bcf03c0a", "subject": "usbip: vudc: fix NULL deref in vep_dequeue()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64331", "commit_url": "https://git.kernel.org/stable/c/c5371e0b91b24159a3ebaa61e70b0980bcf03c0a" }, { "cve": "CVE-2026-64332", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "8af6812795869a66e9b26044f455b13deecdb69c", "subject": "USB: ulpi: fix memory leak on registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64332", "commit_url": "https://git.kernel.org/stable/c/8af6812795869a66e9b26044f455b13deecdb69c" }, { "cve": "CVE-2026-64333", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "24ca1fea8f2753bf33e1d458ec1ae5d9b7796a65", "subject": "USB: serial: digi_acceleport: fix write buffer corruption", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64333", "commit_url": "https://git.kernel.org/stable/c/24ca1fea8f2753bf33e1d458ec1ae5d9b7796a65" }, { "cve": "CVE-2026-64334", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "5c1ea24b53bf3bfb859f0a05573997487975da23", "subject": "USB: serial: digi_acceleport: fix hard lockup on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64334", "commit_url": "https://git.kernel.org/stable/c/5c1ea24b53bf3bfb859f0a05573997487975da23" }, { "cve": "CVE-2026-64335", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "83a3dfc018943b05b6daf3a6f891833e1aabfa1f", "subject": "USB: serial: digi_acceleport: fix broken rx after throttle", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64335", "commit_url": "https://git.kernel.org/stable/c/83a3dfc018943b05b6daf3a6f891833e1aabfa1f" }, { "cve": "CVE-2026-64336", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "6bfc8d01ac4068eced509f8fc74d0cd205e4dcec", "subject": "USB: serial: keyspan_pda: fix information leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64336", "commit_url": "https://git.kernel.org/stable/c/6bfc8d01ac4068eced509f8fc74d0cd205e4dcec" }, { "cve": "CVE-2026-64337", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "0bddda5a11665c210339de76d27ebbd1a2e0b43c", "subject": "usb: mtu3: unmap request DMA on queue failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64337", "commit_url": "https://git.kernel.org/stable/c/0bddda5a11665c210339de76d27ebbd1a2e0b43c" }, { "cve": "CVE-2026-64338", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3", "subject": "USB: misc: uss720: unregister parport on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64338", "commit_url": "https://git.kernel.org/stable/c/b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3" }, { "cve": "CVE-2026-64339", "author_name": "HE WEI (\u30ae\u30ab\u30af)", "author_email": "skyexpoc@gmail.com", "fix_sha": "8c6314489550fa81d41723a0ff33f655b5b6c7b6", "subject": "usb: misc: usbio: bound bulk IN response length to the received transfer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64339", "commit_url": "https://git.kernel.org/stable/c/8c6314489550fa81d41723a0ff33f655b5b6c7b6" }, { "cve": "CVE-2026-64340", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "62fc8eb1b1481051f7bab4aa93d79809053dd09f", "subject": "USB: legousbtower: fix use-after-free on disconnect race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64340", "commit_url": "https://git.kernel.org/stable/c/62fc8eb1b1481051f7bab4aa93d79809053dd09f" }, { "cve": "CVE-2026-64341", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "c602254ba4c10f60a73cd99d147874f86a3f485c", "subject": "USB: iowarrior: fix use-after-free on disconnect race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64341", "commit_url": "https://git.kernel.org/stable/c/c602254ba4c10f60a73cd99d147874f86a3f485c" }, { "cve": "CVE-2026-64342", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "bc0e4f16c44e50daa0b1ea729934baa3b4815dee", "subject": "USB: iowarrior: fix use-after-free on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64342", "commit_url": "https://git.kernel.org/stable/c/bc0e4f16c44e50daa0b1ea729934baa3b4815dee" }, { "cve": "CVE-2026-64343", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "19bdfc7b3c179331eafa423d87e1336f43bbfeb8", "subject": "USB: ldusb: fix use-after-free on disconnect race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64343", "commit_url": "https://git.kernel.org/stable/c/19bdfc7b3c179331eafa423d87e1336f43bbfeb8" }, { "cve": "CVE-2026-64344", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "ff002c153f9722caece3983cc23dc4d9d4652cb4", "subject": "USB: idmouse: fix use-after-free on disconnect race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64344", "commit_url": "https://git.kernel.org/stable/c/ff002c153f9722caece3983cc23dc4d9d4652cb4" }, { "cve": "CVE-2026-64345", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "30adce93d5c4a5a1ec29d9249e3fdfcc391d406b", "subject": "usb: gadget: f_printer: take kref only for successful open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64345", "commit_url": "https://git.kernel.org/stable/c/30adce93d5c4a5a1ec29d9249e3fdfcc391d406b" }, { "cve": "CVE-2026-64346", "author_name": "Jimmy Hu", "author_email": "hhhuuu@google.com", "fix_sha": "67e511d2989eb1c8c588b599ce2fcc6bb8e6f7ea", "subject": "usb: gadget: udc: Fix use-after-free in gadget_match_driver", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64346", "commit_url": "https://git.kernel.org/stable/c/67e511d2989eb1c8c588b599ce2fcc6bb8e6f7ea" }, { "cve": "CVE-2026-64347", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "f8f680609c2b3ab795ffcd6f21585b6dfc46d395", "subject": "usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64347", "commit_url": "https://git.kernel.org/stable/c/f8f680609c2b3ab795ffcd6f21585b6dfc46d395" }, { "cve": "CVE-2026-64348", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "b9399d25fbb34a05bbe76eeedd730f62ff2670e9", "subject": "usb: free iso schedules on failed submit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64348", "commit_url": "https://git.kernel.org/stable/c/b9399d25fbb34a05bbe76eeedd730f62ff2670e9" }, { "cve": "CVE-2026-64349", "author_name": "Ben Dooks", "author_email": "ben.dooks@codethink.co.uk", "fix_sha": "e0f844d9d74200d311c6438a0f04270834ba5365", "subject": "usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64349", "commit_url": "https://git.kernel.org/stable/c/e0f844d9d74200d311c6438a0f04270834ba5365" }, { "cve": "CVE-2026-64350", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "3348f444a4ce43dd5c2d1aa41634cb6eff33aa64", "subject": "usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64350", "commit_url": "https://git.kernel.org/stable/c/3348f444a4ce43dd5c2d1aa41634cb6eff33aa64" }, { "cve": "CVE-2026-64351", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "47b6bcef6e679593d2e86e04ee72c46a4e2f7139", "subject": "net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64351", "commit_url": "https://git.kernel.org/stable/c/47b6bcef6e679593d2e86e04ee72c46a4e2f7139" }, { "cve": "CVE-2026-64352", "author_name": "Vlad Poenaru", "author_email": "vlad.wing@gmail.com", "fix_sha": "2f884d371fafea137afea504d49ee4a7c8d7985b", "subject": "bpf: Allow LPM map access from sleepable BPF programs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64352", "commit_url": "https://git.kernel.org/stable/c/2f884d371fafea137afea504d49ee4a7c8d7985b" }, { "cve": "CVE-2026-64353", "author_name": "Nuoqi Gui", "author_email": "gnq25@mails.tsinghua.edu.cn", "fix_sha": "53040a81ae57cdca8af8ac36fe4e661730cf7c6b", "subject": "bpf: Keep dynamic inner array lookups nullable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64353", "commit_url": "https://git.kernel.org/stable/c/53040a81ae57cdca8af8ac36fe4e661730cf7c6b" }, { "cve": "CVE-2026-64354", "author_name": "Paul Moses", "author_email": "p@1g4.org", "fix_sha": "b9452b594fd3aecbfd4aa0a6a1f741330a37dab7", "subject": "bpf: Validate BTF repeated field counts before expansion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64354", "commit_url": "https://git.kernel.org/stable/c/b9452b594fd3aecbfd4aa0a6a1f741330a37dab7" }, { "cve": "CVE-2026-64355", "author_name": "Zhao Zhang", "author_email": "zzhan461@ucr.edu", "fix_sha": "aa496720618f1a6054f1c870bf10b4f6c99bf656", "subject": "bpf: Reject fragmented frames in devmap", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64355", "commit_url": "https://git.kernel.org/stable/c/aa496720618f1a6054f1c870bf10b4f6c99bf656" }, { "cve": "CVE-2026-64356", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "45de375b25060edf46e20abb36521ba530336ceb", "subject": "xfs: fix memory leak in xfs_dqinode_metadir_create()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64356", "commit_url": "https://git.kernel.org/stable/c/45de375b25060edf46e20abb36521ba530336ceb" }, { "cve": "CVE-2026-64357", "author_name": "Yingjie Gao", "author_email": "gaoyingjie@uniontech.com", "fix_sha": "0a5213bbff62b51c7d4999ac8c7e11ea57d00d45", "subject": "xfs: fix exchmaps reservation limit check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64357", "commit_url": "https://git.kernel.org/stable/c/0a5213bbff62b51c7d4999ac8c7e11ea57d00d45" }, { "cve": "CVE-2026-64358", "author_name": "Louis-Alexis Eyraud", "author_email": "louisalexis.eyraud@collabora.com", "fix_sha": "b1845a227fda37b2fe5327df3ca0015d7e290235", "subject": "media: mtk-jpeg: cancel workqueue on release for supported platforms only", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64358", "commit_url": "https://git.kernel.org/stable/c/b1845a227fda37b2fe5327df3ca0015d7e290235" }, { "cve": "CVE-2026-64359", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "0e7a690fe435f8d5ea3feb7c1d8d73ba7e8b8aa9", "subject": "nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64359", "commit_url": "https://git.kernel.org/stable/c/0e7a690fe435f8d5ea3feb7c1d8d73ba7e8b8aa9" }, { "cve": "CVE-2026-64360", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "d67aadee19ffdf3cc8520c5a4f4d5b2916d30baf", "subject": "hfs/hfsplus: zero-initialize buffer in hfs_bnode_read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64360", "commit_url": "https://git.kernel.org/stable/c/d67aadee19ffdf3cc8520c5a4f4d5b2916d30baf" }, { "cve": "CVE-2026-64361", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "966cb76fb2857a4242cab6ea2ea17acf818a3da7", "subject": "hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64361", "commit_url": "https://git.kernel.org/stable/c/966cb76fb2857a4242cab6ea2ea17acf818a3da7" }, { "cve": "CVE-2026-64362", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "7705b4140d188ce22656f6e541ae7ef834c7e11a", "subject": "HID: lg-g15: cancel pending work on remove to fix a use-after-free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64362", "commit_url": "https://git.kernel.org/stable/c/7705b4140d188ce22656f6e541ae7ef834c7e11a" }, { "cve": "CVE-2026-64363", "author_name": "Manish Khadka", "author_email": "maskmemanish@gmail.com", "fix_sha": "75fe87e19d8aff81eb2c64d15d244ab8da4de945", "subject": "HID: appleir: fix UAF on pending key_up_timer in remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64363", "commit_url": "https://git.kernel.org/stable/c/75fe87e19d8aff81eb2c64d15d244ab8da4de945" }, { "cve": "CVE-2026-64364", "author_name": "Trung Nguyen", "author_email": "trungnh@cystack.net", "fix_sha": "8813b0612275cc61fe9e6603d0ee019247ade6be", "subject": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64364", "commit_url": "https://git.kernel.org/stable/c/8813b0612275cc61fe9e6603d0ee019247ade6be" }, { "cve": "CVE-2026-64365", "author_name": "Manish Khadka", "author_email": "maskmemanish@gmail.com", "fix_sha": "46c8beeccd8ab2c863827254a85ea877654a3534", "subject": "HID: letsketch: fix UAF on inrange_timer at driver unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64365", "commit_url": "https://git.kernel.org/stable/c/46c8beeccd8ab2c863827254a85ea877654a3534" }, { "cve": "CVE-2026-64366", "author_name": "Jinmo Yang", "author_email": "jinmo44.yang@gmail.com", "fix_sha": "6b3014ec0e9a390ca563030b2d7689921f0daef5", "subject": "HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64366", "commit_url": "https://git.kernel.org/stable/c/6b3014ec0e9a390ca563030b2d7689921f0daef5" }, { "cve": "CVE-2026-64367", "author_name": "Tianchu Chen", "author_email": "flynnnchen@tencent.com", "fix_sha": "db0a0768d09273aadadeb76730cd658d720333a4", "subject": "HID: hid-goodix-spi: validate report size to prevent stack buffer overflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64367", "commit_url": "https://git.kernel.org/stable/c/db0a0768d09273aadadeb76730cd658d720333a4" }, { "cve": "CVE-2026-64368", "author_name": "Vlastimil Babka (SUSE)", "author_email": "vbabka@kernel.org", "fix_sha": "648927ceb84021a25a0fbd5673740956f318d534", "subject": "mm/slab: do not limit zeroing to orig_size when only red zoning is enabled", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64368", "commit_url": "https://git.kernel.org/stable/c/648927ceb84021a25a0fbd5673740956f318d534" }, { "cve": "CVE-2026-64369", "author_name": "Heiko Carstens", "author_email": "hca@linux.ibm.com", "fix_sha": "37540b8c287fc817bdbd0c62bb75ad6eab0e5d03", "subject": "s390: Revert support for DCACHE_WORD_ACCESS", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64369", "commit_url": "https://git.kernel.org/stable/c/37540b8c287fc817bdbd0c62bb75ad6eab0e5d03" }, { "cve": "CVE-2026-64370", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "87bd2ad568e15b90d5f7d4bcd70342d05dad649c", "subject": "posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64370", "commit_url": "https://git.kernel.org/stable/c/87bd2ad568e15b90d5f7d4bcd70342d05dad649c" }, { "cve": "CVE-2026-64371", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "6650527444dadc63d84aa939d14ecba4fadb2f69", "subject": "proc: protect ptrace_may_access() with exec_update_lock (part 1)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64371", "commit_url": "https://git.kernel.org/stable/c/6650527444dadc63d84aa939d14ecba4fadb2f69" }, { "cve": "CVE-2026-64372", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "266d3dd8b757b48a576e90f018b51f7b7563cc32", "subject": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64372", "commit_url": "https://git.kernel.org/stable/c/266d3dd8b757b48a576e90f018b51f7b7563cc32" }, { "cve": "CVE-2026-64373", "author_name": "Tianxiang Chen", "author_email": "nanmu@xiaomi.com", "fix_sha": "a9029dd55696c651ee46912afa2a166fa456bb3e", "subject": "cpufreq: Fix hotplug-suspend race during reboot", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64373", "commit_url": "https://git.kernel.org/stable/c/a9029dd55696c651ee46912afa2a166fa456bb3e" }, { "cve": "CVE-2026-64374", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "dd29c017aed628076e915fe4cdfb5392fd4c5cab", "subject": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64374", "commit_url": "https://git.kernel.org/stable/c/dd29c017aed628076e915fe4cdfb5392fd4c5cab" }, { "cve": "CVE-2026-64375", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "6255da28d4bb5349fe18e84cb043ccd394eba75d", "subject": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64375", "commit_url": "https://git.kernel.org/stable/c/6255da28d4bb5349fe18e84cb043ccd394eba75d" }, { "cve": "CVE-2026-64376", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "896df22ee57648b0c505bd76ddbc6b2341834696", "subject": "firmware_loader: fix device reference leak in firmware_upload_register()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64376", "commit_url": "https://git.kernel.org/stable/c/896df22ee57648b0c505bd76ddbc6b2341834696" }, { "cve": "CVE-2026-64377", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "bcb8889c4981fdde42d4fd2c29a77d510fe21da2", "subject": "cpufreq: qcom-cpufreq-hw: Fix possible double free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64377", "commit_url": "https://git.kernel.org/stable/c/bcb8889c4981fdde42d4fd2c29a77d510fe21da2" }, { "cve": "CVE-2026-64378", "author_name": "Baokun Li", "author_email": "libaokun@linux.alibaba.com", "fix_sha": "cba38ec4cbd3a7b8b942a8d52531a05be8a9ff0d", "subject": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64378", "commit_url": "https://git.kernel.org/stable/c/cba38ec4cbd3a7b8b942a8d52531a05be8a9ff0d" }, { "cve": "CVE-2026-64379", "author_name": "Norbert Manthey", "author_email": "nmanthey@amazon.de", "fix_sha": "e3d9c7160d483fc8f9e225aafad8ecbbc43f3151", "subject": "smb: client: mask server-provided mode to 07777 in modefromsid", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64379", "commit_url": "https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151" }, { "cve": "CVE-2026-64380", "author_name": "Zihan Xi", "author_email": "xizh2024@lzu.edu.cn", "fix_sha": "7ad2bcf2441430bb2e918fb3ef9a90d775a6e422", "subject": "smb: client: harden POSIX SID length parsing", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64380", "commit_url": "https://git.kernel.org/stable/c/7ad2bcf2441430bb2e918fb3ef9a90d775a6e422" }, { "cve": "CVE-2026-64381", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "1c6267a1d5cf4c73b656f8181b310cbbb3e4767b", "subject": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64381", "commit_url": "https://git.kernel.org/stable/c/1c6267a1d5cf4c73b656f8181b310cbbb3e4767b" }, { "cve": "CVE-2026-64382", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "b55e182f2324bc6a604c21a47aa6c448f719a532", "subject": "smb: client: fix double-free in SMB2_open() replay", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64382", "commit_url": "https://git.kernel.org/stable/c/b55e182f2324bc6a604c21a47aa6c448f719a532" }, { "cve": "CVE-2026-64383", "author_name": "Zhao Zhang", "author_email": "zzhan461@ucr.edu", "fix_sha": "4be31c943a3a27a5a0251dbb8f5cb89059ec3d5a", "subject": "smb: client: fix double-free in SMB2_flush() replay", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64383", "commit_url": "https://git.kernel.org/stable/c/4be31c943a3a27a5a0251dbb8f5cb89059ec3d5a" }, { "cve": "CVE-2026-64384", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "145f820dcbb2cced374f2532f8a61a44dce4a615", "subject": "smb: client: fix change notify replay double-free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64384", "commit_url": "https://git.kernel.org/stable/c/145f820dcbb2cced374f2532f8a61a44dce4a615" }, { "cve": "CVE-2026-64385", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "f9bbadb6c94583e3b4af1afc449bfceb1d1ddec9", "subject": "smb: client: fix double-free in SMB2_ioctl() replay", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64385", "commit_url": "https://git.kernel.org/stable/c/f9bbadb6c94583e3b4af1afc449bfceb1d1ddec9" }, { "cve": "CVE-2026-64386", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "2a88561d66eb855813cf004a0abe648bbb17de5e", "subject": "smb: client: fix query_info() replay double-free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64386", "commit_url": "https://git.kernel.org/stable/c/2a88561d66eb855813cf004a0abe648bbb17de5e" }, { "cve": "CVE-2026-64387", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "9647492b5e41954be59d5157eddbcd4cdc1656f7", "subject": "smb: client: fix query directory replay double-free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64387", "commit_url": "https://git.kernel.org/stable/c/9647492b5e41954be59d5157eddbcd4cdc1656f7" }, { "cve": "CVE-2026-64388", "author_name": "Ralph Boehme", "author_email": "slow@samba.org", "fix_sha": "760ef2c579c2609cf17fb1cd5392f64d42d43d33", "subject": "smb/client: fix chown/chgrp with SMB3 POSIX Extensions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64388", "commit_url": "https://git.kernel.org/stable/c/760ef2c579c2609cf17fb1cd5392f64d42d43d33" }, { "cve": "CVE-2026-64389", "author_name": "Haofeng Li", "author_email": "lihaofeng@kylinos.cn", "fix_sha": "954d196bebb2b50151cb96454c72dc113b2af1ac", "subject": "ksmbd: validate NTLMv2 response before updating session key", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64389", "commit_url": "https://git.kernel.org/stable/c/954d196bebb2b50151cb96454c72dc113b2af1ac" }, { "cve": "CVE-2026-64390", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "c1016dd1d8b2bcd1158bbaabe94a31bb7e7431fb", "subject": "ksmbd: track the connection owning a byte-range lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64390", "commit_url": "https://git.kernel.org/stable/c/c1016dd1d8b2bcd1158bbaabe94a31bb7e7431fb" }, { "cve": "CVE-2026-64391", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "baa5e094886fffa7e6272edcb5e08be5ce28262c", "subject": "ksmbd: use opener credentials for ADS I/O", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64391", "commit_url": "https://git.kernel.org/stable/c/baa5e094886fffa7e6272edcb5e08be5ce28262c" }, { "cve": "CVE-2026-64392", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "52e2f21911158ec961cd5aae19c56460db382af0", "subject": "ksmbd: use opener credentials for delete-on-close", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64392", "commit_url": "https://git.kernel.org/stable/c/52e2f21911158ec961cd5aae19c56460db382af0" }, { "cve": "CVE-2026-64393", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "b383bcad3d2fe634b26efbce53e22bbb5753a520", "subject": "ksmbd: run set info with opener credentials", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64393", "commit_url": "https://git.kernel.org/stable/c/b383bcad3d2fe634b26efbce53e22bbb5753a520" }, { "cve": "CVE-2026-64394", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "44df157a1183a7f746caa970c169255da5ac61f8", "subject": "ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64394", "commit_url": "https://git.kernel.org/stable/c/44df157a1183a7f746caa970c169255da5ac61f8" }, { "cve": "CVE-2026-64395", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "cedff600f1642aa982178503552f0d007bc829c8", "subject": "ksmbd: require source read access for duplicate extents", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64395", "commit_url": "https://git.kernel.org/stable/c/cedff600f1642aa982178503552f0d007bc829c8" }, { "cve": "CVE-2026-64396", "author_name": "Davide Ornaghi", "author_email": "d.ornaghi97@gmail.com", "fix_sha": "d20d1c8ba5765d1d12eefc0aee6385ab3f240e1e", "subject": "ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64396", "commit_url": "https://git.kernel.org/stable/c/d20d1c8ba5765d1d12eefc0aee6385ab3f240e1e" }, { "cve": "CVE-2026-64397", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "be6d26bf27499977c746abc163659915082348d8", "subject": "ksmbd: serialize QUERY_DIRECTORY requests per file", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64397", "commit_url": "https://git.kernel.org/stable/c/be6d26bf27499977c746abc163659915082348d8" }, { "cve": "CVE-2026-64398", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "3320ba068198adc144c89d6661b805acce01735b", "subject": "ksmbd: add a permission check for FSCTL_SET_ZERO_DATA", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64398", "commit_url": "https://git.kernel.org/stable/c/3320ba068198adc144c89d6661b805acce01735b" }, { "cve": "CVE-2026-64399", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "388e4139db27a9e3612c9d356b826f5b1ff6a9e3", "subject": "ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64399", "commit_url": "https://git.kernel.org/stable/c/388e4139db27a9e3612c9d356b826f5b1ff6a9e3" }, { "cve": "CVE-2026-64400", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "54bab9ba5a9f156ffa9324fcbe5a356fd0242f95", "subject": "ksmbd: prevent path traversal bypass by restricting caseless retry", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64400", "commit_url": "https://git.kernel.org/stable/c/54bab9ba5a9f156ffa9324fcbe5a356fd0242f95" }, { "cve": "CVE-2026-64401", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "ec457f9afe5ae9538bdcd58fd4cb442b9787e183", "subject": "smb: client: resolve SWN tcon from live registrations", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64401", "commit_url": "https://git.kernel.org/stable/c/ec457f9afe5ae9538bdcd58fd4cb442b9787e183" }, { "cve": "CVE-2026-64402", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "98495b5a4d77dd22e106f462b76e1093a55b29a7", "subject": "coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64402", "commit_url": "https://git.kernel.org/stable/c/98495b5a4d77dd22e106f462b76e1093a55b29a7" }, { "cve": "CVE-2026-64403", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "687617555cedfb74c9e3cb85d759b908dcb17856", "subject": "Bluetooth: L2CAP: validate option length before reading conf opt value", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64403", "commit_url": "https://git.kernel.org/stable/c/687617555cedfb74c9e3cb85d759b908dcb17856" }, { "cve": "CVE-2026-64404", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "d5541eb148da72d5e0a1bca8ecd171f9fc8b366f", "subject": "Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64404", "commit_url": "https://git.kernel.org/stable/c/d5541eb148da72d5e0a1bca8ecd171f9fc8b366f" }, { "cve": "CVE-2026-64405", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "12917f591cea1af36087dba5b9ec888652f0b42a", "subject": "Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64405", "commit_url": "https://git.kernel.org/stable/c/12917f591cea1af36087dba5b9ec888652f0b42a" }, { "cve": "CVE-2026-64406", "author_name": "Yousef Alhouseen", "author_email": "alhouseenyousef@gmail.com", "fix_sha": "4bd0b274054f2679f28b70222b607bb0afc3ab9a", "subject": "Bluetooth: fix UAF in bt_accept_dequeue()", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64406", "commit_url": "https://git.kernel.org/stable/c/4bd0b274054f2679f28b70222b607bb0afc3ab9a" }, { "cve": "CVE-2026-64407", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "badff6c3bed8923a1257a853f137d447976eec30", "subject": "Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64407", "commit_url": "https://git.kernel.org/stable/c/badff6c3bed8923a1257a853f137d447976eec30" }, { "cve": "CVE-2026-64408", "author_name": "Yousef Alhouseen", "author_email": "alhouseenyousef@gmail.com", "fix_sha": "bb067a99a0356196c0b89a95721985485ebce5a5", "subject": "Bluetooth: bnep: pin L2CAP connection during netdev registration", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64408", "commit_url": "https://git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5" }, { "cve": "CVE-2026-64409", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "a257407e2bbbb099ed427719a50563f67fa366d8", "subject": "Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64409", "commit_url": "https://git.kernel.org/stable/c/a257407e2bbbb099ed427719a50563f67fa366d8" }, { "cve": "CVE-2026-64410", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "6c5dcab95f4cd42a1648739ec9300fbb4b1a021f", "subject": "netfilter: flowtable: IPIP tunnel hardware offload is not yet support", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64410", "commit_url": "https://git.kernel.org/stable/c/6c5dcab95f4cd42a1648739ec9300fbb4b1a021f" }, { "cve": "CVE-2026-64411", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "a622d2e9608c9dff47fc2e5759ac7aa3a836b45d", "subject": "netfilter: ebtables: terminate table name before find_table_lock()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64411", "commit_url": "https://git.kernel.org/stable/c/a622d2e9608c9dff47fc2e5759ac7aa3a836b45d" }, { "cve": "CVE-2026-64412", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "084d23f818321390509e9738a0b08bbf46df6425", "subject": "netfilter: ebtables: module names must be null-terminated", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64412", "commit_url": "https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425" }, { "cve": "CVE-2026-64413", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "cbfe53599eebffd188938ab6774cc41794f6f9d5", "subject": "netfilter: ebtables: zero chainstack array", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64413", "commit_url": "https://git.kernel.org/stable/c/cbfe53599eebffd188938ab6774cc41794f6f9d5" }, { "cve": "CVE-2026-64414", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "da5b58478a9c1b85608c9e40a3b8432d071b409e", "subject": "netfilter: handle unreadable frags", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64414", "commit_url": "https://git.kernel.org/stable/c/da5b58478a9c1b85608c9e40a3b8432d071b409e" }, { "cve": "CVE-2026-64415", "author_name": "Zijiang Huang", "author_email": "huangzjsmile@gmail.com", "fix_sha": "66366d291f666ddeda5f8c84f253e308de3e6b55", "subject": "mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64415", "commit_url": "https://git.kernel.org/stable/c/66366d291f666ddeda5f8c84f253e308de3e6b55" }, { "cve": "CVE-2026-64416", "author_name": "Jose Fernandez (Anthropic)", "author_email": "jose.fernandez@linux.dev", "fix_sha": "63b02a9409cb5180398491b093e48bcb5315f5fb", "subject": "mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64416", "commit_url": "https://git.kernel.org/stable/c/63b02a9409cb5180398491b093e48bcb5315f5fb" }, { "cve": "CVE-2026-64417", "author_name": "Qi Zheng", "author_email": "zhengqi.arch@bytedance.com", "fix_sha": "e30453c61e185e914fde83c650e268067b140218", "subject": "mm: shrinker: fix NULL pointer dereference in debugfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64417", "commit_url": "https://git.kernel.org/stable/c/e30453c61e185e914fde83c650e268067b140218" }, { "cve": "CVE-2026-64418", "author_name": "Qi Zheng", "author_email": "zhengqi.arch@bytedance.com", "fix_sha": "65476d31d8056e859c48580f82295ce159196ffe", "subject": "mm: shrinker: fix shrinker_info teardown race with expansion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64418", "commit_url": "https://git.kernel.org/stable/c/65476d31d8056e859c48580f82295ce159196ffe" }, { "cve": "CVE-2026-64419", "author_name": "Shakeel Butt", "author_email": "shakeel.butt@linux.dev", "fix_sha": "b902890c62d200b3509cb5e09cf1e0a66553c128", "subject": "mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64419", "commit_url": "https://git.kernel.org/stable/c/b902890c62d200b3509cb5e09cf1e0a66553c128" }, { "cve": "CVE-2026-64420", "author_name": "Andrei Kuchynski", "author_email": "akuchynski@chromium.org", "fix_sha": "8b2c1d41bc36c100b38ce5ee6def246c527eaf8a", "subject": "mfd: cros_ec: Delay dev_set_drvdata() until probe success", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64420", "commit_url": "https://git.kernel.org/stable/c/8b2c1d41bc36c100b38ce5ee6def246c527eaf8a" }, { "cve": "CVE-2026-64421", "author_name": "Xiaolei Wang", "author_email": "xiaolei.wang@windriver.com", "fix_sha": "b670bf89824ede5d07d20bb9bfbafb754846081d", "subject": "media: nxp: imx8-isi: Fix use-after-free on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64421", "commit_url": "https://git.kernel.org/stable/c/b670bf89824ede5d07d20bb9bfbafb754846081d" }, { "cve": "CVE-2026-64422", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "efb8763d7bbb40cff4cc55a6b62c3095a038149c", "subject": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64422", "commit_url": "https://git.kernel.org/stable/c/efb8763d7bbb40cff4cc55a6b62c3095a038149c" }, { "cve": "CVE-2026-64423", "author_name": "Yuyang Huang", "author_email": "yuyanghuang@google.com", "fix_sha": "7993211bde166471dffac074dc965489f86531f8", "subject": "ipv4: igmp: remove multicast group from hash table on device destruction", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64423", "commit_url": "https://git.kernel.org/stable/c/7993211bde166471dffac074dc965489f86531f8" }, { "cve": "CVE-2026-64424", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "45f1458a85017a023f138b22ac5c76abd477db42", "subject": "netpoll: fix a use-after-free on shutdown path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64424", "commit_url": "https://git.kernel.org/stable/c/45f1458a85017a023f138b22ac5c76abd477db42" }, { "cve": "CVE-2026-64425", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "29bef9934b2521f787bb15dd1985d4c0d12ae02a", "subject": "io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64425", "commit_url": "https://git.kernel.org/stable/c/29bef9934b2521f787bb15dd1985d4c0d12ae02a" }, { "cve": "CVE-2026-64426", "author_name": "Vasileios Almpanis", "author_email": "vasilisalmpanis@gmail.com", "fix_sha": "2564ca2e31bd8ee8348362941af2ee4671e487ca", "subject": "io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64426", "commit_url": "https://git.kernel.org/stable/c/2564ca2e31bd8ee8348362941af2ee4671e487ca" }, { "cve": "CVE-2026-64427", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "590cc4d782487632a52f37c2171bee1eeea29627", "subject": "HID: logitech-dj: Fix maxfield check in DJ short report validation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64427", "commit_url": "https://git.kernel.org/stable/c/590cc4d782487632a52f37c2171bee1eeea29627" }, { "cve": "CVE-2026-64428", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "286533cb14a3c8a8bd39ff64ea2fc8e1aa0f638b", "subject": "gpio: sch: use raw_spinlock_t in the irq startup path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64428", "commit_url": "https://git.kernel.org/stable/c/286533cb14a3c8a8bd39ff64ea2fc8e1aa0f638b" }, { "cve": "CVE-2026-64429", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "90f0109019e6817eb40a486671b7722d1544ae29", "subject": "gpio: eic-sprd: use raw_spinlock_t in the irq startup path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64429", "commit_url": "https://git.kernel.org/stable/c/90f0109019e6817eb40a486671b7722d1544ae29" }, { "cve": "CVE-2026-64430", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "4dcddc1c794d1c65eda68f1f8dd04a0fecc0870f", "subject": "NTB: epf: Avoid calling pci_irq_vector() from hardirq context", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64430", "commit_url": "https://git.kernel.org/stable/c/4dcddc1c794d1c65eda68f1f8dd04a0fecc0870f" }, { "cve": "CVE-2026-64431", "author_name": "Valeriy Yashnikov", "author_email": "yashnikov.valeriy@gmail.com", "fix_sha": "5b6eedd7cc2936f9238e852b553a1b326105bde8", "subject": "ntfs: avoid calling post_write_mst_fixup() for invalid index_block", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64431", "commit_url": "https://git.kernel.org/stable/c/5b6eedd7cc2936f9238e852b553a1b326105bde8" }, { "cve": "CVE-2026-64432", "author_name": "Yunpeng Tian", "author_email": "shionthanatos@gmail.com", "fix_sha": "57382ec6ac63b63dce2789e835fded28b698ae79", "subject": "fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64432", "commit_url": "https://git.kernel.org/stable/c/57382ec6ac63b63dce2789e835fded28b698ae79" }, { "cve": "CVE-2026-64433", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "fa85d985f614bc3feb343000f14a1072e99b0df1", "subject": "Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64433", "commit_url": "https://git.kernel.org/stable/c/fa85d985f614bc3feb343000f14a1072e99b0df1" }, { "cve": "CVE-2026-64434", "author_name": "Marco Elver", "author_email": "elver@google.com", "fix_sha": "b66774b48dd98f07254951f74ea6f513efe7ff8b", "subject": "Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64434", "commit_url": "https://git.kernel.org/stable/c/b66774b48dd98f07254951f74ea6f513efe7ff8b" }, { "cve": "CVE-2026-64435", "author_name": "Chi Wang", "author_email": "wangchi@kylinos.cn", "fix_sha": "c9a71daaecb2fb1d8c704545cc0b1c920b9bf5d7", "subject": "audit: Fix data races of skb_queue_len() readers on audit_queue", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64435", "commit_url": "https://git.kernel.org/stable/c/c9a71daaecb2fb1d8c704545cc0b1c920b9bf5d7" }, { "cve": "CVE-2026-64436", "author_name": "Zijing Yin", "author_email": "yzjaurora@gmail.com", "fix_sha": "d129c3177d7b1138fd5066fcc63a698b3ba415b0", "subject": "net: af_key: initialize alg_key_len for IPComp states", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64436", "commit_url": "https://git.kernel.org/stable/c/d129c3177d7b1138fd5066fcc63a698b3ba415b0" }, { "cve": "CVE-2026-64437", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "10f293a07f9e10e988b0ae44e2e99c631f5a68e0", "subject": "ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64437", "commit_url": "https://git.kernel.org/stable/c/10f293a07f9e10e988b0ae44e2e99c631f5a68e0" }, { "cve": "CVE-2026-64438", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "277281c10c63791067d24d421f7c43a15faa9096", "subject": "crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64438", "commit_url": "https://git.kernel.org/stable/c/277281c10c63791067d24d421f7c43a15faa9096" }, { "cve": "CVE-2026-64439", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "6c9dddeb582fde005360f4fe02c760d45ca05fb5", "subject": "crypto: krb5 - filter out async aead implementations at alloc", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64439", "commit_url": "https://git.kernel.org/stable/c/6c9dddeb582fde005360f4fe02c760d45ca05fb5" }, { "cve": "CVE-2026-64440", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "f8001e1a516ba3b495728c65b61f799cbfad6bd0", "subject": "staging: rtl8723bs: fix OOB write in HT_caps_handler()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64440", "commit_url": "https://git.kernel.org/stable/c/f8001e1a516ba3b495728c65b61f799cbfad6bd0" }, { "cve": "CVE-2026-64441", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344", "subject": "staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64441", "commit_url": "https://git.kernel.org/stable/c/1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344" }, { "cve": "CVE-2026-64442", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "ef61d628dfad38fead1fd2e08979ae9126d011d5", "subject": "staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64442", "commit_url": "https://git.kernel.org/stable/c/ef61d628dfad38fead1fd2e08979ae9126d011d5" }, { "cve": "CVE-2026-64443", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "ed51de4a86e173c3b0ef78e039c2e49e08b11f16", "subject": "staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64443", "commit_url": "https://git.kernel.org/stable/c/ed51de4a86e173c3b0ef78e039c2e49e08b11f16" }, { "cve": "CVE-2026-64444", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "f9654207e92283e0acac5d64fe5f8835383b5a23", "subject": "staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64444", "commit_url": "https://git.kernel.org/stable/c/f9654207e92283e0acac5d64fe5f8835383b5a23" }, { "cve": "CVE-2026-64445", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "a1fc19d61f661d47204f095b593de507884849f7", "subject": "staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64445", "commit_url": "https://git.kernel.org/stable/c/a1fc19d61f661d47204f095b593de507884849f7" }, { "cve": "CVE-2026-64446", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "5a752a616e756844388a1a45404db9fc29fec655", "subject": "staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64446", "commit_url": "https://git.kernel.org/stable/c/5a752a616e756844388a1a45404db9fc29fec655" }, { "cve": "CVE-2026-64447", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "d3a9a8cf2d7fd61a2f63df61f6cbc0a9bb007cc0", "subject": "staging: media: ipu7: fix double-free and use-after-free in error paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64447", "commit_url": "https://git.kernel.org/stable/c/d3a9a8cf2d7fd61a2f63df61f6cbc0a9bb007cc0" }, { "cve": "CVE-2026-64448", "author_name": "Shoichiro Miyamoto", "author_email": "shoichiro.miyamoto@gmail.com", "fix_sha": "53b7c271f06be4dd5cfc8c6ef552a8355c891a7f", "subject": "smb: client: restrict implied bcc[0] exemption to responses without data area", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64448", "commit_url": "https://git.kernel.org/stable/c/53b7c271f06be4dd5cfc8c6ef552a8355c891a7f" }, { "cve": "CVE-2026-64449", "author_name": "Michael Tautschnig", "author_email": "tautschn@amazon.com", "fix_sha": "9f32f38265014fac7f5dc9490fb01a638ce6e121", "subject": "staging: vme_user: bound slave read/write to the kern_buf size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64449", "commit_url": "https://git.kernel.org/stable/c/9f32f38265014fac7f5dc9490fb01a638ce6e121" }, { "cve": "CVE-2026-64450", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "2b66974a1b6134a4bbc3bfed181f7418f688eb54", "subject": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64450", "commit_url": "https://git.kernel.org/stable/c/2b66974a1b6134a4bbc3bfed181f7418f688eb54" }, { "cve": "CVE-2026-64451", "author_name": "Yuanhe Shu", "author_email": "xiangzao@linux.alibaba.com", "fix_sha": "c3e94604675e3db186111b8942650d86577df9b0", "subject": "tracing: Fix NULL pointer dereference in func_set_flag()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64451", "commit_url": "https://git.kernel.org/stable/c/c3e94604675e3db186111b8942650d86577df9b0" }, { "cve": "CVE-2026-64452", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "1720db928e5a58ca7d75ac1d514c3b73fd7061a7", "subject": "6lowpan: fix NHC entry use-after-free on error path", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64452", "commit_url": "https://git.kernel.org/stable/c/1720db928e5a58ca7d75ac1d514c3b73fd7061a7" }, { "cve": "CVE-2026-64453", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "0bfeec21984fedd32987f4e4c0cde34b445af404", "subject": "usb: misc: usbio: fix disconnect UAF in client teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64453", "commit_url": "https://git.kernel.org/stable/c/0bfeec21984fedd32987f4e4c0cde34b445af404" }, { "cve": "CVE-2026-64454", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "010382937fb69892b3469ac4d30af072262f59e8", "subject": "usb: dwc3: run gadget disconnect from sleepable suspend context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64454", "commit_url": "https://git.kernel.org/stable/c/010382937fb69892b3469ac4d30af072262f59e8" }, { "cve": "CVE-2026-64455", "author_name": "Alan Stern", "author_email": "stern@rowland.harvard.edu", "fix_sha": "abf76d3239dee97b66e7241ad04811f1ce562e28", "subject": "USB: chaoskey: Fix slab-use-after-free in chaoskey_release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64455", "commit_url": "https://git.kernel.org/stable/c/abf76d3239dee97b66e7241ad04811f1ce562e28" }, { "cve": "CVE-2026-64456", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "e3046eeada299f917a8ad883af4434bfb86556b1", "subject": "hwrng: virtio: clamp device-reported used.len at copy_data()", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64456", "commit_url": "https://git.kernel.org/stable/c/e3046eeada299f917a8ad883af4434bfb86556b1" }, { "cve": "CVE-2026-64457", "author_name": "Ammar Faizi", "author_email": "ammarfaizi2@openresty.com", "fix_sha": "f7d380fb525c13bdd114369a1979c80c346e6abc", "subject": "virtio_pci: fix vq info pointer lookup via wrong index", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64457", "commit_url": "https://git.kernel.org/stable/c/f7d380fb525c13bdd114369a1979c80c346e6abc" }, { "cve": "CVE-2026-64458", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "35d4a3cf70a855b50e53189ac2f8463e20a02046", "subject": "mm/damon/ops-common: handle extreme intervals in damon_hot_score()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64458", "commit_url": "https://git.kernel.org/stable/c/35d4a3cf70a855b50e53189ac2f8463e20a02046" }, { "cve": "CVE-2026-64459", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "8bc4d43bccbd60efe85d0a44d5bf41762f2f0c30", "subject": "tcp: restore RCU grace period in tcp_ao_destroy_sock", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64459", "commit_url": "https://git.kernel.org/stable/c/8bc4d43bccbd60efe85d0a44d5bf41762f2f0c30" }, { "cve": "CVE-2026-64460", "author_name": "Marco Nenciarini", "author_email": "mnencia@kcore.it", "fix_sha": "f34f1712229d71ce4286440fef12526fd4590b37", "subject": "PCI/IOV: Skip VF Resizable BAR restore on read error", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64460", "commit_url": "https://git.kernel.org/stable/c/f34f1712229d71ce4286440fef12526fd4590b37" }, { "cve": "CVE-2026-64461", "author_name": "Manivannan Sadhasivam", "author_email": "manivannan.sadhasivam@oss.qualcomm.com", "fix_sha": "f865a57896bd92d7662eb2818d8f48872e2cbbc7", "subject": "PCI: mediatek: Fix IRQ domain leak when port fails to enable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64461", "commit_url": "https://git.kernel.org/stable/c/f865a57896bd92d7662eb2818d8f48872e2cbbc7" }, { "cve": "CVE-2026-64462", "author_name": "Mahesh Vaidya", "author_email": "mahesh.vaidya@altera.com", "fix_sha": "7a94138caeb27f3c49c1dbd93bf422098925bb28", "subject": "PCI: altera: Fix resource leaks on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64462", "commit_url": "https://git.kernel.org/stable/c/7a94138caeb27f3c49c1dbd93bf422098925bb28" }, { "cve": "CVE-2026-64463", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "e8da46d99d3710106e7c44db14566bf9b57386b5", "subject": "usb: typec: tcpci_rt1711h: unregister TCPCI port with devres", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64463", "commit_url": "https://git.kernel.org/stable/c/e8da46d99d3710106e7c44db14566bf9b57386b5" }, { "cve": "CVE-2026-64464", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "49f6e3c3ef19f04f6657ed8dce550e36c763abb8", "subject": "xhci: sideband: fix ring sg table pages leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64464", "commit_url": "https://git.kernel.org/stable/c/49f6e3c3ef19f04f6657ed8dce550e36c763abb8" }, { "cve": "CVE-2026-64465", "author_name": "\u80e1\u8fde\u52e4", "author_email": "hulianqin@vivo.com", "fix_sha": "42c37c4b75d38b51d84f31a8e29427f5e06a7c2a", "subject": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64465", "commit_url": "https://git.kernel.org/stable/c/42c37c4b75d38b51d84f31a8e29427f5e06a7c2a" }, { "cve": "CVE-2026-64466", "author_name": "Alice Ryhl", "author_email": "aliceryhl@google.com", "fix_sha": "bc4a9828897871ff3e5a1f8a1d346decbf4ee95e", "subject": "rust_binder: clear freeze listener on node removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64466", "commit_url": "https://git.kernel.org/stable/c/bc4a9828897871ff3e5a1f8a1d346decbf4ee95e" }, { "cve": "CVE-2026-64467", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "803c8a9502e9b97cd6ae937618ef4a8fd6274343", "subject": "rust_binder: use a u64 stride when cleaning up the offsets array", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64467", "commit_url": "https://git.kernel.org/stable/c/803c8a9502e9b97cd6ae937618ef4a8fd6274343" }, { "cve": "CVE-2026-64468", "author_name": "Carlos Llamas", "author_email": "cmllamas@google.com", "fix_sha": "f223d27a546c1e1f48d38fd67760e78f068fe8c4", "subject": "binder: fix UAF in binder_free_transaction()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64468", "commit_url": "https://git.kernel.org/stable/c/f223d27a546c1e1f48d38fd67760e78f068fe8c4" }, { "cve": "CVE-2026-64469", "author_name": "Carlos Llamas", "author_email": "cmllamas@google.com", "fix_sha": "114a116aaa5f0295376cdf12da743c5bce3b20ce", "subject": "binder: fix UAF in binder_thread_release()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64469", "commit_url": "https://git.kernel.org/stable/c/114a116aaa5f0295376cdf12da743c5bce3b20ce" }, { "cve": "CVE-2026-64470", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "c5b600a3c05b1a7a110d558df935a8fc8a471c79", "subject": "Bluetooth: btusb: fix use-after-free on marvell probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64470", "commit_url": "https://git.kernel.org/stable/c/c5b600a3c05b1a7a110d558df935a8fc8a471c79" }, { "cve": "CVE-2026-64471", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "eedc6867ebad73edbfaf9a0a65fbef7115cc4753", "subject": "Bluetooth: btusb: fix use-after-free on registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64471", "commit_url": "https://git.kernel.org/stable/c/eedc6867ebad73edbfaf9a0a65fbef7115cc4753" }, { "cve": "CVE-2026-64472", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "f2365a63b02ddea32e7db78b742c2503ec7b81f1", "subject": "vfio/mlx5: Fix racy bitfields and tighten struct layout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64472", "commit_url": "https://git.kernel.org/stable/c/f2365a63b02ddea32e7db78b742c2503ec7b81f1" }, { "cve": "CVE-2026-64473", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "dc7fe87de492ea7f33a72b78d26650b75bf37f4f", "subject": "vfio: Remove device debugfs before releasing devres", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64473", "commit_url": "https://git.kernel.org/stable/c/dc7fe87de492ea7f33a72b78d26650b75bf37f4f" }, { "cve": "CVE-2026-64474", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "a26b499b757cfc8bbff1088bb1b844639e250893", "subject": "vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64474", "commit_url": "https://git.kernel.org/stable/c/a26b499b757cfc8bbff1088bb1b844639e250893" }, { "cve": "CVE-2026-64475", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "daedde7f024ecf88bc8e832ed40cf2c795f0796a", "subject": "vfio/pci: Release the VGA arbiter client on register_device() failure", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64475", "commit_url": "https://git.kernel.org/stable/c/daedde7f024ecf88bc8e832ed40cf2c795f0796a" }, { "cve": "CVE-2026-64476", "author_name": "Alex Williamson", "author_email": "alex.williamson@nvidia.com", "fix_sha": "4575e9aac5336d1365138c0284773bf8da4b1fa3", "subject": "vfio/pci: Latch disable_idle_d3 per device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64476", "commit_url": "https://git.kernel.org/stable/c/4575e9aac5336d1365138c0284773bf8da4b1fa3" }, { "cve": "CVE-2026-64477", "author_name": "Reinette Chatre", "author_email": "reinette.chatre@intel.com", "fix_sha": "fc16126cc11d9f507130bf84ab137ee0938c900e", "subject": "x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64477", "commit_url": "https://git.kernel.org/stable/c/fc16126cc11d9f507130bf84ab137ee0938c900e" }, { "cve": "CVE-2026-64478", "author_name": "Darvell Long", "author_email": "contact@darvell.me", "fix_sha": "7693c0cc415f3a16a7a3355f245474a5e661be4e", "subject": "ALSA: usb-audio: avoid kobject path lookup in DualSense match", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64478", "commit_url": "https://git.kernel.org/stable/c/7693c0cc415f3a16a7a3355f245474a5e661be4e" }, { "cve": "CVE-2026-64479", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "435990e25bf1f4af3e6df12a6fbfd1f7ba4a97d4", "subject": "ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64479", "commit_url": "https://git.kernel.org/stable/c/435990e25bf1f4af3e6df12a6fbfd1f7ba4a97d4" }, { "cve": "CVE-2026-64480", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "2b929b91b0f3bc6de8a844370049cd99ee8e31ff", "subject": "ALSA: ice1712: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64480", "commit_url": "https://git.kernel.org/stable/c/2b929b91b0f3bc6de8a844370049cd99ee8e31ff" }, { "cve": "CVE-2026-64481", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "b65020d5398f499c09498c9786dba6d67ae57664", "subject": "ALSA: hda/cs35l41: Fix firmware load work teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64481", "commit_url": "https://git.kernel.org/stable/c/b65020d5398f499c09498c9786dba6d67ae57664" }, { "cve": "CVE-2026-64482", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "c7fa99d30c7a166a5e5db5a585ce7501ff68326b", "subject": "ALSA: gus: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64482", "commit_url": "https://git.kernel.org/stable/c/c7fa99d30c7a166a5e5db5a585ce7501ff68326b" }, { "cve": "CVE-2026-64483", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "29b9667982e4df2ed7744f86b1144f8bb58eb698", "subject": "ALSA: firewire: isight: bound the sample count to the packet payload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64483", "commit_url": "https://git.kernel.org/stable/c/29b9667982e4df2ed7744f86b1144f8bb58eb698" }, { "cve": "CVE-2026-64484", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "1edd1f02dddd20aeb6066ded41017615766ea42f", "subject": "ALSA: es1938: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64484", "commit_url": "https://git.kernel.org/stable/c/1edd1f02dddd20aeb6066ded41017615766ea42f" }, { "cve": "CVE-2026-64485", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "4a60127debb9e370d6c0e22a307326b624a141f3", "subject": "ALSA: compress: Fix task creation error unwind", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64485", "commit_url": "https://git.kernel.org/stable/c/4a60127debb9e370d6c0e22a307326b624a141f3" }, { "cve": "CVE-2026-64486", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "c205bd1b28fb7e5f1061a4e78813fad7d315cb3e", "subject": "ALSA: cmipci: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64486", "commit_url": "https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e" }, { "cve": "CVE-2026-64487", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "f7f3f9fd81e7adbaa12c2e62ee07f0e094a543fd", "subject": "ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64487", "commit_url": "https://git.kernel.org/stable/c/f7f3f9fd81e7adbaa12c2e62ee07f0e094a543fd" }, { "cve": "CVE-2026-64488", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "8df560fefe6fed6a20b7e06720eeaeccec349ac0", "subject": "ALSA: aoa: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64488", "commit_url": "https://git.kernel.org/stable/c/8df560fefe6fed6a20b7e06720eeaeccec349ac0" }, { "cve": "CVE-2026-64489", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "e64d170346d00b580c0043de3e5ccb3e331c47d4", "subject": "ALSA: ymfpci: check snd_ctl_new1() return value", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64489", "commit_url": "https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4" }, { "cve": "CVE-2026-64490", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "c77a6cbb36ff8cbc1f084d94f8dcda5250935271", "subject": "ALSA: virtio: Validate control metadata from the device", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64490", "commit_url": "https://git.kernel.org/stable/c/c77a6cbb36ff8cbc1f084d94f8dcda5250935271" }, { "cve": "CVE-2026-64491", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "147996e7e7c9e8339c0e04f6fa7ccb3e4d448ff7", "subject": "ALSA: usx2y: us144mkii: fix work UAF on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64491", "commit_url": "https://git.kernel.org/stable/c/147996e7e7c9e8339c0e04f6fa7ccb3e4d448ff7" }, { "cve": "CVE-2026-64492", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "3c5eed894efd93d68d7f6a359a81ddef0e928774", "subject": "iio: temperature: tmp006: use devm_iio_trigger_register", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64492", "commit_url": "https://git.kernel.org/stable/c/3c5eed894efd93d68d7f6a359a81ddef0e928774" }, { "cve": "CVE-2026-64493", "author_name": "Biren Pandya", "author_email": "birenpandya@gmail.com", "fix_sha": "fbe67ff37a6fd855a6c097f84f3738bd13d0a898", "subject": "iio: pressure: mpl115: fix runtime PM leak on read error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64493", "commit_url": "https://git.kernel.org/stable/c/fbe67ff37a6fd855a6c097f84f3738bd13d0a898" }, { "cve": "CVE-2026-64494", "author_name": "Biren Pandya", "author_email": "birenpandya@gmail.com", "fix_sha": "38b72267b7e22768a1f26d9935de4e1752a1dc85", "subject": "iio: light: gp2ap002: fix runtime PM leak on read error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64494", "commit_url": "https://git.kernel.org/stable/c/38b72267b7e22768a1f26d9935de4e1752a1dc85" }, { "cve": "CVE-2026-64495", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "8320c77e67382d5d55d77043a5f60a867d408a2b", "subject": "iio: gyro: bmg160: bail out when bandwidth/filter is not in table", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64495", "commit_url": "https://git.kernel.org/stable/c/8320c77e67382d5d55d77043a5f60a867d408a2b" }, { "cve": "CVE-2026-64496", "author_name": "Lars-Peter Clausen", "author_email": "lars@metafoo.de", "fix_sha": "af791d295737ea6b6ff2c8d8488462a49c14af01", "subject": "iio: event: Fix event FIFO reset race", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64496", "commit_url": "https://git.kernel.org/stable/c/af791d295737ea6b6ff2c8d8488462a49c14af01" }, { "cve": "CVE-2026-64497", "author_name": "Maxwell Doose", "author_email": "m32285159@gmail.com", "fix_sha": "60d877910a43c305b5165131b258a17b1d772d57", "subject": "iio: chemical: scd30: Cleanup initializations and fix sign-extension bug", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64497", "commit_url": "https://git.kernel.org/stable/c/60d877910a43c305b5165131b258a17b1d772d57" }, { "cve": "CVE-2026-64498", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "6325d6e2204327965b849c0a16efb6ac9202e5a8", "subject": "iio: buffer: hw-consumer: free scan_mask on buffer release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64498", "commit_url": "https://git.kernel.org/stable/c/6325d6e2204327965b849c0a16efb6ac9202e5a8" }, { "cve": "CVE-2026-64499", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "adf4bc07f814da8329278d32600147f5a150938c", "subject": "iio: adc: ti-ads1119: fix PM reference leak in buffer preenable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64499", "commit_url": "https://git.kernel.org/stable/c/adf4bc07f814da8329278d32600147f5a150938c" }, { "cve": "CVE-2026-64500", "author_name": "Maxwell Doose", "author_email": "m32285159@gmail.com", "fix_sha": "e561b35633f450ee607e87a6401d97f156a0cd54", "subject": "iio: adc: lpc32xx: Initialize completion before requesting IRQ", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64500", "commit_url": "https://git.kernel.org/stable/c/e561b35633f450ee607e87a6401d97f156a0cd54" }, { "cve": "CVE-2026-64501", "author_name": "Radu Sabau", "author_email": "radu.sabau@analog.com", "fix_sha": "c72da0688575e5ef39c36bb44fed53aa18f8ae65", "subject": "iio: adc: ad_sigma_delta: fix CS held asserted and state leaks", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64501", "commit_url": "https://git.kernel.org/stable/c/c72da0688575e5ef39c36bb44fed53aa18f8ae65" }, { "cve": "CVE-2026-64502", "author_name": "Radu Sabau", "author_email": "radu.sabau@analog.com", "fix_sha": "91bc6767a4f55dc470d8a56b55b9f2ea09094efe", "subject": "iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64502", "commit_url": "https://git.kernel.org/stable/c/91bc6767a4f55dc470d8a56b55b9f2ea09094efe" }, { "cve": "CVE-2026-64503", "author_name": "Biren Pandya", "author_email": "birenpandya@gmail.com", "fix_sha": "44a5fd874bb6873bdaec59f722c1d57832fbc9df", "subject": "iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64503", "commit_url": "https://git.kernel.org/stable/c/44a5fd874bb6873bdaec59f722c1d57832fbc9df" }, { "cve": "CVE-2026-64504", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "ce0e1cae26096fe959a0da5563a6d6d5a801d5fb", "subject": "iio: accel: bmc150: clamp the device-reported FIFO frame count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64504", "commit_url": "https://git.kernel.org/stable/c/ce0e1cae26096fe959a0da5563a6d6d5a801d5fb" }, { "cve": "CVE-2026-64505", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "21b5bf155435008e0fb0736795289788e63d426f", "subject": "usb: gadget: function: rndis: add length check for header", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64505", "commit_url": "https://git.kernel.org/stable/c/21b5bf155435008e0fb0736795289788e63d426f" }, { "cve": "CVE-2026-64507", "author_name": "Pawan Gupta", "author_email": "pawan.kumar.gupta@linux.intel.com", "fix_sha": "a3af84b0fa00ead01fcd0e28b5d773ff25990a0d", "subject": "x86/bugs: Enable IBPB flush on BPF JIT allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64507", "commit_url": "https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d" }, { "cve": "CVE-2026-64508", "author_name": "Pawan Gupta", "author_email": "pawan.kumar.gupta@linux.intel.com", "fix_sha": "96cce16e26dd02a8678f1e87f88a4b5cdb63b995", "subject": "bpf: Support for hardening against JIT spraying", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64508", "commit_url": "https://git.kernel.org/stable/c/96cce16e26dd02a8678f1e87f88a4b5cdb63b995" }, { "cve": "CVE-2026-64509", "author_name": "Haoze Xie", "author_email": "royenheart@gmail.com", "fix_sha": "2957771379fa335103a4b539db57bb2271e12142", "subject": "rust: block: fix GenDisk cleanup paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64509", "commit_url": "https://git.kernel.org/stable/c/2957771379fa335103a4b539db57bb2271e12142" }, { "cve": "CVE-2026-64510", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "38bf27511ef41bffebd157ec3eba41fc89ba59cd", "subject": "ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64510", "commit_url": "https://git.kernel.org/stable/c/38bf27511ef41bffebd157ec3eba41fc89ba59cd" }, { "cve": "CVE-2026-64511", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "027e128abb82788189d6d45b68e3e8e7329b67be", "subject": "ACPI: NFIT: core: Fix possible NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64511", "commit_url": "https://git.kernel.org/stable/c/027e128abb82788189d6d45b68e3e8e7329b67be" }, { "cve": "CVE-2026-64512", "author_name": "Jeremy Linton", "author_email": "jeremy.linton@arm.com", "fix_sha": "1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1", "subject": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64512", "commit_url": "https://git.kernel.org/stable/c/1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1" }, { "cve": "CVE-2026-64513", "author_name": "Carlos L\u00f3pez", "author_email": "clopez@suse.de", "fix_sha": "bb365a506b1e6fb050c0fceaad354fe395385ef0", "subject": "KVM: x86: Unconditionally recompute CR8 intercept on PPR update", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64513", "commit_url": "https://git.kernel.org/stable/c/bb365a506b1e6fb050c0fceaad354fe395385ef0" }, { "cve": "CVE-2026-64514", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "8e80af52db652fbc41320eee45a4f73bc029faf2", "subject": "userfaultfd: gate must_wait writability check on pte_present()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64514", "commit_url": "https://git.kernel.org/stable/c/8e80af52db652fbc41320eee45a4f73bc029faf2" }, { "cve": "CVE-2026-64515", "author_name": "Johannes Berg", "author_email": "johannes.berg@intel.com", "fix_sha": "a74e893f30db64cdce0fc7a96d3baa417bcd55f5", "subject": "wifi: mac80211: fix MLE defragmentation", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64515", "commit_url": "https://git.kernel.org/stable/c/a74e893f30db64cdce0fc7a96d3baa417bcd55f5" }, { "cve": "CVE-2026-64516", "author_name": "Timur Krist\u00f3f", "author_email": "timur.kristof@gmail.com", "fix_sha": "3e5a1d5bb2ff061e64c7992f8e5404dfd4c2d0f3", "subject": "drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64516", "commit_url": "https://git.kernel.org/stable/c/3e5a1d5bb2ff061e64c7992f8e5404dfd4c2d0f3" }, { "cve": "CVE-2026-64517", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "d3ded53fab90996e7d94a39049e11962dd066725", "subject": "drm/xe/gsc: Fix double-free of managed BO in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64517", "commit_url": "https://git.kernel.org/stable/c/d3ded53fab90996e7d94a39049e11962dd066725" }, { "cve": "CVE-2026-64518", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "03cb001ef87b3f8d859cf7f96329acf3d6235d29", "subject": "tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64518", "commit_url": "https://git.kernel.org/stable/c/03cb001ef87b3f8d859cf7f96329acf3d6235d29" }, { "cve": "CVE-2026-64519", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "4f8ef58c10bfe5f86a643c7c8331b37e69e3dae1", "subject": "NFSD: Fix infinite loop in layout state revocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64519", "commit_url": "https://git.kernel.org/stable/c/4f8ef58c10bfe5f86a643c7c8331b37e69e3dae1" }, { "cve": "CVE-2026-64520", "author_name": "Sudeep Holla", "author_email": "sudeep.holla@kernel.org", "fix_sha": "3974ea1938406f9bfa7c1f48d4e43533f447bb08", "subject": "firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64520", "commit_url": "https://git.kernel.org/stable/c/3974ea1938406f9bfa7c1f48d4e43533f447bb08" }, { "cve": "CVE-2026-64521", "author_name": "Xianwei Zhao", "author_email": "xianwei.zhao@amlogic.com", "fix_sha": "e72ce029810390eb987a036fb2c8a5da9a23b685", "subject": "pinctrl: meson: amlogic-a4: fix deadlock issue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64521", "commit_url": "https://git.kernel.org/stable/c/e72ce029810390eb987a036fb2c8a5da9a23b685" }, { "cve": "CVE-2026-64522", "author_name": "Prathamesh Deshpande", "author_email": "prathameshdeshpande7@gmail.com", "fix_sha": "abe003b33223ff33552f291644bf35d9c2f992fb", "subject": "net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64522", "commit_url": "https://git.kernel.org/stable/c/abe003b33223ff33552f291644bf35d9c2f992fb" }, { "cve": "CVE-2026-64523", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "09dba37eee70d0596e26645015f1aa95a9848e9d", "subject": "net/handshake: Take a long-lived file reference at submit", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64523", "commit_url": "https://git.kernel.org/stable/c/09dba37eee70d0596e26645015f1aa95a9848e9d" }, { "cve": "CVE-2026-64524", "author_name": "Berkant Koc", "author_email": "me@berkoc.com", "fix_sha": "13d33b9ef67066c77c84273fac5a1d3fde3533d1", "subject": "drm/hyperv: validate resolution_count and fix WIN8 fallback", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64524", "commit_url": "https://git.kernel.org/stable/c/13d33b9ef67066c77c84273fac5a1d3fde3533d1" }, { "cve": "CVE-2026-64525", "author_name": "Usama Arif", "author_email": "usama.arif@linux.dev", "fix_sha": "3e52417318473782012b236d0325bf7d2266a597", "subject": "xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64525", "commit_url": "https://git.kernel.org/stable/c/3e52417318473782012b236d0325bf7d2266a597" }, { "cve": "CVE-2026-64526", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "6386bd772de64e6760306eb91c7e86163af6c22f", "subject": "ethtool: tsconfig: fix missing ethnl_ops_complete()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64526", "commit_url": "https://git.kernel.org/stable/c/6386bd772de64e6760306eb91c7e86163af6c22f" }, { "cve": "CVE-2026-64527", "author_name": "Berkant Koc", "author_email": "me@berkoc.com", "fix_sha": "7f87763f47a3c22fb50265a00619ef10f2394b18", "subject": "drm/hyperv: validate VMBus packet size in receive callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64527", "commit_url": "https://git.kernel.org/stable/c/7f87763f47a3c22fb50265a00619ef10f2394b18" }, { "cve": "CVE-2026-64528", "author_name": "Tudor Ambarus", "author_email": "tudor.ambarus@linaro.org", "fix_sha": "a3bb136bff5e6a5e48cdd813246c9c4686feaaa9", "subject": "tty: serial: samsung: Remove redundant port lock acquisition in rx helpers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64528", "commit_url": "https://git.kernel.org/stable/c/a3bb136bff5e6a5e48cdd813246c9c4686feaaa9" }, { "cve": "CVE-2026-64529", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "d237230728c567297f2f98b425d63156ab2ed17f", "subject": "crypto: qat - remove unused character device and IOCTLs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64529", "commit_url": "https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f" }, { "cve": "CVE-2026-64530", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "a8a02897f2b479127db261de05cbf0c28b98d159", "subject": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64530", "commit_url": "https://git.kernel.org/stable/c/a8a02897f2b479127db261de05cbf0c28b98d159" }, { "cve": "CVE-2026-64531", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "3f1f755366687d051174739fb99f7d560202f60b", "subject": "net: openvswitch: reject oversized nested action attrs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64531", "commit_url": "https://git.kernel.org/stable/c/3f1f755366687d051174739fb99f7d560202f60b" }, { "cve": "CVE-2026-64532", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3e127829e57f5190f612412ece4541cb96d5ec7a", "subject": "fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64532", "commit_url": "https://git.kernel.org/stable/c/3e127829e57f5190f612412ece4541cb96d5ec7a" }, { "cve": "CVE-2026-64533", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "6a4c53a2e26a865565bd6a460961e8d6fcb32329", "subject": "fs/ntfs3: validate lcns_follow in log_replay conversion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64533", "commit_url": "https://git.kernel.org/stable/c/6a4c53a2e26a865565bd6a460961e8d6fcb32329" }, { "cve": "CVE-2026-64534", "author_name": "Shivam Kumar", "author_email": "kumar.shivam43666@gmail.com", "fix_sha": "4606467a75cfc16721937272ed29462a750b60c8", "subject": "nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64534", "commit_url": "https://git.kernel.org/stable/c/4606467a75cfc16721937272ed29462a750b60c8" }, { "cve": "CVE-2026-64535", "author_name": "Sagi Grimberg", "author_email": "sagi@grimberg.me", "fix_sha": "dbbd07d0a7020b80f6a7028e561908f7b83b3d5a", "subject": "nvmet-tcp: Fix potential UAF when ddgst mismatch", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64535", "commit_url": "https://git.kernel.org/stable/c/dbbd07d0a7020b80f6a7028e561908f7b83b3d5a" }, { "cve": "CVE-2026-64536", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "3bf39f711ff27c64be8680a8938bcc5001982e81", "subject": "staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64536", "commit_url": "https://git.kernel.org/stable/c/3bf39f711ff27c64be8680a8938bcc5001982e81" }, { "cve": "CVE-2026-64537", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "f3e02edd8322b31b8e6517faa6ba053bf29d1e26", "subject": "bridge: cfm: reject invalid CCM interval at configuration time", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64537", "commit_url": "https://git.kernel.org/stable/c/f3e02edd8322b31b8e6517faa6ba053bf29d1e26" }, { "cve": "CVE-2026-64538", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "46c3b8191aad3d032776bf3bebf03efdf5f4b905", "subject": "ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64538", "commit_url": "https://git.kernel.org/stable/c/46c3b8191aad3d032776bf3bebf03efdf5f4b905" }, { "cve": "CVE-2026-64539", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "6f5fb689fdf80bdd143f22a502f9eb1f3c85e286", "subject": "Bluetooth: eir: Fix stack OOB write when prepending the Flags AD", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64539", "commit_url": "https://git.kernel.org/stable/c/6f5fb689fdf80bdd143f22a502f9eb1f3c85e286" }, { "cve": "CVE-2026-64540", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "8ff7f2a6da4fccaa5cc9be7251a24e71e29fbd1a", "subject": "usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64540", "commit_url": "https://git.kernel.org/stable/c/8ff7f2a6da4fccaa5cc9be7251a24e71e29fbd1a" }, { "cve": "CVE-2026-64541", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "9d160b35cc34a2ba8229d07651468a7848325135", "subject": "net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64541", "commit_url": "https://git.kernel.org/stable/c/9d160b35cc34a2ba8229d07651468a7848325135" }, { "cve": "CVE-2026-64542", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "d186e942365acece7c56d39da05dd63bf95b280a", "subject": "ipv6: ndisc: fix NULL deref in accept_untracked_na()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64542", "commit_url": "https://git.kernel.org/stable/c/d186e942365acece7c56d39da05dd63bf95b280a" }, { "cve": "CVE-2026-64543", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "1579342d71133da7f00daa02c75cebec7372097b", "subject": "tipc: fix use-after-free of the discoverer in tipc_disc_rcv()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64543", "commit_url": "https://git.kernel.org/stable/c/1579342d71133da7f00daa02c75cebec7372097b" }, { "cve": "CVE-2026-64544", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "f7dd32c5179d7755de18e21d5674b08f9e5cb180", "subject": "crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64544", "commit_url": "https://git.kernel.org/stable/c/f7dd32c5179d7755de18e21d5674b08f9e5cb180" }, { "cve": "CVE-2026-64545", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "e82d8cc4321c373dc46e741cd2dfdaa7921fddb7", "subject": "net, bpf: check master for NULL in xdp_master_redirect()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64545", "commit_url": "https://git.kernel.org/stable/c/e82d8cc4321c373dc46e741cd2dfdaa7921fddb7" }, { "cve": "CVE-2026-64546", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "faaa1e1155833e7d4ce7e3cfaf64c0d636b190db", "subject": "drm/edid: fix OOB read in drm_parse_tiled_block()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64546", "commit_url": "https://git.kernel.org/stable/c/faaa1e1155833e7d4ce7e3cfaf64c0d636b190db" }, { "cve": "CVE-2026-64547", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "03f384bc0cb8d4a1301d4f5b0baef2d980258383", "subject": "net: usb: net1080: validate packet_len before pad-byte access in rx_fixup", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64547", "commit_url": "https://git.kernel.org/stable/c/03f384bc0cb8d4a1301d4f5b0baef2d980258383" }, { "cve": "CVE-2026-64548", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "0c0a8ed85349dae298712d79cb276acfeb794d82", "subject": "bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64548", "commit_url": "https://git.kernel.org/stable/c/0c0a8ed85349dae298712d79cb276acfeb794d82" }, { "cve": "CVE-2026-64549", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "dd068ef044128db655f48323a4acfd5907e04903", "subject": "Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64549", "commit_url": "https://git.kernel.org/stable/c/dd068ef044128db655f48323a4acfd5907e04903" }, { "cve": "CVE-2026-64550", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "f0f1887a9e30712a1df03e152dce6fb91344b1f3", "subject": "net: qualcomm: rmnet: validate MAP frame length before ingress parsing", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64550", "commit_url": "https://git.kernel.org/stable/c/f0f1887a9e30712a1df03e152dce6fb91344b1f3" }, { "cve": "CVE-2026-64551", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "1cd23ca80784223fa2204e16203f754da4e821f8", "subject": "sctp: validate STALE_COOKIE cause length before reading staleness", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64551", "commit_url": "https://git.kernel.org/stable/c/1cd23ca80784223fa2204e16203f754da4e821f8" }, { "cve": "CVE-2026-64552", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "9e5ad06ea826322ce8c58b4a68442a96f600c3c4", "subject": "virtio-net: fix len check in receive_big()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64552", "commit_url": "https://git.kernel.org/stable/c/9e5ad06ea826322ce8c58b4a68442a96f600c3c4" }, { "cve": "CVE-2026-64553", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "aedd02af1f8b0bceb7f42f5a21c41634ca9ed390", "subject": "net: psample: fix info leak in PSAMPLE_ATTR_DATA", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64553", "commit_url": "https://git.kernel.org/stable/c/aedd02af1f8b0bceb7f42f5a21c41634ca9ed390" }, { "cve": "CVE-2026-64554", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "86f3ce81dd2b4b0aa2c3016c989a943e4b1b643d", "subject": "netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64554", "commit_url": "https://git.kernel.org/stable/c/86f3ce81dd2b4b0aa2c3016c989a943e4b1b643d" }, { "cve": "CVE-2026-64555", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "ff1022c3de46753eb7eba2f6efd990569e66ff95", "subject": "KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64555", "commit_url": "https://git.kernel.org/stable/c/ff1022c3de46753eb7eba2f6efd990569e66ff95" }, { "cve": "CVE-2026-64556", "author_name": "Taeyang Lee", "author_email": "0wn@theori.io", "fix_sha": "037a3c43edfb597665dd34457cd22b14692f2ba3", "subject": "perf/core: Detach event groups during remove_on_exec", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64556", "commit_url": "https://git.kernel.org/stable/c/037a3c43edfb597665dd34457cd22b14692f2ba3" }, { "cve": "CVE-2026-64557", "author_name": "Siwei Zhang", "author_email": "oss@fourdim.xyz", "fix_sha": "6fef032af0092ed5ccb767239a9ac1bc38c08a40", "subject": "Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64557", "commit_url": "https://git.kernel.org/stable/c/6fef032af0092ed5ccb767239a9ac1bc38c08a40" }, { "cve": "CVE-2026-64558", "author_name": "Holger Dengler", "author_email": "dengler@linux.ibm.com", "fix_sha": "1ac287e2af9a9112fe271427ef45eceb26bce8b4", "subject": "s390/pkey: Check length in pkey_pckmo handler implementation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64558", "commit_url": "https://git.kernel.org/stable/c/1ac287e2af9a9112fe271427ef45eceb26bce8b4" }, { "cve": "CVE-2026-64559", "author_name": "Holger Dengler", "author_email": "dengler@linux.ibm.com", "fix_sha": "b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970", "subject": "s390/pkey: Check length in PKEY_VERIFYPROTK ioctl", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64559", "commit_url": "https://git.kernel.org/stable/c/b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970" }, { "cve": "CVE-2026-64560", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "920f893f735e92ba3a1cd9256899a186b161928d", "subject": "posix-cpu-timers: Prevent UAF caused by non-leader exec() race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64560", "commit_url": "https://git.kernel.org/stable/c/920f893f735e92ba3a1cd9256899a186b161928d" }, { "cve": "CVE-2026-64561", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "2abd5287f08319fa35764566b15c6e22cb1068db", "subject": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64561", "commit_url": "https://git.kernel.org/stable/c/2abd5287f08319fa35764566b15c6e22cb1068db" }, { "cve": "CVE-2026-64562", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "622ebfac01ba4f9c0060cebd41257fe46fc4a0b3", "subject": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64562", "commit_url": "https://git.kernel.org/stable/c/622ebfac01ba4f9c0060cebd41257fe46fc4a0b3" }, { "cve": "CVE-2026-64563", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "8173f7e2ce67e6ca1d4763f3da14e5b01ce77456", "subject": "rhashtable: clear stale iter->p on table restart", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64563", "commit_url": "https://git.kernel.org/stable/c/8173f7e2ce67e6ca1d4763f3da14e5b01ce77456" }, { "cve": "CVE-2026-64564", "author_name": "Jun Yang", "author_email": "junvyyang@tencent.com", "fix_sha": "9b2854f86f0b56e9027d68e7a3fc909d1a9b566f", "subject": "sctp: don't free the ASCONF's own transport in DEL-IP processing", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64564", "commit_url": "https://git.kernel.org/stable/c/9b2854f86f0b56e9027d68e7a3fc909d1a9b566f" }, { "cve": "CVE-2026-64565", "author_name": "Seungjin Bae", "author_email": "eeodqql09@gmail.com", "fix_sha": "875115b82c295277b81b6dfee7debc725f44e854", "subject": "Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64565", "commit_url": "https://git.kernel.org/stable/c/875115b82c295277b81b6dfee7debc725f44e854" }, { "cve": "CVE-2026-64566", "author_name": "Chen YanJun", "author_email": "moomichen@tencent.com", "fix_sha": "430ea57d6daf765e88f90046afbfd1e071cb7200", "subject": "xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64566", "commit_url": "https://git.kernel.org/stable/c/430ea57d6daf765e88f90046afbfd1e071cb7200" }, { "cve": "CVE-2026-64567", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "a2d8d5647ed854e38f941741aea45b9eb15a6350", "subject": "btrfs: reject free space cache with more entries than pages", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64567", "commit_url": "https://git.kernel.org/stable/c/a2d8d5647ed854e38f941741aea45b9eb15a6350" }, { "cve": "CVE-2026-64568", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "1d067abcd37062426c59ec73dbc4e87a63f33fea", "subject": "wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64568", "commit_url": "https://git.kernel.org/stable/c/1d067abcd37062426c59ec73dbc4e87a63f33fea" }, { "cve": "CVE-2026-64569", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "56d96fededd61192cd7cc8d2b0f36adfd59036c3", "subject": "mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64569", "commit_url": "https://git.kernel.org/stable/c/56d96fededd61192cd7cc8d2b0f36adfd59036c3" }, { "cve": "CVE-2026-64570", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "286e52a799fa158bdbd77da1426c4d93f9a6e7ad", "subject": "wifi: mac80211: fix fils_discovery double free on alloc failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64570", "commit_url": "https://git.kernel.org/stable/c/286e52a799fa158bdbd77da1426c4d93f9a6e7ad" }, { "cve": "CVE-2026-64571", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "ebd6d37fa94bee929e0b4c9ca19fdf9b1dcf6cea", "subject": "wifi: p54: validate RX frame length in p54_rx_eeprom_readback()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64571", "commit_url": "https://git.kernel.org/stable/c/ebd6d37fa94bee929e0b4c9ca19fdf9b1dcf6cea" }, { "cve": "CVE-2026-64572", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "f2f152e94a67bc746afaf05a1b2702c195553112", "subject": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64572", "commit_url": "https://git.kernel.org/stable/c/f2f152e94a67bc746afaf05a1b2702c195553112" }, { "cve": "CVE-2026-64573", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "c90164ca0f7036942ba088eb7ea8d3f6c2352020", "subject": "Bluetooth: qca: fix NVM tag length underflow in TLV parser", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64573", "commit_url": "https://git.kernel.org/stable/c/c90164ca0f7036942ba088eb7ea8d3f6c2352020" }, { "cve": "CVE-2026-64574", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "952c02b33f56207a160421bcd61e7ac53c9c59ae", "subject": "wifi: mac80211: tear down new links on vif update error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64574", "commit_url": "https://git.kernel.org/stable/c/952c02b33f56207a160421bcd61e7ac53c9c59ae" }, { "cve": "CVE-2026-64575", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "980a813452754f8001704744e92f7aa697c53dd3", "subject": "bpf: tcp: fix double sock release on batch realloc", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64575", "commit_url": "https://git.kernel.org/stable/c/980a813452754f8001704744e92f7aa697c53dd3" }, { "cve": "CVE-2026-64576", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "6347c5314cee49f364aaf2e40ff15415a57a116e", "subject": "nexthop: initialize extack in nh_res_bucket_migrate()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64576", "commit_url": "https://git.kernel.org/stable/c/6347c5314cee49f364aaf2e40ff15415a57a116e" }, { "cve": "CVE-2026-64577", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "cd170f051dba9ac146fabcd1b91726487c0cb9fa", "subject": "gtp: check skb_pull_data() return in gtp1u_send_echo_resp()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64577", "commit_url": "https://git.kernel.org/stable/c/cd170f051dba9ac146fabcd1b91726487c0cb9fa" }, { "cve": "CVE-2026-64578", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "15b38176fd1530372905c602fde51fe89ec8c877", "subject": "ksmbd: validate compound request size before reading StructureSize2", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64578", "commit_url": "https://git.kernel.org/stable/c/15b38176fd1530372905c602fde51fe89ec8c877" }, { "cve": "CVE-2026-64579", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "f38f8cce2f7e79775b3db7e8a5eacda04ac908e4", "subject": "xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64579", "commit_url": "https://git.kernel.org/stable/c/f38f8cce2f7e79775b3db7e8a5eacda04ac908e4" }, { "cve": "CVE-2026-64580", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "136992de9bb91871084ae52d172610541c76e4d2", "subject": "xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64580", "commit_url": "https://git.kernel.org/stable/c/136992de9bb91871084ae52d172610541c76e4d2" }, { "cve": "CVE-2026-64581", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "c283e9ada7fcb7dd4b10592623086b2e6d2f9925", "subject": "xfrm: fix sk_dst_cache double-free in xfrm_user_policy()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64581", "commit_url": "https://git.kernel.org/stable/c/c283e9ada7fcb7dd4b10592623086b2e6d2f9925" }, { "cve": "CVE-2026-64582", "author_name": "Zhu Yanjun", "author_email": "yanjun.zhu@linux.dev", "fix_sha": "35744ab3d03c5fca8c1752f53fc8fc674e14c561", "subject": "RDMA/rxe: Fix a use-after-free problem in rxe_mmap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64582", "commit_url": "https://git.kernel.org/stable/c/35744ab3d03c5fca8c1752f53fc8fc674e14c561" }, { "cve": "CVE-2026-64583", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "0583f2fbf8f86ae3a0ce054f96783dd83e65d9bb", "subject": "usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64583", "commit_url": "https://git.kernel.org/stable/c/0583f2fbf8f86ae3a0ce054f96783dd83e65d9bb" }, { "cve": "CVE-2026-64584", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "5650c18d93a1db7e27cb5a40b394747eb4686d5b", "subject": "usb: gadget: f_midi: cancel pending IN work before freeing the midi object", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64584", "commit_url": "https://git.kernel.org/stable/c/5650c18d93a1db7e27cb5a40b394747eb4686d5b" }, { "cve": "CVE-2026-64585", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "c43122fef328a70045fe7621c06de6b2b8e19264", "subject": "can: esd_usb: kill anchored URBs before freeing netdevs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64585", "commit_url": "https://git.kernel.org/stable/c/c43122fef328a70045fe7621c06de6b2b8e19264" }, { "cve": "CVE-2026-64586", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "43b25879f004c98defa2776bedc6ca4763c51945", "subject": "wifi: brcmfmac: drain bus_reset work on device removal", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64586", "commit_url": "https://git.kernel.org/stable/c/43b25879f004c98defa2776bedc6ca4763c51945" }, { "cve": "CVE-2026-64587", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "2503d08f8a2de618e5c3a8183b250ff4a2e2d52c", "subject": "net: ethernet: arc: emac: quiesce interrupts before requesting IRQ", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64587", "commit_url": "https://git.kernel.org/stable/c/2503d08f8a2de618e5c3a8183b250ff4a2e2d52c" }, { "cve": "CVE-2026-64588", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "46725a0056c884cf58a6897f222892807327d82d", "subject": "fuse-uring: fix data races on ring->ready", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64588", "commit_url": "https://git.kernel.org/stable/c/46725a0056c884cf58a6897f222892807327d82d" }, { "cve": "CVE-2026-64589", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "2295d2bb101faa663fbc45fadbb3fec45f107441", "subject": "i2c: core: fix NULL-deref on adapter registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64589", "commit_url": "https://git.kernel.org/stable/c/2295d2bb101faa663fbc45fadbb3fec45f107441" }, { "cve": "CVE-2026-64590", "author_name": "Mikhail Gavrilov", "author_email": "mikhail.v.gavrilov@gmail.com", "fix_sha": "504e2b4ab97a51d56d966cd36d0997ad30b65b2d", "subject": "dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64590", "commit_url": "https://git.kernel.org/stable/c/504e2b4ab97a51d56d966cd36d0997ad30b65b2d" }, { "cve": "CVE-2026-64591", "author_name": "Lu Baolu", "author_email": "baolu.lu@linux.intel.com", "fix_sha": "534b5f98ab7319d8004bbc7dab6481462243e883", "subject": "iommu/vt-d: Avoid WARNING in sva unbind path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64591", "commit_url": "https://git.kernel.org/stable/c/534b5f98ab7319d8004bbc7dab6481462243e883" }, { "cve": "CVE-2026-64592", "author_name": "Vivian Wang", "author_email": "wangruikang@iscas.ac.cn", "fix_sha": "1b2c6b56a9fa0dcbef461039937de22b1cbecc7d", "subject": "riscv: mm: Unconditionally sfence.vma for spurious fault", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64592", "commit_url": "https://git.kernel.org/stable/c/1b2c6b56a9fa0dcbef461039937de22b1cbecc7d" }, { "cve": "CVE-2026-64593", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "1b1937eb08f51319bf71575484cde2b8c517aedc", "subject": "btrfs: do not trim a device which is not writeable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64593", "commit_url": "https://git.kernel.org/stable/c/1b1937eb08f51319bf71575484cde2b8c517aedc" }, { "cve": "CVE-2026-64594", "author_name": "Tyler Baker", "author_email": "tyler.baker@oss.qualcomm.com", "fix_sha": "3137b243c93982fe3460335e12f9247739766e10", "subject": "usb: gadget: f_fs: initialize reset_work at allocation time", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64594", "commit_url": "https://git.kernel.org/stable/c/3137b243c93982fe3460335e12f9247739766e10" }, { "cve": "CVE-2026-64595", "author_name": "Manish Khadka", "author_email": "maskmemanish@gmail.com", "fix_sha": "73fde0cbff7d9d618591774a12c23434232752c1", "subject": "HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64595", "commit_url": "https://git.kernel.org/stable/c/73fde0cbff7d9d618591774a12c23434232752c1" }, { "cve": "CVE-2026-64596", "author_name": "John Hubbard", "author_email": "jhubbard@nvidia.com", "fix_sha": "6de2aeffabaafaeda819e60ec8d04f199711e11a", "subject": "libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64596", "commit_url": "https://git.kernel.org/stable/c/6de2aeffabaafaeda819e60ec8d04f199711e11a" }, { "cve": "CVE-2026-64597", "author_name": "Henrique Carvalho", "author_email": "henrique.carvalho@suse.com", "fix_sha": "f96e1cdcb63ed3321142ff2fcdf784e32cda8fee", "subject": "smb: client: fix double-free in SMB2_close() replay", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64597", "commit_url": "https://git.kernel.org/stable/c/f96e1cdcb63ed3321142ff2fcdf784e32cda8fee" }, { "cve": "CVE-2026-64598", "author_name": "Dan Carpenter", "author_email": "error27@gmail.com", "fix_sha": "61f28012e5650c619223decdb7970e0d3162e949", "subject": "smb/client: Fix error code in smb2_aead_req_alloc()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64598", "commit_url": "https://git.kernel.org/stable/c/61f28012e5650c619223decdb7970e0d3162e949" }, { "cve": "CVE-2026-64599", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "6d827ade51a24e18d81afb9f32756d339520a14c", "subject": "crypto: amlogic - avoid double cleanup in meson_crypto_probe()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64599", "commit_url": "https://git.kernel.org/stable/c/6d827ade51a24e18d81afb9f32756d339520a14c" }, { "cve": "CVE-2026-64600", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "2f4acd0fcd862e22eab45690ec2c08c80b6ef2e7", "subject": "xfs: resample the data fork mapping after cycling ILOCK", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64600", "commit_url": "https://git.kernel.org/stable/c/2f4acd0fcd862e22eab45690ec2c08c80b6ef2e7" }, { "cve": "CVE-2026-64601", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "5cff1529a2f9b3461a7f5a6e36a86682fc290534", "subject": "ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64601", "commit_url": "https://git.kernel.org/stable/c/5cff1529a2f9b3461a7f5a6e36a86682fc290534" }, { "cve": "CVE-2026-64602", "author_name": "Maxwell Doose", "author_email": "m32285159@gmail.com", "fix_sha": "3ee2128b6f0eb0be7b6cb8f6e0f1f113a65201a0", "subject": "iio: adc: spear: Initialize completion before requesting IRQ", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64602", "commit_url": "https://git.kernel.org/stable/c/3ee2128b6f0eb0be7b6cb8f6e0f1f113a65201a0" }, { "cve": "CVE-2026-64603", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "c085d82613d5618814b84406c8b2d64f1bc305e7", "subject": "platform/x86: intel-hid: Protect ACPI notify handler against recursion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64603", "commit_url": "https://git.kernel.org/stable/c/c085d82613d5618814b84406c8b2d64f1bc305e7" }, { "cve": "CVE-2026-64604", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "7ef78d71ca713d8c00f7c34ddcf276c808143f77", "subject": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64604", "commit_url": "https://git.kernel.org/stable/c/7ef78d71ca713d8c00f7c34ddcf276c808143f77" }, { "cve": "CVE-2026-68081", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "2f2312c422fd2695da772cecb30c69994b795964", "subject": "KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68081", "commit_url": "https://git.kernel.org/stable/c/2f2312c422fd2695da772cecb30c69994b795964" }, { "cve": "CVE-2026-68082", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "a109a556115271ca7896dcda7b4b7e45e156c227", "subject": "libceph: fix two unsafe bare decodes in decode_lockers()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68082", "commit_url": "https://git.kernel.org/stable/c/a109a556115271ca7896dcda7b4b7e45e156c227" }, { "cve": "CVE-2026-68083", "author_name": "Davide Ornaghi", "author_email": "d.ornaghi97@gmail.com", "fix_sha": "1c8951963d8ed357f70f59e0ad4ddce2199d2016", "subject": "ksmbd: fix path resolution in ksmbd_vfs_kern_path_create", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68083", "commit_url": "https://git.kernel.org/stable/c/1c8951963d8ed357f70f59e0ad4ddce2199d2016" }, { "cve": "CVE-2026-68084", "author_name": "Hao-Qun Huang", "author_email": "alvinhuang0603@gmail.com", "fix_sha": "151edde741f8bc7f2931c5f44ab376d32b0c8beb", "subject": "staging: vme_user: fix location monitor leak in tsi148 bridge", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68084", "commit_url": "https://git.kernel.org/stable/c/151edde741f8bc7f2931c5f44ab376d32b0c8beb" }, { "cve": "CVE-2026-68085", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "1b0d946d6f08bd39211385bc703a440911b41e46", "subject": "Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68085", "commit_url": "https://git.kernel.org/stable/c/1b0d946d6f08bd39211385bc703a440911b41e46" }, { "cve": "CVE-2026-68086", "author_name": "Pedro Falcato", "author_email": "pfalcato@suse.de", "fix_sha": "2dfe9f5c91d0963058f8a5e46e1c2a908382cc46", "subject": "mm/khugepaged: write all dirty file folios when collapsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68086", "commit_url": "https://git.kernel.org/stable/c/2dfe9f5c91d0963058f8a5e46e1c2a908382cc46" }, { "cve": "CVE-2026-68087", "author_name": "Jinmo Yang", "author_email": "jinmo44.yang@gmail.com", "fix_sha": "55f1ad573e34abf9a0443c34bc5a63d74edba7d7", "subject": "HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68087", "commit_url": "https://git.kernel.org/stable/c/55f1ad573e34abf9a0443c34bc5a63d74edba7d7" }, { "cve": "CVE-2026-68088", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "95f90eea070837f7c72207d5520f805bdefc3bc5", "subject": "usb: gadget: function: rndis: add length check to response query", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68088", "commit_url": "https://git.kernel.org/stable/c/95f90eea070837f7c72207d5520f805bdefc3bc5" }, { "cve": "CVE-2026-68089", "author_name": "Dan Carpenter", "author_email": "error27@gmail.com", "fix_sha": "ab92ed206d41fd171ebd37bc46360d9f2140d043", "subject": "iio: core: fix uninitialized data in debugfs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68089", "commit_url": "https://git.kernel.org/stable/c/ab92ed206d41fd171ebd37bc46360d9f2140d043" }, { "cve": "CVE-2026-68090", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "b81dde13cc163450dcb402dcc915ef13ba241e01", "subject": "debugobjects: Plug race against a concurrent OOM disable", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68090", "commit_url": "https://git.kernel.org/stable/c/b81dde13cc163450dcb402dcc915ef13ba241e01" }, { "cve": "CVE-2026-68091", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "ec2612b8ad9e642596db011dd8b6568ef1edeaa1", "subject": "HID: wacom: stop hardware after post-start probe failures", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68091", "commit_url": "https://git.kernel.org/stable/c/ec2612b8ad9e642596db011dd8b6568ef1edeaa1" }, { "cve": "CVE-2026-68092", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "f24df84cbe05e4471c04ac4b921fc0340bbc7752", "subject": "time/jiffies: Register jiffies clocksource before usage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68092", "commit_url": "https://git.kernel.org/stable/c/f24df84cbe05e4471c04ac4b921fc0340bbc7752" }, { "cve": "CVE-2026-68093", "author_name": "Nikunj A Dadhania", "author_email": "nikunj@amd.com", "fix_sha": "25f744ffa0c8e799e06250ce2e618367b166b0d4", "subject": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68093", "commit_url": "https://git.kernel.org/stable/c/25f744ffa0c8e799e06250ce2e618367b166b0d4" }, { "cve": "CVE-2026-68094", "author_name": "Andrea Righi", "author_email": "arighi@nvidia.com", "fix_sha": "18d62044cda7a2b40f59d910659c0b0d6accad37", "subject": "sched_ext: Preserve rq tracking across local DSQ dispatch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68094", "commit_url": "https://git.kernel.org/stable/c/18d62044cda7a2b40f59d910659c0b0d6accad37" }, { "cve": "CVE-2026-68095", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "952b5d36f6a298f57c52a59e72076c69386a8aaf", "subject": "fuse-uring: fix race between registration and connection abortion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68095", "commit_url": "https://git.kernel.org/stable/c/952b5d36f6a298f57c52a59e72076c69386a8aaf" }, { "cve": "CVE-2026-68096", "author_name": "Ricardo Robaina", "author_email": "rrobaina@redhat.com", "fix_sha": "81905b5acbe77284734438df3fbec1158e6429a3", "subject": "audit: fix recursive locking deadlock in audit_dupe_exe()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68096", "commit_url": "https://git.kernel.org/stable/c/81905b5acbe77284734438df3fbec1158e6429a3" }, { "cve": "CVE-2026-68097", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "5152c6d49e3fd4e9f2e857c57527aead752f1f87", "subject": "ksmbd: validate ACE size against SID sub-authorities", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68097", "commit_url": "https://git.kernel.org/stable/c/5152c6d49e3fd4e9f2e857c57527aead752f1f87" }, { "cve": "CVE-2026-68098", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "58d97fcd0bf1aee694e244cc28635b9df95b543b", "subject": "ksmbd: bound DACL dedup walk to copied ACEs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68098", "commit_url": "https://git.kernel.org/stable/c/58d97fcd0bf1aee694e244cc28635b9df95b543b" }, { "cve": "CVE-2026-68099", "author_name": "Wentao Guan", "author_email": "guanwentao@uniontech.com", "fix_sha": "bbf0a8e931204ecdab494a88d43b0a24a04285c5", "subject": "ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68099", "commit_url": "https://git.kernel.org/stable/c/bbf0a8e931204ecdab494a88d43b0a24a04285c5" }, { "cve": "CVE-2026-68100", "author_name": "Haofeng Li", "author_email": "lihaofeng@kylinos.cn", "fix_sha": "47f0b34f6bc98ed85bfdc293e8f3e432ec24958d", "subject": "ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68100", "commit_url": "https://git.kernel.org/stable/c/47f0b34f6bc98ed85bfdc293e8f3e432ec24958d" }, { "cve": "CVE-2026-68102", "author_name": "Asad Kamal", "author_email": "asad.kamal@amd.com", "fix_sha": "ea772a440d56b285f4d491affac50ecd41f6b402", "subject": "drm/amdgpu: fix aperture mapping leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68102", "commit_url": "https://git.kernel.org/stable/c/ea772a440d56b285f4d491affac50ecd41f6b402" }, { "cve": "CVE-2026-68103", "author_name": "Zhu Lingshan", "author_email": "lingshan.zhu@amd.com", "fix_sha": "a609b6278bf3cde17eeee6620091465521e4b02c", "subject": "drm/amdgpu: reject mapping a reserved doorbell to a new queue", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68103", "commit_url": "https://git.kernel.org/stable/c/a609b6278bf3cde17eeee6620091465521e4b02c" }, { "cve": "CVE-2026-68104", "author_name": "Ce Sun", "author_email": "cesun102@amd.com", "fix_sha": "28c9b3c5dc35cc790d11e26ca3fc6e068be63998", "subject": "drm/amdgpu: invoke pm_genpd_remove() before freeing genpd", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68104", "commit_url": "https://git.kernel.org/stable/c/28c9b3c5dc35cc790d11e26ca3fc6e068be63998" }, { "cve": "CVE-2026-68105", "author_name": "Harish Kasiviswanathan", "author_email": "harish.kasiviswanathan@amd.com", "fix_sha": "a279bd143b3c184358b658e43a057e31ee8c4de5", "subject": "drm/amdgpu: Fix kernel panic during driver load failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68105", "commit_url": "https://git.kernel.org/stable/c/a279bd143b3c184358b658e43a057e31ee8c4de5" }, { "cve": "CVE-2026-68106", "author_name": "Boyuan Zhang", "author_email": "boyuan.zhang@amd.com", "fix_sha": "0c01c811be47e6b146552dd59bfedbea8f09b8f4", "subject": "drm/amdgpu: fix division by zero with invalid uvd dimensions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68106", "commit_url": "https://git.kernel.org/stable/c/0c01c811be47e6b146552dd59bfedbea8f09b8f4" }, { "cve": "CVE-2026-68107", "author_name": "Boyuan Zhang", "author_email": "boyuan.zhang@amd.com", "fix_sha": "3b4082fabc67c9780b06eb959e59dd92fa79c0f0", "subject": "drm/amdgpu/vcn4: avoid rereading IB param length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68107", "commit_url": "https://git.kernel.org/stable/c/3b4082fabc67c9780b06eb959e59dd92fa79c0f0" }, { "cve": "CVE-2026-68108", "author_name": "Boyuan Zhang", "author_email": "boyuan.zhang@amd.com", "fix_sha": "186bfdc4e26d019b2e7570cb121964a1d89b2e5b", "subject": "drm/amdgpu/vce: fix integer overflow in image size", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68108", "commit_url": "https://git.kernel.org/stable/c/186bfdc4e26d019b2e7570cb121964a1d89b2e5b" }, { "cve": "CVE-2026-68109", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "767648c18d7872bbf54481ba846e055f7e1c0213", "subject": "drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68109", "commit_url": "https://git.kernel.org/stable/c/767648c18d7872bbf54481ba846e055f7e1c0213" }, { "cve": "CVE-2026-68110", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "40cdbe9fa424cc6264a7aed93a04bd7d69109d9e", "subject": "drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68110", "commit_url": "https://git.kernel.org/stable/c/40cdbe9fa424cc6264a7aed93a04bd7d69109d9e" }, { "cve": "CVE-2026-68111", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "6302be10b521f5106ce01eb5a724b9e7945a5061", "subject": "drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68111", "commit_url": "https://git.kernel.org/stable/c/6302be10b521f5106ce01eb5a724b9e7945a5061" }, { "cve": "CVE-2026-68112", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "00f4050f7c367d7bdce347ca279ce467c434cf15", "subject": "drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68112", "commit_url": "https://git.kernel.org/stable/c/00f4050f7c367d7bdce347ca279ce467c434cf15" }, { "cve": "CVE-2026-68113", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "cd3b3efa1ced05528d9128755338baa62a6b562d", "subject": "drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68113", "commit_url": "https://git.kernel.org/stable/c/cd3b3efa1ced05528d9128755338baa62a6b562d" }, { "cve": "CVE-2026-68114", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "6560e6bd76127844e39f09fa591c2791dc7932e8", "subject": "drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68114", "commit_url": "https://git.kernel.org/stable/c/6560e6bd76127844e39f09fa591c2791dc7932e8" }, { "cve": "CVE-2026-68115", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "d06c4173a7c38c7a39e98859f839ce714c7af2c9", "subject": "drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68115", "commit_url": "https://git.kernel.org/stable/c/d06c4173a7c38c7a39e98859f839ce714c7af2c9" }, { "cve": "CVE-2026-68116", "author_name": "James Raphael Tiovalen", "author_email": "jamestiotio@gmail.com", "fix_sha": "dcd9b465965422b9654f6026e8a2fa8984f74c3c", "subject": "vxlan: mdb: Fix source list corruption on a failed replace", "cvss_score": 7.9, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68116", "commit_url": "https://git.kernel.org/stable/c/dcd9b465965422b9654f6026e8a2fa8984f74c3c" }, { "cve": "CVE-2026-68117", "author_name": "Daehyeon Ko", "author_email": "4ncienth@gmail.com", "fix_sha": "ba0533fc163f905fe817cfabdf8ed4058da44800", "subject": "tipc: clear sock->sk on the failed-insert path in tipc_sk_create()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68117", "commit_url": "https://git.kernel.org/stable/c/ba0533fc163f905fe817cfabdf8ed4058da44800" }, { "cve": "CVE-2026-68118", "author_name": "Yuxiang Yang", "author_email": "yangyx22@mails.tsinghua.edu.cn", "fix_sha": "a28c4fcbf774e23b4779cae468e3497a5ad1f4a1", "subject": "tcp: challenge ACK for non-exact RST in SYN-RECEIVED", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68118", "commit_url": "https://git.kernel.org/stable/c/a28c4fcbf774e23b4779cae468e3497a5ad1f4a1" }, { "cve": "CVE-2026-68119", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "e1a9d3cc11829c5414a75eb39c704f461936eb24", "subject": "tcp: initialize standalone TCP-AO response padding", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68119", "commit_url": "https://git.kernel.org/stable/c/e1a9d3cc11829c5414a75eb39c704f461936eb24" }, { "cve": "CVE-2026-68120", "author_name": "Justin Lai", "author_email": "justinlai0215@realtek.com", "fix_sha": "1c50efa1faf3a1a96e100b07ec7a2f3164d90bee", "subject": "rtase: Workaround for TX hang caused by hardware packet parsing", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68120", "commit_url": "https://git.kernel.org/stable/c/1c50efa1faf3a1a96e100b07ec7a2f3164d90bee" }, { "cve": "CVE-2026-68121", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "e9c238f6fe42fb1b4dba3a578277de32cb487937", "subject": "pppoe: reload header pointer after dev_hard_header()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68121", "commit_url": "https://git.kernel.org/stable/c/e9c238f6fe42fb1b4dba3a578277de32cb487937" }, { "cve": "CVE-2026-68122", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "63bbe18fc03062f483c627838a566a707b62da79", "subject": "ovpn: fix peer refcount leak in TCP error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68122", "commit_url": "https://git.kernel.org/stable/c/63bbe18fc03062f483c627838a566a707b62da79" }, { "cve": "CVE-2026-68123", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "4032f8ed10fcb84d41c508dfb04be96589f78dfe", "subject": "openvswitch: fix GSO userspace truncation underflow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68123", "commit_url": "https://git.kernel.org/stable/c/4032f8ed10fcb84d41c508dfb04be96589f78dfe" }, { "cve": "CVE-2026-68124", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "793b9b729f1e8de57be8c8daf1a9838be96cabed", "subject": "mctp: serial: handle zero-length frames to prevent rx buffer overflow", "cvss_score": 9.6, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68124", "commit_url": "https://git.kernel.org/stable/c/793b9b729f1e8de57be8c8daf1a9838be96cabed" }, { "cve": "CVE-2026-68125", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "fd3a3f28ed60c6af4b2a39933b151d6b27842c3b", "subject": "mac802154: llsec: reject frames shorter than the authentication tag", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68125", "commit_url": "https://git.kernel.org/stable/c/fd3a3f28ed60c6af4b2a39933b151d6b27842c3b" }, { "cve": "CVE-2026-68126", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "234e5e898b713bc0b3a631b6f002897f43d046c8", "subject": "mac802154: hold an interface reference across the scan worker", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68126", "commit_url": "https://git.kernel.org/stable/c/234e5e898b713bc0b3a631b6f002897f43d046c8" }, { "cve": "CVE-2026-68127", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "92d3817649df2b0b6a008a686c8275c88d7ef594", "subject": "ila: reload IPv6 header after pskb_may_pull in checksum adjust", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68127", "commit_url": "https://git.kernel.org/stable/c/92d3817649df2b0b6a008a686c8275c88d7ef594" }, { "cve": "CVE-2026-68128", "author_name": "Aleksandr Loktionov", "author_email": "aleksandr.loktionov@intel.com", "fix_sha": "59abb87159c53605c063f6e2ceb215b5eba43ee6", "subject": "ice: reject out-of-range ptype in ice_parser_profile_init", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68128", "commit_url": "https://git.kernel.org/stable/c/59abb87159c53605c063f6e2ceb215b5eba43ee6" }, { "cve": "CVE-2026-68129", "author_name": "Eddie Phillips", "author_email": "eddiephillips@google.com", "fix_sha": "b65352a1bac64442ad95e64f385b40ccb9f1b0db", "subject": "gve: fix Rx queue stall on alloc failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68129", "commit_url": "https://git.kernel.org/stable/c/b65352a1bac64442ad95e64f385b40ccb9f1b0db" }, { "cve": "CVE-2026-68130", "author_name": "James Montgomery", "author_email": "james_montgomery@disroot.org", "fix_sha": "c74801ee524f477c174a1899782b6c3b6918d407", "subject": "ksmbd: defer destroy_previous_session() until after NTLM authentication", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68130", "commit_url": "https://git.kernel.org/stable/c/c74801ee524f477c174a1899782b6c3b6918d407" }, { "cve": "CVE-2026-68131", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "a6c4250b81bd30beae94e1b7a4b26fa1193ad2e4", "subject": "rbd: Reset positive result codes to zero in object map update path", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68131", "commit_url": "https://git.kernel.org/stable/c/a6c4250b81bd30beae94e1b7a4b26fa1193ad2e4" }, { "cve": "CVE-2026-68132", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "749d7aa0377aae32af8c0a4ad43371e7bf830ab5", "subject": "super: fix emergency thaw deadlock on frozen block devices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68132", "commit_url": "https://git.kernel.org/stable/c/749d7aa0377aae32af8c0a4ad43371e7bf830ab5" }, { "cve": "CVE-2026-68133", "author_name": "Paul Greenwalt", "author_email": "paul.greenwalt@intel.com", "fix_sha": "f6a7e00b81e35ef1325234925f2fe1e53b466f92", "subject": "ice: fix PTP Call Trace during PTP release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68133", "commit_url": "https://git.kernel.org/stable/c/f6a7e00b81e35ef1325234925f2fe1e53b466f92" }, { "cve": "CVE-2026-68134", "author_name": "Sven Schnelle", "author_email": "svens@linux.ibm.com", "fix_sha": "e78f1ac37afcb16cb6fef8a2c92591eab6558956", "subject": "ptp: ptp_s390: Add missing facility check", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68134", "commit_url": "https://git.kernel.org/stable/c/e78f1ac37afcb16cb6fef8a2c92591eab6558956" }, { "cve": "CVE-2026-68135", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "14fa65d10f5696b063a7d8d26e8291ea84a2c6ed", "subject": "net: hip04: fix RX buffer leak on build_skb failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68135", "commit_url": "https://git.kernel.org/stable/c/14fa65d10f5696b063a7d8d26e8291ea84a2c6ed" }, { "cve": "CVE-2026-68136", "author_name": "Shiming Cheng", "author_email": "shiming.cheng@mediatek.com", "fix_sha": "e751256486d0ded20f5a9f9863467f1dce65142f", "subject": "net: gro: fix double aggregation of flush-marked skbs", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68136", "commit_url": "https://git.kernel.org/stable/c/e751256486d0ded20f5a9f9863467f1dce65142f" }, { "cve": "CVE-2026-68137", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "5499e0602d2faafd42c580d25f615903c3fbe11b", "subject": "net/x25: fix use-after-free in x25_kill_by_neigh()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68137", "commit_url": "https://git.kernel.org/stable/c/5499e0602d2faafd42c580d25f615903c3fbe11b" }, { "cve": "CVE-2026-68138", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "f43ee0c0730d6191629b5ee1ceae27b1ebfdc047", "subject": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68138", "commit_url": "https://git.kernel.org/stable/c/f43ee0c0730d6191629b5ee1ceae27b1ebfdc047" }, { "cve": "CVE-2026-68139", "author_name": "Manjunath Patil", "author_email": "manjunath.b.patil@oracle.com", "fix_sha": "e32649b4bad90a6216d8e93cd7dd050af8ac9740", "subject": "net/mlx5e: Use sender devcom for MPV master-up", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68139", "commit_url": "https://git.kernel.org/stable/c/e32649b4bad90a6216d8e93cd7dd050af8ac9740" }, { "cve": "CVE-2026-68140", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "be7cc4656eb1f54029610e82d1f0fdd3f9b5ec0a", "subject": "net/iucv: fix use-after-free of a severed iucv_path", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68140", "commit_url": "https://git.kernel.org/stable/c/be7cc4656eb1f54029610e82d1f0fdd3f9b5ec0a" }, { "cve": "CVE-2026-68141", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "47a5116e56a6b6fe1e909f244e39cd0fc26ceee4", "subject": "net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68141", "commit_url": "https://git.kernel.org/stable/c/47a5116e56a6b6fe1e909f244e39cd0fc26ceee4" }, { "cve": "CVE-2026-68142", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "8efb8f8bbb353b8f2fdf4f37534c6d96c9f69e01", "subject": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68142", "commit_url": "https://git.kernel.org/stable/c/8efb8f8bbb353b8f2fdf4f37534c6d96c9f69e01" }, { "cve": "CVE-2026-68143", "author_name": "Sungmin Kang", "author_email": "726ksm@gmail.com", "fix_sha": "ee7f9bb9320add61f7b367d7e6cd55e3a3a4d65d", "subject": "net: slip: serialize receive against buffer reallocation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68143", "commit_url": "https://git.kernel.org/stable/c/ee7f9bb9320add61f7b367d7e6cd55e3a3a4d65d" }, { "cve": "CVE-2026-68144", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "0f71f852a96af9685858ce59fda34ecbf85c283d", "subject": "phonet: pep: fix use-after-free in pep_get_sb()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68144", "commit_url": "https://git.kernel.org/stable/c/0f71f852a96af9685858ce59fda34ecbf85c283d" }, { "cve": "CVE-2026-68145", "author_name": "Zhang Yi", "author_email": "yi.zhang@huawei.com", "fix_sha": "9c7d8f7c8994c790fca501dc45ce66e7356cbe05", "subject": "iomap: fix out-of-bounds bitmap_set() with zero-length range", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68145", "commit_url": "https://git.kernel.org/stable/c/9c7d8f7c8994c790fca501dc45ce66e7356cbe05" }, { "cve": "CVE-2026-68146", "author_name": "Tengda Wu", "author_email": "wutengda@huaweicloud.com", "fix_sha": "7720b63bcef3f54c7fe288774b720a227d54a306", "subject": "ftrace: Add global mutex to serialize trace_parser access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68146", "commit_url": "https://git.kernel.org/stable/c/7720b63bcef3f54c7fe288774b720a227d54a306" }, { "cve": "CVE-2026-68147", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "6fe4e4b8259e1330945b5f3c9476e08473b8e0e8", "subject": "fscrypt: Avoid dynamic allocation in fscrypt_get_devices()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68147", "commit_url": "https://git.kernel.org/stable/c/6fe4e4b8259e1330945b5f3c9476e08473b8e0e8" }, { "cve": "CVE-2026-68148", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "b5fa40226e71c17847b9ff2816c6ca4133d0d994", "subject": "fscrypt: Add missing superblock check in find_or_insert_direct_key()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68148", "commit_url": "https://git.kernel.org/stable/c/b5fa40226e71c17847b9ff2816c6ca4133d0d994" }, { "cve": "CVE-2026-68149", "author_name": "Amir Goldstein", "author_email": "amir73il@gmail.com", "fix_sha": "4b9a5458d02e214ef2b384124ca626e3e381d778", "subject": "fs: preserve ACL_DONT_CACHE state in forget_cached_acl()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68149", "commit_url": "https://git.kernel.org/stable/c/4b9a5458d02e214ef2b384124ca626e3e381d778" }, { "cve": "CVE-2026-68150", "author_name": "Chen Changcheng", "author_email": "chenchangcheng@kylinos.cn", "fix_sha": "503d67fbaec6fdeaba391cb497675071db9d16ea", "subject": "fs/super: fix emergency thaw double-unlock of s_umount", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68150", "commit_url": "https://git.kernel.org/stable/c/503d67fbaec6fdeaba391cb497675071db9d16ea" }, { "cve": "CVE-2026-68151", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "3349ef6a366a61d631f6a263d12cea240957719d", "subject": "binfmt_elf_fdpic: only honour the first PT_INTERP", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68151", "commit_url": "https://git.kernel.org/stable/c/3349ef6a366a61d631f6a263d12cea240957719d" }, { "cve": "CVE-2026-68152", "author_name": "Shihuang Liu", "author_email": "shlomojune6@gmail.com", "fix_sha": "ea20c44935d6142daecfa9b39d635033a7553e1b", "subject": "amt: fix use-after-free in AMT delayed works", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68152", "commit_url": "https://git.kernel.org/stable/c/ea20c44935d6142daecfa9b39d635033a7553e1b" }, { "cve": "CVE-2026-68153", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "e4c804726c4afce3ba648b982d564f6af2cfa328", "subject": "libceph: remove debugfs files before client teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68153", "commit_url": "https://git.kernel.org/stable/c/e4c804726c4afce3ba648b982d564f6af2cfa328" }, { "cve": "CVE-2026-68154", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "05f90284223381005d6bcddab3fda4a97f9c3401", "subject": "libceph: reject zero bucket types in crush_decode", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68154", "commit_url": "https://git.kernel.org/stable/c/05f90284223381005d6bcddab3fda4a97f9c3401" }, { "cve": "CVE-2026-68155", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "40480eee361ed9676b3f844d532ac28b47251634", "subject": "libceph: Reject monmaps advertising zero monitors", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68155", "commit_url": "https://git.kernel.org/stable/c/40480eee361ed9676b3f844d532ac28b47251634" }, { "cve": "CVE-2026-68156", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "937d61f86d377a3aa578adae7a3dfcecdddf9d89", "subject": "libceph: refresh auth->authorizer_buf{,_len} after authorizer update", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68156", "commit_url": "https://git.kernel.org/stable/c/937d61f86d377a3aa578adae7a3dfcecdddf9d89" }, { "cve": "CVE-2026-68157", "author_name": "Zhao Zhang", "author_email": "zzhan461@ucr.edu", "fix_sha": "bbeae12fda3384a90fbebc8a19ba9d33f85b5361", "subject": "libceph: guard missing CRUSH type name lookup", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68157", "commit_url": "https://git.kernel.org/stable/c/bbeae12fda3384a90fbebc8a19ba9d33f85b5361" }, { "cve": "CVE-2026-68158", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "98917a499ec7064c14fc56d180a4fd636fc2784c", "subject": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68158", "commit_url": "https://git.kernel.org/stable/c/98917a499ec7064c14fc56d180a4fd636fc2784c" }, { "cve": "CVE-2026-68159", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "9f00f9cf2be293efe899db67dc5272e3a9c62717", "subject": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68159", "commit_url": "https://git.kernel.org/stable/c/9f00f9cf2be293efe899db67dc5272e3a9c62717" }, { "cve": "CVE-2026-68160", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4dbc71bcaf9a30abf3920a4e2cc4ed33bba78c02", "subject": "ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68160", "commit_url": "https://git.kernel.org/stable/c/4dbc71bcaf9a30abf3920a4e2cc4ed33bba78c02" }, { "cve": "CVE-2026-68161", "author_name": "Zhiling Zou", "author_email": "roxy520tt@gmail.com", "fix_sha": "ffb2bd7ade36ec4da32c46a6eddbf4515316d08c", "subject": "sctp: close UDP tunnel sockets during netns teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68161", "commit_url": "https://git.kernel.org/stable/c/ffb2bd7ade36ec4da32c46a6eddbf4515316d08c" }, { "cve": "CVE-2026-68162", "author_name": "Zhiling Zou", "author_email": "roxy520tt@gmail.com", "fix_sha": "f8d5e7846025f4ab15a461235f8ebae9094a361a", "subject": "sctp: avoid auth_enable sysctl UAF during netns teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68162", "commit_url": "https://git.kernel.org/stable/c/f8d5e7846025f4ab15a461235f8ebae9094a361a" }, { "cve": "CVE-2026-68163", "author_name": "Wei Yang", "author_email": "richard.weiyang@gmail.com", "fix_sha": "f84ca9b1888d8fce7dfefe0e750fa971f8797486", "subject": "mm/page_vma_mapped: fix device-private PMD handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68163", "commit_url": "https://git.kernel.org/stable/c/f84ca9b1888d8fce7dfefe0e750fa971f8797486" }, { "cve": "CVE-2026-68164", "author_name": "SJ Park", "author_email": "sj@kernel.org", "fix_sha": "954157679ec34661c2e87e7eb796104a797c32db", "subject": "mm/damon/core: disallow overlapping input ranges for damon_set_regions()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68164", "commit_url": "https://git.kernel.org/stable/c/954157679ec34661c2e87e7eb796104a797c32db" }, { "cve": "CVE-2026-68165", "author_name": "SJ Park", "author_email": "sj@kernel.org", "fix_sha": "1292c0ecb1caefb8ca064a3639d5673991e8810c", "subject": "mm/damon/core: validate ranges in damon_set_regions()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68165", "commit_url": "https://git.kernel.org/stable/c/1292c0ecb1caefb8ca064a3639d5673991e8810c" }, { "cve": "CVE-2026-68166", "author_name": "Mike Rapoport (Microsoft)", "author_email": "rppt@kernel.org", "fix_sha": "3c58f641e813c3c71039f8fd4d4e2a3aab713288", "subject": "userfaultfd: prevent registration of special VMAs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68166", "commit_url": "https://git.kernel.org/stable/c/3c58f641e813c3c71039f8fd4d4e2a3aab713288" }, { "cve": "CVE-2026-68167", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "ae4316f332e03e628712e9dfb89f2b7d3c70c21a", "subject": "btrfs: do not try compression for data reloc inodes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68167", "commit_url": "https://git.kernel.org/stable/c/ae4316f332e03e628712e9dfb89f2b7d3c70c21a" }, { "cve": "CVE-2026-68168", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "62d9853aa4ce6e9797b6949804891be14b219752", "subject": "afs: Fix afs_edit_dir_remove() to get, not find, block 0", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68168", "commit_url": "https://git.kernel.org/stable/c/62d9853aa4ce6e9797b6949804891be14b219752" }, { "cve": "CVE-2026-68169", "author_name": "Geliang Tang", "author_email": "tanggeliang@kylinos.cn", "fix_sha": "9bc6d5e4ca9f3cbb41d43400b3a31cb0403796c9", "subject": "mptcp: pm: userspace: fix use-after-free in get_local_id", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68169", "commit_url": "https://git.kernel.org/stable/c/9bc6d5e4ca9f3cbb41d43400b3a31cb0403796c9" }, { "cve": "CVE-2026-68170", "author_name": "Kalpan Jani", "author_email": "kalpan.jani@mpiricsoftware.com", "fix_sha": "bd7aae448f6ee9d82599a4474664de1e6e91a535", "subject": "mptcp: fix stale skb->sk reference on subflow close", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68170", "commit_url": "https://git.kernel.org/stable/c/bd7aae448f6ee9d82599a4474664de1e6e91a535" }, { "cve": "CVE-2026-68172", "author_name": "Dev Jain", "author_email": "dev.jain@arm.com", "fix_sha": "f73a8edc2ccc6ec72c37d5c578e7592d2e1f9922", "subject": "arm64: make huge_ptep_get handled unaligned addresses", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68172", "commit_url": "https://git.kernel.org/stable/c/f73a8edc2ccc6ec72c37d5c578e7592d2e1f9922" }, { "cve": "CVE-2026-68173", "author_name": "Ming Lei", "author_email": "tom.leiming@gmail.com", "fix_sha": "432a9b2780c0a01caf547bd1fc2fcf28aeb8d173", "subject": "ublk: wait on ublk_dev_ready() instead of ub->completion", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68173", "commit_url": "https://git.kernel.org/stable/c/432a9b2780c0a01caf547bd1fc2fcf28aeb8d173" }, { "cve": "CVE-2026-68174", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "b4eb07bde606c2096b24252be589e735eff6d413", "subject": "tracing: Fix union collision of module and refcnt for dynamic events", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68174", "commit_url": "https://git.kernel.org/stable/c/b4eb07bde606c2096b24252be589e735eff6d413" }, { "cve": "CVE-2026-68175", "author_name": "deepakraog", "author_email": "gaikwad.dcg@gmail.com", "fix_sha": "c1d87e724ae55e781b7cc7ccafb34d9e668582b2", "subject": "tracing: Fix resource leak on mmiotrace trace_pipe close", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68175", "commit_url": "https://git.kernel.org/stable/c/c1d87e724ae55e781b7cc7ccafb34d9e668582b2" }, { "cve": "CVE-2026-68176", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "144f29e85702234b23d2a62abf723e6a17eb5427", "subject": "tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68176", "commit_url": "https://git.kernel.org/stable/c/144f29e85702234b23d2a62abf723e6a17eb5427" }, { "cve": "CVE-2026-68177", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "e091351b38818ef620d27f44f4bfd625f13afbff", "subject": "tracing: Delay module ref count for \"enable_event\" trigger", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68177", "commit_url": "https://git.kernel.org/stable/c/e091351b38818ef620d27f44f4bfd625f13afbff" }, { "cve": "CVE-2026-68178", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "3b231f1e9990f4c21220d0a69733ce2105891ff9", "subject": "misc: nsm: pin the module while the device is open", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68178", "commit_url": "https://git.kernel.org/stable/c/3b231f1e9990f4c21220d0a69733ce2105891ff9" }, { "cve": "CVE-2026-68179", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "ce1fed11d18e163baf7f875152a33bf80f625c1a", "subject": "misc: nsm: only unlock nsm_dev on post-lock error paths", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68179", "commit_url": "https://git.kernel.org/stable/c/ce1fed11d18e163baf7f875152a33bf80f625c1a" }, { "cve": "CVE-2026-68180", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "761b785a0cfbce43761227bc42a7f984f31f8921", "subject": "intel_th: fix MSC output device reference leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68180", "commit_url": "https://git.kernel.org/stable/c/761b785a0cfbce43761227bc42a7f984f31f8921" }, { "cve": "CVE-2026-68181", "author_name": "Alexander Usyskin", "author_email": "alexander.usyskin@intel.com", "fix_sha": "f112ea910e554d58b4b39a4492b7d302f0f4204f", "subject": "mei: bus: access mei_device under device_lock on cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68181", "commit_url": "https://git.kernel.org/stable/c/f112ea910e554d58b4b39a4492b7d302f0f4204f" }, { "cve": "CVE-2026-68182", "author_name": "Ian Abbott", "author_email": "abbotti@mev.co.uk", "fix_sha": "17221216ae8ce6a24e8a4e787382e3ebc81b88a8", "subject": "comedi: comedi_parport: deal with premature interrupt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68182", "commit_url": "https://git.kernel.org/stable/c/17221216ae8ce6a24e8a4e787382e3ebc81b88a8" }, { "cve": "CVE-2026-68183", "author_name": "Tze Yee Ng", "author_email": "tze.yee.ng@altera.com", "fix_sha": "9119ceb76e987c2ec2b549ea100e3268ce3a1c7c", "subject": "firmware: stratix10-svc: fix memory leaks and list corruption bugs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68183", "commit_url": "https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c" }, { "cve": "CVE-2026-68184", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "b27e195d4db8dea263050bdbeb11881b2999c9c6", "subject": "cdrom: fix stack out-of-bounds read in CDROMVOLCTRL", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68184", "commit_url": "https://git.kernel.org/stable/c/b27e195d4db8dea263050bdbeb11881b2999c9c6" }, { "cve": "CVE-2026-68185", "author_name": "Kanglong Wang", "author_email": "wangkanglong@loongson.cn", "fix_sha": "ea68d444a658783234a06f05414e41cf93a18fb2", "subject": "LoongArch: Move jump_label_init() before parse_early_param()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68185", "commit_url": "https://git.kernel.org/stable/c/ea68d444a658783234a06f05414e41cf93a18fb2" }, { "cve": "CVE-2026-68186", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "bbf5f639918dc011aaf60aab8480218758ee68c5", "subject": "binfmt_misc: set have_execfd only once the interpreter is opened", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68186", "commit_url": "https://git.kernel.org/stable/c/bbf5f639918dc011aaf60aab8480218758ee68c5" }, { "cve": "CVE-2026-68187", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "16cc4f5c1c4b9e45eca7f7deefa5410a292db599", "subject": "exec: fix unsigned loop counter wrap in transfer_args_to_stack()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68187", "commit_url": "https://git.kernel.org/stable/c/16cc4f5c1c4b9e45eca7f7deefa5410a292db599" }, { "cve": "CVE-2026-68188", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "c783399efc22d035443f1dfbf2a09bf9562aaa5e", "subject": "Bluetooth: RFCOMM: Fix session UAF in set_termios", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68188", "commit_url": "https://git.kernel.org/stable/c/c783399efc22d035443f1dfbf2a09bf9562aaa5e" }, { "cve": "CVE-2026-68189", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "e9027ffbf5a0f3c12ca8900822e884eae9f0821b", "subject": "Bluetooth: hci_sync: Protect UUID list traversal", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68189", "commit_url": "https://git.kernel.org/stable/c/e9027ffbf5a0f3c12ca8900822e884eae9f0821b" }, { "cve": "CVE-2026-68190", "author_name": "Moksh Panicker", "author_email": "mokshpanicker.7@gmail.com", "fix_sha": "0e95ff792ae0aa6fbad9455943e9e1e4062670e9", "subject": "staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68190", "commit_url": "https://git.kernel.org/stable/c/0e95ff792ae0aa6fbad9455943e9e1e4062670e9" }, { "cve": "CVE-2026-68191", "author_name": "Jose Ignacio Tornos Martinez", "author_email": "jtornosm@redhat.com", "fix_sha": "70231dcd782201579990ded73e0435d18bb524ca", "subject": "wifi: ath12k: fix NULL pointer dereference in rhash table destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68191", "commit_url": "https://git.kernel.org/stable/c/70231dcd782201579990ded73e0435d18bb524ca" }, { "cve": "CVE-2026-68192", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "538c51e9d124cf656f2dd0c0394a8545efc7102d", "subject": "wifi: brcmfmac: make release_scratchbuffers idempotent", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68192", "commit_url": "https://git.kernel.org/stable/c/538c51e9d124cf656f2dd0c0394a8545efc7102d" }, { "cve": "CVE-2026-68193", "author_name": "Devin Wittmayer", "author_email": "lucid_duck@justthetip.ca", "fix_sha": "feeff151c83e7f0ffcdedcad5343852d23d1f6e1", "subject": "wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68193", "commit_url": "https://git.kernel.org/stable/c/feeff151c83e7f0ffcdedcad5343852d23d1f6e1" }, { "cve": "CVE-2026-68194", "author_name": "Devin Wittmayer", "author_email": "lucid_duck@justthetip.ca", "fix_sha": "da4082e91acabc1498611ed8ccc53f0610baefc6", "subject": "wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68194", "commit_url": "https://git.kernel.org/stable/c/da4082e91acabc1498611ed8ccc53f0610baefc6" }, { "cve": "CVE-2026-68195", "author_name": "Devin Wittmayer", "author_email": "lucid_duck@justthetip.ca", "fix_sha": "39afc46c0243d10b7795e6e6cf4ae91f41732120", "subject": "wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68195", "commit_url": "https://git.kernel.org/stable/c/39afc46c0243d10b7795e6e6cf4ae91f41732120" }, { "cve": "CVE-2026-68196", "author_name": "Huihui Huang", "author_email": "hhhuang@smu.edu.sg", "fix_sha": "4c4c97b60a5e978121d9ee8cb0ab3916e5d6a8de", "subject": "wifi: wilc1000: validate assoc response length before subtracting header", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68196", "commit_url": "https://git.kernel.org/stable/c/4c4c97b60a5e978121d9ee8cb0ab3916e5d6a8de" }, { "cve": "CVE-2026-68197", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "c3d68e294cbb6a4090bb219d3dcaca85a011809b", "subject": "wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68197", "commit_url": "https://git.kernel.org/stable/c/c3d68e294cbb6a4090bb219d3dcaca85a011809b" }, { "cve": "CVE-2026-68198", "author_name": "Daniel Hodges", "author_email": "git@danielhodges.dev", "fix_sha": "ba7debb4dd6427386862220e8335a53a4bfc235d", "subject": "wifi: ath6kl: fix use-after-free in aggr_reset_state()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68198", "commit_url": "https://git.kernel.org/stable/c/ba7debb4dd6427386862220e8335a53a4bfc235d" }, { "cve": "CVE-2026-68199", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "44126b6994eeb28f2103b638e698f40a1244f327", "subject": "wifi: ath6kl: fix OOB access from firmware ADDBA window size", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68199", "commit_url": "https://git.kernel.org/stable/c/44126b6994eeb28f2103b638e698f40a1244f327" }, { "cve": "CVE-2026-68200", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "70d28bfcd6224eed75986b3b987b997e59643fa4", "subject": "ALSA: timer: don't re-enter an instance callback that is still running", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68200", "commit_url": "https://git.kernel.org/stable/c/70d28bfcd6224eed75986b3b987b997e59643fa4" }, { "cve": "CVE-2026-68201", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "bdefe1346a8e6b8dc8593406dc2617e985fcbcab", "subject": "ALSA: timer: drain a slave's callback before its master detaches it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68201", "commit_url": "https://git.kernel.org/stable/c/bdefe1346a8e6b8dc8593406dc2617e985fcbcab" }, { "cve": "CVE-2026-68202", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "2c4dc0ed50b05cd847a4b34b8cebf0775f19aeb9", "subject": "ALSA: seq: close a re-opened queue timer in the destructor", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68202", "commit_url": "https://git.kernel.org/stable/c/2c4dc0ed50b05cd847a4b34b8cebf0775f19aeb9" }, { "cve": "CVE-2026-68203", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "a07c179a92e949172ca52f6d4a13202ea88cd4b7", "subject": "media: vivid: fix cleanup bugs in vivid_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68203", "commit_url": "https://git.kernel.org/stable/c/a07c179a92e949172ca52f6d4a13202ea88cd4b7" }, { "cve": "CVE-2026-68204", "author_name": "Hans Verkuil", "author_email": "hverkuil+cisco@kernel.org", "fix_sha": "c2d1a2130c93f6d758af58590b86b2254c7a1dec", "subject": "media: vivid: check for vb2_is_busy() when toggling caps", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68204", "commit_url": "https://git.kernel.org/stable/c/c2d1a2130c93f6d758af58590b86b2254c7a1dec" }, { "cve": "CVE-2026-68205", "author_name": "Mirela Rabulea", "author_email": "mirela.rabulea@nxp.com", "fix_sha": "06cb687a5132fcffe624c0070576ab852ac6b568", "subject": "media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68205", "commit_url": "https://git.kernel.org/stable/c/06cb687a5132fcffe624c0070576ab852ac6b568" }, { "cve": "CVE-2026-68206", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "afbe4bc252d90a6f8fad869b06d5430f615f22f9", "subject": "media: v4l2-ctrls: validate HEVC active reference counts", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68206", "commit_url": "https://git.kernel.org/stable/c/afbe4bc252d90a6f8fad869b06d5430f615f22f9" }, { "cve": "CVE-2026-68207", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "e0f1c9a90ef665f2587c274a8fed59f2dfc575a6", "subject": "media: ti: vpe: unwind v4l2 device registration on probe error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68207", "commit_url": "https://git.kernel.org/stable/c/e0f1c9a90ef665f2587c274a8fed59f2dfc575a6" }, { "cve": "CVE-2026-68208", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "e8f319eae96a3d718e810d52432020a2b77f5f60", "subject": "media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68208", "commit_url": "https://git.kernel.org/stable/c/e8f319eae96a3d718e810d52432020a2b77f5f60" }, { "cve": "CVE-2026-68209", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "bbba3e260a62810a717b4442a3bb96d0ec0f6309", "subject": "media: sun4i-csi: Return queued buffers on start_streaming() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68209", "commit_url": "https://git.kernel.org/stable/c/bbba3e260a62810a717b4442a3bb96d0ec0f6309" }, { "cve": "CVE-2026-68210", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "084973ebd67b28f0945c5d45408f86c58b540110", "subject": "media: stm32: dcmi: unregister notifier on probe failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68210", "commit_url": "https://git.kernel.org/stable/c/084973ebd67b28f0945c5d45408f86c58b540110" }, { "cve": "CVE-2026-68211", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "ffc8eec06378a340d708c889184ab3e14b57d540", "subject": "media: stm32-dcmipp: Return queued buffers on start_streaming() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68211", "commit_url": "https://git.kernel.org/stable/c/ffc8eec06378a340d708c889184ab3e14b57d540" }, { "cve": "CVE-2026-68212", "author_name": "Ma Ke", "author_email": "make24@iscas.ac.cn", "fix_sha": "f86ed548386e3050e5f8f25b450d09dc009d9a88", "subject": "media: saa7134: Fix a possible memory leak in saa7134_video_init1", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68212", "commit_url": "https://git.kernel.org/stable/c/f86ed548386e3050e5f8f25b450d09dc009d9a88" }, { "cve": "CVE-2026-68213", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "33ca0aab6f4bd90921fc1395478f38f72c4d19af", "subject": "media: rtl2832_sdr: Return queued buffers on start_streaming() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68213", "commit_url": "https://git.kernel.org/stable/c/33ca0aab6f4bd90921fc1395478f38f72c4d19af" }, { "cve": "CVE-2026-68214", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "680daf40a82d483949f87f0d8f98639dc47e610c", "subject": "media: rtl2832: fix use-after-free in rtl2832_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68214", "commit_url": "https://git.kernel.org/stable/c/680daf40a82d483949f87f0d8f98639dc47e610c" }, { "cve": "CVE-2026-68215", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "436a693af04ffb889aaf87cb69ec1f2b21d3569c", "subject": "media: radio-si476x: Unregister v4l2_device on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68215", "commit_url": "https://git.kernel.org/stable/c/436a693af04ffb889aaf87cb69ec1f2b21d3569c" }, { "cve": "CVE-2026-68216", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "975b2ee20e569d47821e4f6c9761b4664d48a6a4", "subject": "media: pwc: Return queued buffers on start_streaming() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68216", "commit_url": "https://git.kernel.org/stable/c/975b2ee20e569d47821e4f6c9761b4664d48a6a4" }, { "cve": "CVE-2026-68217", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "906e410dcffbbd99fb4081abab817a830033aa28", "subject": "media: pwc: Drain fill_buf on start_streaming() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68217", "commit_url": "https://git.kernel.org/stable/c/906e410dcffbbd99fb4081abab817a830033aa28" }, { "cve": "CVE-2026-68218", "author_name": "Krzysztof Kozlowski", "author_email": "krzysztof.kozlowski@oss.qualcomm.com", "fix_sha": "1a65db225b25bb8c8febf16974c060e0cc242eb9", "subject": "media: pci: dm1105: Free allocated workqueue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68218", "commit_url": "https://git.kernel.org/stable/c/1a65db225b25bb8c8febf16974c060e0cc242eb9" }, { "cve": "CVE-2026-68219", "author_name": "Guoniu Zhou", "author_email": "guoniu.zhou@nxp.com", "fix_sha": "57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf", "subject": "media: nxp: imx8-isi: Fix potential out-of-bounds issues", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68219", "commit_url": "https://git.kernel.org/stable/c/57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf" }, { "cve": "CVE-2026-68220", "author_name": "Xiaolei Wang", "author_email": "xiaolei.wang@windriver.com", "fix_sha": "567418eedd25b3d86d489807682030b4b98b73d9", "subject": "media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68220", "commit_url": "https://git.kernel.org/stable/c/567418eedd25b3d86d489807682030b4b98b73d9" }, { "cve": "CVE-2026-68221", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "50cc0e547da50b887e63dfa1ad203cd5b735d01e", "subject": "media: nuvoton: npcm-video: fix memory leaks in probe and remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68221", "commit_url": "https://git.kernel.org/stable/c/50cc0e547da50b887e63dfa1ad203cd5b735d01e" }, { "cve": "CVE-2026-68222", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "7201c17786a498497bca57752883b90914d405ac", "subject": "media: msi2500: Return queued buffers on start_streaming() failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68222", "commit_url": "https://git.kernel.org/stable/c/7201c17786a498497bca57752883b90914d405ac" }, { "cve": "CVE-2026-68223", "author_name": "Anand Moon", "author_email": "linux.amoon@gmail.com", "fix_sha": "940f161f734b25f175a95d2684c2021f6323693a", "subject": "media: meson: vdec: Fix memory leak in error path of vdec_open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68223", "commit_url": "https://git.kernel.org/stable/c/940f161f734b25f175a95d2684c2021f6323693a" }, { "cve": "CVE-2026-68224", "author_name": "Alper Ak", "author_email": "alperyasinak1@gmail.com", "fix_sha": "94c6402e423d36a2bd6f62055a65a0d439d84da7", "subject": "media: mali-c55: Fix possible ERR_PTR in enable_streams", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68224", "commit_url": "https://git.kernel.org/stable/c/94c6402e423d36a2bd6f62055a65a0d439d84da7" }, { "cve": "CVE-2026-68225", "author_name": "Martin Hecht", "author_email": "mhecht73@gmail.com", "fix_sha": "4f6f28ff24709710c08557c127b3e4c3fb1b4159", "subject": "media: i2c: alvium: fix critical pointer access in alvium_ctrl_init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68225", "commit_url": "https://git.kernel.org/stable/c/4f6f28ff24709710c08557c127b3e4c3fb1b4159" }, { "cve": "CVE-2026-68226", "author_name": "Wang Jun", "author_email": "1742789905@qq.com", "fix_sha": "a0701e387b46e2481c05b47f1235b954bfc2af3e", "subject": "media: cx23885: add ioremap return check and cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68226", "commit_url": "https://git.kernel.org/stable/c/a0701e387b46e2481c05b47f1235b954bfc2af3e" }, { "cve": "CVE-2026-68227", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "7d6358ab02866e5b7ed8d3a00805297617bbb0ec", "subject": "media: cx231xx: fix devres lifetime", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68227", "commit_url": "https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec" }, { "cve": "CVE-2026-68228", "author_name": "Brandon Brnich", "author_email": "b-brnich@ti.com", "fix_sha": "b20157147089a9c16a38c7810e2fe6f2df8e3277", "subject": "media: chips-media: wave5: Move src_buf Removal to finish_encode", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68228", "commit_url": "https://git.kernel.org/stable/c/b20157147089a9c16a38c7810e2fe6f2df8e3277" }, { "cve": "CVE-2026-68229", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "10358ea986c3c85516d1c8206486464f79d36e76", "subject": "media: cedrus: skip invalid H.264 reference list entries", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68229", "commit_url": "https://git.kernel.org/stable/c/10358ea986c3c85516d1c8206486464f79d36e76" }, { "cve": "CVE-2026-68230", "author_name": "Ricardo Ribalda", "author_email": "ribalda@chromium.org", "fix_sha": "9724164f71974a2a44a5e026614fbcc05bab6d91", "subject": "media: amlogic-c3: Add validations for ae and awb config", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68230", "commit_url": "https://git.kernel.org/stable/c/9724164f71974a2a44a5e026614fbcc05bab6d91" }, { "cve": "CVE-2026-68231", "author_name": "Valery Borovsky", "author_email": "vebohr@gmail.com", "fix_sha": "04344d0b4929caa94c0df72f767752aa0935ef5d", "subject": "media: airspy: Return queued buffers on start_streaming() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68231", "commit_url": "https://git.kernel.org/stable/c/04344d0b4929caa94c0df72f767752aa0935ef5d" }, { "cve": "CVE-2026-68232", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "847b371debf3c8c72384ab7b9a0c4123a74cc925", "subject": "drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68232", "commit_url": "https://git.kernel.org/stable/c/847b371debf3c8c72384ab7b9a0c4123a74cc925" }, { "cve": "CVE-2026-68233", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "6273dd3ffb54ec581855b82ae77331b66028249c", "subject": "drm/vc4: Shut down BO cache timer before teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68233", "commit_url": "https://git.kernel.org/stable/c/6273dd3ffb54ec581855b82ae77331b66028249c" }, { "cve": "CVE-2026-68234", "author_name": "Zhu Lingshan", "author_email": "lingshan.zhu@amd.com", "fix_sha": "a2f895f3c852063258d62e9f74b081de07ca95df", "subject": "drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68234", "commit_url": "https://git.kernel.org/stable/c/a2f895f3c852063258d62e9f74b081de07ca95df" }, { "cve": "CVE-2026-68235", "author_name": "Andriy Korud", "author_email": "a.korud@gmail.com", "fix_sha": "d340cba0df4cf327c7e89c7c1a4e79d4771d7dd5", "subject": "drm/amd/display: dce100: skip non-DP stream encoders for DP MST", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68235", "commit_url": "https://git.kernel.org/stable/c/d340cba0df4cf327c7e89c7c1a4e79d4771d7dd5" }, { "cve": "CVE-2026-68236", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "9fa26b9eed6195bf840f39ac183b9a6237548755", "subject": "drm/amd/display: set new_stream to NULL after release", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68236", "commit_url": "https://git.kernel.org/stable/c/9fa26b9eed6195bf840f39ac183b9a6237548755" }, { "cve": "CVE-2026-68237", "author_name": "Jesse Zhang", "author_email": "jesse.zhang@amd.com", "fix_sha": "5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7", "subject": "drm/amdgpu/userq: fix indefinite fence wait during GPU reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68237", "commit_url": "https://git.kernel.org/stable/c/5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7" }, { "cve": "CVE-2026-68238", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "65bff26617607c1331283232016c0e89088c5b78", "subject": "drm/amdgpu: Release VFCT ACPI table reference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68238", "commit_url": "https://git.kernel.org/stable/c/65bff26617607c1331283232016c0e89088c5b78" }, { "cve": "CVE-2026-68239", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "5b7b3b6595ee77d01c7463757baed114786094dd", "subject": "drm/ttm: Account for NULL and handle pages in ttm_pool_backup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68239", "commit_url": "https://git.kernel.org/stable/c/5b7b3b6595ee77d01c7463757baed114786094dd" }, { "cve": "CVE-2026-68240", "author_name": "Honglei Huang", "author_email": "honghuan@amd.com", "fix_sha": "7f708f51e3955bda0d77a0b67ab9bea6c97fea99", "subject": "drm/gpusvm: publish dpagemap early to avoid device mapping leak on error", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68240", "commit_url": "https://git.kernel.org/stable/c/7f708f51e3955bda0d77a0b67ab9bea6c97fea99" }, { "cve": "CVE-2026-68241", "author_name": "Jani Nikula", "author_email": "jani.nikula@intel.com", "fix_sha": "005771c18c5b2c98cb4e7517661aea460990fd3f", "subject": "drm/i915/mst: limit DP MST ESI service loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68241", "commit_url": "https://git.kernel.org/stable/c/005771c18c5b2c98cb4e7517661aea460990fd3f" }, { "cve": "CVE-2026-68242", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "82ec992c404c3dc774c5e9f3d4aa858e97187675", "subject": "drm/i915/gt: Fix NULL deref on sched_engine alloc failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68242", "commit_url": "https://git.kernel.org/stable/c/82ec992c404c3dc774c5e9f3d4aa858e97187675" }, { "cve": "CVE-2026-68243", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "2b56757a9a7456825eb668fde92299e01c5e2721", "subject": "drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68243", "commit_url": "https://git.kernel.org/stable/c/2b56757a9a7456825eb668fde92299e01c5e2721" }, { "cve": "CVE-2026-68244", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "eed3de2acf6aa5154d49098b026710b646db67ee", "subject": "drm/i915/gem: Do not leak siblings[] on proto context error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68244", "commit_url": "https://git.kernel.org/stable/c/eed3de2acf6aa5154d49098b026710b646db67ee" }, { "cve": "CVE-2026-68245", "author_name": "Shahyan Soltani", "author_email": "shahyan.soltani@amd.com", "fix_sha": "04cc4aa3617b0ed67e859f91f09de5d896a46f3a", "subject": "drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68245", "commit_url": "https://git.kernel.org/stable/c/04cc4aa3617b0ed67e859f91f09de5d896a46f3a" }, { "cve": "CVE-2026-68246", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "0eebcab1ea2a77f086a04108f386f82ee3496022", "subject": "drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68246", "commit_url": "https://git.kernel.org/stable/c/0eebcab1ea2a77f086a04108f386f82ee3496022" }, { "cve": "CVE-2026-68247", "author_name": "Jani Nikula", "author_email": "jani.nikula@intel.com", "fix_sha": "2084503f2d087bf956198e7f6eb25b03a7049cb2", "subject": "drm/i915/bios: range check LFP Data Block panel_type2", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68247", "commit_url": "https://git.kernel.org/stable/c/2084503f2d087bf956198e7f6eb25b03a7049cb2" }, { "cve": "CVE-2026-68248", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "1e33f0de5fdcd09e51fdec1e5822448970b6420f", "subject": "drm/i915: Return NULL on error in active_instance", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68248", "commit_url": "https://git.kernel.org/stable/c/1e33f0de5fdcd09e51fdec1e5822448970b6420f" }, { "cve": "CVE-2026-68249", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "9e98ed3113943257ad6e5c1e6beddbdb482a70ad", "subject": "drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68249", "commit_url": "https://git.kernel.org/stable/c/9e98ed3113943257ad6e5c1e6beddbdb482a70ad" }, { "cve": "CVE-2026-68250", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "b9dd618a635d39fbb211454b6e8837b2a7f10fb0", "subject": "drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68250", "commit_url": "https://git.kernel.org/stable/c/b9dd618a635d39fbb211454b6e8837b2a7f10fb0" }, { "cve": "CVE-2026-68251", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "ec42c96c322e5cc48099ab5e67b5cbe236cb1949", "subject": "drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68251", "commit_url": "https://git.kernel.org/stable/c/ec42c96c322e5cc48099ab5e67b5cbe236cb1949" }, { "cve": "CVE-2026-68252", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "e80e28f398f5d9f6e361ffb56382d2e74fc87556", "subject": "drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68252", "commit_url": "https://git.kernel.org/stable/c/e80e28f398f5d9f6e361ffb56382d2e74fc87556" }, { "cve": "CVE-2026-68253", "author_name": "Jani Nikula", "author_email": "jani.nikula@intel.com", "fix_sha": "bbb15a6b042d02e5508a02b4847e02d2579ee7bc", "subject": "drm/i915/hdcp: check streams[] bounds before overflow", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68253", "commit_url": "https://git.kernel.org/stable/c/bbb15a6b042d02e5508a02b4847e02d2579ee7bc" }, { "cve": "CVE-2026-68254", "author_name": "Jani Nikula", "author_email": "jani.nikula@intel.com", "fix_sha": "f8a9262c7a6fc2de9802e14b0228114f0333869e", "subject": "drm/i915/vrr: require valid min/max vfreq for VRR", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68254", "commit_url": "https://git.kernel.org/stable/c/f8a9262c7a6fc2de9802e14b0228114f0333869e" }, { "cve": "CVE-2026-68255", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4e1a53892ba7f8a3e1da6bfc53c83ae7c812dccd", "subject": "drm/virtio: bound EDID block reads to the response buffer", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68255", "commit_url": "https://git.kernel.org/stable/c/4e1a53892ba7f8a3e1da6bfc53c83ae7c812dccd" }, { "cve": "CVE-2026-68256", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "a6e14b976be48eebd8769cb5b883a6af7fc5ade1", "subject": "drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68256", "commit_url": "https://git.kernel.org/stable/c/a6e14b976be48eebd8769cb5b883a6af7fc5ade1" }, { "cve": "CVE-2026-68257", "author_name": "Yongqiang Sun", "author_email": "yongqiang.sun@amd.com", "fix_sha": "2b0386d4293920e690c0e017708f999b93cc729b", "subject": "drm/amdkfd: fix 32-bit overflow in CWSR total size calculation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68257", "commit_url": "https://git.kernel.org/stable/c/2b0386d4293920e690c0e017708f999b93cc729b" }, { "cve": "CVE-2026-68258", "author_name": "David Francis", "author_email": "david.francis@amd.com", "fix_sha": "47ea05f246bebc81c7796f56265cffd812cf0601", "subject": "drm/amdkfd: Check bounds on CRIU restore queue type and mqd size", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68258", "commit_url": "https://git.kernel.org/stable/c/47ea05f246bebc81c7796f56265cffd812cf0601" }, { "cve": "CVE-2026-68259", "author_name": "David Francis", "author_email": "david.francis@amd.com", "fix_sha": "bb52249fbbe948875155ccd45cd8d74bf4ae747b", "subject": "drm/amdkfd: Check bounds in allocate_event_notification_slot", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68259", "commit_url": "https://git.kernel.org/stable/c/bb52249fbbe948875155ccd45cd8d74bf4ae747b" }, { "cve": "CVE-2026-68260", "author_name": "Icenowy Zheng", "author_email": "zhengxingda@iscas.ac.cn", "fix_sha": "17e2030f37600994440f875dc410615d5c66ee6d", "subject": "drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68260", "commit_url": "https://git.kernel.org/stable/c/17e2030f37600994440f875dc410615d5c66ee6d" }, { "cve": "CVE-2026-68261", "author_name": "Luigi Santivetti", "author_email": "luigi.santivetti@imgtec.com", "fix_sha": "cf385cf6e713eba0720651174dac0b2d2f5bb8f8", "subject": "drm/imagination: fix error checking of pvr_vm_context_lookup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68261", "commit_url": "https://git.kernel.org/stable/c/cf385cf6e713eba0720651174dac0b2d2f5bb8f8" }, { "cve": "CVE-2026-68262", "author_name": "Shuvam Pandey", "author_email": "shuvampandey1@gmail.com", "fix_sha": "8dc8f3f4c2382fb7d1b1986ba8f33a2466cd3d7a", "subject": "drm/imagination: Fix user array stride in pvr_set_uobj_array()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68262", "commit_url": "https://git.kernel.org/stable/c/8dc8f3f4c2382fb7d1b1986ba8f33a2466cd3d7a" }, { "cve": "CVE-2026-68263", "author_name": "Brajesh Gupta", "author_email": "brajesh.gupta@imgtec.com", "fix_sha": "4af24c27a39ba147a613a09e10b9e0f7294524c0", "subject": "drm/imagination: Fix double call to drm_sched_entity_fini()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68263", "commit_url": "https://git.kernel.org/stable/c/4af24c27a39ba147a613a09e10b9e0f7294524c0" }, { "cve": "CVE-2026-68264", "author_name": "Zongyao Bai", "author_email": "zongyao.bai@intel.com", "fix_sha": "6384271ac1ac0099198d15df79212a19ebdb929d", "subject": "drm/xe/pt: Reset current_op in xe_pt_update_ops_init()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68264", "commit_url": "https://git.kernel.org/stable/c/6384271ac1ac0099198d15df79212a19ebdb929d" }, { "cve": "CVE-2026-68265", "author_name": "Himal Prasad Ghimiray", "author_email": "himal.prasad.ghimiray@intel.com", "fix_sha": "7bc597ce74bab4153b2009c92eccf889e9d74044", "subject": "drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68265", "commit_url": "https://git.kernel.org/stable/c/7bc597ce74bab4153b2009c92eccf889e9d74044" }, { "cve": "CVE-2026-68266", "author_name": "Nitin Gote", "author_email": "nitin.r.gote@intel.com", "fix_sha": "62775525a27c3b0d56382e08ba81ee2d322058b6", "subject": "drm/xe: Hold a dma-buf reference for imported BOs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68266", "commit_url": "https://git.kernel.org/stable/c/62775525a27c3b0d56382e08ba81ee2d322058b6" }, { "cve": "CVE-2026-68267", "author_name": "Ashutosh Dixit", "author_email": "ashutosh.dixit@intel.com", "fix_sha": "e70086a3a06d276b4a5d9a2c51c9330c6cf72780", "subject": "drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68267", "commit_url": "https://git.kernel.org/stable/c/e70086a3a06d276b4a5d9a2c51c9330c6cf72780" }, { "cve": "CVE-2026-68268", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "136fb61ba8571076dc5d49350a0e6d002d740b74", "subject": "drm/xe: Return error on non-migratable faults requiring devmem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68268", "commit_url": "https://git.kernel.org/stable/c/136fb61ba8571076dc5d49350a0e6d002d740b74" }, { "cve": "CVE-2026-68269", "author_name": "Joonas Lahtinen", "author_email": "joonas.lahtinen@linux.intel.com", "fix_sha": "914a76a9f08366434bf595700f62026b7a19a9cc", "subject": "drm/i915/gem: Add missing nospec on parallel submit slot", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68269", "commit_url": "https://git.kernel.org/stable/c/914a76a9f08366434bf595700f62026b7a19a9cc" }, { "cve": "CVE-2026-68270", "author_name": "Thomas Zimmermann", "author_email": "tzimmermann@suse.de", "fix_sha": "b771974988ec7ce077a7246fa0fa588c246fe581", "subject": "drm/sysfb: Avoid possible truncation with calculating visible size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68270", "commit_url": "https://git.kernel.org/stable/c/b771974988ec7ce077a7246fa0fa588c246fe581" }, { "cve": "CVE-2026-68271", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "ab99ead646b1b833ecd57fe577a2816f2e848167", "subject": "drm/nouveau: fix reversed error cleanup order in ucopy functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68271", "commit_url": "https://git.kernel.org/stable/c/ab99ead646b1b833ecd57fe577a2816f2e848167" }, { "cve": "CVE-2026-68272", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "84c4c36acd5c4b2558b5069f869a165b2c655c84", "subject": "drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68272", "commit_url": "https://git.kernel.org/stable/c/84c4c36acd5c4b2558b5069f869a165b2c655c84" }, { "cve": "CVE-2026-68273", "author_name": "Tvrtko Ursulin", "author_email": "tvrtko.ursulin@igalia.com", "fix_sha": "c1dc4ccb82c9e56325d8e7514ca4c90bd1efb351", "subject": "drm/amdgpu: Fix context pstate override handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68273", "commit_url": "https://git.kernel.org/stable/c/c1dc4ccb82c9e56325d8e7514ca4c90bd1efb351" }, { "cve": "CVE-2026-68274", "author_name": "Tejas Upadhyay", "author_email": "tejas.upadhyay@intel.com", "fix_sha": "632ecc90e1ca5d3b6822bb4d08f84a175b6c42c0", "subject": "drm/xe/guc: Fix buffer overflow in steered register list allocation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68274", "commit_url": "https://git.kernel.org/stable/c/632ecc90e1ca5d3b6822bb4d08f84a175b6c42c0" }, { "cve": "CVE-2026-68275", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "93475c34111916df71c63e510fc52db01351f809", "subject": "drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68275", "commit_url": "https://git.kernel.org/stable/c/93475c34111916df71c63e510fc52db01351f809" }, { "cve": "CVE-2026-68276", "author_name": "Asad Kamal", "author_email": "asad.kamal@amd.com", "fix_sha": "3e864bf2a32a1cbdf1e0f9c5a5a4176e8575f4a3", "subject": "drm/amdgpu/gfx: fix cleaner shader IB buffer overflow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68276", "commit_url": "https://git.kernel.org/stable/c/3e864bf2a32a1cbdf1e0f9c5a5a4176e8575f4a3" }, { "cve": "CVE-2026-68277", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "6b89ba3dba2f583626fb693e47e951ffb8bf591f", "subject": "drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68277", "commit_url": "https://git.kernel.org/stable/c/6b89ba3dba2f583626fb693e47e951ffb8bf591f" }, { "cve": "CVE-2026-68278", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "55bd5e685bda455b9b50c835f8c8442d52a344a3", "subject": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68278", "commit_url": "https://git.kernel.org/stable/c/55bd5e685bda455b9b50c835f8c8442d52a344a3" }, { "cve": "CVE-2026-68279", "author_name": "Ashutosh Desai", "author_email": "ashutoshdesai993@gmail.com", "fix_sha": "1a8f537f5a1eeac941f262fe73078d6b08ba83c0", "subject": "drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68279", "commit_url": "https://git.kernel.org/stable/c/1a8f537f5a1eeac941f262fe73078d6b08ba83c0" }, { "cve": "CVE-2026-68280", "author_name": "Vitor Soares", "author_email": "vitor.soares@toradex.com", "fix_sha": "2d8b08844c0ecc6f2002fa68711e779aa18c8585", "subject": "drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68280", "commit_url": "https://git.kernel.org/stable/c/2d8b08844c0ecc6f2002fa68711e779aa18c8585" }, { "cve": "CVE-2026-68281", "author_name": "Alessio Belle", "author_email": "alessio.belle@imgtec.com", "fix_sha": "9cd74f935306cd857f46686975c43383e1d95f94", "subject": "drm/imagination: Count paired job fence as dependency in prepare_job()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68281", "commit_url": "https://git.kernel.org/stable/c/9cd74f935306cd857f46686975c43383e1d95f94" }, { "cve": "CVE-2026-68282", "author_name": "Chen Ni", "author_email": "nichen@iscas.ac.cn", "fix_sha": "45895f4d4d5f222d07412f90664f88b059627859", "subject": "drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68282", "commit_url": "https://git.kernel.org/stable/c/45895f4d4d5f222d07412f90664f88b059627859" }, { "cve": "CVE-2026-68283", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "79097812153b826fc156a2930ec8a90ed9edf4a2", "subject": "tracing: Fix use-after-free freeing trigger private data", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68283", "commit_url": "https://git.kernel.org/stable/c/79097812153b826fc156a2930ec8a90ed9edf4a2" }, { "cve": "CVE-2026-68284", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "2d66a033864e27ab8d5e44cb36f31d9d2413bee4", "subject": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68284", "commit_url": "https://git.kernel.org/stable/c/2d66a033864e27ab8d5e44cb36f31d9d2413bee4" }, { "cve": "CVE-2026-68285", "author_name": "Pu Lehui", "author_email": "pulehui@huawei.com", "fix_sha": "47e20d4b3da97ef3881d1e55e43545c22424f3fc", "subject": "LoongArch: BPF: Fix memory leak in bpf_jit_free()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68285", "commit_url": "https://git.kernel.org/stable/c/47e20d4b3da97ef3881d1e55e43545c22424f3fc" }, { "cve": "CVE-2026-68286", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "fd098a23bf8fda7eae48db9b06e7c34fc4d228fa", "subject": "drop_monitor: perform u64_stats updates under IRQ-disabled section", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68286", "commit_url": "https://git.kernel.org/stable/c/fd098a23bf8fda7eae48db9b06e7c34fc4d228fa" }, { "cve": "CVE-2026-68287", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7089f7ab99c89f443c92d8fcc585e63f2727f0b3", "subject": "drop_monitor: fix size calculations for 64-bit attributes", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68287", "commit_url": "https://git.kernel.org/stable/c/7089f7ab99c89f443c92d8fcc585e63f2727f0b3" }, { "cve": "CVE-2026-68288", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "5e9c8baee0329fbefe7c67aea945e2a07f15e98b", "subject": "net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68288", "commit_url": "https://git.kernel.org/stable/c/5e9c8baee0329fbefe7c67aea945e2a07f15e98b" }, { "cve": "CVE-2026-68289", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "47f42ff521b4eeb46e82f9a46a4783a99f7570d7", "subject": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68289", "commit_url": "https://git.kernel.org/stable/c/47f42ff521b4eeb46e82f9a46a4783a99f7570d7" }, { "cve": "CVE-2026-68290", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "167e54c703ccd4fa028feb568b0d1002020cff86", "subject": "rds: tcp: unregister sysctl before tearing down listen socket", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68290", "commit_url": "https://git.kernel.org/stable/c/167e54c703ccd4fa028feb568b0d1002020cff86" }, { "cve": "CVE-2026-68291", "author_name": "Emil Tantilov", "author_email": "emil.s.tantilov@intel.com", "fix_sha": "237f1f7653b8729169af11fae79f01b90d00b87e", "subject": "idpf: fix max_vport related crash on allocation error during init", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68291", "commit_url": "https://git.kernel.org/stable/c/237f1f7653b8729169af11fae79f01b90d00b87e" }, { "cve": "CVE-2026-68292", "author_name": "Paul Greenwalt", "author_email": "paul.greenwalt@intel.com", "fix_sha": "144539bbfd3cea1ab0fb6f5216d6004c1f4f029b", "subject": "ice: prevent tstamp ring allocation for non-PF VSI types", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68292", "commit_url": "https://git.kernel.org/stable/c/144539bbfd3cea1ab0fb6f5216d6004c1f4f029b" }, { "cve": "CVE-2026-68293", "author_name": "Gal Pressman", "author_email": "gal@nvidia.com", "fix_sha": "11c057d23465c7a5817a7284c896d19d54c0b616", "subject": "net/mlx5: Fix MCIA register buffer overflow on 32 dword reads", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68293", "commit_url": "https://git.kernel.org/stable/c/11c057d23465c7a5817a7284c896d19d54c0b616" }, { "cve": "CVE-2026-68294", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "3b536db8fb32da9e9c62f2bb45e2e319331f0426", "subject": "net: qrtr: restrict socket creation to the initial network namespace", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68294", "commit_url": "https://git.kernel.org/stable/c/3b536db8fb32da9e9c62f2bb45e2e319331f0426" }, { "cve": "CVE-2026-68295", "author_name": "Nicholas Dudar", "author_email": "main.kalliope@gmail.com", "fix_sha": "dacd348b8a993373576fe2ee2d8b114740ba57a6", "subject": "LoongArch: BPF: Zero-extend signed ALU32 div/mod results", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68295", "commit_url": "https://git.kernel.org/stable/c/dacd348b8a993373576fe2ee2d8b114740ba57a6" }, { "cve": "CVE-2026-68296", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "675ed582c1aa4d919dd535490de08c015005c653", "subject": "net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68296", "commit_url": "https://git.kernel.org/stable/c/675ed582c1aa4d919dd535490de08c015005c653" }, { "cve": "CVE-2026-68297", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "9f29cd8a8e7901a2617c8064ce9f50fc67b97cb8", "subject": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68297", "commit_url": "https://git.kernel.org/stable/c/9f29cd8a8e7901a2617c8064ce9f50fc67b97cb8" }, { "cve": "CVE-2026-68298", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "d2c6800ad1802bed72a6de1416536737f114f1d6", "subject": "drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68298", "commit_url": "https://git.kernel.org/stable/c/d2c6800ad1802bed72a6de1416536737f114f1d6" }, { "cve": "CVE-2026-68299", "author_name": "Harshaka Narayana", "author_email": "harshaka.narayana@broadcom.com", "fix_sha": "34a71f5361fc3adb5b7138da78750b0d535a8252", "subject": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68299", "commit_url": "https://git.kernel.org/stable/c/34a71f5361fc3adb5b7138da78750b0d535a8252" }, { "cve": "CVE-2026-68300", "author_name": "Qing Luo", "author_email": "luoqing@kylinos.cn", "fix_sha": "8e04823c120b376ef7dab14b60ebf6823aa16c14", "subject": "sctp: auth: verify auth requirement when auth_chunk is NULL", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68300", "commit_url": "https://git.kernel.org/stable/c/8e04823c120b376ef7dab14b60ebf6823aa16c14" }, { "cve": "CVE-2026-68301", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "dcf15eaf5641812f1cfc5e96537380132a7da89d", "subject": "net: hsr: fix memory leak on slave unregistration by removing synced VLANs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68301", "commit_url": "https://git.kernel.org/stable/c/dcf15eaf5641812f1cfc5e96537380132a7da89d" }, { "cve": "CVE-2026-68302", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3656a79f94c471827a08f2cacce5f94ad5e52c24", "subject": "amt: re-read skb header pointers after every pull", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68302", "commit_url": "https://git.kernel.org/stable/c/3656a79f94c471827a08f2cacce5f94ad5e52c24" }, { "cve": "CVE-2026-68303", "author_name": "Gregor Herburger", "author_email": "gregor.herburger@linutronix.de", "fix_sha": "7dc3680b7ffe01add3e9299fde8471d2dd53a8ae", "subject": "drm/vc4: hvs/v3d: Fix null dereference in unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68303", "commit_url": "https://git.kernel.org/stable/c/7dc3680b7ffe01add3e9299fde8471d2dd53a8ae" }, { "cve": "CVE-2026-68304", "author_name": "Shelley Yang", "author_email": "shelley.yang@infineon.com", "fix_sha": "7cb34f6c4fe8a68af621d870abe63bfca2275dd6", "subject": "wifi: brcmfmac: fix 802.1X-SHA256 call trace warning", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68304", "commit_url": "https://git.kernel.org/stable/c/7cb34f6c4fe8a68af621d870abe63bfca2275dd6" }, { "cve": "CVE-2026-68305", "author_name": "Satyanarayana K V P", "author_email": "satyanarayana.k.v.p@intel.com", "fix_sha": "4c92afb4c143526d340545ca581e88e6952ea511", "subject": "drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68305", "commit_url": "https://git.kernel.org/stable/c/4c92afb4c143526d340545ca581e88e6952ea511" }, { "cve": "CVE-2026-68306", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "2fffc472bec490c8357defcee9c075ca74467352", "subject": "wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68306", "commit_url": "https://git.kernel.org/stable/c/2fffc472bec490c8357defcee9c075ca74467352" }, { "cve": "CVE-2026-68307", "author_name": "Sean Wang", "author_email": "sean.wang@mediatek.com", "fix_sha": "bd8b2ec838184236c3fcbf738a926328836adf12", "subject": "wifi: mt76: mt7925: fix crash in reset link replay", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68307", "commit_url": "https://git.kernel.org/stable/c/bd8b2ec838184236c3fcbf738a926328836adf12" }, { "cve": "CVE-2026-68308", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "e858cf6bf99880343348ff1e8c942aaff1d9d592", "subject": "wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68308", "commit_url": "https://git.kernel.org/stable/c/e858cf6bf99880343348ff1e8c942aaff1d9d592" }, { "cve": "CVE-2026-68309", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "2c1fb2335f5e3afb34f91bc07ecb63517c328090", "subject": "wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68309", "commit_url": "https://git.kernel.org/stable/c/2c1fb2335f5e3afb34f91bc07ecb63517c328090" }, { "cve": "CVE-2026-68310", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "8e9db062654a388d0fa587acbeeae68dd33eba41", "subject": "wifi: mt76: mt7915: guard HE capability lookups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68310", "commit_url": "https://git.kernel.org/stable/c/8e9db062654a388d0fa587acbeeae68dd33eba41" }, { "cve": "CVE-2026-68311", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "96ea44f2269f30364cffa054ee3a87e595bef0d4", "subject": "wifi: mt76: mt7925: guard link STA in decap offload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68311", "commit_url": "https://git.kernel.org/stable/c/96ea44f2269f30364cffa054ee3a87e595bef0d4" }, { "cve": "CVE-2026-68312", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "c2f2e83e3bbc5483730fd4ee903182761f1ae50f", "subject": "cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68312", "commit_url": "https://git.kernel.org/stable/c/c2f2e83e3bbc5483730fd4ee903182761f1ae50f" }, { "cve": "CVE-2026-68313", "author_name": "Helen Koike", "author_email": "koike@igalia.com", "fix_sha": "22f8aa35964e8f2ab026578f45befc9605fd1b28", "subject": "tipc: fix infinite loop in __tipc_nl_compat_dumpit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68313", "commit_url": "https://git.kernel.org/stable/c/22f8aa35964e8f2ab026578f45befc9605fd1b28" }, { "cve": "CVE-2026-68314", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "03d1057305ef17ac3f5936ac1580bc9a1a826e14", "subject": "net: mctp i3c: clean up notifier and buses if driver register fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68314", "commit_url": "https://git.kernel.org/stable/c/03d1057305ef17ac3f5936ac1580bc9a1a826e14" }, { "cve": "CVE-2026-68315", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "18ae07691d43183d270de8be9dc8e027906015d9", "subject": "sctp: validate stream count in sctp_process_strreset_inreq()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68315", "commit_url": "https://git.kernel.org/stable/c/18ae07691d43183d270de8be9dc8e027906015d9" }, { "cve": "CVE-2026-68316", "author_name": "Rob Herring (Arm)", "author_email": "robh@kernel.org", "fix_sha": "18a551482a4a326790698b273e76d7575a51a57d", "subject": "accel: ethosu: Fix element size accounting for cmd stream validation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68316", "commit_url": "https://git.kernel.org/stable/c/18a551482a4a326790698b273e76d7575a51a57d" }, { "cve": "CVE-2026-68317", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "bfa33cd513c7ceb93c5a4c30e5662acd73c0a916", "subject": "pds_core: fix auxiliary device add/del races", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68317", "commit_url": "https://git.kernel.org/stable/c/bfa33cd513c7ceb93c5a4c30e5662acd73c0a916" }, { "cve": "CVE-2026-68318", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "0ad134881508c36b65c1a8864f8bec53adbd3327", "subject": "pds_core: fix use-after-free on workqueue during remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68318", "commit_url": "https://git.kernel.org/stable/c/0ad134881508c36b65c1a8864f8bec53adbd3327" }, { "cve": "CVE-2026-68319", "author_name": "Nikhil P. Rao", "author_email": "nikhil.rao@amd.com", "fix_sha": "ab0eec0ff0a421737a37f510ceab5c6ea59cd05a", "subject": "pds_core: fix deadlock between reset thread and remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68319", "commit_url": "https://git.kernel.org/stable/c/ab0eec0ff0a421737a37f510ceab5c6ea59cd05a" }, { "cve": "CVE-2026-68320", "author_name": "HanQuan", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "ff04b26794a16a8a879eb4fd2c02c2d6b03850e9", "subject": "sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68320", "commit_url": "https://git.kernel.org/stable/c/ff04b26794a16a8a879eb4fd2c02c2d6b03850e9" }, { "cve": "CVE-2026-68321", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "ecaa37826340520664a4e5522f803ff48fc3f564", "subject": "net: txgbe: fix FDIR filter leak on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68321", "commit_url": "https://git.kernel.org/stable/c/ecaa37826340520664a4e5522f803ff48fc3f564" }, { "cve": "CVE-2026-68322", "author_name": "Ilia Gavrilov", "author_email": "ilia.gavrilov@infotecs.ru", "fix_sha": "9c805e592a29be9e4e61ff1bd567da04aa8fd6f9", "subject": "rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68322", "commit_url": "https://git.kernel.org/stable/c/9c805e592a29be9e4e61ff1bd567da04aa8fd6f9" }, { "cve": "CVE-2026-68323", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "350e592ff4e30e48ffb55e142d11a73e63f4869c", "subject": "tipc: serialize udp bearer replicast list updates", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68323", "commit_url": "https://git.kernel.org/stable/c/350e592ff4e30e48ffb55e142d11a73e63f4869c" }, { "cve": "CVE-2026-68324", "author_name": "Li RongQing", "author_email": "lirongqing@baidu.com", "fix_sha": "754f8efe45f87e3a9c6871b645b2f9d46d1b407b", "subject": "iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68324", "commit_url": "https://git.kernel.org/stable/c/754f8efe45f87e3a9c6871b645b2f9d46d1b407b" }, { "cve": "CVE-2026-68325", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "fb80117fddb5b477218dc99bb53911b72c3847f8", "subject": "iommu/amd: Bound the early ACPI HID map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68325", "commit_url": "https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8" }, { "cve": "CVE-2026-68326", "author_name": "HE WEI (\u30ae\u30ab\u30af)", "author_email": "skyexpoc@gmail.com", "fix_sha": "f0858bfc7d3cab411a447b88e3ef970e575032c9", "subject": "wifi: mwifiex: bound uAP association event IEs to the event buffer", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68326", "commit_url": "https://git.kernel.org/stable/c/f0858bfc7d3cab411a447b88e3ef970e575032c9" }, { "cve": "CVE-2026-68327", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "91957b89da995607cb654b1f9a3c126ddbaee10f", "subject": "wan: wanxl: Only reset hardware after BAR mapping", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68327", "commit_url": "https://git.kernel.org/stable/c/91957b89da995607cb654b1f9a3c126ddbaee10f" }, { "cve": "CVE-2026-68328", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc", "subject": "nfp: Check resource mutex allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68328", "commit_url": "https://git.kernel.org/stable/c/a61b4db34a753bdf5c9e77a7f3d3dddd41dcfacc" }, { "cve": "CVE-2026-68329", "author_name": "Guanghui Feng", "author_email": "guanghuifeng@linux.alibaba.com", "fix_sha": "1e75a8255f11c81fb07e81e5029cfd75804350a0", "subject": "iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68329", "commit_url": "https://git.kernel.org/stable/c/1e75a8255f11c81fb07e81e5029cfd75804350a0" }, { "cve": "CVE-2026-68330", "author_name": "Wayen Yan", "author_email": "win847@gmail.com", "fix_sha": "6f884eb87a79e0c482baef2ad96c96b81d024235", "subject": "net: airoha: Fix DMA direction for NPU mailbox buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68330", "commit_url": "https://git.kernel.org/stable/c/6f884eb87a79e0c482baef2ad96c96b81d024235" }, { "cve": "CVE-2026-68331", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "b4b201cc93ff70150853aba03e14d314d1980ca0", "subject": "dpaa2-eth: put MAC endpoint device on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68331", "commit_url": "https://git.kernel.org/stable/c/b4b201cc93ff70150853aba03e14d314d1980ca0" }, { "cve": "CVE-2026-68332", "author_name": "Wayen Yan", "author_email": "win847@gmail.com", "fix_sha": "2484568a335cd7bda951c75b3a7d95ea36161ae7", "subject": "net: airoha: Fix potential use-after-free in airoha_ppe_deinit()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68332", "commit_url": "https://git.kernel.org/stable/c/2484568a335cd7bda951c75b3a7d95ea36161ae7" }, { "cve": "CVE-2026-68333", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "4c1eabbef7a1707635652e956e39db1269c3af2b", "subject": "dpaa2-switch: put MAC endpoint device on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68333", "commit_url": "https://git.kernel.org/stable/c/4c1eabbef7a1707635652e956e39db1269c3af2b" }, { "cve": "CVE-2026-68334", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "745fb794c3e933c023af9dbb5876a5e16ad2dc71", "subject": "rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68334", "commit_url": "https://git.kernel.org/stable/c/745fb794c3e933c023af9dbb5876a5e16ad2dc71" }, { "cve": "CVE-2026-68335", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "5521ae71e32a8069ed4ca6e792179dc57bc43ab2", "subject": "rds: drop incoming messages that cross network namespace boundaries", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68335", "commit_url": "https://git.kernel.org/stable/c/5521ae71e32a8069ed4ca6e792179dc57bc43ab2" }, { "cve": "CVE-2026-68336", "author_name": "Zhaolong Zhang", "author_email": "zhangzl68@chinatelecom.cn", "fix_sha": "1c975de3343cdef506f2eecc833cc1f14b0401c4", "subject": "bonding: fix devconf_all NULL dereference when IPv6 is disabled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68336", "commit_url": "https://git.kernel.org/stable/c/1c975de3343cdef506f2eecc833cc1f14b0401c4" }, { "cve": "CVE-2026-68337", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "3f4920d165b29052255527d8ae7619e7ec132ece", "subject": "bpf: Reject redirect helpers without a bpf_net_context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68337", "commit_url": "https://git.kernel.org/stable/c/3f4920d165b29052255527d8ae7619e7ec132ece" }, { "cve": "CVE-2026-68338", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "50aff80475abd3533eef4320477037e6fcc6b56e", "subject": "net/packet: avoid fanout hook re-registration after unregister", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68338", "commit_url": "https://git.kernel.org/stable/c/50aff80475abd3533eef4320477037e6fcc6b56e" }, { "cve": "CVE-2026-68339", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "df541cd485ff80a5ddc579d99687bc7506df9851", "subject": "Bluetooth: btusb: validate Realtek vendor event length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68339", "commit_url": "https://git.kernel.org/stable/c/df541cd485ff80a5ddc579d99687bc7506df9851" }, { "cve": "CVE-2026-68340", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "70e76e700fc6c46afb4e17aec099a1ea089b4a22", "subject": "hwmon: occ: validate poll response sensor blocks", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68340", "commit_url": "https://git.kernel.org/stable/c/70e76e700fc6c46afb4e17aec099a1ea089b4a22" }, { "cve": "CVE-2026-68341", "author_name": "Marco Baffo", "author_email": "marco@mandelbit.com", "fix_sha": "e1ad6fe5db719874efa45b2caf9934552e09fc43", "subject": "ovpn: fix use after free in unlock_ovpn()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68341", "commit_url": "https://git.kernel.org/stable/c/e1ad6fe5db719874efa45b2caf9934552e09fc43" }, { "cve": "CVE-2026-68342", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "b52c5103f64ee825996ca1ab8df7283cde8c5f86", "subject": "ovpn: avoid putting unrelated P2P peer on socket release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68342", "commit_url": "https://git.kernel.org/stable/c/b52c5103f64ee825996ca1ab8df7283cde8c5f86" }, { "cve": "CVE-2026-68343", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "f6f5ee2aa33b350c671721b965251c42cebb962e", "subject": "smb: client: validate DFS referral PathConsumed", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68343", "commit_url": "https://git.kernel.org/stable/c/f6f5ee2aa33b350c671721b965251c42cebb962e" }, { "cve": "CVE-2026-68344", "author_name": "Diego Fernando Mancera Gomez", "author_email": "diegomancera.dev@gmail.com", "fix_sha": "71132cedd1ecbc4032d76e9928c18a10f7e39b80", "subject": "usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68344", "commit_url": "https://git.kernel.org/stable/c/71132cedd1ecbc4032d76e9928c18a10f7e39b80" }, { "cve": "CVE-2026-68345", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "977f52909c624210178a1247fab0b02b110c1106", "subject": "arm_mpam: guard MBWU state before adding it to garbage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68345", "commit_url": "https://git.kernel.org/stable/c/977f52909c624210178a1247fab0b02b110c1106" }, { "cve": "CVE-2026-68346", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "3b597d24dc0455ae926f1053f97c2725038fc3cd", "subject": "ALSA: hda: cs35l41: validate and free ACPI mute object", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68346", "commit_url": "https://git.kernel.org/stable/c/3b597d24dc0455ae926f1053f97c2725038fc3cd" }, { "cve": "CVE-2026-68347", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "0db3a430d9681fdb29890bef6934cd89cd1745d0", "subject": "iommu/amd: Fix IRQ unsafe locking in gdom allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68347", "commit_url": "https://git.kernel.org/stable/c/0db3a430d9681fdb29890bef6934cd89cd1745d0" }, { "cve": "CVE-2026-68348", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "bc889dfcea9294a1eae7f8e2f3573a90764ae4d0", "subject": "ASoC: tas2781: bound firmware description string parsing", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68348", "commit_url": "https://git.kernel.org/stable/c/bc889dfcea9294a1eae7f8e2f3573a90764ae4d0" }, { "cve": "CVE-2026-68349", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "a1a21995c2e1cc2ca6b2226cfe4f5f018370182a", "subject": "wifi: carl9170: fix buffer overflow in rx_stream failover path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68349", "commit_url": "https://git.kernel.org/stable/c/a1a21995c2e1cc2ca6b2226cfe4f5f018370182a" }, { "cve": "CVE-2026-68350", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "a3f42f1049ad80c65560d2b078ad426c3134f78d", "subject": "wifi: carl9170: fix OOB read from off-by-two in TX status handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68350", "commit_url": "https://git.kernel.org/stable/c/a3f42f1049ad80c65560d2b078ad426c3134f78d" }, { "cve": "CVE-2026-68351", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "4cde55b2feff9504d1f993ab80e84e7ccb62791c", "subject": "wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68351", "commit_url": "https://git.kernel.org/stable/c/4cde55b2feff9504d1f993ab80e84e7ccb62791c" }, { "cve": "CVE-2026-68352", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "6b47b29730de3232b919d8362749f6814c5f2a33", "subject": "wifi: ath6kl: fix OOB read from firmware IE lengths in connect event", "cvss_score": 8.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68352", "commit_url": "https://git.kernel.org/stable/c/6b47b29730de3232b919d8362749f6814c5f2a33" }, { "cve": "CVE-2026-68353", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "3a21c89215cc18f1a97c5e5bfd1da6d4f3d44495", "subject": "wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68353", "commit_url": "https://git.kernel.org/stable/c/3a21c89215cc18f1a97c5e5bfd1da6d4f3d44495" }, { "cve": "CVE-2026-68354", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "d52a13adbb8ccbab99cd3bad36804e87d8b5c052", "subject": "firewire: net: Fix fragmented datagram reassembly", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68354", "commit_url": "https://git.kernel.org/stable/c/d52a13adbb8ccbab99cd3bad36804e87d8b5c052" }, { "cve": "CVE-2026-68355", "author_name": "Dmitry Morgun", "author_email": "d.morgun@ispras.ru", "fix_sha": "7f11e70629650ff6ea140984e5ce188b775b2683", "subject": "wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68355", "commit_url": "https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683" }, { "cve": "CVE-2026-68356", "author_name": "Wayen Yan", "author_email": "win847@gmail.com", "fix_sha": "bcfcd7619f277842430d197556463b401b839ee9", "subject": "watchdog: airoha: Prevent division by zero when clock frequency is zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68356", "commit_url": "https://git.kernel.org/stable/c/bcfcd7619f277842430d197556463b401b839ee9" }, { "cve": "CVE-2026-68357", "author_name": "Tzung-Bi Shih", "author_email": "tzungbi@kernel.org", "fix_sha": "7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661", "subject": "watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68357", "commit_url": "https://git.kernel.org/stable/c/7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661" }, { "cve": "CVE-2026-68358", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "f151d0143ac4e086f92f52328ebdbdc50933d8ef", "subject": "hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68358", "commit_url": "https://git.kernel.org/stable/c/f151d0143ac4e086f92f52328ebdbdc50933d8ef" }, { "cve": "CVE-2026-68359", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "59d104b54b0b42e30fd2a68d24ee5c49dcc54d1e", "subject": "hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68359", "commit_url": "https://git.kernel.org/stable/c/59d104b54b0b42e30fd2a68d24ee5c49dcc54d1e" }, { "cve": "CVE-2026-68360", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "94c87871b051d7ad758828a805215a2ec194512a", "subject": "hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68360", "commit_url": "https://git.kernel.org/stable/c/94c87871b051d7ad758828a805215a2ec194512a" }, { "cve": "CVE-2026-68361", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "9ab8656548cd737b98d0b19c4253aff8d68e97f4", "subject": "hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68361", "commit_url": "https://git.kernel.org/stable/c/9ab8656548cd737b98d0b19c4253aff8d68e97f4" }, { "cve": "CVE-2026-68362", "author_name": "Gaole Zhang", "author_email": "gaole.zhang@oss.qualcomm.com", "fix_sha": "e8d85672dd7e2523f774caafba8f858384e18df7", "subject": "wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68362", "commit_url": "https://git.kernel.org/stable/c/e8d85672dd7e2523f774caafba8f858384e18df7" }, { "cve": "CVE-2026-68363", "author_name": "Cheng Yongkang", "author_email": "teel4res@gmail.com", "fix_sha": "dad9f96945d77ecd4708f730c06ef54dcd8cc057", "subject": "wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68363", "commit_url": "https://git.kernel.org/stable/c/dad9f96945d77ecd4708f730c06ef54dcd8cc057" }, { "cve": "CVE-2026-68364", "author_name": "Ray Wu", "author_email": "ray.wu@amd.com", "fix_sha": "3714fe242592e3699ac5e2c19d68b275a210be7d", "subject": "drm/amd/display: Fix ISM dc_lock deadlock during suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68364", "commit_url": "https://git.kernel.org/stable/c/3714fe242592e3699ac5e2c19d68b275a210be7d" }, { "cve": "CVE-2026-68365", "author_name": "Sunho Park", "author_email": "shpark061104@gmail.com", "fix_sha": "faaddd811c5099f11a5f52e68a6b31a5898cda4f", "subject": "USB: serial: io_edgeport: cap received transmit credits", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68365", "commit_url": "https://git.kernel.org/stable/c/faaddd811c5099f11a5f52e68a6b31a5898cda4f" }, { "cve": "CVE-2026-68366", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "b70dc75e85ba968b7b76eebfe5d63000080b875b", "subject": "usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68366", "commit_url": "https://git.kernel.org/stable/c/b70dc75e85ba968b7b76eebfe5d63000080b875b" }, { "cve": "CVE-2026-68367", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "79e2d75725c85607f8a9d87ae9cace62a19f767d", "subject": "usb: gadget: f_tcm: synchronize delayed set_alt with teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68367", "commit_url": "https://git.kernel.org/stable/c/79e2d75725c85607f8a9d87ae9cace62a19f767d" }, { "cve": "CVE-2026-68368", "author_name": "Sonali Pradhan", "author_email": "sonalipradhan@google.com", "fix_sha": "1febec7e47cdcd01f43fb0211094e3010474666e", "subject": "usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68368", "commit_url": "https://git.kernel.org/stable/c/1febec7e47cdcd01f43fb0211094e3010474666e" }, { "cve": "CVE-2026-68369", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "c2e819be6a5c7f34344926b4bd7e3dfca58cf48a", "subject": "usb: gadget: printer: fix infinite loop in printer_read()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68369", "commit_url": "https://git.kernel.org/stable/c/c2e819be6a5c7f34344926b4bd7e3dfca58cf48a" }, { "cve": "CVE-2026-68370", "author_name": "Jinchao Wang", "author_email": "wangjinchao600@gmail.com", "fix_sha": "d5e5cd3654d2b5359a12ea6586120f05b28634ee", "subject": "usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68370", "commit_url": "https://git.kernel.org/stable/c/d5e5cd3654d2b5359a12ea6586120f05b28634ee" }, { "cve": "CVE-2026-68371", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "c947360ae63eee1c9eacc030dd6f5a53f717addf", "subject": "usb: musb: omap2430: Do not put borrowed of_node in probe", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68371", "commit_url": "https://git.kernel.org/stable/c/c947360ae63eee1c9eacc030dd6f5a53f717addf" }, { "cve": "CVE-2026-68372", "author_name": "Chia-Lin Kao (AceLan)", "author_email": "acelan.kao@canonical.com", "fix_sha": "e0b291fe117964037e0ba382eff4bb365d531c3a", "subject": "usb: core: port: Deattach Type-C connector on component unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68372", "commit_url": "https://git.kernel.org/stable/c/e0b291fe117964037e0ba382eff4bb365d531c3a" }, { "cve": "CVE-2026-68373", "author_name": "Huihui Huang", "author_email": "hhhuang@smu.edu.sg", "fix_sha": "61a799ffd1e5a4fd3702d547828b7ff3d161468e", "subject": "wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68373", "commit_url": "https://git.kernel.org/stable/c/61a799ffd1e5a4fd3702d547828b7ff3d161468e" }, { "cve": "CVE-2026-68374", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "4e0197fbb0eec588795d5431716a244d9ac8fa93", "subject": "usb: core: sysfs: add lock to bos_descriptors_read()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68374", "commit_url": "https://git.kernel.org/stable/c/4e0197fbb0eec588795d5431716a244d9ac8fa93" }, { "cve": "CVE-2026-68375", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "1cb8553c02e93e5a150cebd42f9ee3db0ece4707", "subject": "bnxt_en: Handle partially initialized auxiliary devices", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68375", "commit_url": "https://git.kernel.org/stable/c/1cb8553c02e93e5a150cebd42f9ee3db0ece4707" }, { "cve": "CVE-2026-68376", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "e0b5252a59383b77d1b8dbeda00b7184dd95f4d3", "subject": "sctp: fix auth_hmacs array size in struct sctp_cookie", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68376", "commit_url": "https://git.kernel.org/stable/c/e0b5252a59383b77d1b8dbeda00b7184dd95f4d3" }, { "cve": "CVE-2026-68377", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "f1f5c8a3955f8fda3f84ed883ac8daa1847e724c", "subject": "net/sched: act_tunnel_key: Defer dst_release to RCU callback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68377", "commit_url": "https://git.kernel.org/stable/c/f1f5c8a3955f8fda3f84ed883ac8daa1847e724c" }, { "cve": "CVE-2026-68378", "author_name": "Ivan Vecera", "author_email": "ivecera@redhat.com", "fix_sha": "d2e914a4a0d0f753dbae830264850d044026167c", "subject": "dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68378", "commit_url": "https://git.kernel.org/stable/c/d2e914a4a0d0f753dbae830264850d044026167c" }, { "cve": "CVE-2026-68379", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "2c1931a81122c3cdc4c89448fe0442c69e21c0d5", "subject": "tcp: fix TIME_WAIT socket reference leak on PSP policy failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68379", "commit_url": "https://git.kernel.org/stable/c/2c1931a81122c3cdc4c89448fe0442c69e21c0d5" }, { "cve": "CVE-2026-68380", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "faebb7ba1ac65fa5810b640df02ce04e509fdc11", "subject": "accel/amdxdna: Fix use-after-free of mm_struct in job scheduler", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68380", "commit_url": "https://git.kernel.org/stable/c/faebb7ba1ac65fa5810b640df02ce04e509fdc11" }, { "cve": "CVE-2026-68381", "author_name": "Qihang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "aa5d8f3f96aa11a4a54ce993c11ce8af11c546f9", "subject": "ksmbd: pin conn during async oplock break notification", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68381", "commit_url": "https://git.kernel.org/stable/c/aa5d8f3f96aa11a4a54ce993c11ce8af11c546f9" }, { "cve": "CVE-2026-68382", "author_name": "Arvind Yadav", "author_email": "arvind.yadav@intel.com", "fix_sha": "9b7e60184f4b22e893d4ae95234d5f26261a430c", "subject": "drm/xe/guc: Hold device ref until queue teardown completes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68382", "commit_url": "https://git.kernel.org/stable/c/9b7e60184f4b22e893d4ae95234d5f26261a430c" }, { "cve": "CVE-2026-68383", "author_name": "Arvind Yadav", "author_email": "arvind.yadav@intel.com", "fix_sha": "299bc6d50b1bed7d1f408391736712f01a0855e2", "subject": "drm/xe/guc: Keep scheduler timeline name alive", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68383", "commit_url": "https://git.kernel.org/stable/c/299bc6d50b1bed7d1f408391736712f01a0855e2" }, { "cve": "CVE-2026-68384", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "56441f9e08ad68697295b8835266d2bc48ab59b5", "subject": "drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68384", "commit_url": "https://git.kernel.org/stable/c/56441f9e08ad68697295b8835266d2bc48ab59b5" }, { "cve": "CVE-2026-68385", "author_name": "Vasily Gorbik", "author_email": "gor@linux.ibm.com", "fix_sha": "4bb06b60d982355e22647b3d12d6619419f8c1fa", "subject": "s390/checksum: Fix csum_partial() without vector facility", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68385", "commit_url": "https://git.kernel.org/stable/c/4bb06b60d982355e22647b3d12d6619419f8c1fa" }, { "cve": "CVE-2026-68386", "author_name": "Michal Luczaj", "author_email": "mhal@rbox.co", "fix_sha": "66efd3368ae10d05e08fbe6425b50fdec7186ac7", "subject": "bpf, sockmap: Reject unhashed UDP sockets on sockmap update", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68386", "commit_url": "https://git.kernel.org/stable/c/66efd3368ae10d05e08fbe6425b50fdec7186ac7" }, { "cve": "CVE-2026-68387", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "1e5185c090589f4146d728ab36417d8a5419f127", "subject": "can: raw: add locking for raw flags bitfield", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68387", "commit_url": "https://git.kernel.org/stable/c/1e5185c090589f4146d728ab36417d8a5419f127" }, { "cve": "CVE-2026-68388", "author_name": "Huiwen He", "author_email": "hehuiwen@kylinos.cn", "fix_sha": "b09ae45d85dc816987a71db9eebc54b0ae288e94", "subject": "smb/client: handle overlapping allocated ranges in fallocate", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68388", "commit_url": "https://git.kernel.org/stable/c/b09ae45d85dc816987a71db9eebc54b0ae288e94" }, { "cve": "CVE-2026-68389", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "bf587a10c33e5571a299742e45bc18960b9912e7", "subject": "Bluetooth: hci_qca: Clear memdump state on invalid dump size", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68389", "commit_url": "https://git.kernel.org/stable/c/bf587a10c33e5571a299742e45bc18960b9912e7" }, { "cve": "CVE-2026-68390", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "c363202ec841df36421ec280eea3d5f94f556143", "subject": "Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68390", "commit_url": "https://git.kernel.org/stable/c/c363202ec841df36421ec280eea3d5f94f556143" }, { "cve": "CVE-2026-68391", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "da55f570191d5d72f10c607a7043b947eb05ea46", "subject": "Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68391", "commit_url": "https://git.kernel.org/stable/c/da55f570191d5d72f10c607a7043b947eb05ea46" }, { "cve": "CVE-2026-68392", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "16cd66443957e4ad42155c6fec401012f600c6f8", "subject": "Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68392", "commit_url": "https://git.kernel.org/stable/c/16cd66443957e4ad42155c6fec401012f600c6f8" }, { "cve": "CVE-2026-68393", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "d5efd6e4b8b0634af6843178fe1a7dd2b2178a3d", "subject": "Bluetooth: hci_sync: extend conn_hash lookup critical sections", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68393", "commit_url": "https://git.kernel.org/stable/c/d5efd6e4b8b0634af6843178fe1a7dd2b2178a3d" }, { "cve": "CVE-2026-68394", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "2bf282f8f715f5d05d6f4c49ffb3bd241c5e667e", "subject": "Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68394", "commit_url": "https://git.kernel.org/stable/c/2bf282f8f715f5d05d6f4c49ffb3bd241c5e667e" }, { "cve": "CVE-2026-68395", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "4bbc16a353a98023e5ddfca7c1fc0e49971cf4d0", "subject": "ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68395", "commit_url": "https://git.kernel.org/stable/c/4bbc16a353a98023e5ddfca7c1fc0e49971cf4d0" }, { "cve": "CVE-2026-68396", "author_name": "David Jeffery", "author_email": "djeffery@redhat.com", "fix_sha": "dccf3b1798b70f94e958b3d00b83010399e6fb05", "subject": "scsi: core: wake eh reliably when using scsi_schedule_eh", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68396", "commit_url": "https://git.kernel.org/stable/c/dccf3b1798b70f94e958b3d00b83010399e6fb05" }, { "cve": "CVE-2026-68397", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4fa349156043dc119721d067329714179f501749", "subject": "net/iucv: take a reference on the socket found in afiucv_hs_rcv()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68397", "commit_url": "https://git.kernel.org/stable/c/4fa349156043dc119721d067329714179f501749" }, { "cve": "CVE-2026-68398", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "ec4215683e47424c9c4762fd3c60f552a3119142", "subject": "ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68398", "commit_url": "https://git.kernel.org/stable/c/ec4215683e47424c9c4762fd3c60f552a3119142" }, { "cve": "CVE-2026-68399", "author_name": "Matt Bobrowski", "author_email": "mattbobrowski@google.com", "fix_sha": "7cbd0c4cebe4c9f678d15e6b9ba975e1155a107f", "subject": "bpf: Fix UAF in sock clone early bailouts", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68399", "commit_url": "https://git.kernel.org/stable/c/7cbd0c4cebe4c9f678d15e6b9ba975e1155a107f" }, { "cve": "CVE-2026-68400", "author_name": "Sebastian Ene", "author_email": "sebastianene@google.com", "fix_sha": "b4d961351aa84fdf0148783fb1f3a1391b8a0adb", "subject": "firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68400", "commit_url": "https://git.kernel.org/stable/c/b4d961351aa84fdf0148783fb1f3a1391b8a0adb" }, { "cve": "CVE-2026-68401", "author_name": "Mostafa Saleh", "author_email": "smostafa@google.com", "fix_sha": "3383ffb7ef937317361713ffcc21921a7848511a", "subject": "firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68401", "commit_url": "https://git.kernel.org/stable/c/3383ffb7ef937317361713ffcc21921a7848511a" }, { "cve": "CVE-2026-68402", "author_name": "HE WEI (\u30ae\u30ab\u30af)", "author_email": "skyexpoc@gmail.com", "fix_sha": "cb8afea4655ff004fa7feee825d5c79783525383", "subject": "wifi: cfg80211: bound element ID read when checking non-inheritance", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68402", "commit_url": "https://git.kernel.org/stable/c/cb8afea4655ff004fa7feee825d5c79783525383" }, { "cve": "CVE-2026-68403", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "2a665946e0407a05a3f81bd56a08553c446498e0", "subject": "wifi: brcmfmac: initialize SDIO data work before cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68403", "commit_url": "https://git.kernel.org/stable/c/2a665946e0407a05a3f81bd56a08553c446498e0" }, { "cve": "CVE-2026-68404", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "0c2ed186bbe14304415476d6707b747dddcd8583", "subject": "wifi: cfg80211: use wiphy work for socket owner autodisconnect", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68404", "commit_url": "https://git.kernel.org/stable/c/0c2ed186bbe14304415476d6707b747dddcd8583" }, { "cve": "CVE-2026-68405", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "f3858d5b1432098c1936e03d6e03dd0e33facf60", "subject": "wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68405", "commit_url": "https://git.kernel.org/stable/c/f3858d5b1432098c1936e03d6e03dd0e33facf60" }, { "cve": "CVE-2026-68406", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "36230936468f0ba4930e94aef496fc229d4bb951", "subject": "wifi: cfg80211: validate PMSR FTM preamble range", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68406", "commit_url": "https://git.kernel.org/stable/c/36230936468f0ba4930e94aef496fc229d4bb951" }, { "cve": "CVE-2026-68407", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29c", "subject": "wifi: nl80211: free RNR data on MBSSID mismatch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68407", "commit_url": "https://git.kernel.org/stable/c/07a95ec2b54774201fdf4ef7ffb0ca2ab19ed29c" }, { "cve": "CVE-2026-68408", "author_name": "Peddolla Harshavardhan Reddy", "author_email": "peddolla.reddy@oss.qualcomm.com", "fix_sha": "2b0eab425e1f658d8fe1df7590e3b9af5959505e", "subject": "wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68408", "commit_url": "https://git.kernel.org/stable/c/2b0eab425e1f658d8fe1df7590e3b9af5959505e" }, { "cve": "CVE-2026-68409", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "aa2eb62525188269cdd402a583b9a8ed94657ff0", "subject": "wifi: mac80211: defer link RX stats percpu free to RCU", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68409", "commit_url": "https://git.kernel.org/stable/c/aa2eb62525188269cdd402a583b9a8ed94657ff0" }, { "cve": "CVE-2026-68410", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "63c2391deefb31e1b801b7f32bd502ca4808639b", "subject": "wifi: libertas: fix memory leak in helper_firmware_cb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68410", "commit_url": "https://git.kernel.org/stable/c/63c2391deefb31e1b801b7f32bd502ca4808639b" }, { "cve": "CVE-2026-68411", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "10a2b430f8f06ae14b9590b6f6faa6b588ef0654", "subject": "wifi: mac80211_hwsim: clamp virtio RX length before skb_put", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68411", "commit_url": "https://git.kernel.org/stable/c/10a2b430f8f06ae14b9590b6f6faa6b588ef0654" }, { "cve": "CVE-2026-68412", "author_name": "Christophe JAILLET", "author_email": "christophe.jaillet@wanadoo.fr", "fix_sha": "c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6", "subject": "wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68412", "commit_url": "https://git.kernel.org/stable/c/c6659f66d4ee4841aafae5659d2ef5e4c5c63cb6" }, { "cve": "CVE-2026-68413", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "0d388f62031dbabcba0f44bb91b59f10e88cac17", "subject": "wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68413", "commit_url": "https://git.kernel.org/stable/c/0d388f62031dbabcba0f44bb91b59f10e88cac17" }, { "cve": "CVE-2026-68414", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "edf0730be33696a1bd142792830d392129e495cc", "subject": "wifi: cfg80211: cancel sched scan results work on unregister", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68414", "commit_url": "https://git.kernel.org/stable/c/edf0730be33696a1bd142792830d392129e495cc" }, { "cve": "CVE-2026-68415", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "2538bd3cd1ff5af655908469544ac7b7ae259386", "subject": "xfrm: clear mode callbacks after failed mode setup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68415", "commit_url": "https://git.kernel.org/stable/c/2538bd3cd1ff5af655908469544ac7b7ae259386" }, { "cve": "CVE-2026-68416", "author_name": "Xue Lei", "author_email": "xue.lei@windriver.com", "fix_sha": "9d4af746af8ce27eefc2338b2feaa1e01f28b6c3", "subject": "mtd: fix double free and WARN_ON in add_mtd_device() error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68416", "commit_url": "https://git.kernel.org/stable/c/9d4af746af8ce27eefc2338b2feaa1e01f28b6c3" }, { "cve": "CVE-2026-68417", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "bb27fcc67c429d97f785c92c35a6c5adebb05d7f", "subject": "RDMA/siw: publish QP after initialization", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68417", "commit_url": "https://git.kernel.org/stable/c/bb27fcc67c429d97f785c92c35a6c5adebb05d7f" }, { "cve": "CVE-2026-68418", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "b9b0889071569d43623c260074e159cd8f26adb1", "subject": "RDMA/irdma: Prevent user-triggered null deref on QP create", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68418", "commit_url": "https://git.kernel.org/stable/c/b9b0889071569d43623c260074e159cd8f26adb1" }, { "cve": "CVE-2026-68419", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "a846aecb931b4d65d5eafa92a0623545af46d4f2", "subject": "RDMA/irdma: Prevent rereg_mr for non-mem regions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68419", "commit_url": "https://git.kernel.org/stable/c/a846aecb931b4d65d5eafa92a0623545af46d4f2" }, { "cve": "CVE-2026-68420", "author_name": "Antony Antony", "author_email": "antony.antony@secunet.com", "fix_sha": "ea528f18231ec0f33317be57f8866913b19aba6e", "subject": "xfrm: reject optional IPTFS templates in outbound policies", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68420", "commit_url": "https://git.kernel.org/stable/c/ea528f18231ec0f33317be57f8866913b19aba6e" }, { "cve": "CVE-2026-68421", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "b7d9c359e5cf867f7eb23df3bb1c6b9e58af24da", "subject": "sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68421", "commit_url": "https://git.kernel.org/stable/c/b7d9c359e5cf867f7eb23df3bb1c6b9e58af24da" }, { "cve": "CVE-2026-68422", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "ce6050bafb4e33377dc17fcc357736bfc351180c", "subject": "btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68422", "commit_url": "https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c" }, { "cve": "CVE-2026-68423", "author_name": "Harshit Mogalapalli", "author_email": "harshit.m.mogalapalli@oracle.com", "fix_sha": "4b45d7836b9526b8776af5f29219615be9417230", "subject": "mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68423", "commit_url": "https://git.kernel.org/stable/c/4b45d7836b9526b8776af5f29219615be9417230" }, { "cve": "CVE-2026-68424", "author_name": "Harshit Mogalapalli", "author_email": "harshit.m.mogalapalli@oracle.com", "fix_sha": "75c0c09541b49daa08fddbc2c18c2232f4eab7d8", "subject": "mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68424", "commit_url": "https://git.kernel.org/stable/c/75c0c09541b49daa08fddbc2c18c2232f4eab7d8" }, { "cve": "CVE-2026-68425", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d2e52d610b9b09694261632340b801a421e0b0c5", "subject": "IB/mad: Drop unmatched RMPP responses before reassembly", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68425", "commit_url": "https://git.kernel.org/stable/c/d2e52d610b9b09694261632340b801a421e0b0c5" }, { "cve": "CVE-2026-68426", "author_name": "Petr Wozniak", "author_email": "petr.wozniak@gmail.com", "fix_sha": "3f4c3919baf0944ad96580467c302bc6c7758b00", "subject": "xfrm: fix stale skb->prev after async crypto steals a GSO segment", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68426", "commit_url": "https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00" }, { "cve": "CVE-2026-68427", "author_name": "Mikko Perttunen", "author_email": "mperttunen@nvidia.com", "fix_sha": "266cddf7bd0f6c79b6c0633aef742a22bf70265b", "subject": "gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68427", "commit_url": "https://git.kernel.org/stable/c/266cddf7bd0f6c79b6c0633aef742a22bf70265b" }, { "cve": "CVE-2026-68428", "author_name": "Phil Rosenthal", "author_email": "phil@phil.gs", "fix_sha": "52f2f7c30126037975389aa04d24c506a5177c35", "subject": "KVM: x86/mmu: Fix use-after-free on vendor module reload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68428", "commit_url": "https://git.kernel.org/stable/c/52f2f7c30126037975389aa04d24c506a5177c35" }, { "cve": "CVE-2026-68429", "author_name": "Luca Coelho", "author_email": "luciano.coelho@intel.com", "fix_sha": "613059875958e7b217b250ed14c3b189f9488421", "subject": "drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68429", "commit_url": "https://git.kernel.org/stable/c/613059875958e7b217b250ed14c3b189f9488421" }, { "cve": "CVE-2026-68430", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "84a1a8a952ab4b8c23c5dd1f2eea4049cb4914f5", "subject": "drm/amdgpu/gfx8: drop unecessary BUG_ON()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68430", "commit_url": "https://git.kernel.org/stable/c/84a1a8a952ab4b8c23c5dd1f2eea4049cb4914f5" }, { "cve": "CVE-2026-68431", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "cfc0b8e5080aec87700774e8568765eaa4b7b92b", "subject": "ksmbd: validate minimum PDU size for transform requests", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68431", "commit_url": "https://git.kernel.org/stable/c/cfc0b8e5080aec87700774e8568765eaa4b7b92b" }, { "cve": "CVE-2026-68432", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "3a61bd9637f3d929aa846e4eb3d98b48c26fcb0e", "subject": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68432", "commit_url": "https://git.kernel.org/stable/c/3a61bd9637f3d929aa846e4eb3d98b48c26fcb0e" }, { "cve": "CVE-2026-68433", "author_name": "Douya Le", "author_email": "ldy3087146292@gmail.com", "fix_sha": "d3c32939fa0e3ee9b883b9a0fd1972c5c444e3d0", "subject": "libceph: bound get_version reply decode to front len", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68433", "commit_url": "https://git.kernel.org/stable/c/d3c32939fa0e3ee9b883b9a0fd1972c5c444e3d0" }, { "cve": "CVE-2026-68434", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "7fb13fd7e9a59a37cd911efff83abe19e3ee029d", "subject": "serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68434", "commit_url": "https://git.kernel.org/stable/c/7fb13fd7e9a59a37cd911efff83abe19e3ee029d" }, { "cve": "CVE-2026-68435", "author_name": "George Guo", "author_email": "guodongtai@kylinos.cn", "fix_sha": "485ed44db5694d8d2e5027f63ad608e705286f30", "subject": "LoongArch: Fix address space mismatch in kexec command line lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68435", "commit_url": "https://git.kernel.org/stable/c/485ed44db5694d8d2e5027f63ad608e705286f30" }, { "cve": "CVE-2026-68436", "author_name": "Honglei Huang", "author_email": "honghuan@amd.com", "fix_sha": "75050390151a14802be433c3856ddcb483cecd24", "subject": "drm/amd/display: use kvzalloc to allocate struct dc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68436", "commit_url": "https://git.kernel.org/stable/c/75050390151a14802be433c3856ddcb483cecd24" }, { "cve": "CVE-2026-68437", "author_name": "Alessio Belle", "author_email": "alessio.belle@imgtec.com", "fix_sha": "4baf9e70cb756d78dd56419f8baee2978a72d0c3", "subject": "drm/imagination: Fit paired fragment job in the correct CCCB", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68437", "commit_url": "https://git.kernel.org/stable/c/4baf9e70cb756d78dd56419f8baee2978a72d0c3" }, { "cve": "CVE-2026-68438", "author_name": "Chuyi Zhou", "author_email": "zhouchuyi@bytedance.com", "fix_sha": "35551efb155e3b83445a6c3f66cb498d5efc182c", "subject": "smp: Make CSD lock acquisition atomic for debug mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68438", "commit_url": "https://git.kernel.org/stable/c/35551efb155e3b83445a6c3f66cb498d5efc182c" }, { "cve": "CVE-2026-68439", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "8d1b6738c1ab48c086b17e7994034aca94258931", "subject": "wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68439", "commit_url": "https://git.kernel.org/stable/c/8d1b6738c1ab48c086b17e7994034aca94258931" }, { "cve": "CVE-2026-68440", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "6a905a71fd43ce8b45f05044b11491337f232c9d", "subject": "net: txgbe: fix heap overflow when reading module EEPROM", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68440", "commit_url": "https://git.kernel.org/stable/c/6a905a71fd43ce8b45f05044b11491337f232c9d" }, { "cve": "CVE-2026-68441", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "ec48b3be2c8595dd290be883dbd4fb8b2f9f5d5e", "subject": "net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68441", "commit_url": "https://git.kernel.org/stable/c/ec48b3be2c8595dd290be883dbd4fb8b2f9f5d5e" }, { "cve": "CVE-2026-68442", "author_name": "Leo Martins", "author_email": "loemra.dev@gmail.com", "fix_sha": "5eff4d5b17fa1950e80bfd1ba43dc0699e61a644", "subject": "btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68442", "commit_url": "https://git.kernel.org/stable/c/5eff4d5b17fa1950e80bfd1ba43dc0699e61a644" }, { "cve": "CVE-2026-68443", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "ff0c5c53d08274e200b48a4d53aa078265e873cb", "subject": "hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68443", "commit_url": "https://git.kernel.org/stable/c/ff0c5c53d08274e200b48a4d53aa078265e873cb" }, { "cve": "CVE-2026-68444", "author_name": "Unnathi Chalicheemala", "author_email": "unnathi.chalicheemala@oss.qualcomm.com", "fix_sha": "8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8", "subject": "firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68444", "commit_url": "https://git.kernel.org/stable/c/8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8" }, { "cve": "CVE-2026-68445", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "0c9e6367639548307d3f578f6943ce72c9d39087", "subject": "drm/vc4: Prevent shader BO mappings from becoming writable", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68445", "commit_url": "https://git.kernel.org/stable/c/0c9e6367639548307d3f578f6943ce72c9d39087" }, { "cve": "CVE-2026-68446", "author_name": "Ian Forbes", "author_email": "ian.forbes@broadcom.com", "fix_sha": "a4f55260f7f7d4dc4d0ee55063dfb0c457b77991", "subject": "drm/vmwgfx: Validate vmw_surface_metadata::array_size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68446", "commit_url": "https://git.kernel.org/stable/c/a4f55260f7f7d4dc4d0ee55063dfb0c457b77991" }, { "cve": "CVE-2026-68447", "author_name": "Yongqiang Sun", "author_email": "yongqiang.sun@amd.com", "fix_sha": "426ffae6ecc7ec77d32bf8be065c21a1b881b084", "subject": "drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68447", "commit_url": "https://git.kernel.org/stable/c/426ffae6ecc7ec77d32bf8be065c21a1b881b084" }, { "cve": "CVE-2026-68448", "author_name": "Amir Goldstein", "author_email": "amir73il@gmail.com", "fix_sha": "a1e0eb8f55cfe09bb31a202a388babc411292656", "subject": "ovl: check access to copy_file_range source with src mounter creds", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68448", "commit_url": "https://git.kernel.org/stable/c/a1e0eb8f55cfe09bb31a202a388babc411292656" }, { "cve": "CVE-2026-68449", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "c2130f6553f4a5cbdc259de069600117a995f197", "subject": "ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68449", "commit_url": "https://git.kernel.org/stable/c/c2130f6553f4a5cbdc259de069600117a995f197" }, { "cve": "CVE-2026-68450", "author_name": "Guanghui Yang", "author_email": "3497809730@qq.com", "fix_sha": "6a8269b6459ed870a8156c106a0f597383907872", "subject": "btrfs: free mapping node on duplicate reloc root insert", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68450", "commit_url": "https://git.kernel.org/stable/c/6a8269b6459ed870a8156c106a0f597383907872" }, { "cve": "CVE-2026-68451", "author_name": "Holger Dengler", "author_email": "dengler@linux.ibm.com", "fix_sha": "a9ae0f6dd45c3ccc1d69363f7aea8af179122730", "subject": "s390/zcrypt: Validate length for CCA ECC private key requests", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68451", "commit_url": "https://git.kernel.org/stable/c/a9ae0f6dd45c3ccc1d69363f7aea8af179122730" }, { "cve": "CVE-2026-68452", "author_name": "Holger Dengler", "author_email": "dengler@linux.ibm.com", "fix_sha": "06afe425d5283b9764303de47f554da5a808ce8a", "subject": "s390/zcrypt: Validate length for CCA AES cipher key requests", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68452", "commit_url": "https://git.kernel.org/stable/c/06afe425d5283b9764303de47f554da5a808ce8a" }, { "cve": "CVE-2026-68453", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "36b230835b8a008266aad22168ca52afacc8a58d", "subject": "s390/zcrypt: Fix buffer over-read in cca_cipher2protkey", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68453", "commit_url": "https://git.kernel.org/stable/c/36b230835b8a008266aad22168ca52afacc8a58d" }, { "cve": "CVE-2026-68454", "author_name": "Matthew Rosato", "author_email": "mjrosato@linux.ibm.com", "fix_sha": "3e3aa6da87d30a0064a17b836685cd43c90a3572", "subject": "KVM: s390: pci: Fix handling of AIF enable without AISB", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68454", "commit_url": "https://git.kernel.org/stable/c/3e3aa6da87d30a0064a17b836685cd43c90a3572" }, { "cve": "CVE-2026-68455", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "507e3b479f9c6d85135eb5e1a77fb3fddb259ad8", "subject": "liveupdate: validate session type before performing operation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68455", "commit_url": "https://git.kernel.org/stable/c/507e3b479f9c6d85135eb5e1a77fb3fddb259ad8" }, { "cve": "CVE-2026-68456", "author_name": "Mauricio Faria de Oliveira", "author_email": "mfo@igalia.com", "fix_sha": "e2674dfbed8a30d57e2bc872c4bfa6c3eec918bf", "subject": "usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68456", "commit_url": "https://git.kernel.org/stable/c/e2674dfbed8a30d57e2bc872c4bfa6c3eec918bf" }, { "cve": "CVE-2026-68457", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "c6394bcaf254c5baf9aff43376020be5db6d3316", "subject": "ksmbd: use opener credentials for FSCTL mutations", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68457", "commit_url": "https://git.kernel.org/stable/c/c6394bcaf254c5baf9aff43376020be5db6d3316" }, { "cve": "CVE-2026-68458", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "b34826e55aad3520ec813f1f367c11b24b29dc9f", "subject": "binder: cache secctx size before release zeroes it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68458", "commit_url": "https://git.kernel.org/stable/c/b34826e55aad3520ec813f1f367c11b24b29dc9f" }, { "cve": "CVE-2026-68459", "author_name": "Chao Yu", "author_email": "chao@kernel.org", "fix_sha": "8b4468ec023d0d1b4669dfb867588997cc03a06b", "subject": "f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68459", "commit_url": "https://git.kernel.org/stable/c/8b4468ec023d0d1b4669dfb867588997cc03a06b" }, { "cve": "CVE-2026-68460", "author_name": "Ruipeng Qi", "author_email": "ruipengqi3@gmail.com", "fix_sha": "dd3114870771562036fdcf5abe813956f36d224d", "subject": "f2fs: fix potential deadlock in f2fs_balance_fs()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68460", "commit_url": "https://git.kernel.org/stable/c/dd3114870771562036fdcf5abe813956f36d224d" }, { "cve": "CVE-2026-68461", "author_name": "Bartosz Golaszewski", "author_email": "bartosz.golaszewski@oss.qualcomm.com", "fix_sha": "7eba000621fff223dd7bab484d48918c7c77a307", "subject": "device property: initialize the remaining fields of fwnode_handle in fwnode_init()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68461", "commit_url": "https://git.kernel.org/stable/c/7eba000621fff223dd7bab484d48918c7c77a307" }, { "cve": "CVE-2026-68462", "author_name": "Sun Jian", "author_email": "sun.jian.kdev@gmail.com", "fix_sha": "fd4cfa8c8f9a17cdec0539334d28754bc1d8a5d9", "subject": "bpf: Reject negative const offsets for buffer pointers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68462", "commit_url": "https://git.kernel.org/stable/c/fd4cfa8c8f9a17cdec0539334d28754bc1d8a5d9" }, { "cve": "CVE-2026-68463", "author_name": "Luke Wang", "author_email": "ziniu.wang_1@nxp.com", "fix_sha": "8da5930144712412d85e7f868693d96ec5c2018c", "subject": "mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68463", "commit_url": "https://git.kernel.org/stable/c/8da5930144712412d85e7f868693d96ec5c2018c" }, { "cve": "CVE-2026-68464", "author_name": "Luke Wang", "author_email": "ziniu.wang_1@nxp.com", "fix_sha": "9d87eaf985cef9581b6ed99b461b38e8cd666480", "subject": "mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68464", "commit_url": "https://git.kernel.org/stable/c/9d87eaf985cef9581b6ed99b461b38e8cd666480" }, { "cve": "CVE-2026-68465", "author_name": "Luke Wang", "author_email": "ziniu.wang_1@nxp.com", "fix_sha": "5adc14cd4b905629d5b9163b3a416dcab24c7ce2", "subject": "mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68465", "commit_url": "https://git.kernel.org/stable/c/5adc14cd4b905629d5b9163b3a416dcab24c7ce2" }, { "cve": "CVE-2026-68466", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "17a8ce84964f243c8f89dc7353ac7e8d3137bc74", "subject": "mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68466", "commit_url": "https://git.kernel.org/stable/c/17a8ce84964f243c8f89dc7353ac7e8d3137bc74" }, { "cve": "CVE-2026-68467", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "d322e40f4edf92bf0ca329e5aa4ae1c0316feb38", "subject": "mtd: mchp23k256: use SPI match data for chip caps", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68467", "commit_url": "https://git.kernel.org/stable/c/d322e40f4edf92bf0ca329e5aa4ae1c0316feb38" }, { "cve": "CVE-2026-68468", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "caa0ecbeff4f7fbf70f22bd8ca598918bffb1b78", "subject": "mtd: virt-concat: free duplicate generated name", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68468", "commit_url": "https://git.kernel.org/stable/c/caa0ecbeff4f7fbf70f22bd8ca598918bffb1b78" }, { "cve": "CVE-2026-68469", "author_name": "Rafael Beims", "author_email": "rafael.beims@toradex.com", "fix_sha": "d78a407bad6f500884a8606aea1a5a9207be4030", "subject": "wifi: mwifiex: fix permanently busy scans after multiple roam iterations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68469", "commit_url": "https://git.kernel.org/stable/c/d78a407bad6f500884a8606aea1a5a9207be4030" }, { "cve": "CVE-2026-68470", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "57d503ce32eccfa7650065ca4c560f7e29a2e676", "subject": "wifi: mac80211: validate extension-frame layout before RX", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68470", "commit_url": "https://git.kernel.org/stable/c/57d503ce32eccfa7650065ca4c560f7e29a2e676" }, { "cve": "CVE-2026-68471", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "293baeae9b2434a3e432629d7720b5603db2d77e", "subject": "wifi: ieee80211: validate MLE common info length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68471", "commit_url": "https://git.kernel.org/stable/c/293baeae9b2434a3e432629d7720b5603db2d77e" }, { "cve": "CVE-2026-68472", "author_name": "Haofeng Li", "author_email": "lihaofeng@kylinos.cn", "fix_sha": "74e27cd1d98b546fdb276008a83708d062339661", "subject": "wifi: cfg80211: validate EHT MLE before MLD ID read", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68472", "commit_url": "https://git.kernel.org/stable/c/74e27cd1d98b546fdb276008a83708d062339661" }, { "cve": "CVE-2026-68473", "author_name": "Ethan Nelson-Moore", "author_email": "enelsonmoore@gmail.com", "fix_sha": "d610d3ab18197d87618da11ec5fe8b3cebf32208", "subject": "powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68473", "commit_url": "https://git.kernel.org/stable/c/d610d3ab18197d87618da11ec5fe8b3cebf32208" }, { "cve": "CVE-2026-68474", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "47b87f469a35b5ffc81c16eee6b13a9b6c8d55c6", "subject": "powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68474", "commit_url": "https://git.kernel.org/stable/c/47b87f469a35b5ffc81c16eee6b13a9b6c8d55c6" }, { "cve": "CVE-2026-68475", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "1a8c89f8c112c75e84ff9a140f969e372aed0c9a", "subject": "reset: sunxi: fix memory region leak on ioremap failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68475", "commit_url": "https://git.kernel.org/stable/c/1a8c89f8c112c75e84ff9a140f969e372aed0c9a" }, { "cve": "CVE-2026-68476", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "a2f57827bf7c695b8c72dc4511cae8e86582369d", "subject": "ipvs: reload ip header after head reallocation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68476", "commit_url": "https://git.kernel.org/stable/c/a2f57827bf7c695b8c72dc4511cae8e86582369d" }, { "cve": "CVE-2026-68477", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "b3fe4cbd583895987935a9bdad01c8f9d3a02310", "subject": "ipvs: fix more places with wrong ipv6 transport offsets", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68477", "commit_url": "https://git.kernel.org/stable/c/b3fe4cbd583895987935a9bdad01c8f9d3a02310" }, { "cve": "CVE-2026-68478", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "718178f524b98bc920d74bc771aed823c8b81425", "subject": "memstick: ms_block: reject a card that reports too many blocks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68478", "commit_url": "https://git.kernel.org/stable/c/718178f524b98bc920d74bc771aed823c8b81425" }, { "cve": "CVE-2026-68479", "author_name": "Laxman Acharya Padhya", "author_email": "acharyalaxman8848@gmail.com", "fix_sha": "609c5b04a28dc1b0f3af6a7bc93055135b2d2059", "subject": "Bluetooth: btrtl: validate firmware patch bounds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68479", "commit_url": "https://git.kernel.org/stable/c/609c5b04a28dc1b0f3af6a7bc93055135b2d2059" }, { "cve": "CVE-2026-68480", "author_name": "Borislav Petkov (AMD)", "author_email": "bp@alien8.de", "fix_sha": "7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9", "subject": "x86/bugs: Make Safe-RET robust against interrupt injection", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68480", "commit_url": "https://git.kernel.org/stable/c/7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9" }, { "cve": "CVE-2026-72003", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "240c8d2c717b3f8153e7e877b22a82518d78dbdc", "subject": "wifi: brcmfmac: cyw: fix heap overflow on a short auth frame", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72003", "commit_url": "https://git.kernel.org/stable/c/240c8d2c717b3f8153e7e877b22a82518d78dbdc" }, { "cve": "CVE-2026-72004", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "95fc02722edde02946d0d475221f2b2054d3d8ba", "subject": "wifi: mac80211: fix memory leak in ieee80211_register_hw()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72004", "commit_url": "https://git.kernel.org/stable/c/95fc02722edde02946d0d475221f2b2054d3d8ba" }, { "cve": "CVE-2026-72005", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "536fb3d739d75a03cb318c0c6fe799425cfea501", "subject": "wifi: rt2x00: avoid full teardown before work setup in probe", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72005", "commit_url": "https://git.kernel.org/stable/c/536fb3d739d75a03cb318c0c6fe799425cfea501" }, { "cve": "CVE-2026-72006", "author_name": "Zhiping Zhang", "author_email": "zhipingz@meta.com", "fix_sha": "df6134b527a88b3e65ba6ae5073664af091d5fd2", "subject": "net/mlx5: free mlx5_st_idx_data on final dealloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72006", "commit_url": "https://git.kernel.org/stable/c/df6134b527a88b3e65ba6ae5073664af091d5fd2" }, { "cve": "CVE-2026-72007", "author_name": "Peng Fan", "author_email": "peng.fan@nxp.com", "fix_sha": "25e252bcf1593b420b12a7231d9dd64b885a2ae2", "subject": "pmdomain: imx: Fix i.MX8MP VC8000E power up sequence", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72007", "commit_url": "https://git.kernel.org/stable/c/25e252bcf1593b420b12a7231d9dd64b885a2ae2" }, { "cve": "CVE-2026-72008", "author_name": "AngeloGioacchino Del Regno", "author_email": "angelogioacchino.delregno@collabora.com", "fix_sha": "a4876f11aa1d076802676e23f8af500706e780e3", "subject": "pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72008", "commit_url": "https://git.kernel.org/stable/c/a4876f11aa1d076802676e23f8af500706e780e3" }, { "cve": "CVE-2026-72009", "author_name": "Guoniu Zhou", "author_email": "guoniu.zhou@oss.nxp.com", "fix_sha": "99611233f8cda833169fa6487d5dacdf189e5cb0", "subject": "pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72009", "commit_url": "https://git.kernel.org/stable/c/99611233f8cda833169fa6487d5dacdf189e5cb0" }, { "cve": "CVE-2026-72010", "author_name": "Farhad Alemi", "author_email": "farhad.alemi@berkeley.edu", "fix_sha": "b983c56426383e4a06fa5970c4e33cee879b1482", "subject": "cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72010", "commit_url": "https://git.kernel.org/stable/c/b983c56426383e4a06fa5970c4e33cee879b1482" }, { "cve": "CVE-2026-72011", "author_name": "Heiko Carstens", "author_email": "hca@linux.ibm.com", "fix_sha": "b7577fe4c47a31ca7c99714c53244a44af03cdfe", "subject": "s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72011", "commit_url": "https://git.kernel.org/stable/c/b7577fe4c47a31ca7c99714c53244a44af03cdfe" }, { "cve": "CVE-2026-72012", "author_name": "Crystal Wood", "author_email": "crwood@redhat.com", "fix_sha": "fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a", "subject": "tracing/osnoise: Call synchronize_rcu() when unregistering", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72012", "commit_url": "https://git.kernel.org/stable/c/fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a" }, { "cve": "CVE-2026-72013", "author_name": "Tao Liu", "author_email": "ltao@redhat.com", "fix_sha": "81bbcff0c053c4f5c711c31a9b72fc492bd96c3f", "subject": "riscv: Prevent NULL pointer dereference in machine_kexec_prepare()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72013", "commit_url": "https://git.kernel.org/stable/c/81bbcff0c053c4f5c711c31a9b72fc492bd96c3f" }, { "cve": "CVE-2026-72014", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "bd910a7660d280595ef94cb6d193951d855d330f", "subject": "drbd: reject data replies with an out-of-range payload size", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72014", "commit_url": "https://git.kernel.org/stable/c/bd910a7660d280595ef94cb6d193951d855d330f" }, { "cve": "CVE-2026-72015", "author_name": "Reinette Chatre", "author_email": "reinette.chatre@intel.com", "fix_sha": "b9f089723aee892efc77c349ae47a6b452b293c4", "subject": "fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72015", "commit_url": "https://git.kernel.org/stable/c/b9f089723aee892efc77c349ae47a6b452b293c4" }, { "cve": "CVE-2026-72016", "author_name": "Jinjie Ruan", "author_email": "ruanjinjie@huawei.com", "fix_sha": "f9a82544c7174851f5c7524622f5966dcafd3a47", "subject": "cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72016", "commit_url": "https://git.kernel.org/stable/c/f9a82544c7174851f5c7524622f5966dcafd3a47" }, { "cve": "CVE-2026-72017", "author_name": "Th\u00e9o Lebrun", "author_email": "theo.lebrun@bootlin.com", "fix_sha": "27f575836cfebbf872dec020428742b10650a955", "subject": "net: macb: drop in-flight Tx SKBs on close", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72017", "commit_url": "https://git.kernel.org/stable/c/27f575836cfebbf872dec020428742b10650a955" }, { "cve": "CVE-2026-72018", "author_name": "Dust Li", "author_email": "dust.li@linux.alibaba.com", "fix_sha": "78237e3c0720fcc6eb9b87e90fd70f63eeca886f", "subject": "dibs: loopback: validate offset and size in move_data()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72018", "commit_url": "https://git.kernel.org/stable/c/78237e3c0720fcc6eb9b87e90fd70f63eeca886f" }, { "cve": "CVE-2026-72019", "author_name": "Daehyeon Ko", "author_email": "4ncienth@gmail.com", "fix_sha": "f5089008f90c0a7c5520dff3934e0af00adf322d", "subject": "macsec: don't read an unset MAC header in macsec_encrypt()", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72019", "commit_url": "https://git.kernel.org/stable/c/f5089008f90c0a7c5520dff3934e0af00adf322d" }, { "cve": "CVE-2026-72020", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "2975324d164c552b028632f107b567302863b7f6", "subject": "ipvs: reset full ip_vs_seq structs in ip_vs_conn_new", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72020", "commit_url": "https://git.kernel.org/stable/c/2975324d164c552b028632f107b567302863b7f6" }, { "cve": "CVE-2026-72021", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "2f75c0faa3361b28e36cc0512b3299e163e25789", "subject": "ipvs: use parsed transport offset in SCTP state lookup", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72021", "commit_url": "https://git.kernel.org/stable/c/2f75c0faa3361b28e36cc0512b3299e163e25789" }, { "cve": "CVE-2026-72022", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "660667cd406648bbaffbd5c0d897c2263a852f11", "subject": "llc: fix SAP refcount leak in llc_ui_autobind()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72022", "commit_url": "https://git.kernel.org/stable/c/660667cd406648bbaffbd5c0d897c2263a852f11" }, { "cve": "CVE-2026-72023", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "62e7df6d042aeebd5efb581074e28865c04477be", "subject": "octeontx2-pf: fix SQB pointer leak on init failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72023", "commit_url": "https://git.kernel.org/stable/c/62e7df6d042aeebd5efb581074e28865c04477be" }, { "cve": "CVE-2026-72024", "author_name": "Yousef Alhouseen", "author_email": "alhouseenyousef@gmail.com", "fix_sha": "539dfcf69105d8d3d4d677b71de6e5ede2e6dfa0", "subject": "mac802154: remove interfaces with RCU list deletion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72024", "commit_url": "https://git.kernel.org/stable/c/539dfcf69105d8d3d4d677b71de6e5ede2e6dfa0" }, { "cve": "CVE-2026-72025", "author_name": "Gerald Schaefer", "author_email": "gerald.schaefer@linux.ibm.com", "fix_sha": "2995ccec260caa9e85b3301a4aba1e66ed80ad74", "subject": "s390/monwriter: Reject buffer reuse with different data length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72025", "commit_url": "https://git.kernel.org/stable/c/2995ccec260caa9e85b3301a4aba1e66ed80ad74" }, { "cve": "CVE-2026-72026", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "1358126fbed104e5657955d3ba029b283687ba02", "subject": "irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72026", "commit_url": "https://git.kernel.org/stable/c/1358126fbed104e5657955d3ba029b283687ba02" }, { "cve": "CVE-2026-72027", "author_name": "Zi Yan", "author_email": "ziy@nvidia.com", "fix_sha": "7da7d599b8a83271c464adfd5ef160202b470570", "subject": "mm/compaction: handle free_pages_prepare() properly in compaction_free()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72027", "commit_url": "https://git.kernel.org/stable/c/7da7d599b8a83271c464adfd5ef160202b470570" }, { "cve": "CVE-2026-72028", "author_name": "Martin Kaiser", "author_email": "martin@kaiser.cx", "fix_sha": "bc7b086a45521a986a49045907f017e3e46c763e", "subject": "riscv: probes: save original sp in rethook trampoline", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72028", "commit_url": "https://git.kernel.org/stable/c/bc7b086a45521a986a49045907f017e3e46c763e" }, { "cve": "CVE-2026-72029", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "526b8ef54668780c8f69e0211c342763d5dcbad1", "subject": "net: wwan: iosm: bound device offsets in the MUX downlink decoder", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72029", "commit_url": "https://git.kernel.org/stable/c/526b8ef54668780c8f69e0211c342763d5dcbad1" }, { "cve": "CVE-2026-72030", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "533a0b940f901c15e5cbbd4b5d66e871c209e8ce", "subject": "ata: libata-core: Reject an invalid concurrent positioning ranges count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72030", "commit_url": "https://git.kernel.org/stable/c/533a0b940f901c15e5cbbd4b5d66e871c209e8ce" }, { "cve": "CVE-2026-72031", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "462775c620197adaabc983ce847e5b9878ff4cb0", "subject": "ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72031", "commit_url": "https://git.kernel.org/stable/c/462775c620197adaabc983ce847e5b9878ff4cb0" }, { "cve": "CVE-2026-72032", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "bb09d0e64ecaa0aa0f7d1133a1696ed74dead295", "subject": "net/mlx5: HWS, fix matcher leak on resize target setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72032", "commit_url": "https://git.kernel.org/stable/c/bb09d0e64ecaa0aa0f7d1133a1696ed74dead295" }, { "cve": "CVE-2026-72033", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "18227a6bc98bd0ba96ed3ce9d5b28776a5a28dfc", "subject": "orangefs: keep the readdir entry size 64-bit in fill_from_part()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72033", "commit_url": "https://git.kernel.org/stable/c/18227a6bc98bd0ba96ed3ce9d5b28776a5a28dfc" }, { "cve": "CVE-2026-72034", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "6c732471740bc2ac9b0946134f9f551dc75f4369", "subject": "fhandle: reject detached mounts in capable_wrt_mount()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72034", "commit_url": "https://git.kernel.org/stable/c/6c732471740bc2ac9b0946134f9f551dc75f4369" }, { "cve": "CVE-2026-72035", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "e056e1dfcddca877dd46d704e8ec9860cfc9ec44", "subject": "net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72035", "commit_url": "https://git.kernel.org/stable/c/e056e1dfcddca877dd46d704e8ec9860cfc9ec44" }, { "cve": "CVE-2026-72036", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "54f6b0c843e228d499eb4b6bbb89df68cad9ad5d", "subject": "net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72036", "commit_url": "https://git.kernel.org/stable/c/54f6b0c843e228d499eb4b6bbb89df68cad9ad5d" }, { "cve": "CVE-2026-72037", "author_name": "Andrea Righi", "author_email": "arighi@nvidia.com", "fix_sha": "39139b1c1c2b614096519b526112c726adb12ff0", "subject": "net: lan743x: Initialize eth_syslock spinlock before use", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72037", "commit_url": "https://git.kernel.org/stable/c/39139b1c1c2b614096519b526112c726adb12ff0" }, { "cve": "CVE-2026-72038", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496", "subject": "net: liquidio: fix BAR resource leak on PF number failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72038", "commit_url": "https://git.kernel.org/stable/c/c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496" }, { "cve": "CVE-2026-72039", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "a986fde914d88af47eb78fd29c5d1af7952c3500", "subject": "bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72039", "commit_url": "https://git.kernel.org/stable/c/a986fde914d88af47eb78fd29c5d1af7952c3500" }, { "cve": "CVE-2026-72040", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "a3f3859cecacb64f18fd446271ece9a3b3f2d4de", "subject": "ipmi: fix refcount leak in i_ipmi_request()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72040", "commit_url": "https://git.kernel.org/stable/c/a3f3859cecacb64f18fd446271ece9a3b3f2d4de" }, { "cve": "CVE-2026-72041", "author_name": "Sabrina Dubroca", "author_email": "sd@queasysnail.net", "fix_sha": "007800408002d871f5699bdb944f985896730b8f", "subject": "espintcp: use sk_msg_free_partial to fix partial send", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72041", "commit_url": "https://git.kernel.org/stable/c/007800408002d871f5699bdb944f985896730b8f" }, { "cve": "CVE-2026-72042", "author_name": "Matt Fleming", "author_email": "mfleming@cloudflare.com", "fix_sha": "6aa9e61c46465d231e9beddf56af7effd71be682", "subject": "ipmi: Fix user refcount underflow in event delivery", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72042", "commit_url": "https://git.kernel.org/stable/c/6aa9e61c46465d231e9beddf56af7effd71be682" }, { "cve": "CVE-2026-72043", "author_name": "Hongchen Zhang", "author_email": "zhanghongchen@loongson.cn", "fix_sha": "018e9828eb523c638fa3d9bdf0fd4956b74555b2", "subject": "LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72043", "commit_url": "https://git.kernel.org/stable/c/018e9828eb523c638fa3d9bdf0fd4956b74555b2" }, { "cve": "CVE-2026-72045", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "8cdcf3d2caacdee7ddd363705fb4d93b0c1a0915", "subject": "octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72045", "commit_url": "https://git.kernel.org/stable/c/8cdcf3d2caacdee7ddd363705fb4d93b0c1a0915" }, { "cve": "CVE-2026-72046", "author_name": "Ankit Garg", "author_email": "nktgrg@google.com", "fix_sha": "d676c9a73bdcd8237425dbb826f2bd1a25c36e40", "subject": "gve: fix header buffer corruption with header-split and HW-GRO", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72046", "commit_url": "https://git.kernel.org/stable/c/d676c9a73bdcd8237425dbb826f2bd1a25c36e40" }, { "cve": "CVE-2026-72047", "author_name": "Shitalkumar Gandhi", "author_email": "shital.gandhi45@gmail.com", "fix_sha": "6d7f7bcf225b2d566176bf6229dbd1252940cb3c", "subject": "ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72047", "commit_url": "https://git.kernel.org/stable/c/6d7f7bcf225b2d566176bf6229dbd1252940cb3c" }, { "cve": "CVE-2026-72048", "author_name": "Shitalkumar Gandhi", "author_email": "shital.gandhi45@gmail.com", "fix_sha": "e09390e439bd7cca30dd10893b1f64802961667a", "subject": "ieee802154: ca8210: fix cas_ctl leak on spi_async failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72048", "commit_url": "https://git.kernel.org/stable/c/e09390e439bd7cca30dd10893b1f64802961667a" }, { "cve": "CVE-2026-72049", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9c1e0b6d49471a712511d23fc9d06901561135e8", "subject": "ieee802154: admin-gate legacy LLSEC dump operations", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72049", "commit_url": "https://git.kernel.org/stable/c/9c1e0b6d49471a712511d23fc9d06901561135e8" }, { "cve": "CVE-2026-72050", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "36323f54cd323122a1be89ab2c316a6e55a94e30", "subject": "octeontx2-af: Free BPID bitmap on setup failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72050", "commit_url": "https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30" }, { "cve": "CVE-2026-72051", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "2496fa0b7d180b3ad356b514e7ff93bb14e6140a", "subject": "net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72051", "commit_url": "https://git.kernel.org/stable/c/2496fa0b7d180b3ad356b514e7ff93bb14e6140a" }, { "cve": "CVE-2026-72052", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "f00a50876d2818bd6dc86fa98b3ef360884c53c8", "subject": "net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72052", "commit_url": "https://git.kernel.org/stable/c/f00a50876d2818bd6dc86fa98b3ef360884c53c8" }, { "cve": "CVE-2026-72053", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "8211a26324667980a463c069469a818e71207e02", "subject": "net: ipip: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72053", "commit_url": "https://git.kernel.org/stable/c/8211a26324667980a463c069469a818e71207e02" }, { "cve": "CVE-2026-72054", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "95cceadbfd52d7239bd730afdda0655287d77425", "subject": "net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72054", "commit_url": "https://git.kernel.org/stable/c/95cceadbfd52d7239bd730afdda0655287d77425" }, { "cve": "CVE-2026-72055", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "e2ac3b242c37dff323a964962e43854f4b1a2b79", "subject": "net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72055", "commit_url": "https://git.kernel.org/stable/c/e2ac3b242c37dff323a964962e43854f4b1a2b79" }, { "cve": "CVE-2026-72056", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "1bd6676254b4ab6acd44b662b5e92822c036463a", "subject": "net: ena: clean up XDP TX queues when regular TX setup fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72056", "commit_url": "https://git.kernel.org/stable/c/1bd6676254b4ab6acd44b662b5e92822c036463a" }, { "cve": "CVE-2026-72057", "author_name": "Zihan Xi", "author_email": "xizh2024@lzu.edu.cn", "fix_sha": "9092e15defbe6c7bc241c306093ca9d358a578e7", "subject": "net/sched: act_ct: preserve tc_skb_cb across defragmentation", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72057", "commit_url": "https://git.kernel.org/stable/c/9092e15defbe6c7bc241c306093ca9d358a578e7" }, { "cve": "CVE-2026-72058", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "db818b0e8af7bac16860116a19c341a63d6677b4", "subject": "net: ixp4xx_hss: fix duplicate HDLC netdev allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72058", "commit_url": "https://git.kernel.org/stable/c/db818b0e8af7bac16860116a19c341a63d6677b4" }, { "cve": "CVE-2026-72059", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e", "subject": "net: wwan: t7xx: destroy DMA pool on CLDMA late init failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72059", "commit_url": "https://git.kernel.org/stable/c/2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e" }, { "cve": "CVE-2026-72060", "author_name": "Philippe Schenker", "author_email": "philippe.schenker@impulsing.ch", "fix_sha": "27b9daba50609335db6ca81e4cccf50ded21ec76", "subject": "net: ethernet: ti: icssg: guard PA stat lookups", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72060", "commit_url": "https://git.kernel.org/stable/c/27b9daba50609335db6ca81e4cccf50ded21ec76" }, { "cve": "CVE-2026-72061", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "27ccb68e7cccead5d8c611665a45d23032d468b3", "subject": "net: sit: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72061", "commit_url": "https://git.kernel.org/stable/c/27ccb68e7cccead5d8c611665a45d23032d468b3" }, { "cve": "CVE-2026-72062", "author_name": "Sergio Paracuellos", "author_email": "sergio.paracuellos@gmail.com", "fix_sha": "1781172526d1092323af443fa03f00e6de560401", "subject": "gpio: mt7621: avoid corruption of shared interrupt trigger state", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72062", "commit_url": "https://git.kernel.org/stable/c/1781172526d1092323af443fa03f00e6de560401" }, { "cve": "CVE-2026-72063", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "d3e91a95b2b0fc6336dbf3ec90d831a1654d2720", "subject": "gpio: tegra: do not call pinctrl for GPIO direction", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72063", "commit_url": "https://git.kernel.org/stable/c/d3e91a95b2b0fc6336dbf3ec90d831a1654d2720" }, { "cve": "CVE-2026-72064", "author_name": "Dexuan Cui", "author_email": "decui@microsoft.com", "fix_sha": "c72a0f09c57f92113df69f9b902d11c9e4b132f5", "subject": "net: mana: Sync page pool RX frags for CPU", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72064", "commit_url": "https://git.kernel.org/stable/c/c72a0f09c57f92113df69f9b902d11c9e4b132f5" }, { "cve": "CVE-2026-72065", "author_name": "Dexuan Cui", "author_email": "decui@microsoft.com", "fix_sha": "2e2a83b4998af4384e677d3b2ac08565274279bf", "subject": "net: mana: Validate the packet length reported by the NIC", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72065", "commit_url": "https://git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf" }, { "cve": "CVE-2026-72066", "author_name": "Bradley Morgan", "author_email": "include@grrlz.net", "fix_sha": "86f436567f2516a0083b210bedc933544826a2c3", "subject": "cpu: hotplug: Bound hotplug states sysfs output", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72066", "commit_url": "https://git.kernel.org/stable/c/86f436567f2516a0083b210bedc933544826a2c3" }, { "cve": "CVE-2026-72067", "author_name": "Bradley Morgan", "author_email": "include@grrlz.net", "fix_sha": "673db10729fb121ea1b16fe57791a0cb9eac1eb5", "subject": "cpu: hotplug: Preserve per instance callback errors", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72067", "commit_url": "https://git.kernel.org/stable/c/673db10729fb121ea1b16fe57791a0cb9eac1eb5" }, { "cve": "CVE-2026-72068", "author_name": "Zhan Xusheng", "author_email": "zhanxusheng1024@gmail.com", "fix_sha": "26aff38fefb1d6cd87e22525f41cc8f1aa61b24f", "subject": "posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72068", "commit_url": "https://git.kernel.org/stable/c/26aff38fefb1d6cd87e22525f41cc8f1aa61b24f" }, { "cve": "CVE-2026-72069", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "89038cc87d80c77e7aa6f42a64b2573b74af339f", "subject": "locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72069", "commit_url": "https://git.kernel.org/stable/c/89038cc87d80c77e7aa6f42a64b2573b74af339f" }, { "cve": "CVE-2026-72070", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "aa6dcd5c8dd9ba1d7d0f60093bcda41c0d6d438d", "subject": "wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72070", "commit_url": "https://git.kernel.org/stable/c/aa6dcd5c8dd9ba1d7d0f60093bcda41c0d6d438d" }, { "cve": "CVE-2026-72071", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "50fd6dd755c6e48a38af2fa4621167eea56829c2", "subject": "tracing/user_events: Fix use-after-free in user_event_mm_dup()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72071", "commit_url": "https://git.kernel.org/stable/c/50fd6dd755c6e48a38af2fa4621167eea56829c2" }, { "cve": "CVE-2026-72072", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "de74d8fd10291763d97b218f09adcc7513c975e4", "subject": "net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72072", "commit_url": "https://git.kernel.org/stable/c/de74d8fd10291763d97b218f09adcc7513c975e4" }, { "cve": "CVE-2026-72073", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "a3b5f242997a3be7404112fd48784881560aea57", "subject": "mmc: vub300: fix use-after-free on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72073", "commit_url": "https://git.kernel.org/stable/c/a3b5f242997a3be7404112fd48784881560aea57" }, { "cve": "CVE-2026-72074", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "ca459e237bc49567649c56bc72e4c602fb92fd67", "subject": "Input: ims-pcu - fix type confusion in CDC union descriptor parsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72074", "commit_url": "https://git.kernel.org/stable/c/ca459e237bc49567649c56bc72e4c602fb92fd67" }, { "cve": "CVE-2026-72075", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "411b8c4b274737c3bf08e1e025801161603cfffc", "subject": "Input: ims-pcu - fix race condition in reset_device sysfs callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72075", "commit_url": "https://git.kernel.org/stable/c/411b8c4b274737c3bf08e1e025801161603cfffc" }, { "cve": "CVE-2026-72076", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "403b0a6970b1084bb27907c0f8225801fdd0fe1d", "subject": "Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72076", "commit_url": "https://git.kernel.org/stable/c/403b0a6970b1084bb27907c0f8225801fdd0fe1d" }, { "cve": "CVE-2026-72077", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "d48795b5cd6828d36b707e8d62fc9e5c90e004ab", "subject": "Input: ims-pcu - fix firmware leak in async update", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72077", "commit_url": "https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab" }, { "cve": "CVE-2026-72078", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "baf56975806534268e24acf9a8abb1c447ce11e9", "subject": "Input: ims-pcu - validate control endpoint type", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72078", "commit_url": "https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9" }, { "cve": "CVE-2026-72079", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "462a999917755a3bf77448dfd64307963cf0a9f0", "subject": "Input: ims-pcu - fix use-after-free and double-free in disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72079", "commit_url": "https://git.kernel.org/stable/c/462a999917755a3bf77448dfd64307963cf0a9f0" }, { "cve": "CVE-2026-72080", "author_name": "Tony Luck", "author_email": "tony.luck@intel.com", "fix_sha": "52fce648607e0d6a76eeb443d78708c49df1c554", "subject": "fs/resctrl: Fix use-after-free during unmount", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72080", "commit_url": "https://git.kernel.org/stable/c/52fce648607e0d6a76eeb443d78708c49df1c554" }, { "cve": "CVE-2026-72081", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "9cb2d5291dbfe7bed565ead3337047dee9ed1064", "subject": "scsi: elx: efct: Fix I/O leak on unsupported additional CDB", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72081", "commit_url": "https://git.kernel.org/stable/c/9cb2d5291dbfe7bed565ead3337047dee9ed1064" }, { "cve": "CVE-2026-72082", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "2c007acf7b31c39c08ce4959451ad00b19be4c1f", "subject": "scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72082", "commit_url": "https://git.kernel.org/stable/c/2c007acf7b31c39c08ce4959451ad00b19be4c1f" }, { "cve": "CVE-2026-72083", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "fda6a1f3c3d7047b5ce5654487649c2daa738bfc", "subject": "scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72083", "commit_url": "https://git.kernel.org/stable/c/fda6a1f3c3d7047b5ce5654487649c2daa738bfc" }, { "cve": "CVE-2026-72084", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d04a179085c262c9ed577d0a4cbc6482ff1fd9a3", "subject": "scsi: target: Bound PR-OUT TransportID parsing to the received buffer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72084", "commit_url": "https://git.kernel.org/stable/c/d04a179085c262c9ed577d0a4cbc6482ff1fd9a3" }, { "cve": "CVE-2026-72085", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "ca978f8a93d4d36841839bf2847d29b88c2591d6", "subject": "scsi: xen: scsiback: Free unsubmitted command instead of double-putting it", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72085", "commit_url": "https://git.kernel.org/stable/c/ca978f8a93d4d36841839bf2847d29b88c2591d6" }, { "cve": "CVE-2026-72086", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "66aefc277ebb796ec285d550305535dc3fc0179f", "subject": "scsi: xen: scsiback: Free the command tag on the TMR submit-failure path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72086", "commit_url": "https://git.kernel.org/stable/c/66aefc277ebb796ec285d550305535dc3fc0179f" }, { "cve": "CVE-2026-72087", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "1bd28625e25be549ee7c47532e7c3ef91c682410", "subject": "scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72087", "commit_url": "https://git.kernel.org/stable/c/1bd28625e25be549ee7c47532e7c3ef91c682410" }, { "cve": "CVE-2026-72088", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "e166bafc483e927150cb9b5f286c9191ea0df84e", "subject": "scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72088", "commit_url": "https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e" }, { "cve": "CVE-2026-72089", "author_name": "Jhonraushan", "author_email": "raushan.jhon@gmail.com", "fix_sha": "ddb44baed257560f192b145ed36cf8c0a412de47", "subject": "accel/ivpu: Reject firmware log with size smaller than header", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72089", "commit_url": "https://git.kernel.org/stable/c/ddb44baed257560f192b145ed36cf8c0a412de47" }, { "cve": "CVE-2026-72090", "author_name": "Shuvam Pandey", "author_email": "shuvampandey1@gmail.com", "fix_sha": "7caf2a2351d4053075670ff3e26a6815da0a9e1e", "subject": "accel/amdxdna: Use caller client for debug BO sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72090", "commit_url": "https://git.kernel.org/stable/c/7caf2a2351d4053075670ff3e26a6815da0a9e1e" }, { "cve": "CVE-2026-72091", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "261c1fe3327ad24508f54552c6366e3e4db82c15", "subject": "accel/amdxdna: reject user command submission without a command BO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72091", "commit_url": "https://git.kernel.org/stable/c/261c1fe3327ad24508f54552c6366e3e4db82c15" }, { "cve": "CVE-2026-72092", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "38953513d7313992676d4136cd425cdb70c6278e", "subject": "accel/amdxdna: reject command submission on devices without a submit op", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72092", "commit_url": "https://git.kernel.org/stable/c/38953513d7313992676d4136cd425cdb70c6278e" }, { "cve": "CVE-2026-72093", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "63bbf9ac5dde2ba85e7b39d0a0b7d540e6252ba4", "subject": "accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72093", "commit_url": "https://git.kernel.org/stable/c/63bbf9ac5dde2ba85e7b39d0a0b7d540e6252ba4" }, { "cve": "CVE-2026-72094", "author_name": "Philipp Stanner", "author_email": "phasta@kernel.org", "fix_sha": "035219a760edb35ae9a9e96beba7f122e26a997b", "subject": "dma-buf: dma-fence: Fix potential NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72094", "commit_url": "https://git.kernel.org/stable/c/035219a760edb35ae9a9e96beba7f122e26a997b" }, { "cve": "CVE-2026-72095", "author_name": "Baineng Shou", "author_email": "shoubaineng@gmail.com", "fix_sha": "77a9298741f8f9e8b963c977f5582ab21c6d3427", "subject": "dma-fence: Make dma_fence_dedup_array() robust against 0-count input", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72095", "commit_url": "https://git.kernel.org/stable/c/77a9298741f8f9e8b963c977f5582ab21c6d3427" }, { "cve": "CVE-2026-72096", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "8ec4d9c5a5cf4b61fc087f871465b1f79b393325", "subject": "dm-verity: make error counter atomic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72096", "commit_url": "https://git.kernel.org/stable/c/8ec4d9c5a5cf4b61fc087f871465b1f79b393325" }, { "cve": "CVE-2026-72097", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "e72b793ae440f6900fb17a4b8518c707b5cd3e17", "subject": "dm-verity: fix a possible NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72097", "commit_url": "https://git.kernel.org/stable/c/e72b793ae440f6900fb17a4b8518c707b5cd3e17" }, { "cve": "CVE-2026-72098", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "31d6e6c0ba8d5a7bd59660035a089307100c5e8e", "subject": "dm-verity: fix buffer overflow in FEC calculation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72098", "commit_url": "https://git.kernel.org/stable/c/31d6e6c0ba8d5a7bd59660035a089307100c5e8e" }, { "cve": "CVE-2026-72099", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "edf025f083854f80032b73a1aad69a3c90db236f", "subject": "dm-integrity: don't increment hash_offset twice", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72099", "commit_url": "https://git.kernel.org/stable/c/edf025f083854f80032b73a1aad69a3c90db236f" }, { "cve": "CVE-2026-72100", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "5a266764fadaff8b5c1fe37a186ebf9b09cb953e", "subject": "dm-integrity: fix a bug if the bio is out of limits", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72100", "commit_url": "https://git.kernel.org/stable/c/5a266764fadaff8b5c1fe37a186ebf9b09cb953e" }, { "cve": "CVE-2026-72101", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750", "subject": "dm-integrity: fix leaking uninitialized kernel memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72101", "commit_url": "https://git.kernel.org/stable/c/7bb03b2b01b814a9fc14afbfc2cbb2cca5b34750" }, { "cve": "CVE-2026-72102", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "366665416f20527ff7cad548a32d1ddf23195740", "subject": "dm_early_create: fix freeing used table on dm_resume failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72102", "commit_url": "https://git.kernel.org/stable/c/366665416f20527ff7cad548a32d1ddf23195740" }, { "cve": "CVE-2026-72103", "author_name": "Ingo Blechschmidt", "author_email": "iblech@speicherleck.de", "fix_sha": "981ccd97f7153d310dfa92a534525bbaf46752c2", "subject": "dm: avoid leaking the caller's thread keyring via the table device file", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72103", "commit_url": "https://git.kernel.org/stable/c/981ccd97f7153d310dfa92a534525bbaf46752c2" }, { "cve": "CVE-2026-72104", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "d9c631e3fbd44246a2be781d26cfacbb9b8ec127", "subject": "dm-pcache: reject option groups without values", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72104", "commit_url": "https://git.kernel.org/stable/c/d9c631e3fbd44246a2be781d26cfacbb9b8ec127" }, { "cve": "CVE-2026-72105", "author_name": "Benjamin Marzinski", "author_email": "bmarzins@redhat.com", "fix_sha": "9743132a41f4d9d0e54c5f2adcb821b04796bab1", "subject": "dm-log: fix a bitset_size overflow on 32bit machines", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72105", "commit_url": "https://git.kernel.org/stable/c/9743132a41f4d9d0e54c5f2adcb821b04796bab1" }, { "cve": "CVE-2026-72106", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "76c6f845dc0c614304a6e6ee619b552f97cf24b3", "subject": "dm-ioctl: fix a possible overflow in list_version_get_info", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72106", "commit_url": "https://git.kernel.org/stable/c/76c6f845dc0c614304a6e6ee619b552f97cf24b3" }, { "cve": "CVE-2026-72107", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "a868196f03c2b19418ae3d2b69e195d668a271e5", "subject": "dm era: fix out-of-bounds memory access for non-zero start sector", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72107", "commit_url": "https://git.kernel.org/stable/c/a868196f03c2b19418ae3d2b69e195d668a271e5" }, { "cve": "CVE-2026-72108", "author_name": "Ming-Hung Tsai", "author_email": "mtsai@redhat.com", "fix_sha": "5bcd4d3058ebaf46ad2e163829d87dd4870c7a45", "subject": "dm thin metadata: fix metadata snapshot consistency on commit failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72108", "commit_url": "https://git.kernel.org/stable/c/5bcd4d3058ebaf46ad2e163829d87dd4870c7a45" }, { "cve": "CVE-2026-72109", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "483be61b4a9a6df3b7cb277e8f189e082dee4cb8", "subject": "net: sparx5: unregister blocking notifier on init failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72109", "commit_url": "https://git.kernel.org/stable/c/483be61b4a9a6df3b7cb277e8f189e082dee4cb8" }, { "cve": "CVE-2026-72110", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "9b51a6155d14389876916726430da30eabb1d4ed", "subject": "bpf,fork: wipe ->bpf_storage before bailouts that access it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72110", "commit_url": "https://git.kernel.org/stable/c/9b51a6155d14389876916726430da30eabb1d4ed" }, { "cve": "CVE-2026-72111", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "5e0b273e0a62cc04ec338c7b502797c66c2ed42a", "subject": "bpf: Reset register bounds before narrowing retval range in check_mem_access()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72111", "commit_url": "https://git.kernel.org/stable/c/5e0b273e0a62cc04ec338c7b502797c66c2ed42a" }, { "cve": "CVE-2026-72112", "author_name": "Woraphat Khiaodaeng", "author_email": "worapat.kd2@gmail.com", "fix_sha": "3afc64c61ce906a04f073ca350b46de10e8302f9", "subject": "io_uring/bpf-ops: reject re-registration of an already-bound ops", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72112", "commit_url": "https://git.kernel.org/stable/c/3afc64c61ce906a04f073ca350b46de10e8302f9" }, { "cve": "CVE-2026-72113", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "d59948293ea34b6337ce2b5febab8510de70048c", "subject": "can: bcm: add missing device refcount for CAN filter removal", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72113", "commit_url": "https://git.kernel.org/stable/c/d59948293ea34b6337ce2b5febab8510de70048c" }, { "cve": "CVE-2026-72114", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "62ec41f364648be79d54d94d0d240ee326948afd", "subject": "can: bcm: validate frame length in bcm_rx_setup() for RTR replies", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72114", "commit_url": "https://git.kernel.org/stable/c/62ec41f364648be79d54d94d0d240ee326948afd" }, { "cve": "CVE-2026-72115", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "2f5976f54a04e9f18b25283036ac3136be453b17", "subject": "can: bcm: track a single source interface for ANYDEV timeout/throttle ops", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72115", "commit_url": "https://git.kernel.org/stable/c/2f5976f54a04e9f18b25283036ac3136be453b17" }, { "cve": "CVE-2026-72116", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "3b762c0d950383ab7a002686c9136b9aa55d2d70", "subject": "can: bcm: fix stale rx/tx ops after device removal", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72116", "commit_url": "https://git.kernel.org/stable/c/3b762c0d950383ab7a002686c9136b9aa55d2d70" }, { "cve": "CVE-2026-72117", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "58fd6cbc8541216af1d7ed272ea7ac2b66d50fd8", "subject": "can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72117", "commit_url": "https://git.kernel.org/stable/c/58fd6cbc8541216af1d7ed272ea7ac2b66d50fd8" }, { "cve": "CVE-2026-72118", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "e6c24ba95fc3f1b5e1dcd28b1c6e59ef61a9daa5", "subject": "can: bcm: fix CAN frame rx/tx statistics", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72118", "commit_url": "https://git.kernel.org/stable/c/e6c24ba95fc3f1b5e1dcd28b1c6e59ef61a9daa5" }, { "cve": "CVE-2026-72119", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc", "subject": "can: bcm: extend bcm_tx_lock usage for data and timer updates", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72119", "commit_url": "https://git.kernel.org/stable/c/12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc" }, { "cve": "CVE-2026-72120", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "7b2c3eabc4dafc062a25e10711154f2107526a78", "subject": "can: bcm: add missing rcu list annotations and operations", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72120", "commit_url": "https://git.kernel.org/stable/c/7b2c3eabc4dafc062a25e10711154f2107526a78" }, { "cve": "CVE-2026-72121", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "749179c2e25b95d22499ed29096b3e02d6dfd2b4", "subject": "can: bcm: add locking when updating filter and timer values", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72121", "commit_url": "https://git.kernel.org/stable/c/749179c2e25b95d22499ed29096b3e02d6dfd2b4" }, { "cve": "CVE-2026-72122", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "d9b091d9d22fee81ec53fb55d2032951993ceadb", "subject": "can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72122", "commit_url": "https://git.kernel.org/stable/c/d9b091d9d22fee81ec53fb55d2032951993ceadb" }, { "cve": "CVE-2026-72123", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "68973f9db76144825e4f35dfdc80fb8279eb2d57", "subject": "can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72123", "commit_url": "https://git.kernel.org/stable/c/68973f9db76144825e4f35dfdc80fb8279eb2d57" }, { "cve": "CVE-2026-72124", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "cf070fe33bfbd1a4c21236078fadb35dd223a157", "subject": "can: isotp: serialize TX state transitions under so->rx_lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72124", "commit_url": "https://git.kernel.org/stable/c/cf070fe33bfbd1a4c21236078fadb35dd223a157" }, { "cve": "CVE-2026-72125", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "20bab8b88baac140ca3701116e1d486c7f51e311", "subject": "can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72125", "commit_url": "https://git.kernel.org/stable/c/20bab8b88baac140ca3701116e1d486c7f51e311" }, { "cve": "CVE-2026-72126", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "9b1a02e0d980ac6b0e36a90378f847062f81d7e4", "subject": "can: isotp: use unconditional synchronize_rcu() in isotp_release()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72126", "commit_url": "https://git.kernel.org/stable/c/9b1a02e0d980ac6b0e36a90378f847062f81d7e4" }, { "cve": "CVE-2026-72127", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "1f24c0d01db214c9e661915e9972404c96ca73c0", "subject": "netdev-genl: report NAPI thread PID in the caller's pid namespace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72127", "commit_url": "https://git.kernel.org/stable/c/1f24c0d01db214c9e661915e9972404c96ca73c0" }, { "cve": "CVE-2026-72128", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "34b9a83c50660148bde01cde16451dbe78369749", "subject": "nvmet: fix refcount leak in nvmet_sq_create()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72128", "commit_url": "https://git.kernel.org/stable/c/34b9a83c50660148bde01cde16451dbe78369749" }, { "cve": "CVE-2026-72129", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "48c0162f647bb47e6084ffbc71b8f213f5e2f4f8", "subject": "nvmet-rdma: handle inline data with a nonzero offset", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72129", "commit_url": "https://git.kernel.org/stable/c/48c0162f647bb47e6084ffbc71b8f213f5e2f4f8" }, { "cve": "CVE-2026-72130", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "779575bc35c687697ba69e904f2cd22e60112534", "subject": "nvmet-auth: reject short AUTH_RECEIVE buffers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72130", "commit_url": "https://git.kernel.org/stable/c/779575bc35c687697ba69e904f2cd22e60112534" }, { "cve": "CVE-2026-72131", "author_name": "Nick Chan", "author_email": "towinchenmi@gmail.com", "fix_sha": "6fe0687245e8406bf26143bd45eb16441bbe5280", "subject": "nvme-apple: Prevent shared tags across queues on Apple A11", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72131", "commit_url": "https://git.kernel.org/stable/c/6fe0687245e8406bf26143bd45eb16441bbe5280" }, { "cve": "CVE-2026-72132", "author_name": "Benjamin Coddington", "author_email": "ben.coddington@hammerspace.com", "fix_sha": "27934d02cbeb8a957dd11c985a579e58d30c5270", "subject": "NFS: Charge unstable writes by request size, not folio size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72132", "commit_url": "https://git.kernel.org/stable/c/27934d02cbeb8a957dd11c985a579e58d30c5270" }, { "cve": "CVE-2026-72133", "author_name": "Kunihiko Hayashi", "author_email": "hayashi.kunihiko@socionext.com", "fix_sha": "f3ad1c87d8201e54b66bd6072442f0b5d5a308ee", "subject": "spi: uniphier: Fix completion initialization order before devm_request_irq()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72133", "commit_url": "https://git.kernel.org/stable/c/f3ad1c87d8201e54b66bd6072442f0b5d5a308ee" }, { "cve": "CVE-2026-72134", "author_name": "Javier Fernandez Pastrana", "author_email": "javier.pastrana@linutronix.de", "fix_sha": "245404c26563aafb36aafb01298f148db1851be3", "subject": "spi: imx: reconfigure for PIO when DMA cannot be started", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72134", "commit_url": "https://git.kernel.org/stable/c/245404c26563aafb36aafb01298f148db1851be3" }, { "cve": "CVE-2026-72135", "author_name": "Jaewon Yang", "author_email": "yong010301@gmail.com", "fix_sha": "f20d61c22bcaf172d6790b6500e3838e532e71c8", "subject": "tpm: Make the TPM character devices non-seekable", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72135", "commit_url": "https://git.kernel.org/stable/c/f20d61c22bcaf172d6790b6500e3838e532e71c8" }, { "cve": "CVE-2026-72136", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "095515d89b19b6cc19dfcdc846f97403ed1ebce3", "subject": "xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72136", "commit_url": "https://git.kernel.org/stable/c/095515d89b19b6cc19dfcdc846f97403ed1ebce3" }, { "cve": "CVE-2026-72137", "author_name": "Qianyu Luo", "author_email": "qianyuluo3@gmail.com", "fix_sha": "226f4a490d1a938fc838d8f8c46a4eca864c0d78", "subject": "xfrm: nat_keepalive: avoid double free on send error", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72137", "commit_url": "https://git.kernel.org/stable/c/226f4a490d1a938fc838d8f8c46a4eca864c0d78" }, { "cve": "CVE-2026-72138", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "45ca1afe2fd14c04e37227e79d3f8455831d8408", "subject": "xen/gntdev: fix error handling in ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72138", "commit_url": "https://git.kernel.org/stable/c/45ca1afe2fd14c04e37227e79d3f8455831d8408" }, { "cve": "CVE-2026-72139", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "b74cd55038905d5e74c1de109ab78a30b2ea0e1f", "subject": "tcp: defer md5sig_info kfree past RCU grace period in tcp_connect", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72139", "commit_url": "https://git.kernel.org/stable/c/b74cd55038905d5e74c1de109ab78a30b2ea0e1f" }, { "cve": "CVE-2026-72140", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "71356737a7a55c76fee847563e3d33f8e6dc6b6d", "subject": "i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72140", "commit_url": "https://git.kernel.org/stable/c/71356737a7a55c76fee847563e3d33f8e6dc6b6d" }, { "cve": "CVE-2026-72141", "author_name": "Vincent Jardin", "author_email": "vjardin@free.fr", "fix_sha": "07fd9385f0d87dff4b34f355f68adf701080cb24", "subject": "i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72141", "commit_url": "https://git.kernel.org/stable/c/07fd9385f0d87dff4b34f355f68adf701080cb24" }, { "cve": "CVE-2026-72142", "author_name": "Vincent Jardin", "author_email": "vjardin@free.fr", "fix_sha": "cb2fc37857693b55909fb77dc2c87cfbc1cdc476", "subject": "i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72142", "commit_url": "https://git.kernel.org/stable/c/cb2fc37857693b55909fb77dc2c87cfbc1cdc476" }, { "cve": "CVE-2026-72143", "author_name": "Srinivas Pandruvada", "author_email": "srinivas.pandruvada@intel.com", "fix_sha": "2565a28cdcdcb035e151d285efcba26bccb3726e", "subject": "platform/x86: ISST: Restore SST-PP control to all domains", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72143", "commit_url": "https://git.kernel.org/stable/c/2565a28cdcdcb035e151d285efcba26bccb3726e" }, { "cve": "CVE-2026-72144", "author_name": "Haoxiang Li", "author_email": "lihaoxiang@isrc.iscas.ac.cn", "fix_sha": "6e9cab2247e5b243ae2d907ce7c948a8a9c8d61a", "subject": "platform/x86: dell-laptop: fix missing cleanups in init error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72144", "commit_url": "https://git.kernel.org/stable/c/6e9cab2247e5b243ae2d907ce7c948a8a9c8d61a" }, { "cve": "CVE-2026-72145", "author_name": "ZhaoJinming", "author_email": "zhaojinming@uniontech.com", "fix_sha": "a221557958e3a82d8565729d445a7385963f30b6", "subject": "platform/x86/intel/tpmi: use cleanup helpers in mem_write()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72145", "commit_url": "https://git.kernel.org/stable/c/a221557958e3a82d8565729d445a7385963f30b6" }, { "cve": "CVE-2026-72146", "author_name": "Claudiu Beznea", "author_email": "claudiu.beznea.uj@bp.renesas.com", "fix_sha": "731712403ddb39d1a76a11abf339a0615bc85de7", "subject": "dmaengine: sh: rz-dmac: Move interrupt request after everything is set up", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72146", "commit_url": "https://git.kernel.org/stable/c/731712403ddb39d1a76a11abf339a0615bc85de7" }, { "cve": "CVE-2026-72147", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "11d7cfe0c119691b2dafbb699bbca90258c678aa", "subject": "dmaengine: dw-edma-pcie: Reject devices without driver data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72147", "commit_url": "https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa" }, { "cve": "CVE-2026-72148", "author_name": "Frank Li", "author_email": "frank.li@nxp.com", "fix_sha": "8ffba0171c6bbce5f093c6dba5a02c0805b31203", "subject": "dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72148", "commit_url": "https://git.kernel.org/stable/c/8ffba0171c6bbce5f093c6dba5a02c0805b31203" }, { "cve": "CVE-2026-72149", "author_name": "Kartik Rajput", "author_email": "kkartik@nvidia.com", "fix_sha": "4651df83b6c796daead3447e8fd874322918ee4f", "subject": "dmaengine: tegra: Fix burst size calculation", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72149", "commit_url": "https://git.kernel.org/stable/c/4651df83b6c796daead3447e8fd874322918ee4f" }, { "cve": "CVE-2026-72150", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "17d90b68c3a3d7d7e95b49e1fe9381a723f637a8", "subject": "sunrpc: fix uninitialized xprt_create_args structure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72150", "commit_url": "https://git.kernel.org/stable/c/17d90b68c3a3d7d7e95b49e1fe9381a723f637a8" }, { "cve": "CVE-2026-72151", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "73851a7c43dfa52d2ed9415889b33daf85da0ed9", "subject": "tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72151", "commit_url": "https://git.kernel.org/stable/c/73851a7c43dfa52d2ed9415889b33daf85da0ed9" }, { "cve": "CVE-2026-72152", "author_name": "Jarkko Sakkinen", "author_email": "jarkko@kernel.org", "fix_sha": "c0c9cfb3b75def8bf200a2d4db09015806acfeaf", "subject": "tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72152", "commit_url": "https://git.kernel.org/stable/c/c0c9cfb3b75def8bf200a2d4db09015806acfeaf" }, { "cve": "CVE-2026-72153", "author_name": "Bhargav Joshi", "author_email": "j.bhargav.u@gmail.com", "fix_sha": "043db005a8d6932dc7d217c86307e9af0bc10ddc", "subject": "irqchip/crossbar: Use correct index in crossbar_domain_free()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72153", "commit_url": "https://git.kernel.org/stable/c/043db005a8d6932dc7d217c86307e9af0bc10ddc" }, { "cve": "CVE-2026-72154", "author_name": "Stafford Horne", "author_email": "shorne@gmail.com", "fix_sha": "aca063c9024522e4e5b9a9d1927433f6a01785a3", "subject": "openrisc: Fix jump_label smp syncing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72154", "commit_url": "https://git.kernel.org/stable/c/aca063c9024522e4e5b9a9d1927433f6a01785a3" }, { "cve": "CVE-2026-72155", "author_name": "Miquel Raynal", "author_email": "miquel.raynal@bootlin.com", "fix_sha": "e1d456b26bf23e30db305a6184e8abd9ab68bbf2", "subject": "mtd: spi-nor: swp: Improve locking user experience", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72155", "commit_url": "https://git.kernel.org/stable/c/e1d456b26bf23e30db305a6184e8abd9ab68bbf2" }, { "cve": "CVE-2026-72156", "author_name": "Sebastian Alba Vives", "author_email": "sebasjosue84@gmail.com", "fix_sha": "43a1974da6bc7ce8f4d1dc1d03d56997428c29c3", "subject": "fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72156", "commit_url": "https://git.kernel.org/stable/c/43a1974da6bc7ce8f4d1dc1d03d56997428c29c3" }, { "cve": "CVE-2026-72157", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "55d9895f89970501fe126d1026b586b04a224c27", "subject": "net: thunderbolt: Fix frags[] overflow by bounding frame_count", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72157", "commit_url": "https://git.kernel.org/stable/c/55d9895f89970501fe126d1026b586b04a224c27" }, { "cve": "CVE-2026-72158", "author_name": "Sebastian Alba Vives", "author_email": "sebasjosue84@gmail.com", "fix_sha": "9e8bc49f91f3f81d957c4f1c1f09fe94e2f88f6a", "subject": "fpga: dfl: add bounds check in dfh_get_param_size()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72158", "commit_url": "https://git.kernel.org/stable/c/9e8bc49f91f3f81d957c4f1c1f09fe94e2f88f6a" }, { "cve": "CVE-2026-72159", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "7ebc672fab7a76e1e47e0f2fc1ee48118d27fde4", "subject": "ocfs2: reject non-inline dinodes with i_size and zero i_clusters", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72159", "commit_url": "https://git.kernel.org/stable/c/7ebc672fab7a76e1e47e0f2fc1ee48118d27fde4" }, { "cve": "CVE-2026-72160", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "5366a017099c6a3c443be908a05f26fd72af12a1", "subject": "ocfs2: reject dinodes with non-canonical i_mode type", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72160", "commit_url": "https://git.kernel.org/stable/c/5366a017099c6a3c443be908a05f26fd72af12a1" }, { "cve": "CVE-2026-72161", "author_name": "Joseph Qi", "author_email": "joseph.qi@linux.alibaba.com", "fix_sha": "a291c77c034b7a81849ce9b71cc9ecda9e587d89", "subject": "ocfs2: add journal NULL check in ocfs2_checkpoint_inode()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72161", "commit_url": "https://git.kernel.org/stable/c/a291c77c034b7a81849ce9b71cc9ecda9e587d89" }, { "cve": "CVE-2026-72162", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "452a8467be8143747292218212671deeb186d2ae", "subject": "ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72162", "commit_url": "https://git.kernel.org/stable/c/452a8467be8143747292218212671deeb186d2ae" }, { "cve": "CVE-2026-72163", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "f9ab30c96b0f00c20c6dac93681bdae3a033d229", "subject": "ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72163", "commit_url": "https://git.kernel.org/stable/c/f9ab30c96b0f00c20c6dac93681bdae3a033d229" }, { "cve": "CVE-2026-72164", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "22920541c35a9f23f219038ba5874c843a7c4419", "subject": "ocfs2: avoid moving extents to occupied clusters", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72164", "commit_url": "https://git.kernel.org/stable/c/22920541c35a9f23f219038ba5874c843a7c4419" }, { "cve": "CVE-2026-72165", "author_name": "Arseniy Krasnov", "author_email": "avkrasnov@rulkc.org", "fix_sha": "8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b", "subject": "mtd: rawnand: fix condition in 'nand_select_target()'", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72165", "commit_url": "https://git.kernel.org/stable/c/8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b" }, { "cve": "CVE-2026-72166", "author_name": "Vasiliy Kovalev", "author_email": "kovalev@altlinux.org", "fix_sha": "6b4f48728faa8bb514368f7eacda05565dea8696", "subject": "net/9p: fix infinite loop in p9_client_rpc on fatal signal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72166", "commit_url": "https://git.kernel.org/stable/c/6b4f48728faa8bb514368f7eacda05565dea8696" }, { "cve": "CVE-2026-72167", "author_name": "Bastien Curutchet", "author_email": "bastien.curutchet@bootlin.com", "fix_sha": "19ed11aee966d91beebdef9d32ce926474872f79", "subject": "mtd: rawnand: pl353: fix probe resource allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72167", "commit_url": "https://git.kernel.org/stable/c/19ed11aee966d91beebdef9d32ce926474872f79" }, { "cve": "CVE-2026-72168", "author_name": "Florian Fuchs", "author_email": "fuchsfl@gmail.com", "fix_sha": "79d1661502c6e4b6f626185cef72cf2fa78116e1", "subject": "mtd: maps: vmu-flash: fix fault in unaligned fixup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72168", "commit_url": "https://git.kernel.org/stable/c/79d1661502c6e4b6f626185cef72cf2fa78116e1" }, { "cve": "CVE-2026-72169", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "0e39380a7316122e1b00012b3f3cd3e318b3e7d3", "subject": "kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72169", "commit_url": "https://git.kernel.org/stable/c/0e39380a7316122e1b00012b3f3cd3e318b3e7d3" }, { "cve": "CVE-2026-72170", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "574aa0b4799470ac814479f1138d19efe6262255", "subject": "9p: skip nlink update in cacheless mode to fix WARN_ON", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72170", "commit_url": "https://git.kernel.org/stable/c/574aa0b4799470ac814479f1138d19efe6262255" }, { "cve": "CVE-2026-72171", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "36f1648644d769c496a8e47e53603e863e358d73", "subject": "mtd: slram: remove failed entries from the device list", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72171", "commit_url": "https://git.kernel.org/stable/c/36f1648644d769c496a8e47e53603e863e358d73" }, { "cve": "CVE-2026-72172", "author_name": "Muchun Song", "author_email": "songmuchun@bytedance.com", "fix_sha": "cd681403a87085562499d60325b7b45d3be11217", "subject": "mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72172", "commit_url": "https://git.kernel.org/stable/c/cd681403a87085562499d60325b7b45d3be11217" }, { "cve": "CVE-2026-72173", "author_name": "Dev Jain", "author_email": "dev.jain@arm.com", "fix_sha": "cd1fc0e3c1f67c0c31dfc215e5d9b771133dedc0", "subject": "fs/proc/task_mmu: do not warn on seeing non-migration pmd entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72173", "commit_url": "https://git.kernel.org/stable/c/cd1fc0e3c1f67c0c31dfc215e5d9b771133dedc0" }, { "cve": "CVE-2026-72174", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "e92d92bbafb264dc0518d52b846a3c07ed8d523f", "subject": "fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72174", "commit_url": "https://git.kernel.org/stable/c/e92d92bbafb264dc0518d52b846a3c07ed8d523f" }, { "cve": "CVE-2026-72175", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "04718f7c9290f95385f0dd328758753dc1c36dec", "subject": "fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72175", "commit_url": "https://git.kernel.org/stable/c/04718f7c9290f95385f0dd328758753dc1c36dec" }, { "cve": "CVE-2026-72176", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "05ea83ee88ca70f8932906d9f2617ff996f45b50", "subject": "mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72176", "commit_url": "https://git.kernel.org/stable/c/05ea83ee88ca70f8932906d9f2617ff996f45b50" }, { "cve": "CVE-2026-72177", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "d58fdbe37a829fd2e5803dd4e5a72992dd8c5368", "subject": "mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72177", "commit_url": "https://git.kernel.org/stable/c/d58fdbe37a829fd2e5803dd4e5a72992dd8c5368" }, { "cve": "CVE-2026-72178", "author_name": "SeongJae Park", "author_email": "sj@kernel.org", "fix_sha": "6a66c557a2ab2609575bafd15e093669c05f9711", "subject": "mm/damon/core: always put unsuccessfully committed target pids", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72178", "commit_url": "https://git.kernel.org/stable/c/6a66c557a2ab2609575bafd15e093669c05f9711" }, { "cve": "CVE-2026-72179", "author_name": "Zishun Yi", "author_email": "vulab@iscas.ac.cn", "fix_sha": "bf4a195f063b0a0805c1417f6aad1dd32ea48f0f", "subject": "riscv: cacheinfo: Fix node reference leak in populate_cache_leaves", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72179", "commit_url": "https://git.kernel.org/stable/c/bf4a195f063b0a0805c1417f6aad1dd32ea48f0f" }, { "cve": "CVE-2026-72180", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbab", "subject": "mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72180", "commit_url": "https://git.kernel.org/stable/c/f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbab" }, { "cve": "CVE-2026-72181", "author_name": "Aaron Tomlin", "author_email": "atomlin@atomlin.com", "fix_sha": "98e37db4a34d3af3fb2f4648295c25b5e40b20e3", "subject": "mips: sched: Fix CPUMASK_OFFSTACK memory corruption", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72181", "commit_url": "https://git.kernel.org/stable/c/98e37db4a34d3af3fb2f4648295c25b5e40b20e3" }, { "cve": "CVE-2026-72182", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "4373cfa38ead58f980362c841b0d0bdf8c4d956c", "subject": "power: supply: charger-manager: fix refcount leak in is_full_charged()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72182", "commit_url": "https://git.kernel.org/stable/c/4373cfa38ead58f980362c841b0d0bdf8c4d956c" }, { "cve": "CVE-2026-72183", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4b80320ca7ed03d6e683f95b6066565dc97b9f92", "subject": "landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72183", "commit_url": "https://git.kernel.org/stable/c/4b80320ca7ed03d6e683f95b6066565dc97b9f92" }, { "cve": "CVE-2026-72184", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "06769b8f23b4b645b270c438649fff79768fb6fe", "subject": "ntfs: fix hole runlist memory leak in insert range error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72184", "commit_url": "https://git.kernel.org/stable/c/06769b8f23b4b645b270c438649fff79768fb6fe" }, { "cve": "CVE-2026-72185", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "b8d6c528e9d57d263fee1a648409f84a68b2561d", "subject": "ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72185", "commit_url": "https://git.kernel.org/stable/c/b8d6c528e9d57d263fee1a648409f84a68b2561d" }, { "cve": "CVE-2026-72186", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "f72df3a4c33b64de3418ec74d1ad4f028e09d161", "subject": "ntfs: make system files immutable to prevent corruption", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72186", "commit_url": "https://git.kernel.org/stable/c/f72df3a4c33b64de3418ec74d1ad4f028e09d161" }, { "cve": "CVE-2026-72187", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "77dc384207d5fa63ba97c3bf3285fe1215a1cbf6", "subject": "ntfs: avoid self-deadlock during inode eviction", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72187", "commit_url": "https://git.kernel.org/stable/c/77dc384207d5fa63ba97c3bf3285fe1215a1cbf6" }, { "cve": "CVE-2026-72188", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "d97a36bae86a9a4021562ded2987f904e6bcb1d7", "subject": "ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72188", "commit_url": "https://git.kernel.org/stable/c/d97a36bae86a9a4021562ded2987f904e6bcb1d7" }, { "cve": "CVE-2026-72189", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "0ebe8f625ab0520217a425d7cd366e4670484941", "subject": "ntfs: fail attrlist updates when the superblock is inactive", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72189", "commit_url": "https://git.kernel.org/stable/c/0ebe8f625ab0520217a425d7cd366e4670484941" }, { "cve": "CVE-2026-72190", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "eb94f5a41a193a425e09a63cb75dffd151d8f42e", "subject": "ntfs: fix mrec_lock ABBA deadlock in rename", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72190", "commit_url": "https://git.kernel.org/stable/c/eb94f5a41a193a425e09a63cb75dffd151d8f42e" }, { "cve": "CVE-2026-72191", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "f1df9d771df47aa40de6d70949c28720ae1e430d", "subject": "ntfs3: validate split-point offset in indx_insert_into_buffer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72191", "commit_url": "https://git.kernel.org/stable/c/f1df9d771df47aa40de6d70949c28720ae1e430d" }, { "cve": "CVE-2026-72192", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9b6926ac9c970ae0b2c2fe6289b16e9aa10b6a67", "subject": "ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72192", "commit_url": "https://git.kernel.org/stable/c/9b6926ac9c970ae0b2c2fe6289b16e9aa10b6a67" }, { "cve": "CVE-2026-72193", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9611f644302c07d21bc8af97e3e06a3d30064253", "subject": "ntfs3: cap RESTART_TABLE free-chain walker at rt->used", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72193", "commit_url": "https://git.kernel.org/stable/c/9611f644302c07d21bc8af97e3e06a3d30064253" }, { "cve": "CVE-2026-72194", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "1ebd684b8f627f75bc3e03f8b2ad8400fd1f02cd", "subject": "fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72194", "commit_url": "https://git.kernel.org/stable/c/1ebd684b8f627f75bc3e03f8b2ad8400fd1f02cd" }, { "cve": "CVE-2026-72195", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "d1570c48f49a693974d000251030370ee2e83539", "subject": "fs/ntfs3: bound attr_off in UpdateResidentValue against data_off", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72195", "commit_url": "https://git.kernel.org/stable/c/d1570c48f49a693974d000251030370ee2e83539" }, { "cve": "CVE-2026-72196", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "5e7b598660cfa8e5af172cf4c65cffc126333307", "subject": "fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72196", "commit_url": "https://git.kernel.org/stable/c/5e7b598660cfa8e5af172cf4c65cffc126333307" }, { "cve": "CVE-2026-72197", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "fc4626bb3656362de8b0ecd56605d47a19ec3518", "subject": "fs/ntfs3: bound DeleteIndexEntryAllocation memmove length", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72197", "commit_url": "https://git.kernel.org/stable/c/fc4626bb3656362de8b0ecd56605d47a19ec3518" }, { "cve": "CVE-2026-72198", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "097cdfd0a55df5af82c9753833f39a8bfadbcfcb", "subject": "ntfs: reject non-resident records for resident-only attributes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72198", "commit_url": "https://git.kernel.org/stable/c/097cdfd0a55df5af82c9753833f39a8bfadbcfcb" }, { "cve": "CVE-2026-72199", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "fcf5bf0e8570798970e3ae8c95d04765ba2c5b97", "subject": "ntfs: validate resident index root values on lookup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72199", "commit_url": "https://git.kernel.org/stable/c/fcf5bf0e8570798970e3ae8c95d04765ba2c5b97" }, { "cve": "CVE-2026-72200", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "ec4f061f2219e0f0c6465d56d0380bf749235a53", "subject": "ntfs: detect mapping-pairs LCN accumulator overflow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72200", "commit_url": "https://git.kernel.org/stable/c/ec4f061f2219e0f0c6465d56d0380bf749235a53" }, { "cve": "CVE-2026-72201", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "2221b691d7b2e17f08153f95848dacaa5d87e21d", "subject": "ntfs: validate index entries on reading", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72201", "commit_url": "https://git.kernel.org/stable/c/2221b691d7b2e17f08153f95848dacaa5d87e21d" }, { "cve": "CVE-2026-72202", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "c05132077df57a384919f61d7f8a8e76d748a6d4", "subject": "ntfs: avoid heap allocation for free-cluster readahead state", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72202", "commit_url": "https://git.kernel.org/stable/c/c05132077df57a384919f61d7f8a8e76d748a6d4" }, { "cve": "CVE-2026-72203", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "76bc14c7097ff678b2b5dbfd4fa33b46897d87ce", "subject": "ntfs: skip extent mft records in writeback to prevent deadlock", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72203", "commit_url": "https://git.kernel.org/stable/c/76bc14c7097ff678b2b5dbfd4fa33b46897d87ce" }, { "cve": "CVE-2026-72204", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "8b97b302f553a480fb76d2afd53cd6c0635a9dcd", "subject": "ntfs: centalize $INDEX_ROOT header validation", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72204", "commit_url": "https://git.kernel.org/stable/c/8b97b302f553a480fb76d2afd53cd6c0635a9dcd" }, { "cve": "CVE-2026-72205", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "a9523a7d3b24b3a6b25ec1eb668ee6618cacf05e", "subject": "ntfs: free volume-wide resources on fill_super failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72205", "commit_url": "https://git.kernel.org/stable/c/a9523a7d3b24b3a6b25ec1eb668ee6618cacf05e" }, { "cve": "CVE-2026-72206", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "14bc34fe948523dc2b0174691f9af9e74eb4f3fd", "subject": "ntfs: validate index block header more strictly", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72206", "commit_url": "https://git.kernel.org/stable/c/14bc34fe948523dc2b0174691f9af9e74eb4f3fd" }, { "cve": "CVE-2026-72207", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "0aad21570197973af4a1b25b3fb8ed3aeb9e7670", "subject": "ntfs: not change 0-byte $DATA attribute to non-resident", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72207", "commit_url": "https://git.kernel.org/stable/c/0aad21570197973af4a1b25b3fb8ed3aeb9e7670" }, { "cve": "CVE-2026-72208", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "937282f7d15b593d0be765fa2ced164130ec87f7", "subject": "ntfs: add bounds check before accessing EA entries", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72208", "commit_url": "https://git.kernel.org/stable/c/937282f7d15b593d0be765fa2ced164130ec87f7" }, { "cve": "CVE-2026-72209", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "d5803e3345dae9c6470bb61869885236276b9a35", "subject": "ntfs: validate attribute values on lookup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72209", "commit_url": "https://git.kernel.org/stable/c/d5803e3345dae9c6470bb61869885236276b9a35" }, { "cve": "CVE-2026-72210", "author_name": "Ron de Bruijn", "author_email": "rmbruijn@gmail.com", "fix_sha": "18760a74ef7c28df93726445b5595162e62ed341", "subject": "ntfs: fix off-by-one in mapping pairs decoding bounds checks", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72210", "commit_url": "https://git.kernel.org/stable/c/18760a74ef7c28df93726445b5595162e62ed341" }, { "cve": "CVE-2026-72211", "author_name": "DaeMyung Kang", "author_email": "charsyam@gmail.com", "fix_sha": "0bb508fb3b97e4802ec727fd2af4d608f65dd190", "subject": "ntfs: grow index root value before reparent header update", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72211", "commit_url": "https://git.kernel.org/stable/c/0bb508fb3b97e4802ec727fd2af4d608f65dd190" }, { "cve": "CVE-2026-72212", "author_name": "Muchun Song", "author_email": "songmuchun@bytedance.com", "fix_sha": "2fac4afa0e2e68841334c78c1821e49f74fbc66a", "subject": "mm/memory_hotplug: fix incorrect altmap passing in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72212", "commit_url": "https://git.kernel.org/stable/c/2fac4afa0e2e68841334c78c1821e49f74fbc66a" }, { "cve": "CVE-2026-72213", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "15807d0ddde37407af72859426b654f3d1972b00", "subject": "mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72213", "commit_url": "https://git.kernel.org/stable/c/15807d0ddde37407af72859426b654f3d1972b00" }, { "cve": "CVE-2026-72214", "author_name": "Ma Ke", "author_email": "make24@iscas.ac.cn", "fix_sha": "a2c14ff63e0e02e3c832385e523e9cc81301171c", "subject": "power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72214", "commit_url": "https://git.kernel.org/stable/c/a2c14ff63e0e02e3c832385e523e9cc81301171c" }, { "cve": "CVE-2026-72215", "author_name": "Maciej W. Rozycki", "author_email": "macro@orcam.me.uk", "fix_sha": "5ff79e8bdc75db51e30298a75939e2308e7658e0", "subject": "MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72215", "commit_url": "https://git.kernel.org/stable/c/5ff79e8bdc75db51e30298a75939e2308e7658e0" }, { "cve": "CVE-2026-72216", "author_name": "Wasim Nazir", "author_email": "wasim.nazir@oss.qualcomm.com", "fix_sha": "ecf9fc18e62c58eae1ceb65dab2bccb8a724de2d", "subject": "remoteproc: qcom: Fix leak when custom dump_segments addition fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72216", "commit_url": "https://git.kernel.org/stable/c/ecf9fc18e62c58eae1ceb65dab2bccb8a724de2d" }, { "cve": "CVE-2026-72217", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "42f5b80dda6b86e424054baf1475df686c403d5c", "subject": "SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72217", "commit_url": "https://git.kernel.org/stable/c/42f5b80dda6b86e424054baf1475df686c403d5c" }, { "cve": "CVE-2026-72218", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "70a38f87bed7f0694fd07988b47b2db1e10d8df3", "subject": "lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72218", "commit_url": "https://git.kernel.org/stable/c/70a38f87bed7f0694fd07988b47b2db1e10d8df3" }, { "cve": "CVE-2026-72219", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "f16a1513452edb532fec81e591c64c320866719c", "subject": "lockd: Plug nlm_file leak when nlm_do_fopen() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72219", "commit_url": "https://git.kernel.org/stable/c/f16a1513452edb532fec81e591c64c320866719c" }, { "cve": "CVE-2026-72220", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "18d216788bef06332ff8901670ecf1ed8f6eb614", "subject": "sunrpc: harden rq_procinfo lifecycle to prevent double-free", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72220", "commit_url": "https://git.kernel.org/stable/c/18d216788bef06332ff8901670ecf1ed8f6eb614" }, { "cve": "CVE-2026-72221", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "d00e32f84ca1a77cb67a3fbf59f58dada95f5a21", "subject": "sunrpc: wait for in-flight TLS handshake callback when cancel loses race", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72221", "commit_url": "https://git.kernel.org/stable/c/d00e32f84ca1a77cb67a3fbf59f58dada95f5a21" }, { "cve": "CVE-2026-72222", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "4f988f3a2808fb659f3880c282041ff067acad78", "subject": "sunrpc: pin svc_xprt across the asynchronous TLS handshake callback", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72222", "commit_url": "https://git.kernel.org/stable/c/4f988f3a2808fb659f3880c282041ff067acad78" }, { "cve": "CVE-2026-72223", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "13fe4cd9ddd0aacb7777812328be525a11ea3fea", "subject": "nvdimm/btt: Free arena sub-allocations on discover_arenas() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72223", "commit_url": "https://git.kernel.org/stable/c/13fe4cd9ddd0aacb7777812328be525a11ea3fea" }, { "cve": "CVE-2026-72224", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "1a6b6442a982d0ca5fb6a1a39b6f6dfd760eda57", "subject": "nvdimm/btt: Free arenas on btt_init() error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72224", "commit_url": "https://git.kernel.org/stable/c/1a6b6442a982d0ca5fb6a1a39b6f6dfd760eda57" }, { "cve": "CVE-2026-72225", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "289a2ca0c9b7eae74f93fc213b0b971669b8683d", "subject": "jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72225", "commit_url": "https://git.kernel.org/stable/c/289a2ca0c9b7eae74f93fc213b0b971669b8683d" }, { "cve": "CVE-2026-72226", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "7a581d9aaba8c82bd6177fa36b2588eea77f6e2b", "subject": "batman-adv: tt: prevent TVLV OOB check overflow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72226", "commit_url": "https://git.kernel.org/stable/c/7a581d9aaba8c82bd6177fa36b2588eea77f6e2b" }, { "cve": "CVE-2026-72227", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "38eaed28e250895d56f4b7989bd65479a511c5c3", "subject": "batman-adv: mcast: avoid OOB read of num_dests header", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72227", "commit_url": "https://git.kernel.org/stable/c/38eaed28e250895d56f4b7989bd65479a511c5c3" }, { "cve": "CVE-2026-72228", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "353d2c1d5492e53ae34f490a84494124dc3d3531", "subject": "batman-adv: frag: fix primary_if leak on failed linearization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72228", "commit_url": "https://git.kernel.org/stable/c/353d2c1d5492e53ae34f490a84494124dc3d3531" }, { "cve": "CVE-2026-72229", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "8669a550c752d86baebc5fdc83b8ff35c4372c0e", "subject": "batman-adv: clean untagged VLAN on netdev registration failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72229", "commit_url": "https://git.kernel.org/stable/c/8669a550c752d86baebc5fdc83b8ff35c4372c0e" }, { "cve": "CVE-2026-72230", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "6b628425aed49a1c7a4ffc997583840fc582d32b", "subject": "batman-adv: frag: free unfragmentable packet", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72230", "commit_url": "https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b" }, { "cve": "CVE-2026-72231", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "27c7d40008231ae4140d35501b60087a9de2d2c3", "subject": "batman-adv: tt: avoid request storms during pending request", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72231", "commit_url": "https://git.kernel.org/stable/c/27c7d40008231ae4140d35501b60087a9de2d2c3" }, { "cve": "CVE-2026-72232", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "49df66b7993c80b80c7eb9a84ba5b3410c8296a0", "subject": "batman-adv: ensure minimal ethernet header on TX", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72232", "commit_url": "https://git.kernel.org/stable/c/49df66b7993c80b80c7eb9a84ba5b3410c8296a0" }, { "cve": "CVE-2026-72233", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "cdf3b5af2bc4431e58629e8ad2086b1e9185c761", "subject": "batman-adv: bla: reacquire gw address after skb realloc", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72233", "commit_url": "https://git.kernel.org/stable/c/cdf3b5af2bc4431e58629e8ad2086b1e9185c761" }, { "cve": "CVE-2026-72234", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "7141990add3f75436f2933cb310654cad3b1e3e9", "subject": "batman-adv: access unicast_ttvn skb->data only after skb realloc", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72234", "commit_url": "https://git.kernel.org/stable/c/7141990add3f75436f2933cb310654cad3b1e3e9" }, { "cve": "CVE-2026-72235", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "035e1fed892d3d06002a73ff73668f618a514644", "subject": "batman-adv: retrieve ethhdr after potential skb realloc on RX", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72235", "commit_url": "https://git.kernel.org/stable/c/035e1fed892d3d06002a73ff73668f618a514644" }, { "cve": "CVE-2026-72236", "author_name": "Sumanth Korikkar", "author_email": "sumanthk@linux.ibm.com", "fix_sha": "49145bce539117db4b6e9e83c0e5ef528e361050", "subject": "s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72236", "commit_url": "https://git.kernel.org/stable/c/49145bce539117db4b6e9e83c0e5ef528e361050" }, { "cve": "CVE-2026-72237", "author_name": "Sandipan Das", "author_email": "sandipan.das@amd.com", "fix_sha": "47915e855fb38b42133e31ba917d99565f862154", "subject": "perf/x86/amd/brs: Fix kernel address leakage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72237", "commit_url": "https://git.kernel.org/stable/c/47915e855fb38b42133e31ba917d99565f862154" }, { "cve": "CVE-2026-72238", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "ffa0aa5b625fe0bed7463ac613f8b06676ff4542", "subject": "x86/boot: Validate console=uart8250 baud rate to fix early boot hang", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72238", "commit_url": "https://git.kernel.org/stable/c/ffa0aa5b625fe0bed7463ac613f8b06676ff4542" }, { "cve": "CVE-2026-72239", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "4c2509f3b79756679a02bea649c6a7501b58f52c", "subject": "x86/virt/sev: Revert \"Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN\"", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72239", "commit_url": "https://git.kernel.org/stable/c/4c2509f3b79756679a02bea649c6a7501b58f52c" }, { "cve": "CVE-2026-72240", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "8c2f0b42fc252e1bf1c7746447091a468e784ca1", "subject": "mfd: sm501: Fix reference leak on failed device registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72240", "commit_url": "https://git.kernel.org/stable/c/8c2f0b42fc252e1bf1c7746447091a468e784ca1" }, { "cve": "CVE-2026-72241", "author_name": "Armin Wolf", "author_email": "w_armin@gmx.de", "fix_sha": "c19fe864f667afc49d1391d764e20b66555bcf7a", "subject": "leds: uleds: Fix potential buffer overread", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72241", "commit_url": "https://git.kernel.org/stable/c/c19fe864f667afc49d1391d764e20b66555bcf7a" }, { "cve": "CVE-2026-72242", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "56acfeb10019e200ab6787d01f8d7cbe0f01526f", "subject": "selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72242", "commit_url": "https://git.kernel.org/stable/c/56acfeb10019e200ab6787d01f8d7cbe0f01526f" }, { "cve": "CVE-2026-72243", "author_name": "Stephen Smalley", "author_email": "stephen.smalley.work@gmail.com", "fix_sha": "44c74d27d1b9aaa99fa8a83640c1223575262b80", "subject": "selinux: check connect-related permissions on TCP Fast Open", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72243", "commit_url": "https://git.kernel.org/stable/c/44c74d27d1b9aaa99fa8a83640c1223575262b80" }, { "cve": "CVE-2026-72244", "author_name": "Arunpravin Paneer Selvam", "author_email": "arunpravin.paneerselvam@amd.com", "fix_sha": "56bc6384314fb9ae98975fb2af8b143097ede3dc", "subject": "gpu/buddy: bail out of try_harder when alignment cannot be honoured", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72244", "commit_url": "https://git.kernel.org/stable/c/56bc6384314fb9ae98975fb2af8b143097ede3dc" }, { "cve": "CVE-2026-72245", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "e75717f9aec04355777be41070890c6a815c76df", "subject": "gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72245", "commit_url": "https://git.kernel.org/stable/c/e75717f9aec04355777be41070890c6a815c76df" }, { "cve": "CVE-2026-72247", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "f62c41b4910e65da396ec9a8c40c1fe7fe82e449", "subject": "netfilter: nf_conncount: fix zone comparison in tuple dedup", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72247", "commit_url": "https://git.kernel.org/stable/c/f62c41b4910e65da396ec9a8c40c1fe7fe82e449" }, { "cve": "CVE-2026-72248", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "fa7395c02d95e51bad2952325d2d6503bfbad437", "subject": "netfilter: flowtable: support IPIP tunnel with direct xmit", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72248", "commit_url": "https://git.kernel.org/stable/c/fa7395c02d95e51bad2952325d2d6503bfbad437" }, { "cve": "CVE-2026-72249", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "c328b90c17fc5fa7786503695152880b2afb9326", "subject": "netfilter: flowtable: use dst in this direction when pushing IPIP header", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72249", "commit_url": "https://git.kernel.org/stable/c/c328b90c17fc5fa7786503695152880b2afb9326" }, { "cve": "CVE-2026-72250", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "3b08fed5b7e0d5e3a25d73ef3ba09cd33ade16c9", "subject": "netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72250", "commit_url": "https://git.kernel.org/stable/c/3b08fed5b7e0d5e3a25d73ef3ba09cd33ade16c9" }, { "cve": "CVE-2026-72251", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "77e43bcb7ec177e293a5c3f1b91a2c5aebfb6c68", "subject": "netfilter: nf_nat_sip: reload possible stale data pointer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72251", "commit_url": "https://git.kernel.org/stable/c/77e43bcb7ec177e293a5c3f1b91a2c5aebfb6c68" }, { "cve": "CVE-2026-72252", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "47e65eff50691f0a5b79d325e28d83ec1da43bcf", "subject": "netfilter: nft_set_pipapo: don't leak bad clone into future transaction", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72252", "commit_url": "https://git.kernel.org/stable/c/47e65eff50691f0a5b79d325e28d83ec1da43bcf" }, { "cve": "CVE-2026-72253", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "e5e24a365a5e024efef63cc49abb345fbd4852c5", "subject": "netfilter: nf_conntrack_sip: validate skb_dst() before accessing it", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72253", "commit_url": "https://git.kernel.org/stable/c/e5e24a365a5e024efef63cc49abb345fbd4852c5" }, { "cve": "CVE-2026-72254", "author_name": "Theodor Arsenij Larionov-Trichkine", "author_email": "theodorlarionov@gmail.com", "fix_sha": "d07955dd34ecae17d35d8c7d0a273a3fba653a8c", "subject": "netfilter: nft_fib: reject fib expression on the netdev egress hook", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72254", "commit_url": "https://git.kernel.org/stable/c/d07955dd34ecae17d35d8c7d0a273a3fba653a8c" }, { "cve": "CVE-2026-72255", "author_name": "Haoze Xie", "author_email": "royenheart@gmail.com", "fix_sha": "c9c9b37f8c5505224e8d206184df3bb668ee00cf", "subject": "netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72255", "commit_url": "https://git.kernel.org/stable/c/c9c9b37f8c5505224e8d206184df3bb668ee00cf" }, { "cve": "CVE-2026-72256", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "5feba91006ec92da57acc1cc2e34df623b98541e", "subject": "netfilter: xt_cluster: reject template conntracks in hash match", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72256", "commit_url": "https://git.kernel.org/stable/c/5feba91006ec92da57acc1cc2e34df623b98541e" }, { "cve": "CVE-2026-72257", "author_name": "Srinivas Kandagatla", "author_email": "srinivas.kandagatla@oss.qualcomm.com", "fix_sha": "2e9261761b35f0b67b7487688cd1365f535be0b3", "subject": "ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72257", "commit_url": "https://git.kernel.org/stable/c/2e9261761b35f0b67b7487688cd1365f535be0b3" }, { "cve": "CVE-2026-72258", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "bee65e00c0924ebecf97718d95dcf4a05ee36471", "subject": "ASoC: mediatek: mt8183: Release reserved memory on cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72258", "commit_url": "https://git.kernel.org/stable/c/bee65e00c0924ebecf97718d95dcf4a05ee36471" }, { "cve": "CVE-2026-72259", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "965e17ae6751c5d3302430c8ebd650e72d45a85f", "subject": "ASoC: mediatek: mt8192: Release reserved memory on cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72259", "commit_url": "https://git.kernel.org/stable/c/965e17ae6751c5d3302430c8ebd650e72d45a85f" }, { "cve": "CVE-2026-72260", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "e24d5dde56a50946020b134fa8448869093db76a", "subject": "ASoC: mediatek: mt8192: Check runtime resume during probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72260", "commit_url": "https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a" }, { "cve": "CVE-2026-72261", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "390aa4c9339bb0ec0bc8d554e830faf93ca9d49e", "subject": "ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72261", "commit_url": "https://git.kernel.org/stable/c/390aa4c9339bb0ec0bc8d554e830faf93ca9d49e" }, { "cve": "CVE-2026-72262", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "fd46668d538993218eea19c6925c868ac0f2630c", "subject": "ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72262", "commit_url": "https://git.kernel.org/stable/c/fd46668d538993218eea19c6925c868ac0f2630c" }, { "cve": "CVE-2026-72263", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "d46f9f23897261da53ffbeb89d48a13982ba7d28", "subject": "ASoC: SOF: topology: fix memory leak in snd_sof_load_topology", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72263", "commit_url": "https://git.kernel.org/stable/c/d46f9f23897261da53ffbeb89d48a13982ba7d28" }, { "cve": "CVE-2026-72264", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "7a35ec619d9af8ee128320975c1252b8ad65f1e8", "subject": "fbdev: tridentfb: fix potential memory leak in trident_pci_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72264", "commit_url": "https://git.kernel.org/stable/c/7a35ec619d9af8ee128320975c1252b8ad65f1e8" }, { "cve": "CVE-2026-72265", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "85f5e38c162bdf9dbbe197275d416402712f3707", "subject": "fbdev: nvidia: fix potential memory leak in nvidiafb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72265", "commit_url": "https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707" }, { "cve": "CVE-2026-72266", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "b15d708995c01bbffe7dcd634a31959f6805bed3", "subject": "fbdev: vesafb: fix memory leak in vesafb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72266", "commit_url": "https://git.kernel.org/stable/c/b15d708995c01bbffe7dcd634a31959f6805bed3" }, { "cve": "CVE-2026-72267", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "6fcca16a2b19c37f60693c56cbc0c923364ff3ef", "subject": "fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72267", "commit_url": "https://git.kernel.org/stable/c/6fcca16a2b19c37f60693c56cbc0c923364ff3ef" }, { "cve": "CVE-2026-72268", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "bb019d755366cc3e777a12d4bf457ff289837370", "subject": "fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72268", "commit_url": "https://git.kernel.org/stable/c/bb019d755366cc3e777a12d4bf457ff289837370" }, { "cve": "CVE-2026-72269", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "033e56fed09047ee63072e9f58789f40c1c7079d", "subject": "fbdev: uvesafb: fix potential memory leak in uvesafb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72269", "commit_url": "https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d" }, { "cve": "CVE-2026-72270", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "3b0ed04bc852887a9164e1bbf521652e8ef3eb92", "subject": "fbdev: s3fb: fix potential memory leak in s3_pci_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72270", "commit_url": "https://git.kernel.org/stable/c/3b0ed04bc852887a9164e1bbf521652e8ef3eb92" }, { "cve": "CVE-2026-72271", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "5936063409af230a2c88b8700c47b89a19fd70b5", "subject": "fbdev: i740fb: fix potential memory leak in i740fb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72271", "commit_url": "https://git.kernel.org/stable/c/5936063409af230a2c88b8700c47b89a19fd70b5" }, { "cve": "CVE-2026-72272", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "df8c1101c9a08859da612b5d0a08d55d475522c6", "subject": "fbdev: radeon: fix potential memory leak in radeonfb_pci_register()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72272", "commit_url": "https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6" }, { "cve": "CVE-2026-72273", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "9b6eaf101656958397a6012bf43f6e2e42c9e5cb", "subject": "fbdev: efifb: fix memory leak in efifb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72273", "commit_url": "https://git.kernel.org/stable/c/9b6eaf101656958397a6012bf43f6e2e42c9e5cb" }, { "cve": "CVE-2026-72274", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "cbef2a305a8a72969b86f96b7c07b86edde61aff", "subject": "fbdev: hecubafb: fix potential memory leak in hecubafb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72274", "commit_url": "https://git.kernel.org/stable/c/cbef2a305a8a72969b86f96b7c07b86edde61aff" }, { "cve": "CVE-2026-72275", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c", "subject": "fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72275", "commit_url": "https://git.kernel.org/stable/c/9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c" }, { "cve": "CVE-2026-72276", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "894632b862a39b3fe1cb5de06fbae86225ea64de", "subject": "fbdev: metronomefb: fix potential memory leak in metronomefb_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72276", "commit_url": "https://git.kernel.org/stable/c/894632b862a39b3fe1cb5de06fbae86225ea64de" }, { "cve": "CVE-2026-72277", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "4bd7dbe0b2243e6aa735cae4d5e1ff988b30b2a6", "subject": "KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72277", "commit_url": "https://git.kernel.org/stable/c/4bd7dbe0b2243e6aa735cae4d5e1ff988b30b2a6" }, { "cve": "CVE-2026-72278", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "bb645aa0a4caeaf7f9cd32e9a948594d434c1a8f", "subject": "KVM: arm64: nv: Re-translate VNCR before injecting abort", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72278", "commit_url": "https://git.kernel.org/stable/c/bb645aa0a4caeaf7f9cd32e9a948594d434c1a8f" }, { "cve": "CVE-2026-72279", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "2684e02bac41c5220f6c1ab2bdcc957b71812977", "subject": "KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR", "cvss_score": 9.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72279", "commit_url": "https://git.kernel.org/stable/c/2684e02bac41c5220f6c1ab2bdcc957b71812977" }, { "cve": "CVE-2026-72280", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "9f1667098c6ae7ec81a9a56859cfdacb822aa0d0", "subject": "KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72280", "commit_url": "https://git.kernel.org/stable/c/9f1667098c6ae7ec81a9a56859cfdacb822aa0d0" }, { "cve": "CVE-2026-72281", "author_name": "Bradley Morgan", "author_email": "include@grrlz.net", "fix_sha": "d098bb75d14fde2f12155f1a95ec0168160867ce", "subject": "KVM: arm64: account pKVM reclaim against the VM mm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72281", "commit_url": "https://git.kernel.org/stable/c/d098bb75d14fde2f12155f1a95ec0168160867ce" }, { "cve": "CVE-2026-72282", "author_name": "Marc Zyngier", "author_email": "maz@kernel.org", "fix_sha": "3a07249981629ace483ebbef81ef6b34c2d2afec", "subject": "KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72282", "commit_url": "https://git.kernel.org/stable/c/3a07249981629ace483ebbef81ef6b34c2d2afec" }, { "cve": "CVE-2026-72283", "author_name": "leixiang", "author_email": "leixiang@kylinos.cn", "fix_sha": "ed446e8aa894883c08892cfee69782fdf8f6c3ca", "subject": "KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72283", "commit_url": "https://git.kernel.org/stable/c/ed446e8aa894883c08892cfee69782fdf8f6c3ca" }, { "cve": "CVE-2026-72284", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "9285e4070df2c40585c3d7ec9571faa7a2b97e17", "subject": "KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72284", "commit_url": "https://git.kernel.org/stable/c/9285e4070df2c40585c3d7ec9571faa7a2b97e17" }, { "cve": "CVE-2026-72285", "author_name": "Binbin Wu", "author_email": "binbin.wu@linux.intel.com", "fix_sha": "cfbebb55e5127dc162e73fa8956000055a78606c", "subject": "KVM: TDX: Reject concurrent change to CPUID entry count", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72285", "commit_url": "https://git.kernel.org/stable/c/cfbebb55e5127dc162e73fa8956000055a78606c" }, { "cve": "CVE-2026-72286", "author_name": "Atish Patra", "author_email": "atishp@meta.com", "fix_sha": "6ee4140788234a6fabf59e6a50e38cdb936008cd", "subject": "KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72286", "commit_url": "https://git.kernel.org/stable/c/6ee4140788234a6fabf59e6a50e38cdb936008cd" }, { "cve": "CVE-2026-72287", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "ebdac7554abb347ca4197be241116842161acd9b", "subject": "KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into \"normal\" checks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72287", "commit_url": "https://git.kernel.org/stable/c/ebdac7554abb347ca4197be241116842161acd9b" }, { "cve": "CVE-2026-72288", "author_name": "Marc Zyngier", "author_email": "maz@kernel.org", "fix_sha": "7258770e5814f15e8308ebda82ac9acf6964ba8e", "subject": "KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72288", "commit_url": "https://git.kernel.org/stable/c/7258770e5814f15e8308ebda82ac9acf6964ba8e" }, { "cve": "CVE-2026-72289", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "0074b82cdfcb5fd13710a0ac308ade68ac6f6fbe", "subject": "KVM: arm64: vgic: Check the interrupt is still ours before migrating it", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72289", "commit_url": "https://git.kernel.org/stable/c/0074b82cdfcb5fd13710a0ac308ade68ac6f6fbe" }, { "cve": "CVE-2026-72290", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "7b69729046a4c58f4cb457184e5ac4aaa179bff4", "subject": "KVM: s390: pci: Fix GISC refcount leak on AIF enable failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72290", "commit_url": "https://git.kernel.org/stable/c/7b69729046a4c58f4cb457184e5ac4aaa179bff4" }, { "cve": "CVE-2026-72291", "author_name": "Claudio Imbrenda", "author_email": "imbrenda@linux.ibm.com", "fix_sha": "5670b7f927f8d98685f3f5873dbf9f8d7a5a63f3", "subject": "KVM: s390: Fix unlikely race in try_get_locked_pte()", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72291", "commit_url": "https://git.kernel.org/stable/c/5670b7f927f8d98685f3f5873dbf9f8d7a5a63f3" }, { "cve": "CVE-2026-72292", "author_name": "Christian Borntraeger", "author_email": "borntraeger@linux.ibm.com", "fix_sha": "c7dda3d0f869dc97223448a06c9a2e5235928e48", "subject": "KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72292", "commit_url": "https://git.kernel.org/stable/c/c7dda3d0f869dc97223448a06c9a2e5235928e48" }, { "cve": "CVE-2026-72293", "author_name": "Claudio Imbrenda", "author_email": "imbrenda@linux.ibm.com", "fix_sha": "668e70cc545e2659f3c4adad20a0883533042473", "subject": "KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72293", "commit_url": "https://git.kernel.org/stable/c/668e70cc545e2659f3c4adad20a0883533042473" }, { "cve": "CVE-2026-72294", "author_name": "Bibo Mao", "author_email": "maobibo@loongson.cn", "fix_sha": "09b318ab77b7a4fc9987fd98d1525fc55ddc2617", "subject": "LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72294", "commit_url": "https://git.kernel.org/stable/c/09b318ab77b7a4fc9987fd98d1525fc55ddc2617" }, { "cve": "CVE-2026-72295", "author_name": "Yanfei Xu", "author_email": "yanfei.xu@bytedance.com", "fix_sha": "3474037904c20ff915e3ebab0ab5c1e41bbe549e", "subject": "LoongArch: KVM: Validate irqchip index in irqfd routing", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72295", "commit_url": "https://git.kernel.org/stable/c/3474037904c20ff915e3ebab0ab5c1e41bbe549e" }, { "cve": "CVE-2026-72296", "author_name": "Yong Wang", "author_email": "edragain@163.com", "fix_sha": "9406f6012b7343661efb516a11c62d4db2b62f75", "subject": "net: ife: require ETH_HLEN to be pullable in ife_decode()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72296", "commit_url": "https://git.kernel.org/stable/c/9406f6012b7343661efb516a11c62d4db2b62f75" }, { "cve": "CVE-2026-72297", "author_name": "Zhengchuan Liang", "author_email": "zcliangcn@gmail.com", "fix_sha": "cdf19f380e46192e7084be559638aab1f6ed86a2", "subject": "net: atm: reject out-of-range traffic classes in QoS validation", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72297", "commit_url": "https://git.kernel.org/stable/c/cdf19f380e46192e7084be559638aab1f6ed86a2" }, { "cve": "CVE-2026-72298", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "20054869770c7df060c5ecee3e8bbf9029c47191", "subject": "net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72298", "commit_url": "https://git.kernel.org/stable/c/20054869770c7df060c5ecee3e8bbf9029c47191" }, { "cve": "CVE-2026-72299", "author_name": "Li Xiasong", "author_email": "lixiasong1@huawei.com", "fix_sha": "acd7df8d955480a6f6e5bb809da67b1500cc3cf4", "subject": "tipc: restrict socket queue dumps in enqueue tracepoints", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72299", "commit_url": "https://git.kernel.org/stable/c/acd7df8d955480a6f6e5bb809da67b1500cc3cf4" }, { "cve": "CVE-2026-72300", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "8468dd79cfb2ffbdeaf7c353f63d64941cb8ba05", "subject": "ASoC: SOF: topology: validate vendor array size before parsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72300", "commit_url": "https://git.kernel.org/stable/c/8468dd79cfb2ffbdeaf7c353f63d64941cb8ba05" }, { "cve": "CVE-2026-72301", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "1f97760417b5faa60e9642fd0ed61eb17d0b1b39", "subject": "ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72301", "commit_url": "https://git.kernel.org/stable/c/1f97760417b5faa60e9642fd0ed61eb17d0b1b39" }, { "cve": "CVE-2026-72302", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "8791977d7289f6e9d2b014f60a5455f053a7bc04", "subject": "ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72302", "commit_url": "https://git.kernel.org/stable/c/8791977d7289f6e9d2b014f60a5455f053a7bc04" }, { "cve": "CVE-2026-72303", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "5bdfeccb7fbf6e000fc783cd8412732e67c1ad0c", "subject": "ASoC: SOF: ipc4-control: Validate notification payload size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72303", "commit_url": "https://git.kernel.org/stable/c/5bdfeccb7fbf6e000fc783cd8412732e67c1ad0c" }, { "cve": "CVE-2026-72304", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "3ad673e7139cf214afd24321a829aad6575f4163", "subject": "ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72304", "commit_url": "https://git.kernel.org/stable/c/3ad673e7139cf214afd24321a829aad6575f4163" }, { "cve": "CVE-2026-72305", "author_name": "Jason Wang", "author_email": "jasowang@redhat.com", "fix_sha": "9c1523803445ee0348f62b77793266dd981596e0", "subject": "VDUSE: avoid leaking information to userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72305", "commit_url": "https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0" }, { "cve": "CVE-2026-72306", "author_name": "Zhang Tianci", "author_email": "zhangtianci.1997@bytedance.com", "fix_sha": "ae9c13b6fd79087cc5a216ee1649b6f012c2a238", "subject": "vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72306", "commit_url": "https://git.kernel.org/stable/c/ae9c13b6fd79087cc5a216ee1649b6f012c2a238" }, { "cve": "CVE-2026-72307", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "21cf8dc478a49e8de039c2739b1646a774cb1944", "subject": "mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72307", "commit_url": "https://git.kernel.org/stable/c/21cf8dc478a49e8de039c2739b1646a774cb1944" }, { "cve": "CVE-2026-72308", "author_name": "Wentao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "41c8c1d65b32beacd8d916a22457b4f6e47f45af", "subject": "mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72308", "commit_url": "https://git.kernel.org/stable/c/41c8c1d65b32beacd8d916a22457b4f6e47f45af" }, { "cve": "CVE-2026-72309", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "ec082d0b978b5fb4c11205ccce63587ac94c74e1", "subject": "tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72309", "commit_url": "https://git.kernel.org/stable/c/ec082d0b978b5fb4c11205ccce63587ac94c74e1" }, { "cve": "CVE-2026-72310", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "a4f27ad055392fa164f5649e89a3637b033c5fcc", "subject": "smb: client: fix overflow in passthrough ioctl bounds check", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72310", "commit_url": "https://git.kernel.org/stable/c/a4f27ad055392fa164f5649e89a3637b033c5fcc" }, { "cve": "CVE-2026-72311", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "14abbed336a2d1bbd726c25d148d2ec0ff928073", "subject": "drm/xe: free madvise VMA array on L2 flush failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72311", "commit_url": "https://git.kernel.org/stable/c/14abbed336a2d1bbd726c25d148d2ec0ff928073" }, { "cve": "CVE-2026-72312", "author_name": "Harman Kalra", "author_email": "hkalra@marvell.com", "fix_sha": "fabb881df322da25442f98d23f5fa371e3c78ec4", "subject": "octeontx2-af: fix VF bringup affecting PF promiscuous state", "cvss_score": 7.9, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72312", "commit_url": "https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4" }, { "cve": "CVE-2026-72313", "author_name": "Thomas Zimmermann", "author_email": "tzimmermann@suse.de", "fix_sha": "06c2b8d7ea2bcb014dd974fc3bc6d128d65d7477", "subject": "drm/fb-helper: Only consider active CRTCs for vblank sync", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72313", "commit_url": "https://git.kernel.org/stable/c/06c2b8d7ea2bcb014dd974fc3bc6d128d65d7477" }, { "cve": "CVE-2026-72314", "author_name": "Timur Tabi", "author_email": "ttabi@nvidia.com", "fix_sha": "d38f8bd771c4999b797d7074b348cf201414bd34", "subject": "regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72314", "commit_url": "https://git.kernel.org/stable/c/d38f8bd771c4999b797d7074b348cf201414bd34" }, { "cve": "CVE-2026-72315", "author_name": "Zizhi Wo", "author_email": "wozizhi@huawei.com", "fix_sha": "75f5c412fa867efa0bf9b646bffe0d912109e84a", "subject": "smb: client: fix busy dentry warning on unmount after DIO", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72315", "commit_url": "https://git.kernel.org/stable/c/75f5c412fa867efa0bf9b646bffe0d912109e84a" }, { "cve": "CVE-2026-72316", "author_name": "Cao Guanghui", "author_email": "caoguanghui@kylinos.cn", "fix_sha": "9ae672606c17891d90b282e3490b817620549599", "subject": "dm era: fix NULL pointer dereference in metadata_open()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72316", "commit_url": "https://git.kernel.org/stable/c/9ae672606c17891d90b282e3490b817620549599" }, { "cve": "CVE-2026-72317", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "46bc86c833956219bbfd246c1ffd832a479c5199", "subject": "SUNRPC: pin upper rpc_clnt across the TLS connect_worker", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72317", "commit_url": "https://git.kernel.org/stable/c/46bc86c833956219bbfd246c1ffd832a479c5199" }, { "cve": "CVE-2026-72318", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "027a84ac6b50c12ef767c15abfc58aa865820e9e", "subject": "cifs: validate DFS referral string offsets", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72318", "commit_url": "https://git.kernel.org/stable/c/027a84ac6b50c12ef767c15abfc58aa865820e9e" }, { "cve": "CVE-2026-72319", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "3f7a535ff0fa627a0132803e4c2f903ceffcbc1c", "subject": "ipvs: ensure inner headers in ICMP errors are in headroom", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72319", "commit_url": "https://git.kernel.org/stable/c/3f7a535ff0fa627a0132803e4c2f903ceffcbc1c" }, { "cve": "CVE-2026-72320", "author_name": "Tamaki Yanagawa", "author_email": "ty@000ty.net", "fix_sha": "e6107a4c74b54cb33e3bce162a63048ae5a6b198", "subject": "netfilter: nft_lookup: fix catchall element handling with inverted lookups", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72320", "commit_url": "https://git.kernel.org/stable/c/e6107a4c74b54cb33e3bce162a63048ae5a6b198" }, { "cve": "CVE-2026-72321", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "3546deaa0c30a14c7cdb5dc8f2432cb428f0cd36", "subject": "ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72321", "commit_url": "https://git.kernel.org/stable/c/3546deaa0c30a14c7cdb5dc8f2432cb428f0cd36" }, { "cve": "CVE-2026-72322", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "9b26518b6896a16b809b1e42986f4ebac7bccc1e", "subject": "ipv6: mcast: Fix potential UAF in MLD delayed work", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72322", "commit_url": "https://git.kernel.org/stable/c/9b26518b6896a16b809b1e42986f4ebac7bccc1e" }, { "cve": "CVE-2026-72323", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7b19c0f81ed1fdaec6bc522569be367199a9edf3", "subject": "ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72323", "commit_url": "https://git.kernel.org/stable/c/7b19c0f81ed1fdaec6bc522569be367199a9edf3" }, { "cve": "CVE-2026-72324", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "b11c513ad943f35cf5e8007d3a56279c79b7ed4b", "subject": "gpio: mvebu: free generic chips on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72324", "commit_url": "https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b" }, { "cve": "CVE-2026-72325", "author_name": "Sandipan Das", "author_email": "sandipan.das@amd.com", "fix_sha": "07c60dda9c059c09f83d42a3ebda2e7cc1cf3bc2", "subject": "perf/x86/amd/core: Avoid enabling BRS from the SVM reload path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72325", "commit_url": "https://git.kernel.org/stable/c/07c60dda9c059c09f83d42a3ebda2e7cc1cf3bc2" }, { "cve": "CVE-2026-72326", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "b7f97cae7ec1b6c3c32843c42be218690d310467", "subject": "net/sched: cake: reject overhead values that underflow length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72326", "commit_url": "https://git.kernel.org/stable/c/b7f97cae7ec1b6c3c32843c42be218690d310467" }, { "cve": "CVE-2026-72327", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "2f8b8593c7832fad655290cef9e99af05b1b52b3", "subject": "drm/v3d: Reject invalid indirect BO handle in indirect CSD setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72327", "commit_url": "https://git.kernel.org/stable/c/2f8b8593c7832fad655290cef9e99af05b1b52b3" }, { "cve": "CVE-2026-72328", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "14f172eff9c19f8043a9858845f33cd034f3a41e", "subject": "accel/amdxdna: Fix potential amdxdna_umap lifetime race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72328", "commit_url": "https://git.kernel.org/stable/c/14f172eff9c19f8043a9858845f33cd034f3a41e" }, { "cve": "CVE-2026-72329", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "5c0e3ba4f500fd4314ceb42f07f16bc445156431", "subject": "net/liquidio: drop cached VF pci_dev LUT", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72329", "commit_url": "https://git.kernel.org/stable/c/5c0e3ba4f500fd4314ceb42f07f16bc445156431" }, { "cve": "CVE-2026-72330", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "3be28e2c9cd0230cb51fd4967df095273afd3848", "subject": "net/tls: Consume empty data records in tls_sw_read_sock()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72330", "commit_url": "https://git.kernel.org/stable/c/3be28e2c9cd0230cb51fd4967df095273afd3848" }, { "cve": "CVE-2026-72331", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "1ba02717e821cf14ece642273958647e79698d3d", "subject": "accel/amdxdna: Fix VMA access race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72331", "commit_url": "https://git.kernel.org/stable/c/1ba02717e821cf14ece642273958647e79698d3d" }, { "cve": "CVE-2026-72332", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "e35c9cf5512814fb04f369f2eada64f0a7164609", "subject": "accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72332", "commit_url": "https://git.kernel.org/stable/c/e35c9cf5512814fb04f369f2eada64f0a7164609" }, { "cve": "CVE-2026-72333", "author_name": "Stig Hornang", "author_email": "stig@hornang.me", "fix_sha": "6e1930ece855a4c256f1c7e6632d634cfb9888b5", "subject": "Bluetooth: L2CAP: fix tx ident leak for commands without a response", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72333", "commit_url": "https://git.kernel.org/stable/c/6e1930ece855a4c256f1c7e6632d634cfb9888b5" }, { "cve": "CVE-2026-72334", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "e054c1a6ae7310d2815778fddb87da616e11c255", "subject": "Bluetooth: ISO: fix malformed ISO_END/CONT handling", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72334", "commit_url": "https://git.kernel.org/stable/c/e054c1a6ae7310d2815778fddb87da616e11c255" }, { "cve": "CVE-2026-72335", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "384a4b2fef9ffe5e270ee5558975c0504881c5fb", "subject": "Bluetooth: MGMT: Fix adv monitor add failure cleanup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72335", "commit_url": "https://git.kernel.org/stable/c/384a4b2fef9ffe5e270ee5558975c0504881c5fb" }, { "cve": "CVE-2026-72336", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "518aa9505fa10ea5662349e5d2efd8c9e32a820b", "subject": "Bluetooth: 6lowpan: hold L2CAP conn across debugfs control", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72336", "commit_url": "https://git.kernel.org/stable/c/518aa9505fa10ea5662349e5d2efd8c9e32a820b" }, { "cve": "CVE-2026-72337", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "352a59dc1f4a41314b6f827c17e16af7ca88271a", "subject": "Bluetooth: 6lowpan: avoid untracked enable work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72337", "commit_url": "https://git.kernel.org/stable/c/352a59dc1f4a41314b6f827c17e16af7ca88271a" }, { "cve": "CVE-2026-72338", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "8b519cbcabe836a441369fbec1a8a6518a709251", "subject": "net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72338", "commit_url": "https://git.kernel.org/stable/c/8b519cbcabe836a441369fbec1a8a6518a709251" }, { "cve": "CVE-2026-72339", "author_name": "Shigeru Yoshida", "author_email": "syoshida@redhat.com", "fix_sha": "a0a558ca7e75b49e71f8c545c30e8c005e6e4e2f", "subject": "qede: fix off-by-one in BD ring consumption on build_skb failure", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72339", "commit_url": "https://git.kernel.org/stable/c/a0a558ca7e75b49e71f8c545c30e8c005e6e4e2f" }, { "cve": "CVE-2026-72340", "author_name": "Jens Emil Schulz \u00d8stergaard", "author_email": "jensemil.schulzostergaard@microchip.com", "fix_sha": "d7a8d500d7e42837bd8dce40cb52c97c6e8706a9", "subject": "net: microchip: vcap: fix races on the shared Super VCAP block", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72340", "commit_url": "https://git.kernel.org/stable/c/d7a8d500d7e42837bd8dce40cb52c97c6e8706a9" }, { "cve": "CVE-2026-72341", "author_name": "Feng Liu", "author_email": "feliu@nvidia.com", "fix_sha": "5a799714e8ca0bce9ea40694f49914cf1adbbaa9", "subject": "net/mlx5e: Fix publication race for priv->channel_stats[]", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72341", "commit_url": "https://git.kernel.org/stable/c/5a799714e8ca0bce9ea40694f49914cf1adbbaa9" }, { "cve": "CVE-2026-72342", "author_name": "Feng Liu", "author_email": "feliu@nvidia.com", "fix_sha": "89b25b5f46f488ea3b29b3444864c76944c9075b", "subject": "net/mlx5e: Fix HV VHCA stats agent registration race", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72342", "commit_url": "https://git.kernel.org/stable/c/89b25b5f46f488ea3b29b3444864c76944c9075b" }, { "cve": "CVE-2026-72343", "author_name": "Feng Liu", "author_email": "feliu@nvidia.com", "fix_sha": "25f6b929c7e379cbea7cb8caa67b49b2d1efae17", "subject": "net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72343", "commit_url": "https://git.kernel.org/stable/c/25f6b929c7e379cbea7cb8caa67b49b2d1efae17" }, { "cve": "CVE-2026-72344", "author_name": "Shay Drory", "author_email": "shayd@nvidia.com", "fix_sha": "7bed4af0ced82948d660205efecd551ef8bc3912", "subject": "net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72344", "commit_url": "https://git.kernel.org/stable/c/7bed4af0ced82948d660205efecd551ef8bc3912" }, { "cve": "CVE-2026-72345", "author_name": "Shay Drory", "author_email": "shayd@nvidia.com", "fix_sha": "0f0e4ae6975c773f7854fc48932a267f6c79088f", "subject": "net/mlx5: LAG, Fix off-by-one in single-FDB error rollback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72345", "commit_url": "https://git.kernel.org/stable/c/0f0e4ae6975c773f7854fc48932a267f6c79088f" }, { "cve": "CVE-2026-72346", "author_name": "Mingyou Chen", "author_email": "qby140326@gmail.com", "fix_sha": "d3666875c75eb1bc8090343fa0d6fc8fb7924356", "subject": "platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72346", "commit_url": "https://git.kernel.org/stable/c/d3666875c75eb1bc8090343fa0d6fc8fb7924356" }, { "cve": "CVE-2026-72347", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "1b47026fb4b35bac850ad6e8a4ad7fc018e09ebc", "subject": "netfilter: xt_connmark: reject invalid shift parameters", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72347", "commit_url": "https://git.kernel.org/stable/c/1b47026fb4b35bac850ad6e8a4ad7fc018e09ebc" }, { "cve": "CVE-2026-72348", "author_name": "Zhixing Chen", "author_email": "running910@gmail.com", "fix_sha": "43ccc20b5a733226417832cf16ef45322e594990", "subject": "netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72348", "commit_url": "https://git.kernel.org/stable/c/43ccc20b5a733226417832cf16ef45322e594990" }, { "cve": "CVE-2026-72349", "author_name": "Feng Wu", "author_email": "wufengwufengwufeng@gmail.com", "fix_sha": "444853cd438201007da5359821adcc2995655ab1", "subject": "netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72349", "commit_url": "https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1" }, { "cve": "CVE-2026-72350", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "64cdf7d30ac18e43df6c48004435febb965809a8", "subject": "netfilter: xt_u32: reject invalid shift counts", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72350", "commit_url": "https://git.kernel.org/stable/c/64cdf7d30ac18e43df6c48004435febb965809a8" }, { "cve": "CVE-2026-72351", "author_name": "Qihang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "d335dcc6f521571d57117b8deeebc940836e5450", "subject": "gue: validate REMCSUM private option length", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72351", "commit_url": "https://git.kernel.org/stable/c/d335dcc6f521571d57117b8deeebc940836e5450" }, { "cve": "CVE-2026-72352", "author_name": "Yiyang Chen", "author_email": "chenyy23@mails.tsinghua.edu.cn", "fix_sha": "2d044049421dd48212b28646a850749d4a2d57fa", "subject": "HID: bpf: Fix hid_bpf_get_data() range check", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72352", "commit_url": "https://git.kernel.org/stable/c/2d044049421dd48212b28646a850749d4a2d57fa" }, { "cve": "CVE-2026-72353", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "88496c4ac5a6ade75619f4b1015706a8b924d50a", "subject": "ntfs: avoid stale runlist element dereference in fallocate", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72353", "commit_url": "https://git.kernel.org/stable/c/88496c4ac5a6ade75619f4b1015706a8b924d50a" }, { "cve": "CVE-2026-72354", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "81fe702ff1760da32bcd3ef4494b2a33dbeced72", "subject": "ntfs: avoid stale runlist element dereference in MFT writeback", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72354", "commit_url": "https://git.kernel.org/stable/c/81fe702ff1760da32bcd3ef4494b2a33dbeced72" }, { "cve": "CVE-2026-72355", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "5c6ce05e406520290c1d89da97fb3cd70c09137d", "subject": "netfs: Fix barriering when walking subrequest list", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72355", "commit_url": "https://git.kernel.org/stable/c/5c6ce05e406520290c1d89da97fb3cd70c09137d" }, { "cve": "CVE-2026-72356", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "c16b8c4cfb4fe2244cc33e469a93c1ab8684146b", "subject": "cifs: Fix missing credit release on failure in cifs_issue_read()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72356", "commit_url": "https://git.kernel.org/stable/c/c16b8c4cfb4fe2244cc33e469a93c1ab8684146b" }, { "cve": "CVE-2026-72357", "author_name": "Jiri Olsa", "author_email": "jolsa@kernel.org", "fix_sha": "169328645663bae30e9abad4012d52441e085a71", "subject": "uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72357", "commit_url": "https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71" }, { "cve": "CVE-2026-72358", "author_name": "Matthew Auld", "author_email": "matthew.auld@intel.com", "fix_sha": "8a0fb57675be578c4db19deb4298ed08a70f0f1a", "subject": "drm/xe/pt: prevent invalid cursor access for purged BOs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72358", "commit_url": "https://git.kernel.org/stable/c/8a0fb57675be578c4db19deb4298ed08a70f0f1a" }, { "cve": "CVE-2026-72359", "author_name": "Matthew Auld", "author_email": "matthew.auld@intel.com", "fix_sha": "b5c55015d4164a0f206bcdcf2985da948b3c7837", "subject": "drm/xe: fix NPD in bo_meminfo()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72359", "commit_url": "https://git.kernel.org/stable/c/b5c55015d4164a0f206bcdcf2985da948b3c7837" }, { "cve": "CVE-2026-72360", "author_name": "Michal Wajdeczko", "author_email": "michal.wajdeczko@intel.com", "fix_sha": "ed8b0d731892c68b41ecbd27c952af284816dec1", "subject": "drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72360", "commit_url": "https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1" }, { "cve": "CVE-2026-72361", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8", "subject": "drm/xe/hw_engine: Fix double-free of managed BO in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72361", "commit_url": "https://git.kernel.org/stable/c/7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8" }, { "cve": "CVE-2026-72362", "author_name": "Francois Dugast", "author_email": "francois.dugast@intel.com", "fix_sha": "3feeb667197bd58a17f4edfdbcad249ffcb3c864", "subject": "drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72362", "commit_url": "https://git.kernel.org/stable/c/3feeb667197bd58a17f4edfdbcad249ffcb3c864" }, { "cve": "CVE-2026-72363", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "b6a713fd34b9498ee2164d5d3e8460732a392efc", "subject": "netfs: Fix folio state after ENOMEM whilst under writeback iteration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72363", "commit_url": "https://git.kernel.org/stable/c/b6a713fd34b9498ee2164d5d3e8460732a392efc" }, { "cve": "CVE-2026-72364", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "ac5f95ac5d6d0f4c567b8b642825705a2bf0d79e", "subject": "netfs: Fix writeback error handling", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72364", "commit_url": "https://git.kernel.org/stable/c/ac5f95ac5d6d0f4c567b8b642825705a2bf0d79e" }, { "cve": "CVE-2026-72365", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "ba6a9f6533c77c628eef0c0c5c19cd316e2be1b4", "subject": "netfs: Fix writethrough to use collection offload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72365", "commit_url": "https://git.kernel.org/stable/c/ba6a9f6533c77c628eef0c0c5c19cd316e2be1b4" }, { "cve": "CVE-2026-72366", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "dbd6f56d975b23241b7bbb11bb8f562af548a0aa", "subject": "netfs: Fix netfs_create_write_req() to handle async cache object creation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72366", "commit_url": "https://git.kernel.org/stable/c/dbd6f56d975b23241b7bbb11bb8f562af548a0aa" }, { "cve": "CVE-2026-72367", "author_name": "Morduan Zang", "author_email": "zhangdandan@uniontech.com", "fix_sha": "55ec50d046c03b3724741957f7b007856e36dbe7", "subject": "iomap: guard io_size EOF trim against concurrent truncate underflow", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72367", "commit_url": "https://git.kernel.org/stable/c/55ec50d046c03b3724741957f7b007856e36dbe7" }, { "cve": "CVE-2026-72368", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "8c256fba2b46020004201c500b2a1fbc707a33ef", "subject": "cachefiles: Fix double unlock in nomem_d_alloc error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72368", "commit_url": "https://git.kernel.org/stable/c/8c256fba2b46020004201c500b2a1fbc707a33ef" }, { "cve": "CVE-2026-72369", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "fb3e566cafc38fe3ba35e6843a2d529a3748870c", "subject": "minix: avoid overflow in bitmap block count calculation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72369", "commit_url": "https://git.kernel.org/stable/c/fb3e566cafc38fe3ba35e6843a2d529a3748870c" }, { "cve": "CVE-2026-72370", "author_name": "Fengnan Chang", "author_email": "changfengnan@bytedance.com", "fix_sha": "681e452683b69a8e1a571cba0f238f8ceacf55d2", "subject": "iomap: release pages on atomic dio size mismatch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72370", "commit_url": "https://git.kernel.org/stable/c/681e452683b69a8e1a571cba0f238f8ceacf55d2" }, { "cve": "CVE-2026-72371", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "56b4e4b26f84411d880f968a539207b0a8889c8c", "subject": "afs: Fix the volume AFS_VOLUME_RM_TREE is set on", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72371", "commit_url": "https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c" }, { "cve": "CVE-2026-72372", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "55e841836c6f4646490f7b0347192b7a92d431ba", "subject": "afs: Fix lack of locking around modifications of net->cells_dyn_ino", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72372", "commit_url": "https://git.kernel.org/stable/c/55e841836c6f4646490f7b0347192b7a92d431ba" }, { "cve": "CVE-2026-72373", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "794a01110390c1b76f59ece773fb0fbfd89c6f5c", "subject": "afs: Fix missing NULL pointer check in afs_break_some_callbacks()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72373", "commit_url": "https://git.kernel.org/stable/c/794a01110390c1b76f59ece773fb0fbfd89c6f5c" }, { "cve": "CVE-2026-72374", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "0f36469d7ce98b362934113c550d08bb0c784231", "subject": "afs: Fix callback service message parsers to pass through -EAGAIN", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72374", "commit_url": "https://git.kernel.org/stable/c/0f36469d7ce98b362934113c550d08bb0c784231" }, { "cve": "CVE-2026-72375", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "5597fbd1e7c161914f20315a726e54025b0fdadb", "subject": "afs: Fix reinitialisation of the inode, in particular ->lock_work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72375", "commit_url": "https://git.kernel.org/stable/c/5597fbd1e7c161914f20315a726e54025b0fdadb" }, { "cve": "CVE-2026-72376", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "c9c3b615a462a4023bd148f02c564e175ed10502", "subject": "afs: Fix misplaced inc of net->cells_outstanding", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72376", "commit_url": "https://git.kernel.org/stable/c/c9c3b615a462a4023bd148f02c564e175ed10502" }, { "cve": "CVE-2026-72377", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "81e985b4c3a6cbcc443fcdcd3ebda7fcc845d459", "subject": "afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72377", "commit_url": "https://git.kernel.org/stable/c/81e985b4c3a6cbcc443fcdcd3ebda7fcc845d459" }, { "cve": "CVE-2026-72378", "author_name": "Dan Carpenter", "author_email": "error27@gmail.com", "fix_sha": "4897cb71d4ab1f7e1a214adb1e4b80176702368d", "subject": "afs: Fix error code in afs_extract_vl_addrs()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72378", "commit_url": "https://git.kernel.org/stable/c/4897cb71d4ab1f7e1a214adb1e4b80176702368d" }, { "cve": "CVE-2026-72379", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "539dce1144651f7976fa418e618b0b574bf15eeb", "subject": "fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72379", "commit_url": "https://git.kernel.org/stable/c/539dce1144651f7976fa418e618b0b574bf15eeb" }, { "cve": "CVE-2026-72380", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "d33846c8dcc06b83b7acdeac1e8bfbb5c0c26cb2", "subject": "xen/pvcalls: bound backend response req_id before indexing rsp[]", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72380", "commit_url": "https://git.kernel.org/stable/c/d33846c8dcc06b83b7acdeac1e8bfbb5c0c26cb2" }, { "cve": "CVE-2026-72381", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "38637163501fd9e2f684b8cd275d0db5d79f37c6", "subject": "ksmbd: fix use-after-free of fp->owner.name in durable handle owner check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72381", "commit_url": "https://git.kernel.org/stable/c/38637163501fd9e2f684b8cd275d0db5d79f37c6" }, { "cve": "CVE-2026-72382", "author_name": "Haofeng Li", "author_email": "lihaofeng@kylinos.cn", "fix_sha": "60908f7ebcd9b6cde74ad5711fab0f49c7970949", "subject": "ksmbd: reject undersized DACLs before parsing ACEs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72382", "commit_url": "https://git.kernel.org/stable/c/60908f7ebcd9b6cde74ad5711fab0f49c7970949" }, { "cve": "CVE-2026-72383", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "976c19de0f22a857ba0112f39635f8fd7a257568", "subject": "sctp: fix addr_wq_timer race in sctp_free_addr_wq()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72383", "commit_url": "https://git.kernel.org/stable/c/976c19de0f22a857ba0112f39635f8fd7a257568" }, { "cve": "CVE-2026-72384", "author_name": "Qingshuang Fu", "author_email": "fuqingshuang@kylinos.cn", "fix_sha": "98bf7e54cec07d514b3575c11896a8b12d50ecc4", "subject": "irqchip/ts4800: Fix missing chained handler cleanup on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72384", "commit_url": "https://git.kernel.org/stable/c/98bf7e54cec07d514b3575c11896a8b12d50ecc4" }, { "cve": "CVE-2026-72385", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "367c49d6e283c17b56a31e7a8d964a079244264c", "subject": "tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72385", "commit_url": "https://git.kernel.org/stable/c/367c49d6e283c17b56a31e7a8d964a079244264c" }, { "cve": "CVE-2026-72386", "author_name": "Boris Brezillon", "author_email": "boris.brezillon@collabora.com", "fix_sha": "6efeb9ddb4fbf5ac30aff03e8f09ffbdf966abd0", "subject": "drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72386", "commit_url": "https://git.kernel.org/stable/c/6efeb9ddb4fbf5ac30aff03e8f09ffbdf966abd0" }, { "cve": "CVE-2026-72387", "author_name": "Boris Brezillon", "author_email": "boris.brezillon@collabora.com", "fix_sha": "b39436d0ba1571dbcda69d20ec567344b3eecfc7", "subject": "drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72387", "commit_url": "https://git.kernel.org/stable/c/b39436d0ba1571dbcda69d20ec567344b3eecfc7" }, { "cve": "CVE-2026-72388", "author_name": "Boris Brezillon", "author_email": "boris.brezillon@collabora.com", "fix_sha": "778c57d624974e64535ef1c9d9b4d8e5066153f4", "subject": "drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72388", "commit_url": "https://git.kernel.org/stable/c/778c57d624974e64535ef1c9d9b4d8e5066153f4" }, { "cve": "CVE-2026-72389", "author_name": "Ido Schimmel", "author_email": "idosch@nvidia.com", "fix_sha": "2a00517db8de4be7df3d483b215c5544fb30a191", "subject": "bridge: stp: Fix a potential use-after-free when deleting a bridge", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72389", "commit_url": "https://git.kernel.org/stable/c/2a00517db8de4be7df3d483b215c5544fb30a191" }, { "cve": "CVE-2026-72390", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "e5b811fe793166aecc59b085c1b7c31262ef2316", "subject": "net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72390", "commit_url": "https://git.kernel.org/stable/c/e5b811fe793166aecc59b085c1b7c31262ef2316" }, { "cve": "CVE-2026-72391", "author_name": "Petr Wozniak", "author_email": "petr.wozniak@gmail.com", "fix_sha": "8f31efff9206f9f0adb853cad6916086aac4d5ef", "subject": "net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72391", "commit_url": "https://git.kernel.org/stable/c/8f31efff9206f9f0adb853cad6916086aac4d5ef" }, { "cve": "CVE-2026-72392", "author_name": "Pengfei Zhang", "author_email": "zhangfeionline@gmail.com", "fix_sha": "9facb861dc6b9b9ea9793ef5032a9a826f7a4229", "subject": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72392", "commit_url": "https://git.kernel.org/stable/c/9facb861dc6b9b9ea9793ef5032a9a826f7a4229" }, { "cve": "CVE-2026-72393", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "62b68b774f06bf52e329f254f0199bc43d350ccf", "subject": "eth: fbnic: don't cache shinfo across skb realloc", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72393", "commit_url": "https://git.kernel.org/stable/c/62b68b774f06bf52e329f254f0199bc43d350ccf" }, { "cve": "CVE-2026-72394", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "fe87b8dc67f1b2c64e76a66e78468c533d3c44ca", "subject": "hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72394", "commit_url": "https://git.kernel.org/stable/c/fe87b8dc67f1b2c64e76a66e78468c533d3c44ca" }, { "cve": "CVE-2026-72395", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "9ef7dacd44216bf5ea05c8aef49eba4d145f4047", "subject": "hwmon: (pmbus) Fix passing events to regulator core", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72395", "commit_url": "https://git.kernel.org/stable/c/9ef7dacd44216bf5ea05c8aef49eba4d145f4047" }, { "cve": "CVE-2026-72396", "author_name": "Matti Vaittinen", "author_email": "mazziesaccount@gmail.com", "fix_sha": "553f9517813912a5ab661af5504485d96824a61c", "subject": "hwmon: adm1275: Prevent reading uninitialized stack", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72396", "commit_url": "https://git.kernel.org/stable/c/553f9517813912a5ab661af5504485d96824a61c" }, { "cve": "CVE-2026-72397", "author_name": "Abdurrahman Hussain", "author_email": "abdurrahman@nexthop.ai", "fix_sha": "828cd614e2af053ca5e1d6da767bbd8a1b5cabfb", "subject": "hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72397", "commit_url": "https://git.kernel.org/stable/c/828cd614e2af053ca5e1d6da767bbd8a1b5cabfb" }, { "cve": "CVE-2026-72398", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "414c5447fe6a200613dd46d7fdc8454622076cb1", "subject": "sctp: add INIT verification after cookie unpacking", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72398", "commit_url": "https://git.kernel.org/stable/c/414c5447fe6a200613dd46d7fdc8454622076cb1" }, { "cve": "CVE-2026-72399", "author_name": "Wei Fang", "author_email": "wei.fang@nxp.com", "fix_sha": "555c5475e787802eeae0d2b91c2f66c330db2767", "subject": "net: enetc: check the number of BDs needed for xdp_frame", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72399", "commit_url": "https://git.kernel.org/stable/c/555c5475e787802eeae0d2b91c2f66c330db2767" }, { "cve": "CVE-2026-72400", "author_name": "Nuoqi Gui", "author_email": "gnq25@mails.tsinghua.edu.cn", "fix_sha": "a75d99f46bf21b45965ce39c5cfb3b8bb5ffb1aa", "subject": "seg6: validate SRH length before reading fixed fields", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72400", "commit_url": "https://git.kernel.org/stable/c/a75d99f46bf21b45965ce39c5cfb3b8bb5ffb1aa" }, { "cve": "CVE-2026-72401", "author_name": "KaFai Wan", "author_email": "kafai.wan@linux.dev", "fix_sha": "26490a375cb9be9bac96b5171610fd85ca6c2305", "subject": "bpf: Fix insn_aux_data leak on verifier err_free_env path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72401", "commit_url": "https://git.kernel.org/stable/c/26490a375cb9be9bac96b5171610fd85ca6c2305" }, { "cve": "CVE-2026-72402", "author_name": "Nuoqi Gui", "author_email": "gnq25@mails.tsinghua.edu.cn", "fix_sha": "72a85e9464a5332fb2cd7efd26d9295275ceda2d", "subject": "bpf: Mask pseudo pointer values in verifier logs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72402", "commit_url": "https://git.kernel.org/stable/c/72a85e9464a5332fb2cd7efd26d9295275ceda2d" }, { "cve": "CVE-2026-72403", "author_name": "Jiaming Zhang", "author_email": "r772577952@gmail.com", "fix_sha": "e1e31e0ec8a609e17fd2e86b77bc00d9cbb24d7c", "subject": "ALSA: FCP: Fix NULL pointer dereference in interface lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72403", "commit_url": "https://git.kernel.org/stable/c/e1e31e0ec8a609e17fd2e86b77bc00d9cbb24d7c" }, { "cve": "CVE-2026-72404", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "7116764ca53ff529335d7ab7c364a69f094b23a5", "subject": "tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72404", "commit_url": "https://git.kernel.org/stable/c/7116764ca53ff529335d7ab7c364a69f094b23a5" }, { "cve": "CVE-2026-72405", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "ecf69d4b43370c587e48d4d70289dbdb7e039d4d", "subject": "net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72405", "commit_url": "https://git.kernel.org/stable/c/ecf69d4b43370c587e48d4d70289dbdb7e039d4d" }, { "cve": "CVE-2026-72406", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "36dea2f639249460d13f6ca66b2a9064187cd34d", "subject": "net: sungem: fix probe error cleanup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72406", "commit_url": "https://git.kernel.org/stable/c/36dea2f639249460d13f6ca66b2a9064187cd34d" }, { "cve": "CVE-2026-72407", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "cbb0d30a1ad6fc9439b1dc9b4f5a7a9140d3b11f", "subject": "geneve: validate inner network offset in geneve_gro_complete()", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72407", "commit_url": "https://git.kernel.org/stable/c/cbb0d30a1ad6fc9439b1dc9b4f5a7a9140d3b11f" }, { "cve": "CVE-2026-72408", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "2651c174445884ac9e85622aeade9c1f7b98d8e5", "subject": "geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72408", "commit_url": "https://git.kernel.org/stable/c/2651c174445884ac9e85622aeade9c1f7b98d8e5" }, { "cve": "CVE-2026-72409", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "fd398d6480987e4c84fff0aaab6b9d6642a93343", "subject": "net: mvneta: re-enable percpu interrupt on resume", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72409", "commit_url": "https://git.kernel.org/stable/c/fd398d6480987e4c84fff0aaab6b9d6642a93343" }, { "cve": "CVE-2026-72410", "author_name": "Subbaraya Sundeep", "author_email": "sbhatta@marvell.com", "fix_sha": "1576d12a39860418d6a68b402fda71a48f04a57c", "subject": "octeontx2-af: Validate NIX maximum LFs correctly", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72410", "commit_url": "https://git.kernel.org/stable/c/1576d12a39860418d6a68b402fda71a48f04a57c" }, { "cve": "CVE-2026-72411", "author_name": "Daniel Golle", "author_email": "daniel@makrotopia.org", "fix_sha": "bcb3b8314611ed9cb4ff4bff484ef9b154fd1b83", "subject": "net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72411", "commit_url": "https://git.kernel.org/stable/c/bcb3b8314611ed9cb4ff4bff484ef9b154fd1b83" }, { "cve": "CVE-2026-72412", "author_name": "Claudio Imbrenda", "author_email": "imbrenda@linux.ibm.com", "fix_sha": "d4bb00704a66024502261fa7a523c07420249fea", "subject": "s390/mm: Fix handling of _PAGE_UNUSED pte bit", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72412", "commit_url": "https://git.kernel.org/stable/c/d4bb00704a66024502261fa7a523c07420249fea" }, { "cve": "CVE-2026-72413", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "9f58a0a4d6c2ed5d341bba64f058f15d1b0c36f2", "subject": "sctp: fix err_chunk memory leaks in INIT handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72413", "commit_url": "https://git.kernel.org/stable/c/9f58a0a4d6c2ed5d341bba64f058f15d1b0c36f2" }, { "cve": "CVE-2026-72414", "author_name": "Aleksandrova Alyona", "author_email": "aga@itb.spb.ru", "fix_sha": "aee5836273b07b439fb245fb43930664d8b78518", "subject": "net: dsa: sja1105: round up PTP perout pin duration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72414", "commit_url": "https://git.kernel.org/stable/c/aee5836273b07b439fb245fb43930664d8b78518" }, { "cve": "CVE-2026-72415", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "1ce42a11bed134903e352010a01fa53073a6b395", "subject": "ASoC: SDCA: Validate written enum value in ge_put_enum_double()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72415", "commit_url": "https://git.kernel.org/stable/c/1ce42a11bed134903e352010a01fa53073a6b395" }, { "cve": "CVE-2026-72416", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "9dbba7e694ec045f21ede2f892fb42b81b4e1692", "subject": "netfilter: nft_compat: ebtables emulation must reject non-bridge targets", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72416", "commit_url": "https://git.kernel.org/stable/c/9dbba7e694ec045f21ede2f892fb42b81b4e1692" }, { "cve": "CVE-2026-72417", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "84460b644329e25809b4a6d9279d6359d7fd8ebc", "subject": "netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72417", "commit_url": "https://git.kernel.org/stable/c/84460b644329e25809b4a6d9279d6359d7fd8ebc" }, { "cve": "CVE-2026-72418", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "c8b6f36f766991e3ebebec6596daee4b04dcbc49", "subject": "netfilter: nf_conncount: prevent connlimit drops for early confirmed ct", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72418", "commit_url": "https://git.kernel.org/stable/c/c8b6f36f766991e3ebebec6596daee4b04dcbc49" }, { "cve": "CVE-2026-72419", "author_name": "Mathias Krause", "author_email": "minipli@grsecurity.net", "fix_sha": "069cfe3de2a5e16069485893cd04665ab769c1d8", "subject": "netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72419", "commit_url": "https://git.kernel.org/stable/c/069cfe3de2a5e16069485893cd04665ab769c1d8" }, { "cve": "CVE-2026-72420", "author_name": "Chen Cheng", "author_email": "chencheng@fnnas.com", "fix_sha": "55b77337bdd088c77461588e5ec094421b89911b", "subject": "md/raid5: avoid R5_Overlap races while breaking stripe batches", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72420", "commit_url": "https://git.kernel.org/stable/c/55b77337bdd088c77461588e5ec094421b89911b" }, { "cve": "CVE-2026-72421", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "b72f0db64205d9ce462038ba995d5d31eff32dc1", "subject": "ipv4: fib: Don't ignore error route in local/main tables.", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72421", "commit_url": "https://git.kernel.org/stable/c/b72f0db64205d9ce462038ba995d5d31eff32dc1" }, { "cve": "CVE-2026-72422", "author_name": "Gil Portnoy", "author_email": "dddhkts1@gmail.com", "fix_sha": "0c054227479ed7e36ebccb3a558bc0ef698264f6", "subject": "ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72422", "commit_url": "https://git.kernel.org/stable/c/0c054227479ed7e36ebccb3a558bc0ef698264f6" }, { "cve": "CVE-2026-72423", "author_name": "Yiyang Chen", "author_email": "chenyy23@mails.tsinghua.edu.cn", "fix_sha": "6f6183a39533d727deaa5061cadae6dd9e6744d0", "subject": "bpf: Guard conntrack opts error writes", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72423", "commit_url": "https://git.kernel.org/stable/c/6f6183a39533d727deaa5061cadae6dd9e6744d0" }, { "cve": "CVE-2026-72424", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "a369f48be8de426a7d2bca18dbd46c2ad1138803", "subject": "rtc: msc313: fix NULL deref in shared IRQ handler at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72424", "commit_url": "https://git.kernel.org/stable/c/a369f48be8de426a7d2bca18dbd46c2ad1138803" }, { "cve": "CVE-2026-72425", "author_name": "Dawid Osuchowski", "author_email": "dawid.osuchowski@linux.intel.com", "fix_sha": "ebbe8868cf473f698e0fbaf436d2618b2bcda806", "subject": "ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72425", "commit_url": "https://git.kernel.org/stable/c/ebbe8868cf473f698e0fbaf436d2618b2bcda806" }, { "cve": "CVE-2026-72426", "author_name": "Nuoqi Gui", "author_email": "gnq25@mails.tsinghua.edu.cn", "fix_sha": "3a354149bceacadbcf7d7b4766f5ef26a85892ab", "subject": "bpf: Preserve pointer spill metadata during half-slot cleanup", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72426", "commit_url": "https://git.kernel.org/stable/c/3a354149bceacadbcf7d7b4766f5ef26a85892ab" }, { "cve": "CVE-2026-72427", "author_name": "Amery Hung", "author_email": "ameryhung@gmail.com", "fix_sha": "f08aaee3152d0dfc578b3f2586932d82062701dd", "subject": "bpf: Fix effective prog array index with BPF_F_PREORDER", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72427", "commit_url": "https://git.kernel.org/stable/c/f08aaee3152d0dfc578b3f2586932d82062701dd" }, { "cve": "CVE-2026-72428", "author_name": "Nuoqi Gui", "author_email": "gnq25@mails.tsinghua.edu.cn", "fix_sha": "d1d53aa30ab3b5ae89161c9cc840b3f7489ad386", "subject": "bpf: Fix stack slot index in nospec checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72428", "commit_url": "https://git.kernel.org/stable/c/d1d53aa30ab3b5ae89161c9cc840b3f7489ad386" }, { "cve": "CVE-2026-72429", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "9ed19e11d2146076d117d51a940643990118449b", "subject": "ipv6: ioam: fix type confusion of dst_entry", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72429", "commit_url": "https://git.kernel.org/stable/c/9ed19e11d2146076d117d51a940643990118449b" }, { "cve": "CVE-2026-72430", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "16e088016f38cf728a0de709c3335cc5a3850476", "subject": "net/sched: act_ct: fix nf_connlabels leak on two error paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72430", "commit_url": "https://git.kernel.org/stable/c/16e088016f38cf728a0de709c3335cc5a3850476" }, { "cve": "CVE-2026-72431", "author_name": "Hao Ge", "author_email": "hao.ge@linux.dev", "fix_sha": "2956268efc457cb05d29c1bf94de1e8e684d7bbc", "subject": "alloc_tag: fix use-after-free in /proc/allocinfo after module unload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72431", "commit_url": "https://git.kernel.org/stable/c/2956268efc457cb05d29c1bf94de1e8e684d7bbc" }, { "cve": "CVE-2026-72432", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "ddd33806b8911fa2ef849e8bbbab1e3fcb26adc0", "subject": "tpm_crb: Check ACPI_COMPANION() against NULL during probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72432", "commit_url": "https://git.kernel.org/stable/c/ddd33806b8911fa2ef849e8bbbab1e3fcb26adc0" }, { "cve": "CVE-2026-72433", "author_name": "Florian Westphal", "author_email": "fw@strlen.de", "fix_sha": "27dd2997746d54ebc079bb13161cc1bdd401d4a6", "subject": "netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72433", "commit_url": "https://git.kernel.org/stable/c/27dd2997746d54ebc079bb13161cc1bdd401d4a6" }, { "cve": "CVE-2026-72434", "author_name": "Jozsef Kadlecsik", "author_email": "kadlec@netfilter.org", "fix_sha": "4a597a87e2e2f608edb6be2c510dc826b4fdfb53", "subject": "netfilter: ipset: make sure gc is properly stopped", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72434", "commit_url": "https://git.kernel.org/stable/c/4a597a87e2e2f608edb6be2c510dc826b4fdfb53" }, { "cve": "CVE-2026-72435", "author_name": "Jozsef Kadlecsik", "author_email": "kadlec@netfilter.org", "fix_sha": "3ca9982a8882470aa0ac4e8bb9a552b181d1efcd", "subject": "netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72435", "commit_url": "https://git.kernel.org/stable/c/3ca9982a8882470aa0ac4e8bb9a552b181d1efcd" }, { "cve": "CVE-2026-72436", "author_name": "Jozsef Kadlecsik", "author_email": "kadlec@netfilter.org", "fix_sha": "e4b4984e28c16406ecb318444dea4a8bf47def3e", "subject": "netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72436", "commit_url": "https://git.kernel.org/stable/c/e4b4984e28c16406ecb318444dea4a8bf47def3e" }, { "cve": "CVE-2026-72437", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12", "subject": "md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72437", "commit_url": "https://git.kernel.org/stable/c/69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12" }, { "cve": "CVE-2026-72438", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "393d687131d8aa8c7e4de2cb494438e145d20fc2", "subject": "md/raid10: fix writes_pending and barrier reference leaks on discard failures", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72438", "commit_url": "https://git.kernel.org/stable/c/393d687131d8aa8c7e4de2cb494438e145d20fc2" }, { "cve": "CVE-2026-72439", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275d", "subject": "md/raid10: fix writes_pending leak on write request failures", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72439", "commit_url": "https://git.kernel.org/stable/c/e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275d" }, { "cve": "CVE-2026-72440", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "8e065a1602511282fc0da2dc89445e0eb71a681c", "subject": "md/raid1: fix writes_pending and barrier reference leaks on write failures", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72440", "commit_url": "https://git.kernel.org/stable/c/8e065a1602511282fc0da2dc89445e0eb71a681c" }, { "cve": "CVE-2026-72441", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "4db86f8ab11b5a41bfc36680be837e6ac1375ec6", "subject": "ieee802154: fix kernel-infoleak in dgram_recvmsg()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72441", "commit_url": "https://git.kernel.org/stable/c/4db86f8ab11b5a41bfc36680be837e6ac1375ec6" }, { "cve": "CVE-2026-72442", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "f4c2d8668d85ed125985da663c824a9c25498257", "subject": "netfilter: flowtable: fix and simplify IP6IP6 tunnel handling", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72442", "commit_url": "https://git.kernel.org/stable/c/f4c2d8668d85ed125985da663c824a9c25498257" }, { "cve": "CVE-2026-72443", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "f199c8a8bdd54296d3458777e70fe82a78bd9817", "subject": "ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72443", "commit_url": "https://git.kernel.org/stable/c/f199c8a8bdd54296d3458777e70fe82a78bd9817" }, { "cve": "CVE-2026-72444", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "bf6e8af2c8be77489bedeae9f8a9654cb710e500", "subject": "flow_dissector: check device type before reading ETH_ADDRS", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72444", "commit_url": "https://git.kernel.org/stable/c/bf6e8af2c8be77489bedeae9f8a9654cb710e500" }, { "cve": "CVE-2026-72445", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "3c7af07943b2718087ae791cad450af5cf646d90", "subject": "ALSA: usb-audio: qcom: clear opened when stream enable fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72445", "commit_url": "https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90" }, { "cve": "CVE-2026-72446", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "bdb640be82e645e2828731648f485224d0c2587b", "subject": "ALSA: usb-audio: qcom: reject stream disable with no active interface", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72446", "commit_url": "https://git.kernel.org/stable/c/bdb640be82e645e2828731648f485224d0c2587b" }, { "cve": "CVE-2026-72447", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "7d8297e26b4e20b5d1c3c3fe51fe81a1c7fbc823", "subject": "sctp: hold socket lock when dumping endpoints in sctp_diag", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72447", "commit_url": "https://git.kernel.org/stable/c/7d8297e26b4e20b5d1c3c3fe51fe81a1c7fbc823" }, { "cve": "CVE-2026-72448", "author_name": "Ratheesh Kannoth", "author_email": "rkannoth@marvell.com", "fix_sha": "a056db30de92945ff8ee6033096678bfbae878e3", "subject": "octeontx2-pf: Fix leak of SQ timestamp buffer on teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72448", "commit_url": "https://git.kernel.org/stable/c/a056db30de92945ff8ee6033096678bfbae878e3" }, { "cve": "CVE-2026-72449", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "8fa5655da368d0306c03e9dc9cda8ae2a7840926", "subject": "drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72449", "commit_url": "https://git.kernel.org/stable/c/8fa5655da368d0306c03e9dc9cda8ae2a7840926" }, { "cve": "CVE-2026-72450", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "40f0b1047918539f0b0f795ac65e35336b4c2c78", "subject": "xfrm: validate selector family and prefixlen during match", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72450", "commit_url": "https://git.kernel.org/stable/c/40f0b1047918539f0b0f795ac65e35336b4c2c78" }, { "cve": "CVE-2026-72451", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "ddd3d0132920319ac426e12456013eadbae67e15", "subject": "xfrm: Fix xfrm state cache insertion race", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72451", "commit_url": "https://git.kernel.org/stable/c/ddd3d0132920319ac426e12456013eadbae67e15" }, { "cve": "CVE-2026-72452", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "31f077088e0faae6be8377741f356dea1b94ba46", "subject": "drm/i915: clear CRTC color blob pointers after dropping refs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72452", "commit_url": "https://git.kernel.org/stable/c/31f077088e0faae6be8377741f356dea1b94ba46" }, { "cve": "CVE-2026-72453", "author_name": "Francesco Lavra", "author_email": "flavra@baylibre.com", "fix_sha": "9108f7fa493b4c88cbc09503e0c164244456bad5", "subject": "regcache: Do not overwrite error code when finalizing cache after error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72453", "commit_url": "https://git.kernel.org/stable/c/9108f7fa493b4c88cbc09503e0c164244456bad5" }, { "cve": "CVE-2026-72454", "author_name": "Adrian Hunter", "author_email": "adrian.hunter@intel.com", "fix_sha": "650716f23eac488c6696babdc7805f6a6b7427ad", "subject": "i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72454", "commit_url": "https://git.kernel.org/stable/c/650716f23eac488c6696babdc7805f6a6b7427ad" }, { "cve": "CVE-2026-72455", "author_name": "Maciek Borzecki", "author_email": "maciek.borzecki@gmail.com", "fix_sha": "bcd1b34c21748531a3febaf7440632b89d8deab7", "subject": "apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72455", "commit_url": "https://git.kernel.org/stable/c/bcd1b34c21748531a3febaf7440632b89d8deab7" }, { "cve": "CVE-2026-72456", "author_name": "Zygmunt Krynicki", "author_email": "me@zygoon.pl", "fix_sha": "7306c41672487a6c28430714be063bc6942c28f2", "subject": "apparmor: release exe file resources on path failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72456", "commit_url": "https://git.kernel.org/stable/c/7306c41672487a6c28430714be063bc6942c28f2" }, { "cve": "CVE-2026-72457", "author_name": "Zygmunt Krynicki", "author_email": "me@zygoon.pl", "fix_sha": "45cf568241048e560a81aa2053f06a62069f5640", "subject": "apparmor: fail policy unpack on accept2 allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72457", "commit_url": "https://git.kernel.org/stable/c/45cf568241048e560a81aa2053f06a62069f5640" }, { "cve": "CVE-2026-72458", "author_name": "Georgia Garcia", "author_email": "georgia.garcia@canonical.com", "fix_sha": "7681ca43d2b1c776e62fe77e3167835fb1ab8319", "subject": "apparmor: fix NULL pointer dereference in unpack_pdb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72458", "commit_url": "https://git.kernel.org/stable/c/7681ca43d2b1c776e62fe77e3167835fb1ab8319" }, { "cve": "CVE-2026-72459", "author_name": "Zygmunt Krynicki", "author_email": "me@zygoon.pl", "fix_sha": "654fe7505dc6889724d4094fa64f89991afabfc3", "subject": "apparmor: aa_label_alloc use aa_label_free on alloc failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72459", "commit_url": "https://git.kernel.org/stable/c/654fe7505dc6889724d4094fa64f89991afabfc3" }, { "cve": "CVE-2026-72460", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "a58cafd38b46fb1a2220e2fbbcfe291ea75fa147", "subject": "apparmor: check label build before no_new_privs test", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72460", "commit_url": "https://git.kernel.org/stable/c/a58cafd38b46fb1a2220e2fbbcfe291ea75fa147" }, { "cve": "CVE-2026-72461", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "6d25e7b47616cb2db43351210929c8f19dc305a3", "subject": "apparmor: fix refcount leak when updating the sk_ctx", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72461", "commit_url": "https://git.kernel.org/stable/c/6d25e7b47616cb2db43351210929c8f19dc305a3" }, { "cve": "CVE-2026-72462", "author_name": "John Johansen", "author_email": "john.johansen@canonical.com", "fix_sha": "b1aea2c1960771a276d7e68c7424168eccd0c3da", "subject": "apparmor: fix race in unix socket mediation when peer_path is used", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72462", "commit_url": "https://git.kernel.org/stable/c/b1aea2c1960771a276d7e68c7424168eccd0c3da" }, { "cve": "CVE-2026-72463", "author_name": "Dong Chenchen", "author_email": "dongchenchen2@huawei.com", "fix_sha": "8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff", "subject": "xfrm: Fix dev use-after-free in xfrm async resumption", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72463", "commit_url": "https://git.kernel.org/stable/c/8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff" }, { "cve": "CVE-2026-72464", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "abc011ddaf1617e3e82d8a1e87daa7ddbfb9bac5", "subject": "xprtrdma: Repost Receive buffers for malformed replies", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72464", "commit_url": "https://git.kernel.org/stable/c/abc011ddaf1617e3e82d8a1e87daa7ddbfb9bac5" }, { "cve": "CVE-2026-72465", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "c3a628aab2dc8f5fd7bff86ceaeae64de590e60a", "subject": "xprtrdma: Sanitize the reply credit grant after parsing", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72465", "commit_url": "https://git.kernel.org/stable/c/c3a628aab2dc8f5fd7bff86ceaeae64de590e60a" }, { "cve": "CVE-2026-72466", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "c7653d5cebc8492c77ec0415b5e9c0fb3e644bc6", "subject": "xprtrdma: Fix bcall rep leak and unbounded peek", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72466", "commit_url": "https://git.kernel.org/stable/c/c7653d5cebc8492c77ec0415b5e9c0fb3e644bc6" }, { "cve": "CVE-2026-72467", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "0f13fc7c7d2e0427517e63c739277a4cd338b0c5", "subject": "xprtrdma: Check frwr_wp_create() during connect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72467", "commit_url": "https://git.kernel.org/stable/c/0f13fc7c7d2e0427517e63c739277a4cd338b0c5" }, { "cve": "CVE-2026-72468", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "bb7caa63e1db22fd03e8dc591b12169e99169dff", "subject": "xprtrdma: Initialize re_id before removal registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72468", "commit_url": "https://git.kernel.org/stable/c/bb7caa63e1db22fd03e8dc591b12169e99169dff" }, { "cve": "CVE-2026-72469", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "af9b65b29af341932625c4283dc7a23cdb62688a", "subject": "xprtrdma: Fix ep kref imbalance on ADDR_CHANGE", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72469", "commit_url": "https://git.kernel.org/stable/c/af9b65b29af341932625c4283dc7a23cdb62688a" }, { "cve": "CVE-2026-72470", "author_name": "Jamie Nguyen", "author_email": "jamien@nvidia.com", "fix_sha": "5a35454179fe1041d9cd286f5d320ce0d448c12a", "subject": "fs/ntfs3: resize log->one_page_buf when adopting on-disk page size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72470", "commit_url": "https://git.kernel.org/stable/c/5a35454179fe1041d9cd286f5d320ce0d448c12a" }, { "cve": "CVE-2026-72471", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "57ac2831c8e0f168090d38e3de758c6a59db44db", "subject": "fs/ntfs3: prevent potential lcn remains uninitialized", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72471", "commit_url": "https://git.kernel.org/stable/c/57ac2831c8e0f168090d38e3de758c6a59db44db" }, { "cve": "CVE-2026-72472", "author_name": "Yang Erkun", "author_email": "yangerkun@huawei.com", "fix_sha": "4837fb36219e6c08b666bc31a86841bad8526358", "subject": "nfs: use nfsi->rwsem to protect traversal of the file lock list", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72472", "commit_url": "https://git.kernel.org/stable/c/4837fb36219e6c08b666bc31a86841bad8526358" }, { "cve": "CVE-2026-72473", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "e786233d2e0bbff9a82e43f02ae3a46ab4b08ec3", "subject": "xprtrdma: Decouple req recycling from RPC completion", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72473", "commit_url": "https://git.kernel.org/stable/c/e786233d2e0bbff9a82e43f02ae3a46ab4b08ec3" }, { "cve": "CVE-2026-72474", "author_name": "Nuno S\u00e1", "author_email": "nuno.sa@analog.com", "fix_sha": "9e942c8579130e62734c14338e9f451780669164", "subject": "dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72474", "commit_url": "https://git.kernel.org/stable/c/9e942c8579130e62734c14338e9f451780669164" }, { "cve": "CVE-2026-72475", "author_name": "Nuno S\u00e1", "author_email": "nuno.sa@analog.com", "fix_sha": "4910ce1b3b35687bb2a5e742c4bfbea3c647c980", "subject": "dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72475", "commit_url": "https://git.kernel.org/stable/c/4910ce1b3b35687bb2a5e742c4bfbea3c647c980" }, { "cve": "CVE-2026-72476", "author_name": "Nuno S\u00e1", "author_email": "nuno.sa@analog.com", "fix_sha": "92f853f0645aebf1d05d333e97ab7c342ace1892", "subject": "dmaengine: Fix possible use after free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72476", "commit_url": "https://git.kernel.org/stable/c/92f853f0645aebf1d05d333e97ab7c342ace1892" }, { "cve": "CVE-2026-72477", "author_name": "Helen Koike", "author_email": "koike@igalia.com", "fix_sha": "e8ed78f40eecd0176fda71d673f6957c98e7ffbe", "subject": "fs/ntfs3: call _ntfs_bad_inode() when failing to rename", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72477", "commit_url": "https://git.kernel.org/stable/c/e8ed78f40eecd0176fda71d673f6957c98e7ffbe" }, { "cve": "CVE-2026-72478", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "bb11485a87fbb2254b62cfed630b699d50e57da8", "subject": "fs/ntfs3: add bounds check to run_get_highest_vcn()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72478", "commit_url": "https://git.kernel.org/stable/c/bb11485a87fbb2254b62cfed630b699d50e57da8" }, { "cve": "CVE-2026-72479", "author_name": "Sanjay Chitroda", "author_email": "sanjayembeddedse@gmail.com", "fix_sha": "5bdff291d20c31b365d9ddfe9c426fbfb41da5bb", "subject": "iio: accel: mma8452: handle I2C read error(s) in mma8452_read()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72479", "commit_url": "https://git.kernel.org/stable/c/5bdff291d20c31b365d9ddfe9c426fbfb41da5bb" }, { "cve": "CVE-2026-72480", "author_name": "Guilherme Ivo Bozi", "author_email": "guilherme.bozi@usp.br", "fix_sha": "947eb6f0a274f8b15a0248051a65b069effd5057", "subject": "iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72480", "commit_url": "https://git.kernel.org/stable/c/947eb6f0a274f8b15a0248051a65b069effd5057" }, { "cve": "CVE-2026-72481", "author_name": "Joshua Crofts", "author_email": "joshua.crofts1@gmail.com", "fix_sha": "a9a00d727b7bbc5e913a919530a9dd468935bf95", "subject": "iio: magnetometer: ak8975: fix potential kernel stack memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72481", "commit_url": "https://git.kernel.org/stable/c/a9a00d727b7bbc5e913a919530a9dd468935bf95" }, { "cve": "CVE-2026-72482", "author_name": "Adam Crosser", "author_email": "adam.crosser@praetorian.com", "fix_sha": "c4faab452b3c1ada003d49c477609dd80523b9bf", "subject": "gpib: fix double decrement of descriptor_busy in command_ioctl()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72482", "commit_url": "https://git.kernel.org/stable/c/c4faab452b3c1ada003d49c477609dd80523b9bf" }, { "cve": "CVE-2026-72483", "author_name": "Seungjin Bae", "author_email": "eeodqql09@gmail.com", "fix_sha": "cff06b03b530ae1fe8a13e93a7848f2130e00fb4", "subject": "usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72483", "commit_url": "https://git.kernel.org/stable/c/cff06b03b530ae1fe8a13e93a7848f2130e00fb4" }, { "cve": "CVE-2026-72484", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "7cb1c5b32a2bfde961fff8d5204526b609bcb30a", "subject": "staging: most: video: avoid double free on video register failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72484", "commit_url": "https://git.kernel.org/stable/c/7cb1c5b32a2bfde961fff8d5204526b609bcb30a" }, { "cve": "CVE-2026-72485", "author_name": "Jie Gan", "author_email": "jie.gan@oss.qualcomm.com", "fix_sha": "1563ae33dc4f5ebac96b93af2ef72e72aaaa31ae", "subject": "coresight: platform: defer connection counter increment until alloc succeeds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72485", "commit_url": "https://git.kernel.org/stable/c/1563ae33dc4f5ebac96b93af2ef72e72aaaa31ae" }, { "cve": "CVE-2026-72486", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "b57d1a40bc43258372fa1f4d39305e093947a262", "subject": "mailbox: mtk-adsp: fix UAF during device teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72486", "commit_url": "https://git.kernel.org/stable/c/b57d1a40bc43258372fa1f4d39305e093947a262" }, { "cve": "CVE-2026-72487", "author_name": "Guixin Liu", "author_email": "kanie@linux.alibaba.com", "fix_sha": "538796b807fcfb81b2ce40cc97a614fd8588feb5", "subject": "PCI: Check ROM header and data structure addr before accessing", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72487", "commit_url": "https://git.kernel.org/stable/c/538796b807fcfb81b2ce40cc97a614fd8588feb5" }, { "cve": "CVE-2026-72488", "author_name": "Baoli.Zhang", "author_email": "baoli.zhang@linux.intel.com", "fix_sha": "f772ff5a0e6758fd412803c09e03ba3bca5f5878", "subject": "soundwire: fix bug in sdw_add_element_group_count found by syzkaller", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72488", "commit_url": "https://git.kernel.org/stable/c/f772ff5a0e6758fd412803c09e03ba3bca5f5878" }, { "cve": "CVE-2026-72489", "author_name": "Alexandru Hossu", "author_email": "hossu.alexandru@gmail.com", "fix_sha": "26813881181deb3a32fbb59eadb2599cbe8423f6", "subject": "staging: nvec: fix use-after-free in nvec_rx_completed()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72489", "commit_url": "https://git.kernel.org/stable/c/26813881181deb3a32fbb59eadb2599cbe8423f6" }, { "cve": "CVE-2026-72490", "author_name": "Maksym Pikhotskyi", "author_email": "mpikhotskyi@gmail.com", "fix_sha": "9a3f9b3c47d8f071b0eb9e63906ac0448058278d", "subject": "staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72490", "commit_url": "https://git.kernel.org/stable/c/9a3f9b3c47d8f071b0eb9e63906ac0448058278d" }, { "cve": "CVE-2026-72491", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "7d54894a1ee265a72d70f7cae1da6cc774cccc71", "subject": "net/9p: fix race condition on rdma->state in trans_rdma.c", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72491", "commit_url": "https://git.kernel.org/stable/c/7d54894a1ee265a72d70f7cae1da6cc774cccc71" }, { "cve": "CVE-2026-72492", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "65b655f65c3ca1ab5d598d3832bb0ff531725858", "subject": "ksmbd: fix use-after-free in same_client_has_lease()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72492", "commit_url": "https://git.kernel.org/stable/c/65b655f65c3ca1ab5d598d3832bb0ff531725858" }, { "cve": "CVE-2026-72493", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "46762cefe7f4e5bffc1eb467810a7bbb02e461d7", "subject": "net: serialize netif_running() check in enqueue_to_backlog()", "cvss_score": 9.9, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72493", "commit_url": "https://git.kernel.org/stable/c/46762cefe7f4e5bffc1eb467810a7bbb02e461d7" }, { "cve": "CVE-2026-72494", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd", "subject": "RDMA/irdma: Replace waitqueue and flag with completion", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72494", "commit_url": "https://git.kernel.org/stable/c/d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd" }, { "cve": "CVE-2026-72495", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "441baa79043431807115fd030d7d0bb14ed441a0", "subject": "RDMA/bnxt_re: Avoid repeated requests to allocate WC pages", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72495", "commit_url": "https://git.kernel.org/stable/c/441baa79043431807115fd030d7d0bb14ed441a0" }, { "cve": "CVE-2026-72496", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "87267803a8c824616eb147c5dad7030a5db6f878", "subject": "RDMA/bnxt_re: Proper rollback if the ioremap fails", "cvss_score": 9.2, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72496", "commit_url": "https://git.kernel.org/stable/c/87267803a8c824616eb147c5dad7030a5db6f878" }, { "cve": "CVE-2026-72497", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "dc95931b7e1326dacae547874bf38c092e5960d8", "subject": "RDMA/bnxt_re: Add a max slot check for SQ", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72497", "commit_url": "https://git.kernel.org/stable/c/dc95931b7e1326dacae547874bf38c092e5960d8" }, { "cve": "CVE-2026-72498", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "7d70c704a06f620d5d421ab76bac5e225bfb4308", "subject": "RDMA/bnxt_re: Avoid displaying the kernel pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72498", "commit_url": "https://git.kernel.org/stable/c/7d70c704a06f620d5d421ab76bac5e225bfb4308" }, { "cve": "CVE-2026-72499", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "bb45e06f9914ca64ac95341a80a0c20bb8dd46a9", "subject": "RDMA/bnxt_re: Free CQ toggle page after firmware teardown", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72499", "commit_url": "https://git.kernel.org/stable/c/bb45e06f9914ca64ac95341a80a0c20bb8dd46a9" }, { "cve": "CVE-2026-72500", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "131e2918b9b0529687e67e2e58047304027f095a", "subject": "RDMA/bnxt_re: Free SRQ toggle page after firmware teardown", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72500", "commit_url": "https://git.kernel.org/stable/c/131e2918b9b0529687e67e2e58047304027f095a" }, { "cve": "CVE-2026-72501", "author_name": "Selvin Xavier", "author_email": "selvin.xavier@broadcom.com", "fix_sha": "978b27d6ce538bb832ccd69e45802824e4301c4b", "subject": "RDMA/bnxt_re: Initialize dpi variable to zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72501", "commit_url": "https://git.kernel.org/stable/c/978b27d6ce538bb832ccd69e45802824e4301c4b" }, { "cve": "CVE-2026-72502", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22", "subject": "tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72502", "commit_url": "https://git.kernel.org/stable/c/2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22" }, { "cve": "CVE-2026-74255", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "f4c3d89fc986b0da196ddfc6cfe0ea5d5d08bec6", "subject": "tipc: fix UAF in tipc_l2_send_msg()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74255", "commit_url": "https://git.kernel.org/stable/c/f4c3d89fc986b0da196ddfc6cfe0ea5d5d08bec6" }, { "cve": "CVE-2026-74256", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "a48802fb2cd2d1e23651989f8ff4d15e9d5dad54", "subject": "bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74256", "commit_url": "https://git.kernel.org/stable/c/a48802fb2cd2d1e23651989f8ff4d15e9d5dad54" }, { "cve": "CVE-2026-74257", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "c010995b29c8939c6aa69e3cb26f8dbee163d156", "subject": "sockmap: Fix use-after-free in udp_bpf_recvmsg()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74257", "commit_url": "https://git.kernel.org/stable/c/c010995b29c8939c6aa69e3cb26f8dbee163d156" }, { "cve": "CVE-2026-74258", "author_name": "Jiri Olsa", "author_email": "jolsa@kernel.org", "fix_sha": "4d87a251d45b4a95eb4c0abcfab809c9f231258a", "subject": "bpf: Guard __get_user acesss with access_ok for uprobe_multi data", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74258", "commit_url": "https://git.kernel.org/stable/c/4d87a251d45b4a95eb4c0abcfab809c9f231258a" }, { "cve": "CVE-2026-74259", "author_name": "Jian Zhang", "author_email": "zhangjian496@huawei.com", "fix_sha": "6d9a4aaaa8b2612b5ef9d581e2f286a458b71ee1", "subject": "cifs: remove all cifs files before kill super", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74259", "commit_url": "https://git.kernel.org/stable/c/6d9a4aaaa8b2612b5ef9d581e2f286a458b71ee1" }, { "cve": "CVE-2026-74260", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "2354e975932dabb06fad239f07a3b68fd1809737", "subject": "netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74260", "commit_url": "https://git.kernel.org/stable/c/2354e975932dabb06fad239f07a3b68fd1809737" }, { "cve": "CVE-2026-74261", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "e546128291f8d688dcb931827e2efd2aa6c0734d", "subject": "ALSA: seq: avoid stale FIFO cells during resize", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74261", "commit_url": "https://git.kernel.org/stable/c/e546128291f8d688dcb931827e2efd2aa6c0734d" }, { "cve": "CVE-2026-74262", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "47186409c092cd7dd70350999186c700233e854d", "subject": "kcm: use WRITE_ONCE() when changing lower socket callbacks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74262", "commit_url": "https://git.kernel.org/stable/c/47186409c092cd7dd70350999186c700233e854d" }, { "cve": "CVE-2026-74263", "author_name": "Ruoyu Wang", "author_email": "ruoyuw560@gmail.com", "fix_sha": "05f789fa90d95d5771230e78453cedff2486039d", "subject": "net: wwan: t7xx: check skb_clone in control TX", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74263", "commit_url": "https://git.kernel.org/stable/c/05f789fa90d95d5771230e78453cedff2486039d" }, { "cve": "CVE-2026-74264", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8eed5519e496b7a07f441a0f579cb228a33189f7", "subject": "net: watchdog: fix refcount tracking races", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74264", "commit_url": "https://git.kernel.org/stable/c/8eed5519e496b7a07f441a0f579cb228a33189f7" }, { "cve": "CVE-2026-74265", "author_name": "Aditya Garg", "author_email": "gargaditya@linux.microsoft.com", "fix_sha": "5985474e1cb4034680fac2145497a94b0860be50", "subject": "net: mana: initialize gdma queue id to INVALID_QUEUE_ID", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74265", "commit_url": "https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50" }, { "cve": "CVE-2026-74266", "author_name": "Victor Nogueira", "author_email": "victor@mojatatu.com", "fix_sha": "15cd0c93bf4f892d66bc7a93667e2357b5673365", "subject": "net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74266", "commit_url": "https://git.kernel.org/stable/c/15cd0c93bf4f892d66bc7a93667e2357b5673365" }, { "cve": "CVE-2026-74267", "author_name": "Victor Nogueira", "author_email": "victor@mojatatu.com", "fix_sha": "52f1da34c9f4d5bdc1e8b44242da5c7ba8db85f3", "subject": "net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74267", "commit_url": "https://git.kernel.org/stable/c/52f1da34c9f4d5bdc1e8b44242da5c7ba8db85f3" }, { "cve": "CVE-2026-74268", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "990348e5bb457697c2f1f7f7b65154a3334d9d2b", "subject": "tcp: clear sock_ops cb flags before force-closing a child socket", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74268", "commit_url": "https://git.kernel.org/stable/c/990348e5bb457697c2f1f7f7b65154a3334d9d2b" }, { "cve": "CVE-2026-74269", "author_name": "Joe Damato", "author_email": "joe@dama.to", "fix_sha": "e26657fe3b85c068b01f42bb0c602f242d643ba9", "subject": "bnxt: fix head underflow on XDP head-grow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74269", "commit_url": "https://git.kernel.org/stable/c/e26657fe3b85c068b01f42bb0c602f242d643ba9" }, { "cve": "CVE-2026-74270", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "81246a65303d9635266b1334490142caaf86a11f", "subject": "handshake: Require admin permission for DONE command", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74270", "commit_url": "https://git.kernel.org/stable/c/81246a65303d9635266b1334490142caaf86a11f" }, { "cve": "CVE-2026-74271", "author_name": "Lucas Tsai", "author_email": "lucas_tsai@richtek.com", "fix_sha": "ba61aed9a34671222d1149acfc2f0179a9ce7e80", "subject": "power: supply: core: fix supplied_from allocations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74271", "commit_url": "https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80" }, { "cve": "CVE-2026-74272", "author_name": "Dan Williams", "author_email": "djbw@kernel.org", "fix_sha": "4dd86ca99ffcc413cbf79063fd9956ef54e0ca91", "subject": "cxl/region: Resolve region deletion races", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74272", "commit_url": "https://git.kernel.org/stable/c/4dd86ca99ffcc413cbf79063fd9956ef54e0ca91" }, { "cve": "CVE-2026-74273", "author_name": "Dan Williams", "author_email": "djbw@kernel.org", "fix_sha": "d91feb88692e81b00cd22f0125cfcd04970b4a0b", "subject": "cxl/region: Block region delete during region creation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74273", "commit_url": "https://git.kernel.org/stable/c/d91feb88692e81b00cd22f0125cfcd04970b4a0b" }, { "cve": "CVE-2026-74274", "author_name": "Li Ming", "author_email": "ming.li@zohomail.com", "fix_sha": "aa8a76711c15041ec1e42c3a74c15c2df0bd31f6", "subject": "cxl/region: Fill first free targets[] slot during auto-discovery", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74274", "commit_url": "https://git.kernel.org/stable/c/aa8a76711c15041ec1e42c3a74c15c2df0bd31f6" }, { "cve": "CVE-2026-74275", "author_name": "Li Ming", "author_email": "ming.li@zohomail.com", "fix_sha": "cbda6a2c2bec2a5fb30a2ce85baeab15b5fc7db3", "subject": "cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74275", "commit_url": "https://git.kernel.org/stable/c/cbda6a2c2bec2a5fb30a2ce85baeab15b5fc7db3" }, { "cve": "CVE-2026-74276", "author_name": "Lars P\u00f6schel", "author_email": "lars.poeschel@edag.com", "fix_sha": "47f3b5365536e8c38f264824ab15fdb74454e066", "subject": "spi: xilinx: use FIFO occupancy register to determine buffer size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74276", "commit_url": "https://git.kernel.org/stable/c/47f3b5365536e8c38f264824ab15fdb74454e066" }, { "cve": "CVE-2026-74277", "author_name": "Li RongQing", "author_email": "lirongqing@baidu.com", "fix_sha": "db50fb87015b955a5a0c155293b2dd40d63a3b9e", "subject": "iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74277", "commit_url": "https://git.kernel.org/stable/c/db50fb87015b955a5a0c155293b2dd40d63a3b9e" }, { "cve": "CVE-2026-74278", "author_name": "HanQuan", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "efc86691e4d8083d9e380ea95042c2cf679f65fd", "subject": "ALSA: seq: Fix kernel heap address leak in bounce_error_event()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74278", "commit_url": "https://git.kernel.org/stable/c/efc86691e4d8083d9e380ea95042c2cf679f65fd" }, { "cve": "CVE-2026-74279", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "9dbf173bd32d5f81b005008b682bfb50aa093455", "subject": "crypto: cavium/cpt - fix DMA cleanup using wrong loop index", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74279", "commit_url": "https://git.kernel.org/stable/c/9dbf173bd32d5f81b005008b682bfb50aa093455" }, { "cve": "CVE-2026-74280", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "7891c64c0520519782470ba29bac8a5761e295d8", "subject": "crypto: marvell/octeontx - fix DMA cleanup using wrong loop index", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74280", "commit_url": "https://git.kernel.org/stable/c/7891c64c0520519782470ba29bac8a5761e295d8" }, { "cve": "CVE-2026-74281", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2afb648f7b99216c687db1f89739c995e1144153", "subject": "tipc: reject inverted service ranges from peer bindings", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74281", "commit_url": "https://git.kernel.org/stable/c/2afb648f7b99216c687db1f89739c995e1144153" }, { "cve": "CVE-2026-74282", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "ab3e10b44ba5411779aac7afd2477917dd77750f", "subject": "tipc: prevent snt_unacked underflow on CONN_ACK", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74282", "commit_url": "https://git.kernel.org/stable/c/ab3e10b44ba5411779aac7afd2477917dd77750f" }, { "cve": "CVE-2026-74283", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "86b0c540e2ea397cde021eecd24145f7c16a3d4e", "subject": "tipc: require net admin for TIPCv2 netlink mutators", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74283", "commit_url": "https://git.kernel.org/stable/c/86b0c540e2ea397cde021eecd24145f7c16a3d4e" }, { "cve": "CVE-2026-74284", "author_name": "Victor Nogueira", "author_email": "victor@mojatatu.com", "fix_sha": "90b662ea25f5e83bb3b8ccec5b93ced810b92fb8", "subject": "net/sched: sch_hfsc: Don't make class passive twice", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74284", "commit_url": "https://git.kernel.org/stable/c/90b662ea25f5e83bb3b8ccec5b93ced810b92fb8" }, { "cve": "CVE-2026-74285", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "37314c9dbe95b4d924c7b61aaf563cec4f4e4133", "subject": "net: Stop leased rxq before uninstalling its memory provider", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74285", "commit_url": "https://git.kernel.org/stable/c/37314c9dbe95b4d924c7b61aaf563cec4f4e4133" }, { "cve": "CVE-2026-74286", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "24041543da8cd84eb5d8ae738c534372fff54820", "subject": "net: pfcp: allocate per-cpu tstats for PFCP netdevs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74286", "commit_url": "https://git.kernel.org/stable/c/24041543da8cd84eb5d8ae738c534372fff54820" }, { "cve": "CVE-2026-74287", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "e9361d0ca55c4af12aac09e2572852fa91046229", "subject": "sctp: validate embedded address parameter length", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74287", "commit_url": "https://git.kernel.org/stable/c/e9361d0ca55c4af12aac09e2572852fa91046229" }, { "cve": "CVE-2026-74288", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "2821e85c058f81c9948a2fb1a634f7b47457d51c", "subject": "net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74288", "commit_url": "https://git.kernel.org/stable/c/2821e85c058f81c9948a2fb1a634f7b47457d51c" }, { "cve": "CVE-2026-74289", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "06b693d2eb6651a63ad85bad8673de3b7d4edd6d", "subject": "ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74289", "commit_url": "https://git.kernel.org/stable/c/06b693d2eb6651a63ad85bad8673de3b7d4edd6d" }, { "cve": "CVE-2026-74290", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "f294fc71c4a0fa4964f6428a1b4e7929c1d83125", "subject": "net/sched: cls_flow: Dont expose folded kernel pointers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74290", "commit_url": "https://git.kernel.org/stable/c/f294fc71c4a0fa4964f6428a1b4e7929c1d83125" }, { "cve": "CVE-2026-74291", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "b7e44d1986d6671342c19b82192189ca5db5dab7", "subject": "ASoC: topology: Check PCM and DAI name strings before use", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74291", "commit_url": "https://git.kernel.org/stable/c/b7e44d1986d6671342c19b82192189ca5db5dab7" }, { "cve": "CVE-2026-74292", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "1d8aabb413b5638670dfd1162169edc0ba276a2e", "subject": "ASoC: tegra: tegra210_ahub: Validate written enum value", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74292", "commit_url": "https://git.kernel.org/stable/c/1d8aabb413b5638670dfd1162169edc0ba276a2e" }, { "cve": "CVE-2026-74293", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "3cd17e4e2871114d5579fa7bc8da66faf7fc1930", "subject": "ASoC: fsl: fsl_audmix: Validate written enum values", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74293", "commit_url": "https://git.kernel.org/stable/c/3cd17e4e2871114d5579fa7bc8da66faf7fc1930" }, { "cve": "CVE-2026-74294", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "d65adf85477247be04ac86886f8edfaa047b5d4a", "subject": "ASoC: meson: aiu: Validate written enum values", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74294", "commit_url": "https://git.kernel.org/stable/c/d65adf85477247be04ac86886f8edfaa047b5d4a" }, { "cve": "CVE-2026-74295", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "0b08baeccdcf52fad328ad645f5b4fbee04eea34", "subject": "ASoC: codecs: hdac_hdmi: Validate written enum value", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74295", "commit_url": "https://git.kernel.org/stable/c/0b08baeccdcf52fad328ad645f5b4fbee04eea34" }, { "cve": "CVE-2026-74296", "author_name": "Leon Romanovsky", "author_email": "leonro@nvidia.com", "fix_sha": "449ae7927152e46acbe5f19f97eafdae6d3a96b1", "subject": "RDMA/mlx5: Release the HW\u2011provided UAR index rather than the SW one", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74296", "commit_url": "https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1" }, { "cve": "CVE-2026-74297", "author_name": "Maher Sanalla", "author_email": "msanalla@nvidia.com", "fix_sha": "d881d60223aac8fdc12b227d89c76e131e92a9cd", "subject": "RDMA/mlx5: Fix undefined shift of user RQ WQE size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74297", "commit_url": "https://git.kernel.org/stable/c/d881d60223aac8fdc12b227d89c76e131e92a9cd" }, { "cve": "CVE-2026-74298", "author_name": "Michael Guralnik", "author_email": "michaelgur@nvidia.com", "fix_sha": "41a707d0275cdec9ac125e826dd6836fa9623cbc", "subject": "RDMA/core: Fix FRMR set pinned push error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74298", "commit_url": "https://git.kernel.org/stable/c/41a707d0275cdec9ac125e826dd6836fa9623cbc" }, { "cve": "CVE-2026-74299", "author_name": "Michael Guralnik", "author_email": "michaelgur@nvidia.com", "fix_sha": "c6936506ed556ce3ccad36ab999baf2764dd7d25", "subject": "RDMA/core: Fix FRMR aging push to queue error flow", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74299", "commit_url": "https://git.kernel.org/stable/c/c6936506ed556ce3ccad36ab999baf2764dd7d25" }, { "cve": "CVE-2026-74300", "author_name": "Samuel Moelius", "author_email": "sam.moelius@trailofbits.com", "fix_sha": "c38fbcdc407925c7088f7e5f11c1fff73d2d35a2", "subject": "Bluetooth: hci: validate codec capability element length", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74300", "commit_url": "https://git.kernel.org/stable/c/c38fbcdc407925c7088f7e5f11c1fff73d2d35a2" }, { "cve": "CVE-2026-74301", "author_name": "Zhao Dongdong", "author_email": "zhaodongdong@kylinos.cn", "fix_sha": "f396f4005180928cd9e15e352a6512865d3bc908", "subject": "Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74301", "commit_url": "https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908" }, { "cve": "CVE-2026-74302", "author_name": "Jordan Walters", "author_email": "jaggyaur@gmail.com", "fix_sha": "5edcc018fa6e80b2c478454a4a8229c23d67c181", "subject": "Bluetooth: hci_core: Fix UAF in hci_unregister_dev()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74302", "commit_url": "https://git.kernel.org/stable/c/5edcc018fa6e80b2c478454a4a8229c23d67c181" }, { "cve": "CVE-2026-74303", "author_name": "Zijun Hu", "author_email": "zijun.hu@oss.qualcomm.com", "fix_sha": "6b8cbcf08de0db62254d1981f83db0f94681ccd9", "subject": "Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74303", "commit_url": "https://git.kernel.org/stable/c/6b8cbcf08de0db62254d1981f83db0f94681ccd9" }, { "cve": "CVE-2026-74304", "author_name": "Zijun Hu", "author_email": "zijun.hu@oss.qualcomm.com", "fix_sha": "3ec629fee178d429f01ae843e4ea888de93012bf", "subject": "Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74304", "commit_url": "https://git.kernel.org/stable/c/3ec629fee178d429f01ae843e4ea888de93012bf" }, { "cve": "CVE-2026-74305", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "10627ddc0167aab5c1c390a10ef461e9937aba08", "subject": "bpf: Tighten cgroup storage cookie checks for prog arrays", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74305", "commit_url": "https://git.kernel.org/stable/c/10627ddc0167aab5c1c390a10ef461e9937aba08" }, { "cve": "CVE-2026-74306", "author_name": "Giovanni Cabiddu", "author_email": "giovanni.cabiddu@intel.com", "fix_sha": "4ec5e932e636896e97e4c6a8205b0ac76d52421a", "subject": "vfio/qat: fix f_pos race in qat_vf_resume_write()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74306", "commit_url": "https://git.kernel.org/stable/c/4ec5e932e636896e97e4c6a8205b0ac76d52421a" }, { "cve": "CVE-2026-74307", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "c143957520c6c9b5cd72e0de8b52b814f0c576fe", "subject": "ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74307", "commit_url": "https://git.kernel.org/stable/c/c143957520c6c9b5cd72e0de8b52b814f0c576fe" }, { "cve": "CVE-2026-74308", "author_name": "Aditya Prakash Srivastava", "author_email": "aditya.ansh182@gmail.com", "fix_sha": "ad09aa45965d3fafaf9963bc78109b73c0f9ac8d", "subject": "ext4: fix kernel BUG in ext4_write_inline_data_end", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74308", "commit_url": "https://git.kernel.org/stable/c/ad09aa45965d3fafaf9963bc78109b73c0f9ac8d" }, { "cve": "CVE-2026-74309", "author_name": "Srujana Challa", "author_email": "schalla@marvell.com", "fix_sha": "0d21a1d6375a05274291e32c1ab7cd57dbb69513", "subject": "vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74309", "commit_url": "https://git.kernel.org/stable/c/0d21a1d6375a05274291e32c1ab7cd57dbb69513" }, { "cve": "CVE-2026-74310", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "8f6898fe80794f2d7c3d38c1158c806e4074a1c4", "subject": "vhost/net: complete zerocopy ubufs only once", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74310", "commit_url": "https://git.kernel.org/stable/c/8f6898fe80794f2d7c3d38c1158c806e4074a1c4" }, { "cve": "CVE-2026-74311", "author_name": "Jia Jia", "author_email": "physicalmtea@gmail.com", "fix_sha": "548d2208455f14e6121404c6e30e997bfe0cd264", "subject": "virtio: rtc: tear down old virtqueues before restore", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74311", "commit_url": "https://git.kernel.org/stable/c/548d2208455f14e6121404c6e30e997bfe0cd264" }, { "cve": "CVE-2026-74312", "author_name": "Qihang Tang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "929e4f044621c8cc30b612fb74e1410bef09e41b", "subject": "vhost/vdpa: validate virtqueue index in mmap and fault paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74312", "commit_url": "https://git.kernel.org/stable/c/929e4f044621c8cc30b612fb74e1410bef09e41b" }, { "cve": "CVE-2026-74313", "author_name": "Qihang Tang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "e440e077748939839d9f76e24383b76b785f80ce", "subject": "vduse: hold vduse_lock across IDR lookup in open path", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74313", "commit_url": "https://git.kernel.org/stable/c/e440e077748939839d9f76e24383b76b785f80ce" }, { "cve": "CVE-2026-74314", "author_name": "Justin Suess", "author_email": "utilityemal77@gmail.com", "fix_sha": "a3a81d247651218e47153f2d2afd7aee236726fd", "subject": "bpf: Cancel special fields on map value recycle", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74314", "commit_url": "https://git.kernel.org/stable/c/a3a81d247651218e47153f2d2afd7aee236726fd" }, { "cve": "CVE-2026-74315", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "6e4c62caecf792e8a15ad9bc7f371e57c17e3302", "subject": "lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74315", "commit_url": "https://git.kernel.org/stable/c/6e4c62caecf792e8a15ad9bc7f371e57c17e3302" }, { "cve": "CVE-2026-74316", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "86b9898920a6d02b4149f4fef9efd77b8aa3b9ca", "subject": "NFSD: Handle layout stid in nfsd4_drop_revoked_stid()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74316", "commit_url": "https://git.kernel.org/stable/c/86b9898920a6d02b4149f4fef9efd77b8aa3b9ca" }, { "cve": "CVE-2026-74317", "author_name": "Larysa Zaremba", "author_email": "larysa.zaremba@intel.com", "fix_sha": "7bd4355272de34c2e90e34b72c5613736d03c32b", "subject": "ixgbe: do not configure xps for XDP queues", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74317", "commit_url": "https://git.kernel.org/stable/c/7bd4355272de34c2e90e34b72c5613736d03c32b" }, { "cve": "CVE-2026-74318", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "532085d00eb54c074bdeae648b194765239f4d11", "subject": "btrfs: fix deadlock cloning inline extent when using flushoncommit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74318", "commit_url": "https://git.kernel.org/stable/c/532085d00eb54c074bdeae648b194765239f4d11" }, { "cve": "CVE-2026-74319", "author_name": "Johannes Thumshirn", "author_email": "johannes.thumshirn@wdc.com", "fix_sha": "814c3b4ea357297c507158bceb07bcdc5fbe9808", "subject": "btrfs: zoned: fix deadlock waiting for ticket during data relocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74319", "commit_url": "https://git.kernel.org/stable/c/814c3b4ea357297c507158bceb07bcdc5fbe9808" }, { "cve": "CVE-2026-74320", "author_name": "David Laight", "author_email": "david.laight.linux@gmail.com", "fix_sha": "d8421e09382cfe0bd2a044c8b0a822f64855dd4e", "subject": "fbdev: sm501fb: Fix buffer errors in OF binding code", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74320", "commit_url": "https://git.kernel.org/stable/c/d8421e09382cfe0bd2a044c8b0a822f64855dd4e" }, { "cve": "CVE-2026-74321", "author_name": "Filipe Manana", "author_email": "fdmanana@suse.com", "fix_sha": "486f8298b6188ff11ef1f4be7f1d5d2e4d1b1fae", "subject": "btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74321", "commit_url": "https://git.kernel.org/stable/c/486f8298b6188ff11ef1f4be7f1d5d2e4d1b1fae" }, { "cve": "CVE-2026-74322", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "61370e6674b5253de5686813ceeceebc35a7d3e5", "subject": "wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74322", "commit_url": "https://git.kernel.org/stable/c/61370e6674b5253de5686813ceeceebc35a7d3e5" }, { "cve": "CVE-2026-74323", "author_name": "Lorenzo Bianconi", "author_email": "lorenzo@kernel.org", "fix_sha": "831074096d0450308357271fc0ffd3f600a2487e", "subject": "wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74323", "commit_url": "https://git.kernel.org/stable/c/831074096d0450308357271fc0ffd3f600a2487e" }, { "cve": "CVE-2026-74324", "author_name": "Aviel Zohar", "author_email": "avielzohar123@gmail.com", "fix_sha": "c7369a00860a0704461d440e7c3bf9b49bfdbaee", "subject": "wifi: mt76: mt7925: validate skb length in testmode query", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74324", "commit_url": "https://git.kernel.org/stable/c/c7369a00860a0704461d440e7c3bf9b49bfdbaee" }, { "cve": "CVE-2026-74327", "author_name": "Hui Zhu", "author_email": "zhuhui@kylinos.cn", "fix_sha": "c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8", "subject": "vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74327", "commit_url": "https://git.kernel.org/stable/c/c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8" }, { "cve": "CVE-2026-74328", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "f2d70dbd3dcefa8e3c380beff9c31f5f033a4221", "subject": "iommufd: Destroy the pages content after detaching from dmabuf", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74328", "commit_url": "https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221" }, { "cve": "CVE-2026-74329", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "a298c7302ee9584a7a1ac1e8acbede8d98ab51a4", "subject": "watchdog: unregister PM notifier on watchdog unregister", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74329", "commit_url": "https://git.kernel.org/stable/c/a298c7302ee9584a7a1ac1e8acbede8d98ab51a4" }, { "cve": "CVE-2026-74330", "author_name": "Al Viro", "author_email": "viro@zeniv.linux.org.uk", "fix_sha": "9b9e8bb81c41fd27e7b57a1c936fde140548535f", "subject": "configfs: fix lockless traversals of ->s_children", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74330", "commit_url": "https://git.kernel.org/stable/c/9b9e8bb81c41fd27e7b57a1c936fde140548535f" }, { "cve": "CVE-2026-74331", "author_name": "Dmitry Vyukov", "author_email": "dvyukov@google.com", "fix_sha": "d3ec78f8f8d48a04a9fac38d47275c34645e5103", "subject": "firmware_loader: Fix recursive lock in device_cache_fw_images()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74331", "commit_url": "https://git.kernel.org/stable/c/d3ec78f8f8d48a04a9fac38d47275c34645e5103" }, { "cve": "CVE-2026-74332", "author_name": "Aaron Ma", "author_email": "aaron.ma@canonical.com", "fix_sha": "4d992e63f52d58f52b724606c60ae7b37a1c582f", "subject": "ASoC: amd: acp-sdw-sof: Bound DAI link iteration", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74332", "commit_url": "https://git.kernel.org/stable/c/4d992e63f52d58f52b724606c60ae7b37a1c582f" }, { "cve": "CVE-2026-74333", "author_name": "Aaron Ma", "author_email": "aaron.ma@canonical.com", "fix_sha": "d49ecdf327cc91062d2f80996a163cf65fda1e60", "subject": "ASoC: amd: acp-sdw-legacy: Bound DAI link iteration", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74333", "commit_url": "https://git.kernel.org/stable/c/d49ecdf327cc91062d2f80996a163cf65fda1e60" }, { "cve": "CVE-2026-74334", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "50d5c02ab8e62325548bd3a6e6b758a9dcd6e7c3", "subject": "RDMA/nldev: Fix locking when accessing mr->pd", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74334", "commit_url": "https://git.kernel.org/stable/c/50d5c02ab8e62325548bd3a6e6b758a9dcd6e7c3" }, { "cve": "CVE-2026-74335", "author_name": "Sechang Lim", "author_email": "rhkrqnwk98@gmail.com", "fix_sha": "50dff00615522f3ec03449680ca23beb4cfc549c", "subject": "bpf: Fix NULL pointer dereference in bpf_task_from_vpid()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74335", "commit_url": "https://git.kernel.org/stable/c/50dff00615522f3ec03449680ca23beb4cfc549c" }, { "cve": "CVE-2026-74336", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "b224d18b1e5d1cddfc67f63f41d80023b2ec8889", "subject": "wifi: mac80211: bound S1G TIM PVB walk to the TIM element", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74336", "commit_url": "https://git.kernel.org/stable/c/b224d18b1e5d1cddfc67f63f41d80023b2ec8889" }, { "cve": "CVE-2026-74337", "author_name": "Mykyta Yatsenko", "author_email": "yatsenko@meta.com", "fix_sha": "89edbdfc5d0308cef57b71359331de5c4ddbf763", "subject": "bpf: Fix NMI/tracepoint re-entry deadlock on lru locks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74337", "commit_url": "https://git.kernel.org/stable/c/89edbdfc5d0308cef57b71359331de5c4ddbf763" }, { "cve": "CVE-2026-74338", "author_name": "David Windsor", "author_email": "dwindsor@gmail.com", "fix_sha": "5b038319be442c620f774e6fc9e9283deeca1c75", "subject": "bpf: Reject sleepable BPF_LSM_CGROUP programs at load time", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74338", "commit_url": "https://git.kernel.org/stable/c/5b038319be442c620f774e6fc9e9283deeca1c75" }, { "cve": "CVE-2026-74339", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "705dd6dcbc0ea87351c660c1a6443f85f1001c76", "subject": "ALSA: seq: Clear variable event pointer on read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74339", "commit_url": "https://git.kernel.org/stable/c/705dd6dcbc0ea87351c660c1a6443f85f1001c76" }, { "cve": "CVE-2026-74340", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "df2187acfca6c6cca372c5d35f42394d9c270b09", "subject": "wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74340", "commit_url": "https://git.kernel.org/stable/c/df2187acfca6c6cca372c5d35f42394d9c270b09" }, { "cve": "CVE-2026-74341", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "88a240d86d3d64521f9194abe185ac71cc74d0bd", "subject": "wifi: wcn36xx: fix heap overflow from oversized firmware HAL response", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74341", "commit_url": "https://git.kernel.org/stable/c/88a240d86d3d64521f9194abe185ac71cc74d0bd" }, { "cve": "CVE-2026-74342", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "6cccc49b027c7551ffc1d2532f2ef1922661f3da", "subject": "kernfs: link kn to its parent before the LSM init hook", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74342", "commit_url": "https://git.kernel.org/stable/c/6cccc49b027c7551ffc1d2532f2ef1922661f3da" }, { "cve": "CVE-2026-74343", "author_name": "Miklos Szeredi", "author_email": "mszeredi@redhat.com", "fix_sha": "6a07814ff643b5c8e1353d8c6229f52fde205cde", "subject": "kernfs: fix xattr race condition with multiple superblocks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74343", "commit_url": "https://git.kernel.org/stable/c/6a07814ff643b5c8e1353d8c6229f52fde205cde" }, { "cve": "CVE-2026-74344", "author_name": "Kaitao Cheng", "author_email": "chengkaitao@kylinos.cn", "fix_sha": "4a7910ee060d8ce55612f5b3cc267f3a265a3cec", "subject": "bpf: Clear rb node linkage when freeing bpf_rb_root", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74344", "commit_url": "https://git.kernel.org/stable/c/4a7910ee060d8ce55612f5b3cc267f3a265a3cec" }, { "cve": "CVE-2026-74345", "author_name": "Bernard Metzler", "author_email": "bernard.metzler@linux.dev", "fix_sha": "ea4f6f6c53577fb3f05dbd78b15e586772d49831", "subject": "RDMA/siw: Fix endpoint/socket association handling", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74345", "commit_url": "https://git.kernel.org/stable/c/ea4f6f6c53577fb3f05dbd78b15e586772d49831" }, { "cve": "CVE-2026-74346", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "4385ddd654d90245eeb83b3cb539670ab5c85ba4", "subject": "RDMA/irdma: Fix OOB read during CQ MR registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74346", "commit_url": "https://git.kernel.org/stable/c/4385ddd654d90245eeb83b3cb539670ab5c85ba4" }, { "cve": "CVE-2026-74347", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "7d6a9cdb8d3a51d9cfe546a09a518ab3d2671549", "subject": "netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74347", "commit_url": "https://git.kernel.org/stable/c/7d6a9cdb8d3a51d9cfe546a09a518ab3d2671549" }, { "cve": "CVE-2026-74348", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "03ad858ce8064861ea580021976dc19b7aabb549", "subject": "ocfs2/dlm: require a ref for locking_state debugfs open", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74348", "commit_url": "https://git.kernel.org/stable/c/03ad858ce8064861ea580021976dc19b7aabb549" }, { "cve": "CVE-2026-74349", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "ca1afd88f5eaaff9168e1466e5401385edf59543", "subject": "ocfs2: reject FITRIM ranges shorter than a cluster", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74349", "commit_url": "https://git.kernel.org/stable/c/ca1afd88f5eaaff9168e1466e5401385edf59543" }, { "cve": "CVE-2026-74350", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "e234973f286ed2e8961a24561ec91594ec3e3ff8", "subject": "ocfs2: validate fast symlink target during inode read", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74350", "commit_url": "https://git.kernel.org/stable/c/e234973f286ed2e8961a24561ec91594ec3e3ff8" }, { "cve": "CVE-2026-74351", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "93612d48fa42b3d1a637eb9279e15281c611c000", "subject": "ocfs2: rebase copied fsdlm LVB pointers in locking_state", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74351", "commit_url": "https://git.kernel.org/stable/c/93612d48fa42b3d1a637eb9279e15281c611c000" }, { "cve": "CVE-2026-74352", "author_name": "Wandun Chen", "author_email": "chenwandun@lixiang.com", "fix_sha": "e1686ca81dbf3edbde589b7daf312b45cbf76e03", "subject": "of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74352", "commit_url": "https://git.kernel.org/stable/c/e1686ca81dbf3edbde589b7daf312b45cbf76e03" }, { "cve": "CVE-2026-74353", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "56ae73c92e200e630c2bdf1e98c88b86c8483b37", "subject": "drm/amdkfd: always resume_all after suspend_all", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74353", "commit_url": "https://git.kernel.org/stable/c/56ae73c92e200e630c2bdf1e98c88b86c8483b37" }, { "cve": "CVE-2026-74354", "author_name": "Alexei Starovoitov", "author_email": "ast@kernel.org", "fix_sha": "80b89d0226a05e8b67969de99c31b51fcd54f76a", "subject": "bpf: Take mmap_lock in zap_pages()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74354", "commit_url": "https://git.kernel.org/stable/c/80b89d0226a05e8b67969de99c31b51fcd54f76a" }, { "cve": "CVE-2026-74355", "author_name": "Pranjal Shrivastava", "author_email": "praan@google.com", "fix_sha": "43bd9e6d5513cb1edbafdeef146a1edc3aaced56", "subject": "iommu/vt-d: Fix RB-tree corruption in probe error path", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74355", "commit_url": "https://git.kernel.org/stable/c/43bd9e6d5513cb1edbafdeef146a1edc3aaced56" }, { "cve": "CVE-2026-74356", "author_name": "Michael S. Tsirkin", "author_email": "mst@redhat.com", "fix_sha": "09861858a68342f851f71c669ac0f69865c32151", "subject": "vhost: fix vhost_get_avail_idx for a non empty ring", "cvss_score": 7.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74356", "commit_url": "https://git.kernel.org/stable/c/09861858a68342f851f71c669ac0f69865c32151" }, { "cve": "CVE-2026-74357", "author_name": "Vitaly Prosyak", "author_email": "vitaly.prosyak@amd.com", "fix_sha": "08ac3a7879d300302a1927ce2038629539a37f8b", "subject": "drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74357", "commit_url": "https://git.kernel.org/stable/c/08ac3a7879d300302a1927ce2038629539a37f8b" }, { "cve": "CVE-2026-74358", "author_name": "Li Chen", "author_email": "me@linux.beauty", "fix_sha": "8b3bc93fee6771775243665a0cf31857d6659775", "subject": "ext4: fix fast commit wait/wake bit mapping on 64-bit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74358", "commit_url": "https://git.kernel.org/stable/c/8b3bc93fee6771775243665a0cf31857d6659775" }, { "cve": "CVE-2026-74359", "author_name": "Al Viro", "author_email": "viro@zeniv.linux.org.uk", "fix_sha": "10da12d352b7b2bb330a8609fdda9a58bf0e9856", "subject": "configfs_lookup(): don't leave ->s_dentry dangling on failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74359", "commit_url": "https://git.kernel.org/stable/c/10da12d352b7b2bb330a8609fdda9a58bf0e9856" }, { "cve": "CVE-2026-74360", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "3c56ee343f9412d81918635c3e25e22a5dd6d87e", "subject": "bpf: Reject exclusive maps for bpf_map_elem iterators", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74360", "commit_url": "https://git.kernel.org/stable/c/3c56ee343f9412d81918635c3e25e22a5dd6d87e" }, { "cve": "CVE-2026-74361", "author_name": "liuxixin", "author_email": "gliuxen@gmail.com", "fix_sha": "0967074f6830718fd2597404ef119bddd0dbfd00", "subject": "nvme: fix FDP fdpcidx bounds check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74361", "commit_url": "https://git.kernel.org/stable/c/0967074f6830718fd2597404ef119bddd0dbfd00" }, { "cve": "CVE-2026-74362", "author_name": "Danila Chernetsov", "author_email": "listdansp@mail.ru", "fix_sha": "a4659be0bc7cb1856ffb15b67f903229ae8891ec", "subject": "ext2: fix ignored return value of generic_write_sync()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74362", "commit_url": "https://git.kernel.org/stable/c/a4659be0bc7cb1856ffb15b67f903229ae8891ec" }, { "cve": "CVE-2026-74363", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "b93c55b4932dd7e32dca8cf34a3443cc87a02906", "subject": "bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74363", "commit_url": "https://git.kernel.org/stable/c/b93c55b4932dd7e32dca8cf34a3443cc87a02906" }, { "cve": "CVE-2026-74364", "author_name": "Daniel Borkmann", "author_email": "daniel@iogearbox.net", "fix_sha": "9a3c3c49c333760c8944dadacbe114c1884546ef", "subject": "bpf: Reject exclusive maps as inner maps in map-in-map", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74364", "commit_url": "https://git.kernel.org/stable/c/9a3c3c49c333760c8944dadacbe114c1884546ef" }, { "cve": "CVE-2026-74365", "author_name": "Alison Schofield", "author_email": "alison.schofield@intel.com", "fix_sha": "8d4b989d9c9afe5f185aa5853b666fc4617afe9e", "subject": "nvdimm/btt: Handle preemption in BTT lane acquisition", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74365", "commit_url": "https://git.kernel.org/stable/c/8d4b989d9c9afe5f185aa5853b666fc4617afe9e" }, { "cve": "CVE-2026-74366", "author_name": "Wei Zhang", "author_email": "wei.zhang@oss.qualcomm.com", "fix_sha": "47809a7c8348bc4a332ccc26a37c7145a5f609f8", "subject": "wifi: ath12k: fix NULL deref in change_sta_links for unready link", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74366", "commit_url": "https://git.kernel.org/stable/c/47809a7c8348bc4a332ccc26a37c7145a5f609f8" }, { "cve": "CVE-2026-74367", "author_name": "Wei Zhang", "author_email": "wei.zhang@oss.qualcomm.com", "fix_sha": "c972636efc63f0f43d725b59805dd1ae5bc4b31e", "subject": "wifi: ath12k: fix inconsistent arvif state in vdev_create error paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74367", "commit_url": "https://git.kernel.org/stable/c/c972636efc63f0f43d725b59805dd1ae5bc4b31e" }, { "cve": "CVE-2026-74368", "author_name": "Miaoqing Pan", "author_email": "miaoqing.pan@oss.qualcomm.com", "fix_sha": "98d4f92ab6a1af2ea2ab590d7e2801b203110981", "subject": "wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74368", "commit_url": "https://git.kernel.org/stable/c/98d4f92ab6a1af2ea2ab590d7e2801b203110981" }, { "cve": "CVE-2026-74369", "author_name": "Pasha Tatashin", "author_email": "pasha.tatashin@soleen.com", "fix_sha": "291dcd37c8c8f8f8e1bccc92228f44bf371762a8", "subject": "liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74369", "commit_url": "https://git.kernel.org/stable/c/291dcd37c8c8f8f8e1bccc92228f44bf371762a8" }, { "cve": "CVE-2026-74370", "author_name": "Pasha Tatashin", "author_email": "pasha.tatashin@soleen.com", "fix_sha": "d3ae9e7fddb4036f50003d7fa1ef52801fdb961b", "subject": "liveupdate: fix TOCTOU race in luo_session_retrieve()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74370", "commit_url": "https://git.kernel.org/stable/c/d3ae9e7fddb4036f50003d7fa1ef52801fdb961b" }, { "cve": "CVE-2026-74371", "author_name": "Yuyang Huang", "author_email": "yuyanghuang@google.com", "fix_sha": "21c4b99b27f3f85b89256e81b3e997dec0a460d0", "subject": "bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74371", "commit_url": "https://git.kernel.org/stable/c/21c4b99b27f3f85b89256e81b3e997dec0a460d0" }, { "cve": "CVE-2026-74372", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "909d9dc3b5730c8ed7b764c68bc788342df2a07b", "subject": "raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74372", "commit_url": "https://git.kernel.org/stable/c/909d9dc3b5730c8ed7b764c68bc788342df2a07b" }, { "cve": "CVE-2026-74373", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "ba976e3501111d11c550848b3b7341a73035f582", "subject": "md/raid1,raid10: fix bio accounting for split md cloned bios", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74373", "commit_url": "https://git.kernel.org/stable/c/ba976e3501111d11c550848b3b7341a73035f582" }, { "cve": "CVE-2026-74374", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "811545e0926d02a6a0b1a1258bb5544777c164d4", "subject": "md/raid1,raid10: fix error-path detection with md_cloned_bio()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74374", "commit_url": "https://git.kernel.org/stable/c/811545e0926d02a6a0b1a1258bb5544777c164d4" }, { "cve": "CVE-2026-74375", "author_name": "Abd-Alrhman Masalkhi", "author_email": "abd.masalkhi@gmail.com", "fix_sha": "7b15c24f805339a585cfe7d72f446b7e88b9bcc0", "subject": "md/raid1,raid10: fix deadlock in read error recovery path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74375", "commit_url": "https://git.kernel.org/stable/c/7b15c24f805339a585cfe7d72f446b7e88b9bcc0" }, { "cve": "CVE-2026-74376", "author_name": "Chen Cheng", "author_email": "chencheng@fnnas.com", "fix_sha": "6b8a26af065ddc93de2aa5c9f0df98dce9723442", "subject": "md/raid10: reset read_slot when reusing r10bio for discard", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74376", "commit_url": "https://git.kernel.org/stable/c/6b8a26af065ddc93de2aa5c9f0df98dce9723442" }, { "cve": "CVE-2026-74377", "author_name": "Tristan Madani", "author_email": "tristmd@gmail.com", "fix_sha": "d6ab440240a04b8737ee4c7bb21af9182e451733", "subject": "RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74377", "commit_url": "https://git.kernel.org/stable/c/d6ab440240a04b8737ee4c7bb21af9182e451733" }, { "cve": "CVE-2026-74378", "author_name": "Tristan Madani", "author_email": "tristmd@gmail.com", "fix_sha": "22b8fbded65b8c441b634a185f8da67657df6c50", "subject": "RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74378", "commit_url": "https://git.kernel.org/stable/c/22b8fbded65b8c441b634a185f8da67657df6c50" }, { "cve": "CVE-2026-74379", "author_name": "Davidlohr Bueso", "author_email": "dave@stgolabs.net", "fix_sha": "8aa442cfce79e2d69e72fc8e0c0864ac2971149d", "subject": "dax/kmem: account for partial discontiguous resource upon removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74379", "commit_url": "https://git.kernel.org/stable/c/8aa442cfce79e2d69e72fc8e0c0864ac2971149d" }, { "cve": "CVE-2026-74380", "author_name": "Mikko Perttunen", "author_email": "mperttunen@nvidia.com", "fix_sha": "18f74762013a4b6aa6f905c4459e0f506f9c5c7b", "subject": "gpu: host1x: Fix iommu_map_sgtable() return value check", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74380", "commit_url": "https://git.kernel.org/stable/c/18f74762013a4b6aa6f905c4459e0f506f9c5c7b" }, { "cve": "CVE-2026-74381", "author_name": "Mikko Perttunen", "author_email": "mperttunen@nvidia.com", "fix_sha": "3cbf5e3c46e66d9b3b6b91099bb720c6cb1be3bc", "subject": "gpu: host1x: Allow entries in BO caches to be freed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74381", "commit_url": "https://git.kernel.org/stable/c/3cbf5e3c46e66d9b3b6b91099bb720c6cb1be3bc" }, { "cve": "CVE-2026-74382", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "27db54b90bcc7c37867fe664107fa25ea6a116e4", "subject": "net/sched: cls_bpf: prevent unbounded recursion in offload rollback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74382", "commit_url": "https://git.kernel.org/stable/c/27db54b90bcc7c37867fe664107fa25ea6a116e4" }, { "cve": "CVE-2026-74383", "author_name": "Mateusz Nowicki", "author_email": "mateusz.nowicki@posteo.net", "fix_sha": "a192b8cfa447e1b3701a13434a31c392b2e7ed29", "subject": "nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74383", "commit_url": "https://git.kernel.org/stable/c/a192b8cfa447e1b3701a13434a31c392b2e7ed29" }, { "cve": "CVE-2026-74384", "author_name": "Nilay Shroff", "author_email": "nilay@linux.ibm.com", "fix_sha": "001e57554de81aa79c25c18fd53911d8a415c304", "subject": "nvme-multipath: fix flex array size in struct nvme_ns_head", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74384", "commit_url": "https://git.kernel.org/stable/c/001e57554de81aa79c25c18fd53911d8a415c304" }, { "cve": "CVE-2026-74385", "author_name": "Geliang Tang", "author_email": "tanggeliang@kylinos.cn", "fix_sha": "7ef789703e2b91775dcb36b2efa46325be31a2a0", "subject": "nvmet-tcp: check return value of nvmet_tcp_set_queue_sock", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74385", "commit_url": "https://git.kernel.org/stable/c/7ef789703e2b91775dcb36b2efa46325be31a2a0" }, { "cve": "CVE-2026-74386", "author_name": "Geliang Tang", "author_email": "tanggeliang@kylinos.cn", "fix_sha": "4dae393956093c807212918fd91a8fc70df15338", "subject": "nvmet-tcp: fix page fragment cache leak in error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74386", "commit_url": "https://git.kernel.org/stable/c/4dae393956093c807212918fd91a8fc70df15338" }, { "cve": "CVE-2026-74387", "author_name": "Zhang Cen", "author_email": "rollkingzzc@gmail.com", "fix_sha": "ef7607ab1c8adc6258fb1b27d08e26aecdc18a58", "subject": "ALSA: seq: midi: Serialize output teardown with event_input", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74387", "commit_url": "https://git.kernel.org/stable/c/ef7607ab1c8adc6258fb1b27d08e26aecdc18a58" }, { "cve": "CVE-2026-74388", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "7c349b4f2a603202fb8c363bd2774a22ac2fddf3", "subject": "ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74388", "commit_url": "https://git.kernel.org/stable/c/7c349b4f2a603202fb8c363bd2774a22ac2fddf3" }, { "cve": "CVE-2026-74389", "author_name": "Lianfa Weng", "author_email": "wenglianfa@huawei.com", "fix_sha": "bbd97d71e53e551890e4115ad9de46b5f2ac0858", "subject": "RDMA/hns: Fix log flood after cmd_mbox failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74389", "commit_url": "https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858" }, { "cve": "CVE-2026-74390", "author_name": "Jacob Moroni", "author_email": "jmoroni@google.com", "fix_sha": "5ebb3ed757be3e04cf803026004aa0beaeb13e9b", "subject": "RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74390", "commit_url": "https://git.kernel.org/stable/c/5ebb3ed757be3e04cf803026004aa0beaeb13e9b" }, { "cve": "CVE-2026-74391", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "f07883450eb14d1cf020b55d9f3a7ec5683bcd26", "subject": "tracing: Bound synthetic-field strings with seq_buf", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74391", "commit_url": "https://git.kernel.org/stable/c/f07883450eb14d1cf020b55d9f3a7ec5683bcd26" }, { "cve": "CVE-2026-74392", "author_name": "Fengnan Chang", "author_email": "changfengnan@bytedance.com", "fix_sha": "5aa0f9231cbacade065cedd8e9b5ebd067231171", "subject": "dm: limit target bio polling to one shot", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74392", "commit_url": "https://git.kernel.org/stable/c/5aa0f9231cbacade065cedd8e9b5ebd067231171" }, { "cve": "CVE-2026-74393", "author_name": "Liviu Dudau", "author_email": "liviu.dudau@arm.com", "fix_sha": "e5b93bd6fdb92aa5e4689715d7e8487d9ce66a38", "subject": "drm/syncobj: Fix memory leak in drm_syncobj_find_fence()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74393", "commit_url": "https://git.kernel.org/stable/c/e5b93bd6fdb92aa5e4689715d7e8487d9ce66a38" }, { "cve": "CVE-2026-74394", "author_name": "Sara Venkatesh", "author_email": "sarajvenkatesh@gmail.com", "fix_sha": "eb4ecdf631fe00e8020bf461503cb9b7017ed796", "subject": "RDMA/srpt: fix integer overflow in immediate data length check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74394", "commit_url": "https://git.kernel.org/stable/c/eb4ecdf631fe00e8020bf461503cb9b7017ed796" }, { "cve": "CVE-2026-74395", "author_name": "Prathamesh Deshpande", "author_email": "prathameshdeshpande7@gmail.com", "fix_sha": "43f8f7946814c8e5f464518246fdbc69b6e32326", "subject": "RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74395", "commit_url": "https://git.kernel.org/stable/c/43f8f7946814c8e5f464518246fdbc69b6e32326" }, { "cve": "CVE-2026-74396", "author_name": "Prathamesh Deshpande", "author_email": "prathameshdeshpande7@gmail.com", "fix_sha": "1eae35b37923cb71b0cb5136d00671440d488b9f", "subject": "RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74396", "commit_url": "https://git.kernel.org/stable/c/1eae35b37923cb71b0cb5136d00671440d488b9f" }, { "cve": "CVE-2026-74397", "author_name": "Prathamesh Deshpande", "author_email": "prathameshdeshpande7@gmail.com", "fix_sha": "e79389115b9d27287ff6230a9750675106ed7668", "subject": "IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74397", "commit_url": "https://git.kernel.org/stable/c/e79389115b9d27287ff6230a9750675106ed7668" }, { "cve": "CVE-2026-74398", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "627ac78f2741e2ebd2225e2e953b6964a8a9182f", "subject": "ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74398", "commit_url": "https://git.kernel.org/stable/c/627ac78f2741e2ebd2225e2e953b6964a8a9182f" }, { "cve": "CVE-2026-74399", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "11143a19f5b8dc8f414deab87571134f9f447313", "subject": "evm: terminate and bound the evm_xattrs read buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74399", "commit_url": "https://git.kernel.org/stable/c/11143a19f5b8dc8f414deab87571134f9f447313" }, { "cve": "CVE-2026-74400", "author_name": "Matt Bobrowski", "author_email": "mattbobrowski@google.com", "fix_sha": "07410646f6ff1d23222f105ccab778957d401bbe", "subject": "bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74400", "commit_url": "https://git.kernel.org/stable/c/07410646f6ff1d23222f105ccab778957d401bbe" }, { "cve": "CVE-2026-74401", "author_name": "Alexander Aring", "author_email": "aahringo@redhat.com", "fix_sha": "d2248cb70c070f8f04762872772e155b59016f17", "subject": "dlm: fix add msg handle in send_queue ordered", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74401", "commit_url": "https://git.kernel.org/stable/c/d2248cb70c070f8f04762872772e155b59016f17" }, { "cve": "CVE-2026-74402", "author_name": "Lothar Rubusch", "author_email": "l.rubusch@gmail.com", "fix_sha": "319400fc5ee15db5793aa45f854968141326effc", "subject": "crypto: atmel-sha204a - fix blocking and non-blocking rng logic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74402", "commit_url": "https://git.kernel.org/stable/c/319400fc5ee15db5793aa45f854968141326effc" }, { "cve": "CVE-2026-74403", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "a8d5370eef00eca132a292b1901c9914c817e385", "subject": "crypto: ccp - Check for page allocation failure correctly in TIO", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74403", "commit_url": "https://git.kernel.org/stable/c/a8d5370eef00eca132a292b1901c9914c817e385" }, { "cve": "CVE-2026-74404", "author_name": "Tycho Andersen (AMD)", "author_email": "tycho@kernel.org", "fix_sha": "1b864b6cb213bbd7b406e9b2e98c962077f300df", "subject": "crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74404", "commit_url": "https://git.kernel.org/stable/c/1b864b6cb213bbd7b406e9b2e98c962077f300df" }, { "cve": "CVE-2026-74405", "author_name": "Di Shen", "author_email": "di.shen@unisoc.com", "fix_sha": "f5e1cc9a284bff2510981643a5bca4bc4c21b81a", "subject": "OPP: Fix race between OPP addition and lookup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74405", "commit_url": "https://git.kernel.org/stable/c/f5e1cc9a284bff2510981643a5bca4bc4c21b81a" }, { "cve": "CVE-2026-74406", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "30a45c0bffdd62350261e2f2689fdba426a33578", "subject": "vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74406", "commit_url": "https://git.kernel.org/stable/c/30a45c0bffdd62350261e2f2689fdba426a33578" }, { "cve": "CVE-2026-74407", "author_name": "Wei Zhang", "author_email": "wei.zhang@oss.qualcomm.com", "fix_sha": "8c79aac429b583301f387374ff37c59be671df87", "subject": "wifi: ath11k: cancel SSR work items during PCI shutdown", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74407", "commit_url": "https://git.kernel.org/stable/c/8c79aac429b583301f387374ff37c59be671df87" }, { "cve": "CVE-2026-74408", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "7ce2f118a2389e8f0a64068c6fe7cc7d40639be0", "subject": "wifi: ath9k: fix OOB access from firmware tx status queue ID", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74408", "commit_url": "https://git.kernel.org/stable/c/7ce2f118a2389e8f0a64068c6fe7cc7d40639be0" }, { "cve": "CVE-2026-74414", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "7a41fd2b32e5908f19a68732008d581c167279dd", "subject": "hfsplus: Remove the duplicate attr inode dirty marking action", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74414", "commit_url": "https://git.kernel.org/stable/c/7a41fd2b32e5908f19a68732008d581c167279dd" }, { "cve": "CVE-2026-74415", "author_name": "Felix Gu", "author_email": "ustc.gu@gmail.com", "fix_sha": "565bdf45125a05aa8f622f58f598283f46ba43f4", "subject": "spi: atcspi200: fix use-after-free when driver unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74415", "commit_url": "https://git.kernel.org/stable/c/565bdf45125a05aa8f622f58f598283f46ba43f4" }, { "cve": "CVE-2026-74416", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "82f1d6042611d45b8b9de423bbcb4e0ced9ec62b", "subject": "drm/radeon: fix memory leak in radeon_ring_restore() on lock failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74416", "commit_url": "https://git.kernel.org/stable/c/82f1d6042611d45b8b9de423bbcb4e0ced9ec62b" }, { "cve": "CVE-2026-74417", "author_name": "Werner Kasselman", "author_email": "werner@verivus.ai", "fix_sha": "ce3b24eb3ee8f82de851535f516bf21f83e82259", "subject": "drm/radeon: fix integer overflow in radeon_align_pitch()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74417", "commit_url": "https://git.kernel.org/stable/c/ce3b24eb3ee8f82de851535f516bf21f83e82259" }, { "cve": "CVE-2026-74418", "author_name": "Tvrtko Ursulin", "author_email": "tvrtko.ursulin@igalia.com", "fix_sha": "e94b9f01543cc6a83538c2c2cc645a424d3015ca", "subject": "dma-fence: Fix potential tracepoint null pointer dereferences", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74418", "commit_url": "https://git.kernel.org/stable/c/e94b9f01543cc6a83538c2c2cc645a424d3015ca" }, { "cve": "CVE-2026-74419", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "6e87001fe19f251e2ae14373bc76554358a13df2", "subject": "accel/amdxdna: Adjust size for copy_to_user()", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74419", "commit_url": "https://git.kernel.org/stable/c/6e87001fe19f251e2ae14373bc76554358a13df2" }, { "cve": "CVE-2026-74420", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "b82a225e57a334335a21462b75ee2223bc6efe6d", "subject": "drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74420", "commit_url": "https://git.kernel.org/stable/c/b82a225e57a334335a21462b75ee2223bc6efe6d" }, { "cve": "CVE-2026-74421", "author_name": "Cristian Ciocaltea", "author_email": "cristian.ciocaltea@collabora.com", "fix_sha": "ed9da8d23020352ad24c528db09b5acdd78b81fd", "subject": "drm/rockchip: dw_dp: Switch to drmm_kzalloc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74421", "commit_url": "https://git.kernel.org/stable/c/ed9da8d23020352ad24c528db09b5acdd78b81fd" }, { "cve": "CVE-2026-74422", "author_name": "Cristian Ciocaltea", "author_email": "cristian.ciocaltea@collabora.com", "fix_sha": "3cc50e7f73fcf79f28660b9d91566b13cb62e520", "subject": "drm/rockchip: inno-hdmi: Switch to drmm_kzalloc()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74422", "commit_url": "https://git.kernel.org/stable/c/3cc50e7f73fcf79f28660b9d91566b13cb62e520" }, { "cve": "CVE-2026-74423", "author_name": "Max Zhen", "author_email": "max.zhen@amd.com", "fix_sha": "d946347edc4f0a7b846325323d77e936a4c90d0f", "subject": "accel/amdxdna: Fix leak when pinning ubuf pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74423", "commit_url": "https://git.kernel.org/stable/c/d946347edc4f0a7b846325323d77e936a4c90d0f" }, { "cve": "CVE-2026-74424", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "5fae9a928482d4845bca169a3a098789203a1ca4", "subject": "fbcon: fix NULL pointer dereference for a console without vc_data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74424", "commit_url": "https://git.kernel.org/stable/c/5fae9a928482d4845bca169a3a098789203a1ca4" }, { "cve": "CVE-2026-74425", "author_name": "Nan Li", "author_email": "tonanli66@gmail.com", "fix_sha": "f3cf725cd284b7912d5522babb44721bf38c8887", "subject": "afs: handle CB.InitCallBackState3 requests without a server record", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74425", "commit_url": "https://git.kernel.org/stable/c/f3cf725cd284b7912d5522babb44721bf38c8887" }, { "cve": "CVE-2026-74426", "author_name": "Matvey Kovalev", "author_email": "matvey.kovalev@ispras.ru", "fix_sha": "0b70716081c6462be9b2928ad736d0d527b09678", "subject": "afs: fix NULL pointer dereference in afs_get_tree()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74426", "commit_url": "https://git.kernel.org/stable/c/0b70716081c6462be9b2928ad736d0d527b09678" }, { "cve": "CVE-2026-74427", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "47694fbc9d24ab6bf210f91e8efe06a10a478064", "subject": "afs: Fix netns teardown to cancel the preallocation charger", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74427", "commit_url": "https://git.kernel.org/stable/c/47694fbc9d24ab6bf210f91e8efe06a10a478064" }, { "cve": "CVE-2026-74428", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "a2f299b4d5510147fa8629a6aba2869bbcc88aea", "subject": "rxrpc: Fix double unlock in rxrpc_recvmsg()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74428", "commit_url": "https://git.kernel.org/stable/c/a2f299b4d5510147fa8629a6aba2869bbcc88aea" }, { "cve": "CVE-2026-74429", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "a58e33405acd2584e730c1da72635f822ada6b49", "subject": "rxrpc: Fix the reception of a reply packet before data transmission", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74429", "commit_url": "https://git.kernel.org/stable/c/a58e33405acd2584e730c1da72635f822ada6b49" }, { "cve": "CVE-2026-74430", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "9b6ce594808580b2a19e6e1aa459ef56c0153ac1", "subject": "rxrpc: Fix ACKALL packet handling", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74430", "commit_url": "https://git.kernel.org/stable/c/9b6ce594808580b2a19e6e1aa459ef56c0153ac1" }, { "cve": "CVE-2026-74431", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "67a0332f442ef07713cd2d9c13d59db0f1c23648", "subject": "rxrpc: Fix potential infinite loop in rxrpc_recvmsg()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74431", "commit_url": "https://git.kernel.org/stable/c/67a0332f442ef07713cd2d9c13d59db0f1c23648" }, { "cve": "CVE-2026-74432", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c", "subject": "rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74432", "commit_url": "https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c" }, { "cve": "CVE-2026-74433", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "107a4cb0d47e735830f852d83970d5c81f8e1e08", "subject": "rxrpc: Fix UAF in rxgk_issue_challenge()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74433", "commit_url": "https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08" }, { "cve": "CVE-2026-74434", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "5801cff7d5d7b4e9d877dfb627b23eb63167f02c", "subject": "rxrpc: Don't move a peeked OOB message onto the pending queue", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74434", "commit_url": "https://git.kernel.org/stable/c/5801cff7d5d7b4e9d877dfb627b23eb63167f02c" }, { "cve": "CVE-2026-74435", "author_name": "Jeffrey Altman", "author_email": "jaltman@auristor.com", "fix_sha": "16c8ae9735c5bd7e54dd7478d6348e0fc860842d", "subject": "rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74435", "commit_url": "https://git.kernel.org/stable/c/16c8ae9735c5bd7e54dd7478d6348e0fc860842d" }, { "cve": "CVE-2026-74436", "author_name": "Li Daming", "author_email": "d4n.for.sec@gmail.com", "fix_sha": "dc175389b18c29a5303ee83169ec653adfae3e17", "subject": "rxrpc: serialize kernel accept preallocation with socket teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74436", "commit_url": "https://git.kernel.org/stable/c/dc175389b18c29a5303ee83169ec653adfae3e17" }, { "cve": "CVE-2026-74437", "author_name": "Sean Anderson", "author_email": "sean.anderson@linux.dev", "fix_sha": "6d27f92c54ce28cfbd2a8a479a96d6f4a781b7d2", "subject": "media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74437", "commit_url": "https://git.kernel.org/stable/c/6d27f92c54ce28cfbd2a8a479a96d6f4a781b7d2" }, { "cve": "CVE-2026-74438", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "b2c41fa9dd8fc740c489e060b199165771f268d1", "subject": "crypto: sun4i-ss - Remove insecure and unused rng_alg", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74438", "commit_url": "https://git.kernel.org/stable/c/b2c41fa9dd8fc740c489e060b199165771f268d1" }, { "cve": "CVE-2026-74439", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "f46452c3df7a8d8a5addc0926e76ef19ea7da0a0", "subject": "iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74439", "commit_url": "https://git.kernel.org/stable/c/f46452c3df7a8d8a5addc0926e76ef19ea7da0a0" }, { "cve": "CVE-2026-74440", "author_name": "Matthew Brost", "author_email": "matthew.brost@intel.com", "fix_sha": "af80e2bfde9312c76b60cf9274248dce0410b30d", "subject": "drm/xe: Wait on external BO kernel fences in exec IOCTL", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74440", "commit_url": "https://git.kernel.org/stable/c/af80e2bfde9312c76b60cf9274248dce0410b30d" }, { "cve": "CVE-2026-74441", "author_name": "Andrei Kuchynski", "author_email": "akuchynski@chromium.org", "fix_sha": "7aa7d4bf9d3fa9a6a47b640ad103ab433b7ff261", "subject": "usb: typec: ucsi: Fix race condition and ordering in port unregistration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74441", "commit_url": "https://git.kernel.org/stable/c/7aa7d4bf9d3fa9a6a47b640ad103ab433b7ff261" }, { "cve": "CVE-2026-74442", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "05eaa887e7b4f40fba425f8a1d7a5a8a043092a6", "subject": "drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74442", "commit_url": "https://git.kernel.org/stable/c/05eaa887e7b4f40fba425f8a1d7a5a8a043092a6" }, { "cve": "CVE-2026-74443", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "f4f1db96bfd68b81053693ba53405b6f510ac16c", "subject": "drm/vmwgfx: bound DMA command body size against suffix pointer", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74443", "commit_url": "https://git.kernel.org/stable/c/f4f1db96bfd68b81053693ba53405b6f510ac16c" }, { "cve": "CVE-2026-74444", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "85891d174707d8bddcec7a888fb4e1d17def34f3", "subject": "drm/vmwgfx: validate DRAW_PRIMITIVES header size before division", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74444", "commit_url": "https://git.kernel.org/stable/c/85891d174707d8bddcec7a888fb4e1d17def34f3" }, { "cve": "CVE-2026-74445", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "55ec09c9ce10b1272802c7ab6c1be2ea0dbc68db", "subject": "drm/vmwgfx: reject DX_BIND_QUERY without a DX context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74445", "commit_url": "https://git.kernel.org/stable/c/55ec09c9ce10b1272802c7ab6c1be2ea0dbc68db" }, { "cve": "CVE-2026-74446", "author_name": "William Palacek", "author_email": "william.palacek@amd.com", "fix_sha": "ff8bc5a68a9a70bdc38d61a72c7a49c56063f9d2", "subject": "drm/amdkfd: hold event_mutex while checkpointing CRIU events", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74446", "commit_url": "https://git.kernel.org/stable/c/ff8bc5a68a9a70bdc38d61a72c7a49c56063f9d2" }, { "cve": "CVE-2026-74447", "author_name": "William Palacek", "author_email": "william.palacek@amd.com", "fix_sha": "83463a96ea3c7d8ae636a4d6a0ba63c9ce410724", "subject": "drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74447", "commit_url": "https://git.kernel.org/stable/c/83463a96ea3c7d8ae636a4d6a0ba63c9ce410724" }, { "cve": "CVE-2026-74448", "author_name": "Vladimir Marioukhine", "author_email": "vladimir.marioukhine@amd.com", "fix_sha": "38b73293f38658a4685ffcea666462024f858ad9", "subject": "drm/amdkfd: fix QID bit leak in pqm_create_queue()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74448", "commit_url": "https://git.kernel.org/stable/c/38b73293f38658a4685ffcea666462024f858ad9" }, { "cve": "CVE-2026-74449", "author_name": "George Zhang", "author_email": "george.zhang@amd.com", "fix_sha": "f327e389c07cfc3a2f6ff54f6214e1a52d457edc", "subject": "drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74449", "commit_url": "https://git.kernel.org/stable/c/f327e389c07cfc3a2f6ff54f6214e1a52d457edc" }, { "cve": "CVE-2026-74450", "author_name": "Yang Wang", "author_email": "kevinyang.wang@amd.com", "fix_sha": "bb493058c35c8676e48269ab6732688ea733d23c", "subject": "drm/amd/pm: fix pptable use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74450", "commit_url": "https://git.kernel.org/stable/c/bb493058c35c8676e48269ab6732688ea733d23c" }, { "cve": "CVE-2026-74451", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "b921b8613790a3f9e78ab64017fa7149ef0b750c", "subject": "drm/panthor: validate firmware interface structure sizes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74451", "commit_url": "https://git.kernel.org/stable/c/b921b8613790a3f9e78ab64017fa7149ef0b750c" }, { "cve": "CVE-2026-74452", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "a3caaa06809248b996254be5b47e10804a3494e2", "subject": "drm/panthor: reject firmware sections with oversized data", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74452", "commit_url": "https://git.kernel.org/stable/c/a3caaa06809248b996254be5b47e10804a3494e2" }, { "cve": "CVE-2026-74453", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "48a570c964d8e37d353381e4195106277e17f5cb", "subject": "drm/vc4: Zero the tile state data array before each BIN job", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74453", "commit_url": "https://git.kernel.org/stable/c/48a570c964d8e37d353381e4195106277e17f5cb" }, { "cve": "CVE-2026-74454", "author_name": "Jose Maria Casanova Crespo", "author_email": "jmcasanova@igalia.com", "fix_sha": "6395789e4739aa5177bbec0fa0f07ccc38d249b0", "subject": "drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74454", "commit_url": "https://git.kernel.org/stable/c/6395789e4739aa5177bbec0fa0f07ccc38d249b0" }, { "cve": "CVE-2026-74455", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "93fcab2c6968446316bbb49548848df604d6346f", "subject": "can: peak_usb: validate uCAN receive record lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74455", "commit_url": "https://git.kernel.org/stable/c/93fcab2c6968446316bbb49548848df604d6346f" }, { "cve": "CVE-2026-74456", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "9b3d5a6d952c38bbcf07f903cbeadefdb56b9bc9", "subject": "can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74456", "commit_url": "https://git.kernel.org/stable/c/9b3d5a6d952c38bbcf07f903cbeadefdb56b9bc9" }, { "cve": "CVE-2026-74457", "author_name": "James Gao", "author_email": "jamesgao5@outlook.com", "fix_sha": "39132f166ca8ce00ae60d8a9068e06a60943cc4b", "subject": "can: peak_usb: add bounds check for USB channel index", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74457", "commit_url": "https://git.kernel.org/stable/c/39132f166ca8ce00ae60d8a9068e06a60943cc4b" }, { "cve": "CVE-2026-74458", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee", "subject": "can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74458", "commit_url": "https://git.kernel.org/stable/c/0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee" }, { "cve": "CVE-2026-74459", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "7a0cf2b2497c757c3cb1286eddf2986abb0d387b", "subject": "can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74459", "commit_url": "https://git.kernel.org/stable/c/7a0cf2b2497c757c3cb1286eddf2986abb0d387b" }, { "cve": "CVE-2026-74460", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "02925f51377f2a42a6724f00549167499c9302e5", "subject": "can: ems_usb: validate CPC message lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74460", "commit_url": "https://git.kernel.org/stable/c/02925f51377f2a42a6724f00549167499c9302e5" }, { "cve": "CVE-2026-74461", "author_name": "Liem", "author_email": "liem16213@gmail.com", "fix_sha": "6ac7702b6cc2b94aaed9ef2d95bfbefcdc90061f", "subject": "i2c: imx: Cancel hrtimer before clearing slave pointer", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74461", "commit_url": "https://git.kernel.org/stable/c/6ac7702b6cc2b94aaed9ef2d95bfbefcdc90061f" }, { "cve": "CVE-2026-74462", "author_name": "Carlos Song", "author_email": "carlos.song@nxp.com", "fix_sha": "00d86dd5c2034e0e139e4806137b3b43e07ddd83", "subject": "i2c: imx: mark I2C adapter when hardware is powered down", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74462", "commit_url": "https://git.kernel.org/stable/c/00d86dd5c2034e0e139e4806137b3b43e07ddd83" }, { "cve": "CVE-2026-74463", "author_name": "H. Nikolaus Schaller", "author_email": "hns@goldelico.com", "fix_sha": "d99607c888f26e8a4e9fe9772860cef4aff86bb4", "subject": "i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74463", "commit_url": "https://git.kernel.org/stable/c/d99607c888f26e8a4e9fe9772860cef4aff86bb4" }, { "cve": "CVE-2026-74464", "author_name": "Ilya Maximets", "author_email": "i.maximets@ovn.org", "fix_sha": "bc62e843bc48f933da765ce47079fd992e535794", "subject": "net: openvswitch: fix skb leak on flow key update failure during ct", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74464", "commit_url": "https://git.kernel.org/stable/c/bc62e843bc48f933da765ce47079fd992e535794" }, { "cve": "CVE-2026-74465", "author_name": "Ilya Maximets", "author_email": "i.maximets@ovn.org", "fix_sha": "a58a2b0ce354df531ebc71fc870058c2feb59f6b", "subject": "net: openvswitch: fix potential UAF on meter attach failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74465", "commit_url": "https://git.kernel.org/stable/c/a58a2b0ce354df531ebc71fc870058c2feb59f6b" }, { "cve": "CVE-2026-74466", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "e935cd525af4c6ed2e2c6404aa27ca19c7f39ddb", "subject": "s390/zcrypt: Close speculative mem read possibility", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74466", "commit_url": "https://git.kernel.org/stable/c/e935cd525af4c6ed2e2c6404aa27ca19c7f39ddb" }, { "cve": "CVE-2026-74467", "author_name": "Aswin Karuvally", "author_email": "aswin@linux.ibm.com", "fix_sha": "d211028bac1bd0fff0026bfa2a8328e5b78cd0e6", "subject": "s390/qeth: Check CAP_NET_ADMIN for private ioctls", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74467", "commit_url": "https://git.kernel.org/stable/c/d211028bac1bd0fff0026bfa2a8328e5b78cd0e6" }, { "cve": "CVE-2026-74468", "author_name": "Junjie Cao", "author_email": "junjie.cao@intel.com", "fix_sha": "a02b8950d619123da64f69b70fe1dadef217dfe4", "subject": "gpio: pch: use raw_spinlock_t for the register lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74468", "commit_url": "https://git.kernel.org/stable/c/a02b8950d619123da64f69b70fe1dadef217dfe4" }, { "cve": "CVE-2026-74469", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "bd0e9289e2642f6a5c54faad304ce0f41e926d22", "subject": "sctp: prevent peer transport count overflow", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74469", "commit_url": "https://git.kernel.org/stable/c/bd0e9289e2642f6a5c54faad304ce0f41e926d22" }, { "cve": "CVE-2026-74470", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "93dde0bf2f39a0f9f57fd610aa3201ce5b753433", "subject": "scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74470", "commit_url": "https://git.kernel.org/stable/c/93dde0bf2f39a0f9f57fd610aa3201ce5b753433" }, { "cve": "CVE-2026-74471", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "ac8719969e6c3c54e939834df812bc41f25453cf", "subject": "tracing: Check return value of __register_event() in trace_module_add_events()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74471", "commit_url": "https://git.kernel.org/stable/c/ac8719969e6c3c54e939834df812bc41f25453cf" }, { "cve": "CVE-2026-74472", "author_name": "Ming Lei", "author_email": "tom.leiming@gmail.com", "fix_sha": "e65848e4ce352bac9e3465099354c8b8f845391f", "subject": "ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74472", "commit_url": "https://git.kernel.org/stable/c/e65848e4ce352bac9e3465099354c8b8f845391f" }, { "cve": "CVE-2026-74473", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "26bb2dd0a8839617e2c79ffbbe1923f8e4bab9fb", "subject": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74473", "commit_url": "https://git.kernel.org/stable/c/26bb2dd0a8839617e2c79ffbbe1923f8e4bab9fb" }, { "cve": "CVE-2026-74474", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "b9553558b48db54ac9273e6b98d7263ef5c1a329", "subject": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74474", "commit_url": "https://git.kernel.org/stable/c/b9553558b48db54ac9273e6b98d7263ef5c1a329" }, { "cve": "CVE-2026-74475", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d", "subject": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74475", "commit_url": "https://git.kernel.org/stable/c/8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d" }, { "cve": "CVE-2026-74476", "author_name": "Matt Fleming", "author_email": "mfleming@cloudflare.com", "fix_sha": "d0d6415963040c401e7a7e4e482a698ba52448cb", "subject": "veth: convert frag_list skbs before running XDP", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74476", "commit_url": "https://git.kernel.org/stable/c/d0d6415963040c401e7a7e4e482a698ba52448cb" }, { "cve": "CVE-2026-74477", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "cc679d7a6303e84d769f2afcde1fc51c51f127cd", "subject": "uprobes: Fix NULL pointer dereference in hprobe_expire()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74477", "commit_url": "https://git.kernel.org/stable/c/cc679d7a6303e84d769f2afcde1fc51c51f127cd" }, { "cve": "CVE-2026-74478", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "af421e9aed3920c7ac88c24daa48606c7112feca", "subject": "um: vector: fix use-after-free in vector_mmsg_rx()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74478", "commit_url": "https://git.kernel.org/stable/c/af421e9aed3920c7ac88c24daa48606c7112feca" }, { "cve": "CVE-2026-74479", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "817ff6efdb7f484ea547218e11e17d8e43daa3b4", "subject": "net: pktgen: fix proc entry use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74479", "commit_url": "https://git.kernel.org/stable/c/817ff6efdb7f484ea547218e11e17d8e43daa3b4" }, { "cve": "CVE-2026-74480", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "a39789f211b8a4125f0c70e05b30cf715f4f187d", "subject": "net: bridge: stop fast-leave after deleting a port group", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74480", "commit_url": "https://git.kernel.org/stable/c/a39789f211b8a4125f0c70e05b30cf715f4f187d" }, { "cve": "CVE-2026-74481", "author_name": "Link Lin", "author_email": "linkl@google.com", "fix_sha": "0b45f6927a14914ff685fe0e6f9d11232a1e03df", "subject": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74481", "commit_url": "https://git.kernel.org/stable/c/0b45f6927a14914ff685fe0e6f9d11232a1e03df" }, { "cve": "CVE-2026-74482", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "e923bd21058ea02fd0dcd3549d151d143fd036e5", "subject": "mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74482", "commit_url": "https://git.kernel.org/stable/c/e923bd21058ea02fd0dcd3549d151d143fd036e5" }, { "cve": "CVE-2026-74483", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "b8206f516fe7cbe785cf44bf09c17c438d7c3cad", "subject": "binfmt_misc: don't leak the user namespace when the mount fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74483", "commit_url": "https://git.kernel.org/stable/c/b8206f516fe7cbe785cf44bf09c17c438d7c3cad" }, { "cve": "CVE-2026-74484", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "79055d82772b9584f259b747fe40ff56a076678d", "subject": "binfmt_misc: don't let an 'F' entry pin its own instance", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74484", "commit_url": "https://git.kernel.org/stable/c/79055d82772b9584f259b747fe40ff56a076678d" }, { "cve": "CVE-2026-74485", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "8e85d50ba1117fd446bf9a250bd8a97d48384bdc", "subject": "binfmt_misc: reject a flag character as the field delimiter", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74485", "commit_url": "https://git.kernel.org/stable/c/8e85d50ba1117fd446bf9a250bd8a97d48384bdc" }, { "cve": "CVE-2026-74486", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "fa5990ca8fd917003e526036bcc50413edb9722c", "subject": "binfmt_misc: use exe_file_deny_write_access() for the interpreter clone", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74486", "commit_url": "https://git.kernel.org/stable/c/fa5990ca8fd917003e526036bcc50413edb9722c" }, { "cve": "CVE-2026-74487", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "db1856ea9196cf6e015d12199a34c0b9313c7bfa", "subject": "binfmt_misc: restore write access when removing an entry", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74487", "commit_url": "https://git.kernel.org/stable/c/db1856ea9196cf6e015d12199a34c0b9313c7bfa" }, { "cve": "CVE-2026-74488", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "99a948382af8a225e2d5e54a7052158cd6281cc6", "subject": "wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74488", "commit_url": "https://git.kernel.org/stable/c/99a948382af8a225e2d5e54a7052158cd6281cc6" }, { "cve": "CVE-2026-74489", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "2f067f5a450ea07efd249142a11d940a068fe29c", "subject": "wifi: mac80211: fix tid_tx use-after-free on BA session stop", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74489", "commit_url": "https://git.kernel.org/stable/c/2f067f5a450ea07efd249142a11d940a068fe29c" }, { "cve": "CVE-2026-74490", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "b4f1719dfea023220e0e6bd892b087d76b2a6a49", "subject": "tipc: avoid use-after-free in poll trace queue dumps", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74490", "commit_url": "https://git.kernel.org/stable/c/b4f1719dfea023220e0e6bd892b087d76b2a6a49" }, { "cve": "CVE-2026-74491", "author_name": "Carlo Caione", "author_email": "ccaione@baylibre.com", "fix_sha": "bba13ad17b1a11b3f1ed9b3a5d556191d7755a59", "subject": "of/address: Fix NULL bus dereference in of_pci_range_parser_one()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74491", "commit_url": "https://git.kernel.org/stable/c/bba13ad17b1a11b3f1ed9b3a5d556191d7755a59" }, { "cve": "CVE-2026-74492", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "f30415929be8aeb002d557c8d3f7ab2d2188003a", "subject": "netfilter: ipset: do not update comments from kernel-side hash adds", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74492", "commit_url": "https://git.kernel.org/stable/c/f30415929be8aeb002d557c8d3f7ab2d2188003a" }, { "cve": "CVE-2026-74493", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "f621d6ebeebb6374342571e4ddf45fdbc420f6cd", "subject": "net/smc: fix socket use-after-free during link group termination", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74493", "commit_url": "https://git.kernel.org/stable/c/f621d6ebeebb6374342571e4ddf45fdbc420f6cd" }, { "cve": "CVE-2026-74494", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "cb469993b3a61a72653770856d37af616d72d05f", "subject": "ksmbd: reject repeated SMB2 NEGOTIATE requests", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74494", "commit_url": "https://git.kernel.org/stable/c/cb469993b3a61a72653770856d37af616d72d05f" }, { "cve": "CVE-2026-74495", "author_name": "Matt Vollrath", "author_email": "tactii@gmail.com", "fix_sha": "0565052b7e2f436b7f1541f4849da96dc0aa7a0e", "subject": "igbvf: Fix leak in TX DMA error cleanup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74495", "commit_url": "https://git.kernel.org/stable/c/0565052b7e2f436b7f1541f4849da96dc0aa7a0e" }, { "cve": "CVE-2026-74496", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "b14361aca6350ff7907b0e9903c7b94dc7d5d4a0", "subject": "fou: Fix use-after-free in fou_create()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74496", "commit_url": "https://git.kernel.org/stable/c/b14361aca6350ff7907b0e9903c7b94dc7d5d4a0" }, { "cve": "CVE-2026-74497", "author_name": "Sonali Pradhan", "author_email": "sonalipradhan@google.com", "fix_sha": "8d7a30c50c2e58a6839634ed0acde14466d1dc61", "subject": "ALSA: usb-audio: Clamp frame size in implicit-feedback mode", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74497", "commit_url": "https://git.kernel.org/stable/c/8d7a30c50c2e58a6839634ed0acde14466d1dc61" }, { "cve": "CVE-2026-74498", "author_name": "Sonali Pradhan", "author_email": "sonalipradhan@google.com", "fix_sha": "d0199ae1666ff9ae2d1d568d64c3430d4c47f0e5", "subject": "ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74498", "commit_url": "https://git.kernel.org/stable/c/d0199ae1666ff9ae2d1d568d64c3430d4c47f0e5" }, { "cve": "CVE-2026-74499", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "0970274613fb463d376211450cab066d34ebfe6a", "subject": "ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74499", "commit_url": "https://git.kernel.org/stable/c/0970274613fb463d376211450cab066d34ebfe6a" }, { "cve": "CVE-2026-74500", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "441aaad150c57edaf57ee482a79a3bf4c5b7e353", "subject": "ALSA: usb-audio: fix stack info leak in RME Digiface status", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74500", "commit_url": "https://git.kernel.org/stable/c/441aaad150c57edaf57ee482a79a3bf4c5b7e353" }, { "cve": "CVE-2026-74501", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "4a05b2d1b4642df74f30b6f54843e825c4a2bfd3", "subject": "ALSA: usb-audio: fix use-after-free in ump_to_endpoint()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74501", "commit_url": "https://git.kernel.org/stable/c/4a05b2d1b4642df74f30b6f54843e825c4a2bfd3" }, { "cve": "CVE-2026-74502", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "70c977815af0d997feb2d0c5d284d55689bf7051", "subject": "ALSA: ump: fix double free of out_cvts on rawmidi error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74502", "commit_url": "https://git.kernel.org/stable/c/70c977815af0d997feb2d0c5d284d55689bf7051" }, { "cve": "CVE-2026-74503", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "c2744d5f3aea474513fd2298daecb94a952ce441", "subject": "ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74503", "commit_url": "https://git.kernel.org/stable/c/c2744d5f3aea474513fd2298daecb94a952ce441" }, { "cve": "CVE-2026-74504", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "21e19688433452dfbbbe6b2bb670dea6eb92f0f6", "subject": "ALSA: seq: Fix division by zero in initialize_timer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74504", "commit_url": "https://git.kernel.org/stable/c/21e19688433452dfbbbe6b2bb670dea6eb92f0f6" }, { "cve": "CVE-2026-74505", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "a54bf16965f896415c3337bc4fbb40fb11941d99", "subject": "ALSA: 6fire: Fix UAF at error handling during probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74505", "commit_url": "https://git.kernel.org/stable/c/a54bf16965f896415c3337bc4fbb40fb11941d99" }, { "cve": "CVE-2026-74506", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "4af1ec68d54b3871155914d584fb10669c41a861", "subject": "afs: Fix UAF when sending a message", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74506", "commit_url": "https://git.kernel.org/stable/c/4af1ec68d54b3871155914d584fb10669c41a861" }, { "cve": "CVE-2026-74507", "author_name": "Sangho Lee", "author_email": "kudo3228@gmail.com", "fix_sha": "34f53d27b81a16a02828c8fdfa4e02badc326f17", "subject": "Bluetooth: HIDP: validate numbered report payloads", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74507", "commit_url": "https://git.kernel.org/stable/c/34f53d27b81a16a02828c8fdfa4e02badc326f17" }, { "cve": "CVE-2026-74508", "author_name": "Sangho Lee", "author_email": "kudo3228@gmail.com", "fix_sha": "47778d2c2087b5d192398f6fddf692d16a5431cf", "subject": "Bluetooth: HIDP: reject frames without a transaction header", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74508", "commit_url": "https://git.kernel.org/stable/c/47778d2c2087b5d192398f6fddf692d16a5431cf" }, { "cve": "CVE-2026-74509", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "cdc36db204ffd97b947d64374cf23a210dc74777", "subject": "Bluetooth: hci_sync: Fix advertising data UAFs", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74509", "commit_url": "https://git.kernel.org/stable/c/cdc36db204ffd97b947d64374cf23a210dc74777" }, { "cve": "CVE-2026-74510", "author_name": "Zihan Xi", "author_email": "xizh2024@lzu.edu.cn", "fix_sha": "d0a7b48ad0921bd88effaee10bf970ab1d5d0ddd", "subject": "Bluetooth: mgmt: fix UAF in pair command cancellation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74510", "commit_url": "https://git.kernel.org/stable/c/d0a7b48ad0921bd88effaee10bf970ab1d5d0ddd" }, { "cve": "CVE-2026-74512", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "246df90b5f1a8a6e6abbd2f058b029558720adec", "subject": "audit: fix potential use-after-free in audit_del_rule()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74512", "commit_url": "https://git.kernel.org/stable/c/246df90b5f1a8a6e6abbd2f058b029558720adec" }, { "cve": "CVE-2026-74513", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "a10ea943356b9d70c5616a0a06f6fa97cfdaccb1", "subject": "dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74513", "commit_url": "https://git.kernel.org/stable/c/a10ea943356b9d70c5616a0a06f6fa97cfdaccb1" }, { "cve": "CVE-2026-74514", "author_name": "Farhan Ali", "author_email": "alifm@linux.ibm.com", "fix_sha": "36f6999ecde3976731a8bfc0b8e667da6f593069", "subject": "KVM: s390: pci: Fix memory accounting for pinned/unpinned pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74514", "commit_url": "https://git.kernel.org/stable/c/36f6999ecde3976731a8bfc0b8e667da6f593069" }, { "cve": "CVE-2026-74515", "author_name": "Farhan Ali", "author_email": "alifm@linux.ibm.com", "fix_sha": "8fa01be5a6149404adb82c0979a78f6347edd3ef", "subject": "KVM: s390: pci: Reject adapter interrupt forwarding if already enabled", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74515", "commit_url": "https://git.kernel.org/stable/c/8fa01be5a6149404adb82c0979a78f6347edd3ef" }, { "cve": "CVE-2026-74516", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "7d3aae206663c4e006b25a1c7a20a4029e67da76", "subject": "KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74516", "commit_url": "https://git.kernel.org/stable/c/7d3aae206663c4e006b25a1c7a20a4029e67da76" }, { "cve": "CVE-2026-74517", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "9910e835580fef3bef53b70241dd00c4bffad693", "subject": "KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74517", "commit_url": "https://git.kernel.org/stable/c/9910e835580fef3bef53b70241dd00c4bffad693" }, { "cve": "CVE-2026-74518", "author_name": "Xiangfeng Cai", "author_email": "caixiangfeng@bytedance.com", "fix_sha": "dd9623f58ec702a07b2d67179d6fcea79c52231a", "subject": "mm/hugetlb: fix list corruption in allocate_file_region_entries()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74518", "commit_url": "https://git.kernel.org/stable/c/dd9623f58ec702a07b2d67179d6fcea79c52231a" }, { "cve": "CVE-2026-74519", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "015b5bcbcb622b32317642be91a7f79aa5413649", "subject": "pinctrl: devicetree: don't free uninitialized dev_name on error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74519", "commit_url": "https://git.kernel.org/stable/c/015b5bcbcb622b32317642be91a7f79aa5413649" }, { "cve": "CVE-2026-74520", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "738e6f32e61d80b554e37015ecb7bc620b88001c", "subject": "iommu/iommufd: Fix IOPF group ownership UAF", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74520", "commit_url": "https://git.kernel.org/stable/c/738e6f32e61d80b554e37015ecb7bc620b88001c" }, { "cve": "CVE-2026-74521", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "e8bb506e6ef749ac0336f3e579d8d02396b7d832", "subject": "ksmbd: use memcmp() to compare ClientGUIDs", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74521", "commit_url": "https://git.kernel.org/stable/c/e8bb506e6ef749ac0336f3e579d8d02396b7d832" }, { "cve": "CVE-2026-74522", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "e7188199eff46a636f3436356f0aae039be6dd66", "subject": "ksmbd: fix use-after-free in __close_file_table_ids()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74522", "commit_url": "https://git.kernel.org/stable/c/e7188199eff46a636f3436356f0aae039be6dd66" }, { "cve": "CVE-2026-74523", "author_name": "Denis V. Lunev", "author_email": "den@openvz.org", "fix_sha": "451c9075d6c53f2438d110addbeeeea6fac18567", "subject": "qede: sync udp_tunnel ports outside qede_lock in the recovery path", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74523", "commit_url": "https://git.kernel.org/stable/c/451c9075d6c53f2438d110addbeeeea6fac18567" }, { "cve": "CVE-2026-74524", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "a0188cc133696627857d16054e43f9ebc7efc821", "subject": "riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74524", "commit_url": "https://git.kernel.org/stable/c/a0188cc133696627857d16054e43f9ebc7efc821" }, { "cve": "CVE-2026-74525", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "c870f7e2890b9f78ac84515a9809cc5c183c975e", "subject": "net: sxgbe: free TX rings on RX allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74525", "commit_url": "https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e" }, { "cve": "CVE-2026-74526", "author_name": "Chandrakanth Patil", "author_email": "chandrakanth.patil@broadcom.com", "fix_sha": "ccff8c92571500fcfed21281e33daaf645bf692f", "subject": "scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74526", "commit_url": "https://git.kernel.org/stable/c/ccff8c92571500fcfed21281e33daaf645bf692f" }, { "cve": "CVE-2026-74527", "author_name": "Hariprasad Kelam", "author_email": "hkelam@marvell.com", "fix_sha": "3bd438a58e910db5dc369aa25dfed1fc95f1b596", "subject": "octeontx2-af: Block VFs from clobbering special CGX PKIND state", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74527", "commit_url": "https://git.kernel.org/stable/c/3bd438a58e910db5dc369aa25dfed1fc95f1b596" }, { "cve": "CVE-2026-74528", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "abf9753edf3f88282c44a605f3945d8d4f8dd86c", "subject": "Bluetooth: hci_sync: hold conn in hci_past_sync() callback", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74528", "commit_url": "https://git.kernel.org/stable/c/abf9753edf3f88282c44a605f3945d8d4f8dd86c" }, { "cve": "CVE-2026-74529", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "44fc74069d8988f2825246f9401218e29de2c0ab", "subject": "Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74529", "commit_url": "https://git.kernel.org/stable/c/44fc74069d8988f2825246f9401218e29de2c0ab" }, { "cve": "CVE-2026-74530", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "56e78b670356caab0b607e8aad4cf819a1909d07", "subject": "Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74530", "commit_url": "https://git.kernel.org/stable/c/56e78b670356caab0b607e8aad4cf819a1909d07" }, { "cve": "CVE-2026-74531", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "5761d003daa987ac81463f570713ce9c9dd204e5", "subject": "Bluetooth: hci_conn: hold conn reference in abort_conn_sync()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74531", "commit_url": "https://git.kernel.org/stable/c/5761d003daa987ac81463f570713ce9c9dd204e5" }, { "cve": "CVE-2026-74532", "author_name": "Zijun Hu", "author_email": "zijun.hu@oss.qualcomm.com", "fix_sha": "b640ff9af3c809ff5ea2077fbba17df1594ec1e4", "subject": "Bluetooth: btintel: Validate length before parsing diagnostics TLV", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74532", "commit_url": "https://git.kernel.org/stable/c/b640ff9af3c809ff5ea2077fbba17df1594ec1e4" }, { "cve": "CVE-2026-74533", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "af24e338bf5dafb80f42baa9a0b9e9b57b1c5d9c", "subject": "Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74533", "commit_url": "https://git.kernel.org/stable/c/af24e338bf5dafb80f42baa9a0b9e9b57b1c5d9c" }, { "cve": "CVE-2026-74534", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "fdfde532ab1caa165fcd8985001157ac8b4db365", "subject": "Bluetooth: ISO: fix refcounting of iso_conn", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74534", "commit_url": "https://git.kernel.org/stable/c/fdfde532ab1caa165fcd8985001157ac8b4db365" }, { "cve": "CVE-2026-74535", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "200fa1629c57a3ca2b03d3ca63fd3a9bfd910c43", "subject": "Bluetooth: ISO: avoid deadlocks in iso_sock_timeout", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74535", "commit_url": "https://git.kernel.org/stable/c/200fa1629c57a3ca2b03d3ca63fd3a9bfd910c43" }, { "cve": "CVE-2026-74536", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "ce57442a379212fe3fda59c9437ee8217eceb5b1", "subject": "Bluetooth: ISO: fix leaking sk after socket release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74536", "commit_url": "https://git.kernel.org/stable/c/ce57442a379212fe3fda59c9437ee8217eceb5b1" }, { "cve": "CVE-2026-74537", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "0d255e63fcf3f13a570d7ac11678fa1164ac015c", "subject": "Bluetooth: ISO: hold sk properly in iso_conn_ready", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74537", "commit_url": "https://git.kernel.org/stable/c/0d255e63fcf3f13a570d7ac11678fa1164ac015c" }, { "cve": "CVE-2026-74538", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "4311fd6f429065a8ba208660360a895627a00cf3", "subject": "Bluetooth: ISO: lock sk in iso_connect_ind", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74538", "commit_url": "https://git.kernel.org/stable/c/4311fd6f429065a8ba208660360a895627a00cf3" }, { "cve": "CVE-2026-74539", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "89cf154d7c18e6e94a3da83051f3cf2bac317ae2", "subject": "Bluetooth: ISO: lock sk in iso_sock_getname", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74539", "commit_url": "https://git.kernel.org/stable/c/89cf154d7c18e6e94a3da83051f3cf2bac317ae2" }, { "cve": "CVE-2026-74540", "author_name": "Jiale Yao", "author_email": "yaojiale02@163.com", "fix_sha": "c4740e7f23ff9a8210198d8b4703259e21b9f69d", "subject": "Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74540", "commit_url": "https://git.kernel.org/stable/c/c4740e7f23ff9a8210198d8b4703259e21b9f69d" }, { "cve": "CVE-2026-74541", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "d57e506f6a1e3929611340fae87c1e4823f4d85c", "subject": "Bluetooth: ISO: clear iso_data always when detaching conn from hcon", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74541", "commit_url": "https://git.kernel.org/stable/c/d57e506f6a1e3929611340fae87c1e4823f4d85c" }, { "cve": "CVE-2026-74542", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "1d78d56c43ef3768183e8370e7367b162700e049", "subject": "netfs: Fix folio_queue ENOMEM in writeback by adding a mempool", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74542", "commit_url": "https://git.kernel.org/stable/c/1d78d56c43ef3768183e8370e7367b162700e049" }, { "cve": "CVE-2026-74543", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "080695e6f005e2396f1207fd69d24c442cb230c6", "subject": "net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74543", "commit_url": "https://git.kernel.org/stable/c/080695e6f005e2396f1207fd69d24c442cb230c6" }, { "cve": "CVE-2026-74544", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "aef96eead2860cbfa371e4471d4f04412213b958", "subject": "net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74544", "commit_url": "https://git.kernel.org/stable/c/aef96eead2860cbfa371e4471d4f04412213b958" }, { "cve": "CVE-2026-74545", "author_name": "Yun Lu", "author_email": "luyun@kylinos.cn", "fix_sha": "6fb7b769d6ed6d1d2e02af4a80e57a2477f35086", "subject": "rtase: fix double free of multi-frag skb on DMA map failure", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74545", "commit_url": "https://git.kernel.org/stable/c/6fb7b769d6ed6d1d2e02af4a80e57a2477f35086" }, { "cve": "CVE-2026-74546", "author_name": "Luiz Angelo Daros de Luca", "author_email": "luizluca@gmail.com", "fix_sha": "1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3", "subject": "hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74546", "commit_url": "https://git.kernel.org/stable/c/1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3" }, { "cve": "CVE-2026-74547", "author_name": "Luiz Angelo Daros de Luca", "author_email": "luizluca@gmail.com", "fix_sha": "cb0b7f9c43b0abbd422a7e4c2c85e91db429207c", "subject": "hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74547", "commit_url": "https://git.kernel.org/stable/c/cb0b7f9c43b0abbd422a7e4c2c85e91db429207c" }, { "cve": "CVE-2026-74548", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "22666ba1420164753d7b0f5a841986b25ace5435", "subject": "forcedeth: fix UAF of txrx_stats in nv_remove", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74548", "commit_url": "https://git.kernel.org/stable/c/22666ba1420164753d7b0f5a841986b25ace5435" }, { "cve": "CVE-2026-74549", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "d0b704e569ac3b8416d8e02270cdc9bf830ed395", "subject": "hwmon: (nct6775-core) Prevent access to unsupported weight registers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74549", "commit_url": "https://git.kernel.org/stable/c/d0b704e569ac3b8416d8e02270cdc9bf830ed395" }, { "cve": "CVE-2026-74550", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "dbc3791e3b2472e1ccc08947e0f83b443470ff4f", "subject": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74550", "commit_url": "https://git.kernel.org/stable/c/dbc3791e3b2472e1ccc08947e0f83b443470ff4f" }, { "cve": "CVE-2026-74551", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "080bbf42faf77e6489ab30d5114c5f8f6ccbb1b8", "subject": "hwmon: (nzxt-smart2) DMA-align output buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74551", "commit_url": "https://git.kernel.org/stable/c/080bbf42faf77e6489ab30d5114c5f8f6ccbb1b8" }, { "cve": "CVE-2026-74552", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "aa9429edf9fc0e90d6f4da19ea4b5495a54ab117", "subject": "hwmon: (lm90) Only report alarms if driver is ready", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74552", "commit_url": "https://git.kernel.org/stable/c/aa9429edf9fc0e90d6f4da19ea4b5495a54ab117" }, { "cve": "CVE-2026-74553", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "b0e8adb2ccb43009796897ced09f91636685c9d3", "subject": "hwmon: (nct6775-core) Fix number of temperature registers for NCT6116", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74553", "commit_url": "https://git.kernel.org/stable/c/b0e8adb2ccb43009796897ced09f91636685c9d3" }, { "cve": "CVE-2026-74554", "author_name": "Baochen Qiang", "author_email": "baochen.qiang@oss.qualcomm.com", "fix_sha": "47abd2ca281531deee38a3b3770d885e270e9fc9", "subject": "wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74554", "commit_url": "https://git.kernel.org/stable/c/47abd2ca281531deee38a3b3770d885e270e9fc9" }, { "cve": "CVE-2026-74555", "author_name": "Xingui Yang", "author_email": "yangxingui@huawei.com", "fix_sha": "3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845", "subject": "scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74555", "commit_url": "https://git.kernel.org/stable/c/3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845" }, { "cve": "CVE-2026-74556", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "c1dea15f819cded9b3faf58f8bec72323568b6e6", "subject": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74556", "commit_url": "https://git.kernel.org/stable/c/c1dea15f819cded9b3faf58f8bec72323568b6e6" }, { "cve": "CVE-2026-74557", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "98b87885de4b7f605533a2860685f5689fce8e82", "subject": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74557", "commit_url": "https://git.kernel.org/stable/c/98b87885de4b7f605533a2860685f5689fce8e82" }, { "cve": "CVE-2026-74558", "author_name": "Maciej Fijalkowski", "author_email": "maciej.fijalkowski@intel.com", "fix_sha": "72f2b4516faf55d4dfac2414649d3cffa5fd2c5e", "subject": "xsk: reclaim invalid Tx descriptors in ZC batch path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74558", "commit_url": "https://git.kernel.org/stable/c/72f2b4516faf55d4dfac2414649d3cffa5fd2c5e" }, { "cve": "CVE-2026-74559", "author_name": "Jason Xing", "author_email": "kernelxing@tencent.com", "fix_sha": "bd44a6dcd4248883de90f5dad53ae80066e27096", "subject": "xsk: drain continuation descs after overflow in xsk_build_skb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74559", "commit_url": "https://git.kernel.org/stable/c/bd44a6dcd4248883de90f5dad53ae80066e27096" }, { "cve": "CVE-2026-74560", "author_name": "Jason Xing", "author_email": "kernelxing@tencent.com", "fix_sha": "a3c8382ebce4780c6b3ace2c09bc342313ac0186", "subject": "xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74560", "commit_url": "https://git.kernel.org/stable/c/a3c8382ebce4780c6b3ace2c09bc342313ac0186" }, { "cve": "CVE-2026-74561", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "4787a6d2629b4e8c0b6bacab1f75c1660eca44d9", "subject": "nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74561", "commit_url": "https://git.kernel.org/stable/c/4787a6d2629b4e8c0b6bacab1f75c1660eca44d9" }, { "cve": "CVE-2026-74562", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "072cd1f21819dedd2252e704d255de3b0cfc61a7", "subject": "nexthop: take nh->lock for f6i_list walks in replace check and notify", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74562", "commit_url": "https://git.kernel.org/stable/c/072cd1f21819dedd2252e704d255de3b0cfc61a7" }, { "cve": "CVE-2026-74563", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "78f75d632f74b8de0f081a128588f7c37d0d1164", "subject": "rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74563", "commit_url": "https://git.kernel.org/stable/c/78f75d632f74b8de0f081a128588f7c37d0d1164" }, { "cve": "CVE-2026-74564", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "305b63e1402267459fdabb183af4527f6799eebf", "subject": "netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74564", "commit_url": "https://git.kernel.org/stable/c/305b63e1402267459fdabb183af4527f6799eebf" }, { "cve": "CVE-2026-74565", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "f4f699790590bd0896c48a71e9232a65198f92f0", "subject": "netfilter: nf_tables: make nft_object rhltable per table", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74565", "commit_url": "https://git.kernel.org/stable/c/f4f699790590bd0896c48a71e9232a65198f92f0" }, { "cve": "CVE-2026-74566", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "58565eef0f8d861aae92abfb7658458d661cee17", "subject": "keys: make keyring key-chunk byte order agree with keyring_diff_objects()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74566", "commit_url": "https://git.kernel.org/stable/c/58565eef0f8d861aae92abfb7658458d661cee17" }, { "cve": "CVE-2026-74567", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "63918731f9ae25b5deb022f118e941e6dddfcef4", "subject": "keys: fix out-of-bounds read in keyring_get_key_chunk()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74567", "commit_url": "https://git.kernel.org/stable/c/63918731f9ae25b5deb022f118e941e6dddfcef4" }, { "cve": "CVE-2026-74568", "author_name": "Carlos L\u00f3pez", "author_email": "clopez@suse.de", "fix_sha": "cbfe2b24a1ea9de35032dbdd100fdc700f5be92d", "subject": "KVM: arm64: vgic: Fix race between LPI release and re-registration", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74568", "commit_url": "https://git.kernel.org/stable/c/cbfe2b24a1ea9de35032dbdd100fdc700f5be92d" }, { "cve": "CVE-2026-74569", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "db3d0e0e5d4bc5ab4fe445b9f413d1b486508ca5", "subject": "netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74569", "commit_url": "https://git.kernel.org/stable/c/db3d0e0e5d4bc5ab4fe445b9f413d1b486508ca5" }, { "cve": "CVE-2026-74570", "author_name": "Namjae Jeon", "author_email": "linkinjeon@kernel.org", "fix_sha": "8bed376124ab4505b70083a2b91f2c7ef6d51e24", "subject": "ntfs: harden runlist realloc size calculations", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74570", "commit_url": "https://git.kernel.org/stable/c/8bed376124ab4505b70083a2b91f2c7ef6d51e24" }, { "cve": "CVE-2026-74571", "author_name": "Dongjiang Zhu", "author_email": "zhudongjiang@fnnas.com", "fix_sha": "51a0e8399858621442807a26057bcd1cd3ced046", "subject": "btrfs: skip global block reserve accounting for rescue mounts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74571", "commit_url": "https://git.kernel.org/stable/c/51a0e8399858621442807a26057bcd1cd3ced046" }, { "cve": "CVE-2026-74572", "author_name": "Johannes Thumshirn", "author_email": "johannes.thumshirn@wdc.com", "fix_sha": "1ebe51c29fa9755d5b2fea28727c051117907cf8", "subject": "btrfs: zoned: fix deadlock between metadata writeback and transaction commit", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74572", "commit_url": "https://git.kernel.org/stable/c/1ebe51c29fa9755d5b2fea28727c051117907cf8" }, { "cve": "CVE-2026-74573", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "c3b8ee84a965058b41275069d4696f37a8b14bf6", "subject": "iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74573", "commit_url": "https://git.kernel.org/stable/c/c3b8ee84a965058b41275069d4696f37a8b14bf6" }, { "cve": "CVE-2026-74574", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "ee1d7274102285d78a53161fc705a8d8cd40b066", "subject": "dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74574", "commit_url": "https://git.kernel.org/stable/c/ee1d7274102285d78a53161fc705a8d8cd40b066" }, { "cve": "CVE-2026-74575", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "2c5d2d3c3f70cde2565d7b279b544893a2035842", "subject": "thunderbolt: Prevent XDomain delayed work use-after-free on disconnect", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74575", "commit_url": "https://git.kernel.org/stable/c/2c5d2d3c3f70cde2565d7b279b544893a2035842" }, { "cve": "CVE-2026-74576", "author_name": "Harry Yoo (Oracle)", "author_email": "harry@kernel.org", "fix_sha": "d9e6a7623938968e3752b67e37eaff097e559a54", "subject": "mm/slab: prevent unbounded recursion in free path with new kmalloc type", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74576", "commit_url": "https://git.kernel.org/stable/c/d9e6a7623938968e3752b67e37eaff097e559a54" }, { "cve": "CVE-2026-74577", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "295dd295e2137e10e9a5b1891d97e0f08de76f03", "subject": "net: mpls: initialize rtm_tos in mpls_getroute()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74577", "commit_url": "https://git.kernel.org/stable/c/295dd295e2137e10e9a5b1891d97e0f08de76f03" }, { "cve": "CVE-2026-74578", "author_name": "Muhammet Kaan KILIN\u00c7", "author_email": "muhammetkaankilinc@gmail.com", "fix_sha": "bf09b0be8e851f050e98da702d247c14d81b591a", "subject": "crypto: algif_skcipher - force synchronous processing on trees without ctx->state", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74578", "commit_url": "https://git.kernel.org/stable/c/bf09b0be8e851f050e98da702d247c14d81b591a" }, { "cve": "CVE-2026-74579", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "39e88f28fb32bf02bd4b525c24c842c9cff5663d", "subject": "netfilter: nft_payload: fix mask build for partial field offload", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74579", "commit_url": "https://git.kernel.org/stable/c/39e88f28fb32bf02bd4b525c24c842c9cff5663d" }, { "cve": "CVE-2026-74580", "author_name": "Jun Yang", "author_email": "junvyyang@tencent.com", "fix_sha": "de845981da67a6b049080c87e605130b0c30adc5", "subject": "vhost: reset the vring metadata cache on vring reconfiguration", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74580", "commit_url": "https://git.kernel.org/stable/c/de845981da67a6b049080c87e605130b0c30adc5" }, { "cve": "CVE-2026-74581", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "6aea62e433fe1b586202a5fee8b5807ce635e1d7", "subject": "net: ipv6: clear suppressed fib6 rule result", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74581", "commit_url": "https://git.kernel.org/stable/c/6aea62e433fe1b586202a5fee8b5807ce635e1d7" }, { "cve": "CVE-2026-74582", "author_name": "Qihang Tang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "03390aa32e669cc4ecd7d34108e2e1afc13d689d", "subject": "packet: use consistent hard_header_len in non-ring send paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74582", "commit_url": "https://git.kernel.org/stable/c/03390aa32e669cc4ecd7d34108e2e1afc13d689d" }, { "cve": "CVE-2026-74583", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "47d7f7051253bdc02b1d245d87e38f16d31a74df", "subject": "net/sched: cls_route: fix fastmap use-after-free on filter", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74583", "commit_url": "https://git.kernel.org/stable/c/47d7f7051253bdc02b1d245d87e38f16d31a74df" }, { "cve": "CVE-2026-74584", "author_name": "Lord Ulf Henrik Holmberg", "author_email": "henrik.holmberg@defensify.se", "fix_sha": "f6b079629becfa977f9c51fe53ad2e6dcc55ef44", "subject": "RDMA/bnxt_re: zero shared page before exposing to userspace", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74584", "commit_url": "https://git.kernel.org/stable/c/f6b079629becfa977f9c51fe53ad2e6dcc55ef44" }, { "cve": "CVE-2026-74585", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d6764992f17b23d91ff93ce905ab53c2aa7191f0", "subject": "thunderbolt: Bound the DROM dual link port number before indexing sw->ports", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74585", "commit_url": "https://git.kernel.org/stable/c/d6764992f17b23d91ff93ce905ab53c2aa7191f0" }, { "cve": "CVE-2026-74586", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "beb33f8ee1ca83acddb2a5ae80f3d22ec550b4c3", "subject": "sctp: clear new_transport when removing a peer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74586", "commit_url": "https://git.kernel.org/stable/c/beb33f8ee1ca83acddb2a5ae80f3d22ec550b4c3" }, { "cve": "CVE-2026-74587", "author_name": "Yuxiang Yang", "author_email": "yangyx22@mails.tsinghua.edu.cn", "fix_sha": "8c283e7b56adce00193837f3311b06662466fb21", "subject": "sctp: fix use-after-free of cached ASCONF chunk", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74587", "commit_url": "https://git.kernel.org/stable/c/8c283e7b56adce00193837f3311b06662466fb21" }, { "cve": "CVE-2026-74588", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "9f2cf069a9a72a2d6b97ca8b4c70e714aac99749", "subject": "sctp: keep chunk->transport in step with the list it is queued on", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74588", "commit_url": "https://git.kernel.org/stable/c/9f2cf069a9a72a2d6b97ca8b4c70e714aac99749" }, { "cve": "CVE-2026-74589", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "a76624733730e541e4955fdecf506af2f6b20558", "subject": "bpf, sockmap: Fix sk_redir use-after-free in send verdict", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74589", "commit_url": "https://git.kernel.org/stable/c/a76624733730e541e4955fdecf506af2f6b20558" }, { "cve": "CVE-2026-74590", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "3e8ec7c0387273329374f5c7bd61f5f38af71fe1", "subject": "fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74590", "commit_url": "https://git.kernel.org/stable/c/3e8ec7c0387273329374f5c7bd61f5f38af71fe1" }, { "cve": "CVE-2026-74591", "author_name": "Hugh Dickins", "author_email": "hughd@google.com", "fix_sha": "86da3f7e1e609e1e8bfbab198af68467c5a015a5", "subject": "mm/filemap: __filemap_add_folio() restore index before retrying", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74591", "commit_url": "https://git.kernel.org/stable/c/86da3f7e1e609e1e8bfbab198af68467c5a015a5" }, { "cve": "CVE-2026-74592", "author_name": "Mimi Zohar", "author_email": "zohar@linux.ibm.com", "fix_sha": "b80bed5c871a80151351342c065579405ce77145", "subject": "ima: Instantiate file_truncate and path_truncate hooks", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74592", "commit_url": "https://git.kernel.org/stable/c/b80bed5c871a80151351342c065579405ce77145" }, { "cve": "CVE-2026-74593", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "5f8b69642d18e1f3e11996707842ac530444e959", "subject": "sched_ext: Take cgroup_lock() first in scx_cgroup_lock()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74593", "commit_url": "https://git.kernel.org/stable/c/5f8b69642d18e1f3e11996707842ac530444e959" }, { "cve": "CVE-2026-74594", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "5457025fa8ca3c0d2732109513de839e3e797190", "subject": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74594", "commit_url": "https://git.kernel.org/stable/c/5457025fa8ca3c0d2732109513de839e3e797190" }, { "cve": "CVE-2026-74595", "author_name": "Zhan Xusheng", "author_email": "zhanxusheng@xiaomi.com", "fix_sha": "cf6c993c0feca7984797e634deba3c80342e199a", "subject": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74595", "commit_url": "https://git.kernel.org/stable/c/cf6c993c0feca7984797e634deba3c80342e199a" }, { "cve": "CVE-2026-74596", "author_name": "Andrey Albershteyn", "author_email": "aalbersh@kernel.org", "fix_sha": "d2f96bcb89d36d488a10e3bcf819b98536968286", "subject": "fs,fsverity: remove check for fsverity being enabled in setattr_prepare()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74596", "commit_url": "https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286" }, { "cve": "CVE-2026-74597", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "f803c086399da277b5d0ff36a107d0f162751800", "subject": "ip6_tunnel: clear skb2->cb[] in ip6ip6_err()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74597", "commit_url": "https://git.kernel.org/stable/c/f803c086399da277b5d0ff36a107d0f162751800" }, { "cve": "CVE-2026-74598", "author_name": "Yuejie Shi", "author_email": "syjcnss@gmail.com", "fix_sha": "d1ad8fb2ac6a1afb71dc22d9ae8efb4dda96c824", "subject": "ipv6: fix Route Information option length validation", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74598", "commit_url": "https://git.kernel.org/stable/c/d1ad8fb2ac6a1afb71dc22d9ae8efb4dda96c824" }, { "cve": "CVE-2026-74599", "author_name": "Lorenzo Stoakes (ARM)", "author_email": "ljs@kernel.org", "fix_sha": "27c32e5538344b13c1505a08861e04620c125d47", "subject": "mm/ptdump: always stabilise against page table freeing using init_mm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74599", "commit_url": "https://git.kernel.org/stable/c/27c32e5538344b13c1505a08861e04620c125d47" }, { "cve": "CVE-2026-74600", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "8db4bab826ccc9ec10fa41736a48031cd338d392", "subject": "mm/page_table_check: skip special zero mappings", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74600", "commit_url": "https://git.kernel.org/stable/c/8db4bab826ccc9ec10fa41736a48031cd338d392" }, { "cve": "CVE-2026-74601", "author_name": "Tengda Wu", "author_email": "wutengda@huaweicloud.com", "fix_sha": "f27bdc43077e4fcb5557dfc315ee8d91e741f483", "subject": "ring-buffer: Use current_context for safe per-CPU buffer swap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74601", "commit_url": "https://git.kernel.org/stable/c/f27bdc43077e4fcb5557dfc315ee8d91e741f483" }, { "cve": "CVE-2026-74602", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "6d014e44b68ddd43f71288d2a4dbb1a259869149", "subject": "ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74602", "commit_url": "https://git.kernel.org/stable/c/6d014e44b68ddd43f71288d2a4dbb1a259869149" }, { "cve": "CVE-2026-74603", "author_name": "Ahmad Byagowi", "author_email": "ahmadexp@gmail.com", "fix_sha": "6b69f2ef10cdb018c0b127a7cab88e590bbddba4", "subject": "ptp: ocp: Fix board ID over-read", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74603", "commit_url": "https://git.kernel.org/stable/c/6b69f2ef10cdb018c0b127a7cab88e590bbddba4" }, { "cve": "CVE-2026-74604", "author_name": "Rafael J. Wysocki", "author_email": "rafael.j.wysocki@intel.com", "fix_sha": "ff8da20b6f47c48d46e47f93f7a59e2d56ee9107", "subject": "Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\"", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74604", "commit_url": "https://git.kernel.org/stable/c/ff8da20b6f47c48d46e47f93f7a59e2d56ee9107" }, { "cve": "CVE-2026-74605", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "f0ece16ffca7384787b692431961ce202907acf5", "subject": "eventfs: Use children field for rcu head and add memory barriers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74605", "commit_url": "https://git.kernel.org/stable/c/f0ece16ffca7384787b692431961ce202907acf5" }, { "cve": "CVE-2026-74606", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "fd73b691702170d37d66f4b0278530cea8ed419a", "subject": "eventfs: Fix use-after-free in eventfs_remove_rec()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74606", "commit_url": "https://git.kernel.org/stable/c/fd73b691702170d37d66f4b0278530cea8ed419a" }, { "cve": "CVE-2026-74607", "author_name": "Paolo Bonzini", "author_email": "pbonzini@redhat.com", "fix_sha": "1d78d33275ef2a16c6d080910b291d0a97a0e613", "subject": "KVM: SVM: Serialize accesses to the owner and mirror list with separate lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74607", "commit_url": "https://git.kernel.org/stable/c/1d78d33275ef2a16c6d080910b291d0a97a0e613" }, { "cve": "CVE-2026-74608", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "4986410316b1ae0e63c6ce418e4eb196723626e7", "subject": "smb: client: Fix use-after-free in cifs_try_adding_channels()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74608", "commit_url": "https://git.kernel.org/stable/c/4986410316b1ae0e63c6ce418e4eb196723626e7" }, { "cve": "CVE-2026-74609", "author_name": "Jun Yang", "author_email": "junvyyang@tencent.com", "fix_sha": "cba9ccb47e9fa4cc77692fb896cc5ab57a667882", "subject": "tipc: read le->link under the node lock in tipc_node_link_down()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74609", "commit_url": "https://git.kernel.org/stable/c/cba9ccb47e9fa4cc77692fb896cc5ab57a667882" }, { "cve": "CVE-2026-74610", "author_name": "chanyoung", "author_email": "ppoo1220@gmail.com", "fix_sha": "7bca91d63341274e857f4aeaad54d229405e93dc", "subject": "tls: don't leave a full plaintext sk_msg ring unpushed", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74610", "commit_url": "https://git.kernel.org/stable/c/7bca91d63341274e857f4aeaad54d229405e93dc" }, { "cve": "CVE-2026-74611", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "1c8629651cb54f7b51db8fc0b1a9944e4a4b0f5e", "subject": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74611", "commit_url": "https://git.kernel.org/stable/c/1c8629651cb54f7b51db8fc0b1a9944e4a4b0f5e" }, { "cve": "CVE-2026-74612", "author_name": "Sun Jian", "author_email": "sun.jian.kdev@gmail.com", "fix_sha": "cb6379feaaff11c4e1e79c26c745ffa23182768a", "subject": "veth: fix skb length accounting after XDP frag adjustment", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74612", "commit_url": "https://git.kernel.org/stable/c/cb6379feaaff11c4e1e79c26c745ffa23182768a" }, { "cve": "CVE-2026-74613", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "a31e0ad444698d8aa7534a0f89fda543730f97a5", "subject": "vsock/virtio: avoid refilling the RX queue after teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74613", "commit_url": "https://git.kernel.org/stable/c/a31e0ad444698d8aa7534a0f89fda543730f97a5" }, { "cve": "CVE-2026-74614", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "ebac8f6b1ef0e9278afe204b8692a7479988dace", "subject": "vsock/virtio: read virtqueues under worker locks", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74614", "commit_url": "https://git.kernel.org/stable/c/ebac8f6b1ef0e9278afe204b8692a7479988dace" }, { "cve": "CVE-2026-74615", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "b37971686ec59fb027fa4910ba16805e68fddb97", "subject": "vxlan: do not arm the ageing timer on a device that is down", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74615", "commit_url": "https://git.kernel.org/stable/c/b37971686ec59fb027fa4910ba16805e68fddb97" }, { "cve": "CVE-2026-74616", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "e48e8edbef2eb824201495daa5234560f632b23c", "subject": "xdp: reject clones that overrun skb_shared_info tailroom", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74616", "commit_url": "https://git.kernel.org/stable/c/e48e8edbef2eb824201495daa5234560f632b23c" }, { "cve": "CVE-2026-74617", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "c27e360545373b7aee9862a5beef3b9fb3df0c25", "subject": "dibs: initialise dibs->lock in dibs_dev_alloc()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74617", "commit_url": "https://git.kernel.org/stable/c/c27e360545373b7aee9862a5beef3b9fb3df0c25" }, { "cve": "CVE-2026-74618", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "79fdf39f1a31f88cb3833b6f8091fbf6acdca2c6", "subject": "binfmt_misc: don't warn when the mount is completed from another user namespace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74618", "commit_url": "https://git.kernel.org/stable/c/79fdf39f1a31f88cb3833b6f8091fbf6acdca2c6" }, { "cve": "CVE-2026-74619", "author_name": "Christian Brauner", "author_email": "brauner@kernel.org", "fix_sha": "63981fc786daaa626cb14d9be1406f674d79f98f", "subject": "ovl: don't warn when the mount is completed from another user namespace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74619", "commit_url": "https://git.kernel.org/stable/c/63981fc786daaa626cb14d9be1406f674d79f98f" }, { "cve": "CVE-2026-74620", "author_name": "Hyunjung Ko", "author_email": "hj351016@gmail.com", "fix_sha": "883b56ae58fe657d8497806c7059646e9ba6dbd0", "subject": "net/sched: act_gact, act_police: range check the fallback control action", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74620", "commit_url": "https://git.kernel.org/stable/c/883b56ae58fe657d8497806c7059646e9ba6dbd0" }, { "cve": "CVE-2026-74621", "author_name": "Hyunjung Ko", "author_email": "hj351016@gmail.com", "fix_sha": "8a7ed561671aa6a911a2de99e59ef670a4d0b1df", "subject": "net/sched: act_ct: fix sk_buff leak when the header checks reject a packet", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74621", "commit_url": "https://git.kernel.org/stable/c/8a7ed561671aa6a911a2de99e59ef670a4d0b1df" }, { "cve": "CVE-2026-74622", "author_name": "Yangyu Chen", "author_email": "cyy@cyyself.name", "fix_sha": "e8e7471ef686b6c002218fee9671cc61992ae01a", "subject": "net: atlantic: free RX pages of consumed but not refilled buffers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74622", "commit_url": "https://git.kernel.org/stable/c/e8e7471ef686b6c002218fee9671cc61992ae01a" }, { "cve": "CVE-2026-74623", "author_name": "Yangyu Chen", "author_email": "cyy@cyyself.name", "fix_sha": "452636ea5410a96e02ebaaf80b21e3620b98e0dd", "subject": "net: atlantic: free stranded TX buffers on ring deinit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74623", "commit_url": "https://git.kernel.org/stable/c/452636ea5410a96e02ebaaf80b21e3620b98e0dd" }, { "cve": "CVE-2026-74624", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "2d19b95c9723001f214f7a47d67b09f46238f200", "subject": "netfilter: nf_conntrack: defer invalid log until after unlock", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74624", "commit_url": "https://git.kernel.org/stable/c/2d19b95c9723001f214f7a47d67b09f46238f200" }, { "cve": "CVE-2026-74625", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "d45cc8020d7c0a9f01dee42ff5c40bc14c9af72f", "subject": "netfilter: bridge: release template ct on non-IP path", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74625", "commit_url": "https://git.kernel.org/stable/c/d45cc8020d7c0a9f01dee42ff5c40bc14c9af72f" }, { "cve": "CVE-2026-74626", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "d2121faf133ac3bf9531b53a7e21273649a08517", "subject": "NTB: ntb_netdev: Preserve RX queue depth on allocation failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74626", "commit_url": "https://git.kernel.org/stable/c/d2121faf133ac3bf9531b53a7e21273649a08517" }, { "cve": "CVE-2026-74627", "author_name": "Pavel Begunkov", "author_email": "asml.silence@gmail.com", "fix_sha": "53a43508ee332d8bffe40590c3d189c92a551f9f", "subject": "net: devmem: prevent net-iov / page mixing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74627", "commit_url": "https://git.kernel.org/stable/c/53a43508ee332d8bffe40590c3d189c92a551f9f" }, { "cve": "CVE-2026-74628", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "2195424c3da2ef1829a63b807e3a900a90e57d85", "subject": "net/x25: fix use-after-free of the socket by its timers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74628", "commit_url": "https://git.kernel.org/stable/c/2195424c3da2ef1829a63b807e3a900a90e57d85" }, { "cve": "CVE-2026-74629", "author_name": "Alexandra Winter", "author_email": "wintera@linux.ibm.com", "fix_sha": "9e6869be49064915edb6c8776b27c376cfdb0df5", "subject": "net/dibs: Correct freeing of dmb_clientid_arr", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74629", "commit_url": "https://git.kernel.org/stable/c/9e6869be49064915edb6c8776b27c376cfdb0df5" }, { "cve": "CVE-2026-74630", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "0e243671bc7b8eaf00f83dd2f4367436dc0cff98", "subject": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74630", "commit_url": "https://git.kernel.org/stable/c/0e243671bc7b8eaf00f83dd2f4367436dc0cff98" }, { "cve": "CVE-2026-74631", "author_name": "Daming Li", "author_email": "d4n.for.sec@gmail.com", "fix_sha": "5d9686af2976741bbd79b150d1c9e60b81e7f12e", "subject": "net: smc: fix splice entry lifetime imbalance in smc_rx_splice", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74631", "commit_url": "https://git.kernel.org/stable/c/5d9686af2976741bbd79b150d1c9e60b81e7f12e" }, { "cve": "CVE-2026-74632", "author_name": "Lorenzo Stoakes (ARM)", "author_email": "ljs@kernel.org", "fix_sha": "33192a26cddea7a7e4ca66e5c3eebd36fa8be2bb", "subject": "mm/huge_memory: fix huge_zero_pfn race", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74632", "commit_url": "https://git.kernel.org/stable/c/33192a26cddea7a7e4ca66e5c3eebd36fa8be2bb" }, { "cve": "CVE-2026-74633", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "b69859204d4db3acd86c1c2dadcef0d77b451933", "subject": "tracing: Fix NULL pointer dereference in module event cache removal", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74633", "commit_url": "https://git.kernel.org/stable/c/b69859204d4db3acd86c1c2dadcef0d77b451933" }, { "cve": "CVE-2026-74634", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "bf98d7b0d5a99991e47e66cee4eb1d3fa514be97", "subject": "ring-buffer: Prevent subbuf order change when resizing is disabled", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74634", "commit_url": "https://git.kernel.org/stable/c/bf98d7b0d5a99991e47e66cee4eb1d3fa514be97" }, { "cve": "CVE-2026-74635", "author_name": "Rik van Riel", "author_email": "riel@surriel.com", "fix_sha": "e033cbf3975a8465f879ebd5989dc35b04423a4d", "subject": "fbdev: bitblit: bound-check glyph index in bit_cursor()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74635", "commit_url": "https://git.kernel.org/stable/c/e033cbf3975a8465f879ebd5989dc35b04423a4d" }, { "cve": "CVE-2026-74636", "author_name": "Michael Wu", "author_email": "michael@allwinnertech.com", "fix_sha": "c3730b8373bb5059d735509b9e6a00d7eb337d7c", "subject": "tracing: Fix race between update_event_fields and, event_define_fields", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74636", "commit_url": "https://git.kernel.org/stable/c/c3730b8373bb5059d735509b9e6a00d7eb337d7c" }, { "cve": "CVE-2026-74637", "author_name": "Aditya Chillara", "author_email": "aditya.chillara@oss.qualcomm.com", "fix_sha": "42c5ca1f0a288a52878bd72a5595b08261057438", "subject": "perf/core: Fix group leader use-after-free after sibling detach", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74637", "commit_url": "https://git.kernel.org/stable/c/42c5ca1f0a288a52878bd72a5595b08261057438" }, { "cve": "CVE-2026-74638", "author_name": "Ma\u00edra Canal", "author_email": "mcanal@igalia.com", "fix_sha": "4da94744707b27a3ae1197bdd7127da4505dc5b1", "subject": "drm/v3d: Serialize the scheduler timeout handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74638", "commit_url": "https://git.kernel.org/stable/c/4da94744707b27a3ae1197bdd7127da4505dc5b1" }, { "cve": "CVE-2026-74639", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "2615f0fb90df8cf5a96133ca4be74294ed288604", "subject": "ALSA: us144mkii: re-anchor capture URBs on resubmission", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74639", "commit_url": "https://git.kernel.org/stable/c/2615f0fb90df8cf5a96133ca4be74294ed288604" }, { "cve": "CVE-2026-74640", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "620f1e52a46f604635efd0fb78138afd6a513b5d", "subject": "ALSA: FCP: fix OOB write in fcp_meter_ctl_get()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74640", "commit_url": "https://git.kernel.org/stable/c/620f1e52a46f604635efd0fb78138afd6a513b5d" }, { "cve": "CVE-2026-74641", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "2ca1eea3cd17930daffe9e429a7c89232036ec24", "subject": "ALSA: usx2y: bound the hwdep mmap fault offset", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74641", "commit_url": "https://git.kernel.org/stable/c/2ca1eea3cd17930daffe9e429a7c89232036ec24" }, { "cve": "CVE-2026-74642", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "f8a80cfb68613fb7e6452b66447dbc63f435d140", "subject": "ALSA: usb: Fix UAF at delayed release of MIDI2 EPs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74642", "commit_url": "https://git.kernel.org/stable/c/f8a80cfb68613fb7e6452b66447dbc63f435d140" }, { "cve": "CVE-2026-74643", "author_name": "SJ Park", "author_email": "sj@kernel.org", "fix_sha": "a16fd3ad9d89b05475864da97327870464611736", "subject": "samples/damon/mtier: error out for zero quota goal target values", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74643", "commit_url": "https://git.kernel.org/stable/c/a16fd3ad9d89b05475864da97327870464611736" }, { "cve": "CVE-2026-74644", "author_name": "liyouhong", "author_email": "liyouhong@kylinos.cn", "fix_sha": "5deb65c34e682e7c5f5df417a70e223e8fcc5f5a", "subject": "mm/damon/ops-common: putback folios on invalid migrate nid", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74644", "commit_url": "https://git.kernel.org/stable/c/5deb65c34e682e7c5f5df417a70e223e8fcc5f5a" }, { "cve": "CVE-2026-74645", "author_name": "SJ Park", "author_email": "sj@kernel.org", "fix_sha": "06befa61c427e74319781e6f35a364cfc32dbae8", "subject": "mm/damon/lru_sort: error out for >10000 active_mem_bp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74645", "commit_url": "https://git.kernel.org/stable/c/06befa61c427e74319781e6f35a364cfc32dbae8" }, { "cve": "CVE-2026-74646", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "b85a0e91d7d6cd06a53c881a46f749cfcef416a2", "subject": "misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74646", "commit_url": "https://git.kernel.org/stable/c/b85a0e91d7d6cd06a53c881a46f749cfcef416a2" }, { "cve": "CVE-2026-74647", "author_name": "Ekansh Gupta", "author_email": "ekansh.gupta@oss.qualcomm.com", "fix_sha": "6102ceb4eab845743ee57acd3863fbd06e93c927", "subject": "misc: fastrpc: Remove buffer from list prior to unmap operation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74647", "commit_url": "https://git.kernel.org/stable/c/6102ceb4eab845743ee57acd3863fbd06e93c927" }, { "cve": "CVE-2026-74648", "author_name": "Mariano Baragiola", "author_email": "mbaragiola@linux.com", "fix_sha": "6829665d050983907b560173e49dcc6c11cb2730", "subject": "staging: rtl8723bs: validate monitor transmit frame lengths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74648", "commit_url": "https://git.kernel.org/stable/c/6829665d050983907b560173e49dcc6c11cb2730" }, { "cve": "CVE-2026-74649", "author_name": "Panagiotis Petrakopoulos", "author_email": "npetrakopoulos2003@gmail.com", "fix_sha": "2c56ef658ac8c6bca36bc5574715e8f717207c6c", "subject": "staging: rtl8723bs: fix missing shared-key auth challenge length check", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74649", "commit_url": "https://git.kernel.org/stable/c/2c56ef658ac8c6bca36bc5574715e8f717207c6c" }, { "cve": "CVE-2026-74650", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "ae21407350151bddfd4fea7aa39bd0643c0ca9d3", "subject": "staging: rtl8723bs: fix OOB read in WMM_param_handler()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74650", "commit_url": "https://git.kernel.org/stable/c/ae21407350151bddfd4fea7aa39bd0643c0ca9d3" }, { "cve": "CVE-2026-74651", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "1c3e23e78862493e8cf1adad02b10ffcb8b9921c", "subject": "staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74651", "commit_url": "https://git.kernel.org/stable/c/1c3e23e78862493e8cf1adad02b10ffcb8b9921c" }, { "cve": "CVE-2026-74652", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "36672c8d7d14e9c43287528455d2c97b526ea6ad", "subject": "serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74652", "commit_url": "https://git.kernel.org/stable/c/36672c8d7d14e9c43287528455d2c97b526ea6ad" }, { "cve": "CVE-2026-74653", "author_name": "Ryan Wilbur", "author_email": "rwilbur633@gmail.com", "fix_sha": "1423415471274abda87024967d7fe2206ceee0ea", "subject": "serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74653", "commit_url": "https://git.kernel.org/stable/c/1423415471274abda87024967d7fe2206ceee0ea" }, { "cve": "CVE-2026-74654", "author_name": "Cunhao Lu", "author_email": "1579567540@qq.com", "fix_sha": "e2fe6a0efecbef00e3ecc2db64dd5afa8c212b41", "subject": "serial: 8250_dma: Clear stale RX state on shutdown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74654", "commit_url": "https://git.kernel.org/stable/c/e2fe6a0efecbef00e3ecc2db64dd5afa8c212b41" }, { "cve": "CVE-2026-74655", "author_name": "Jan Sebastian G\u00f6tte", "author_email": "linux@jaseg.de", "fix_sha": "e3c04834ae1ab5e9cfbe8ac54ec734aa4774249d", "subject": "serial: qcom-geni: fix TX DMA buffer flush", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74655", "commit_url": "https://git.kernel.org/stable/c/e3c04834ae1ab5e9cfbe8ac54ec734aa4774249d" }, { "cve": "CVE-2026-74656", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "bc5bde9ce3cc36502839dfe98e068f7303a50982", "subject": "ipv4: fix use-after-free in fib_nhc_update_mtu()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74656", "commit_url": "https://git.kernel.org/stable/c/bc5bde9ce3cc36502839dfe98e068f7303a50982" }, { "cve": "CVE-2026-74657", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "4ff9548d84945d2cbf9e4c207288063a200ea397", "subject": "ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74657", "commit_url": "https://git.kernel.org/stable/c/4ff9548d84945d2cbf9e4c207288063a200ea397" }, { "cve": "CVE-2026-74658", "author_name": "Keno Fischer", "author_email": "keno@juliacomputing.com", "fix_sha": "6d4514ca9cdf61fec4ec634cf50386f6f7e69748", "subject": "futex: Prevent robust futex exit race some more", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74658", "commit_url": "https://git.kernel.org/stable/c/6d4514ca9cdf61fec4ec634cf50386f6f7e69748" }, { "cve": "CVE-2026-74659", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "63488dba65ef91373ef616575b32eb0eb21459f4", "subject": "net: bridge: mrp: fix uninitialised bytes on the wire", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74659", "commit_url": "https://git.kernel.org/stable/c/63488dba65ef91373ef616575b32eb0eb21459f4" }, { "cve": "CVE-2026-74660", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "30825970339c107bacaf7f61af90fcdb1f597ca1", "subject": "netfilter: ebt_nflog: pin the NFLOG backend", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74660", "commit_url": "https://git.kernel.org/stable/c/30825970339c107bacaf7f61af90fcdb1f597ca1" }, { "cve": "CVE-2026-74661", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "5f26a690e8efa54315e4922368daf54e0b8f5515", "subject": "mac802154: fix netdev use-after-free in beacon worker", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74661", "commit_url": "https://git.kernel.org/stable/c/5f26a690e8efa54315e4922368daf54e0b8f5515" }, { "cve": "CVE-2026-74662", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "653d7ddf6cba867777a3d14c4f83ace008c5ad13", "subject": "inet: frags: publish queues before arming timer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74662", "commit_url": "https://git.kernel.org/stable/c/653d7ddf6cba867777a3d14c4f83ace008c5ad13" }, { "cve": "CVE-2026-74663", "author_name": "Zijie Huang", "author_email": "milkory@outlook.com", "fix_sha": "dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01", "subject": "net/sched: reject overly deep qdisc hierarchies", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74663", "commit_url": "https://git.kernel.org/stable/c/dedd34b0f2310e28c5f6d4875cfbf4b7ed821c01" }, { "cve": "CVE-2026-74664", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "5d1c224dd914579524a183a514c12b95095d12ce", "subject": "net: openvswitch: reallocate update replies for mismatched IDs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74664", "commit_url": "https://git.kernel.org/stable/c/5d1c224dd914579524a183a514c12b95095d12ce" }, { "cve": "CVE-2026-74665", "author_name": "Sun Jian", "author_email": "sun.jian.kdev@gmail.com", "fix_sha": "33f2b2eb33d666ecac68031e0f31424fb70528db", "subject": "net: fix skb length accounting after generic XDP frag adjustment", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74665", "commit_url": "https://git.kernel.org/stable/c/33f2b2eb33d666ecac68031e0f31424fb70528db" }, { "cve": "CVE-2026-74666", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "1a35da325cac4d5bcad76a2aa943408a6f1d9000", "subject": "packet: synchronize pressure clearing with ring reconfiguration", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74666", "commit_url": "https://git.kernel.org/stable/c/1a35da325cac4d5bcad76a2aa943408a6f1d9000" }, { "cve": "CVE-2026-74667", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "c2707480cfbf19c7619acc9c089d17f20869821f", "subject": "net/packet: reset the MAC header on the packet-socket transmit path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74667", "commit_url": "https://git.kernel.org/stable/c/c2707480cfbf19c7619acc9c089d17f20869821f" }, { "cve": "CVE-2026-74668", "author_name": "Qihang Tang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "21b5953e7494c16a42e6cd8cf110e18d13ae4a6b", "subject": "packet: use consistent hard_header_len in TX_RING send path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74668", "commit_url": "https://git.kernel.org/stable/c/21b5953e7494c16a42e6cd8cf110e18d13ae4a6b" }, { "cve": "CVE-2026-74669", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "e0ba936287dfe9783426aac27e5fd76fe35b38c9", "subject": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74669", "commit_url": "https://git.kernel.org/stable/c/e0ba936287dfe9783426aac27e5fd76fe35b38c9" }, { "cve": "CVE-2026-74670", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "558f67f1340f803a346ecd14a69c49653111c5f4", "subject": "ipvs: stop estimator after disabled calc phase", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74670", "commit_url": "https://git.kernel.org/stable/c/558f67f1340f803a346ecd14a69c49653111c5f4" }, { "cve": "CVE-2026-74671", "author_name": "Lincoln Wallace", "author_email": "locnnil0@gmail.com", "fix_sha": "5ff232d31106f45ac87c3b64e1d35a0667777797", "subject": "ima: fix out-of-bounds read in xattr_verify()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74671", "commit_url": "https://git.kernel.org/stable/c/5ff232d31106f45ac87c3b64e1d35a0667777797" }, { "cve": "CVE-2026-74672", "author_name": "Lorenzo Stoakes (ARM)", "author_email": "ljs@kernel.org", "fix_sha": "26444eb71465c9934d9d418ef69c43f61185329b", "subject": "mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74672", "commit_url": "https://git.kernel.org/stable/c/26444eb71465c9934d9d418ef69c43f61185329b" }, { "cve": "CVE-2026-74673", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "90f305f2c7a30257c683e13f4bf7c798eea992a0", "subject": "Input: evdev - fix information leak in evdev_pass_values()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74673", "commit_url": "https://git.kernel.org/stable/c/90f305f2c7a30257c683e13f4bf7c798eea992a0" }, { "cve": "CVE-2026-74674", "author_name": "Andy Lutomirski", "author_email": "luto@kernel.org", "fix_sha": "478a1c3abebfc717db0d1281a9cdd7befafee542", "subject": "mm: fix incorrect flush address in direct page table reclaim", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74674", "commit_url": "https://git.kernel.org/stable/c/478a1c3abebfc717db0d1281a9cdd7befafee542" }, { "cve": "CVE-2026-74675", "author_name": "Joshua Rogers", "author_email": "linux@joshua.hu", "fix_sha": "e25d47a526939ad44b75f778b8a7500562b84fc1", "subject": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74675", "commit_url": "https://git.kernel.org/stable/c/e25d47a526939ad44b75f778b8a7500562b84fc1" }, { "cve": "CVE-2026-74676", "author_name": "Joshua Rogers", "author_email": "linux@joshua.hu", "fix_sha": "a7ad0034453ba4c353f9b8f810ee2569de33d283", "subject": "vt: add permission check for KDSKBMETA ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74676", "commit_url": "https://git.kernel.org/stable/c/a7ad0034453ba4c353f9b8f810ee2569de33d283" }, { "cve": "CVE-2026-74677", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "fde39b8a521780391fb4e5bda2c0aa4928947f12", "subject": "net: usb: ipheth: fix carrier_work UAF on disconnect", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74677", "commit_url": "https://git.kernel.org/stable/c/fde39b8a521780391fb4e5bda2c0aa4928947f12" }, { "cve": "CVE-2026-74678", "author_name": "Yi Cong", "author_email": "yicong@kylinos.cn", "fix_sha": "1f428e30947395d9b9aacee03e25a4e6cfcad7a4", "subject": "net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74678", "commit_url": "https://git.kernel.org/stable/c/1f428e30947395d9b9aacee03e25a4e6cfcad7a4" }, { "cve": "CVE-2026-74679", "author_name": "Sonali Pradhan", "author_email": "sonalipradhan@google.com", "fix_sha": "6b1c8a9403a26cb0fed7a648916c74dc236da591", "subject": "usb: gadget: f_ncm: Use unsigned int for ndp_index", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74679", "commit_url": "https://git.kernel.org/stable/c/6b1c8a9403a26cb0fed7a648916c74dc236da591" }, { "cve": "CVE-2026-74680", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "c2f811314be351d86b6ab41e9297ae80d8da6f86", "subject": "usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74680", "commit_url": "https://git.kernel.org/stable/c/c2f811314be351d86b6ab41e9297ae80d8da6f86" }, { "cve": "CVE-2026-74681", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "7e22c9f79b200672f3e477421b6c9050d8cf70a5", "subject": "usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74681", "commit_url": "https://git.kernel.org/stable/c/7e22c9f79b200672f3e477421b6c9050d8cf70a5" }, { "cve": "CVE-2026-74682", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "69ee44e1a23be62318189dc4b37fa4ad94053269", "subject": "ALSA: usb-audio: fix OOB write on Type II inbound URBs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74682", "commit_url": "https://git.kernel.org/stable/c/69ee44e1a23be62318189dc4b37fa4ad94053269" }, { "cve": "CVE-2026-74683", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "3abd29c61d2ef37c4102cf755b18be53bb9dbea6", "subject": "Input: evdev - sanitize event type index when fetching event masks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74683", "commit_url": "https://git.kernel.org/stable/c/3abd29c61d2ef37c4102cf755b18be53bb9dbea6" }, { "cve": "CVE-2026-74684", "author_name": "Dongli Zhang", "author_email": "dongli.zhang@oracle.com", "fix_sha": "3874892dd27d5387aa9a06f58d9060f18f351d24", "subject": "net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74684", "commit_url": "https://git.kernel.org/stable/c/3874892dd27d5387aa9a06f58d9060f18f351d24" }, { "cve": "CVE-2026-74685", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "e253dd5f9f6d875a317895bf43ec9534ed7523cb", "subject": "hwmon: (ltc4282) Clamp negative current limits", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74685", "commit_url": "https://git.kernel.org/stable/c/e253dd5f9f6d875a317895bf43ec9534ed7523cb" }, { "cve": "CVE-2026-74686", "author_name": "Kumar Kartikeya Dwivedi", "author_email": "memxor@gmail.com", "fix_sha": "7a3c0289c3c8eb4607dff448ae9ff9f902c813af", "subject": "rqspinlock: Reset tail when preserving queue on deadlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74686", "commit_url": "https://git.kernel.org/stable/c/7a3c0289c3c8eb4607dff448ae9ff9f902c813af" }, { "cve": "CVE-2026-74687", "author_name": "Hongyan Xu", "author_email": "getshell@seu.edu.cn", "fix_sha": "8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783", "subject": "watchdog: at91sam9_wdt: prevent timer rearm during teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74687", "commit_url": "https://git.kernel.org/stable/c/8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783" }, { "cve": "CVE-2026-74688", "author_name": "Xin Long", "author_email": "lucien.xin@gmail.com", "fix_sha": "c9158ceaf27780ef64534ad72f44ffde3f8ccc49", "subject": "sctp: clear control chunk transport if it is being removed", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74688", "commit_url": "https://git.kernel.org/stable/c/c9158ceaf27780ef64534ad72f44ffde3f8ccc49" }, { "cve": "CVE-2026-74689", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "d0c80dbb970439bd2eeb0e5effff8c16a5f4e1e3", "subject": "net/atm: fix slab-out-of-bounds read in vcc_setsockopt()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74689", "commit_url": "https://git.kernel.org/stable/c/d0c80dbb970439bd2eeb0e5effff8c16a5f4e1e3" }, { "cve": "CVE-2026-74690", "author_name": "Alexandra Winter", "author_email": "wintera@linux.ibm.com", "fix_sha": "b1896543ce59c4258625a35cf41e23a9a1f80ea2", "subject": "s390/ism: Fix UAF of sba and ieq during ism_dev_exit()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74690", "commit_url": "https://git.kernel.org/stable/c/b1896543ce59c4258625a35cf41e23a9a1f80ea2" }, { "cve": "CVE-2026-74691", "author_name": "Fan XinRan", "author_email": "shinjiangjiang@gmail.com", "fix_sha": "68bf02b6b4ad3f748c6db71fd77b6c0402d252f4", "subject": "net: thunderbolt: Tear down DMA paths before stopping the rings", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74691", "commit_url": "https://git.kernel.org/stable/c/68bf02b6b4ad3f748c6db71fd77b6c0402d252f4" }, { "cve": "CVE-2026-74692", "author_name": "Sidraya Jayagond", "author_email": "sidraya@linux.ibm.com", "fix_sha": "185a4caeecabc150106deda1da170b09f2ad803f", "subject": "net/smc: fix TOCTOU race between smc_listen_out() and listener close", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74692", "commit_url": "https://git.kernel.org/stable/c/185a4caeecabc150106deda1da170b09f2ad803f" }, { "cve": "CVE-2026-74693", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "8ae344eb540af3f457179b52bc6061416752485c", "subject": "net: prestera: validate firmware header length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74693", "commit_url": "https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c" }, { "cve": "CVE-2026-74694", "author_name": "Henry Martin", "author_email": "bsdhenrymartin@gmail.com", "fix_sha": "afa58b7384913c8773d837acdb07b035690ec5d2", "subject": "net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74694", "commit_url": "https://git.kernel.org/stable/c/afa58b7384913c8773d837acdb07b035690ec5d2" }, { "cve": "CVE-2026-74695", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "8aecf0bbcc72605592134c917c222207d8f63ab0", "subject": "netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74695", "commit_url": "https://git.kernel.org/stable/c/8aecf0bbcc72605592134c917c222207d8f63ab0" }, { "cve": "CVE-2026-74696", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "a0ab2ba83e35159d81cec830a92e885ecf8139be", "subject": "tcp: fix TFO max_qlen accounting across reuseport migration", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74696", "commit_url": "https://git.kernel.org/stable/c/a0ab2ba83e35159d81cec830a92e885ecf8139be" }, { "cve": "CVE-2026-74697", "author_name": "Michael Chan", "author_email": "michael.chan@broadcom.com", "fix_sha": "c3faf548a00f4c17100cc9204746975fa46a73b9", "subject": "bnxt_en: Disable EOP for TPA on all chips to prevent data corruption", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74697", "commit_url": "https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9" }, { "cve": "CVE-2026-74698", "author_name": "Bobby Eshleman", "author_email": "bobbyeshleman@meta.com", "fix_sha": "e7386770be1bf810bcd6af39d1e4bfeab3408430", "subject": "net/mlx5e: fix BQL reset on SQ re-activation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74698", "commit_url": "https://git.kernel.org/stable/c/e7386770be1bf810bcd6af39d1e4bfeab3408430" }, { "cve": "CVE-2026-74699", "author_name": "Micha\u0142 Winiarski", "author_email": "michal.winiarski@intel.com", "fix_sha": "c5f500161709f27719701334190dff2325868ef0", "subject": "drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74699", "commit_url": "https://git.kernel.org/stable/c/c5f500161709f27719701334190dff2325868ef0" }, { "cve": "CVE-2026-74700", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "a347304b2ca1a5377d5bd2d8a72e4b4f12afe648", "subject": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74700", "commit_url": "https://git.kernel.org/stable/c/a347304b2ca1a5377d5bd2d8a72e4b4f12afe648" }, { "cve": "CVE-2026-74701", "author_name": "Cen Zhang (Microsoft)", "author_email": "blbllhy@gmail.com", "fix_sha": "cf6f8b29befb92173659bcef6a441d274947bfae", "subject": "net/openvswitch: check Ethernet header length in key_extract()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74701", "commit_url": "https://git.kernel.org/stable/c/cf6f8b29befb92173659bcef6a441d274947bfae" }, { "cve": "CVE-2026-74702", "author_name": "Jia Jia", "author_email": "physicalmtea@gmail.com", "fix_sha": "42bc45df5905e2b7dccb72adaf7730f66cfbe03f", "subject": "vhost-scsi: reject feature changes after endpoint", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74702", "commit_url": "https://git.kernel.org/stable/c/42bc45df5905e2b7dccb72adaf7730f66cfbe03f" }, { "cve": "CVE-2026-74703", "author_name": "Linfeng Sun", "author_email": "slf@hdu.edu.cn", "fix_sha": "d876c493fc4b811941bfeb4c80beb2dfc4bf025e", "subject": "vhost-scsi: Validate T10 PI scatterlist counts", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74703", "commit_url": "https://git.kernel.org/stable/c/d876c493fc4b811941bfeb4c80beb2dfc4bf025e" }, { "cve": "CVE-2026-74704", "author_name": "Toke H\u00f8iland-J\u00f8rgensen", "author_email": "toke@toke.dk", "fix_sha": "2a33516f9ef59ad11844d4fc152f889449b5daf3", "subject": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74704", "commit_url": "https://git.kernel.org/stable/c/2a33516f9ef59ad11844d4fc152f889449b5daf3" }, { "cve": "CVE-2026-74705", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "d0f86fb36eb260abd10007b62c9dcc1028e03e61", "subject": "udp: fix potential use-after-free in tunnel segmentation", "cvss_score": 10.0, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74705", "commit_url": "https://git.kernel.org/stable/c/d0f86fb36eb260abd10007b62c9dcc1028e03e61" }, { "cve": "CVE-2026-74706", "author_name": "Alok Tiwari", "author_email": "alok.a.tiwari@oracle.com", "fix_sha": "1cb4298810e27e037d3ca07286ecbb97e89ba58d", "subject": "bnge: Fix NULL pointer dereference in aux device release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74706", "commit_url": "https://git.kernel.org/stable/c/1cb4298810e27e037d3ca07286ecbb97e89ba58d" }, { "cve": "CVE-2026-74707", "author_name": "Stanislav Fomichev", "author_email": "sdf.kernel@gmail.com", "fix_sha": "849b1664dbda1cf6c63e0fd4f9dec23782b8c851", "subject": "xsk: validate metadata when processing requests", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74707", "commit_url": "https://git.kernel.org/stable/c/849b1664dbda1cf6c63e0fd4f9dec23782b8c851" }, { "cve": "CVE-2026-74708", "author_name": "Stanislav Fomichev", "author_email": "sdf.kernel@gmail.com", "fix_sha": "439ce2dddf3d22129b9113a7881637256a35e936", "subject": "xsk: validate launch-time metadata size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74708", "commit_url": "https://git.kernel.org/stable/c/439ce2dddf3d22129b9113a7881637256a35e936" }, { "cve": "CVE-2026-74709", "author_name": "Stanislav Fomichev", "author_email": "sdf.kernel@gmail.com", "fix_sha": "9f60a67df8d3c862503bee62bada8e7089cba438", "subject": "xsk: clear metadata pointer when no timestamp is requested", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74709", "commit_url": "https://git.kernel.org/stable/c/9f60a67df8d3c862503bee62bada8e7089cba438" }, { "cve": "CVE-2026-74710", "author_name": "Stanislav Fomichev", "author_email": "sdf.kernel@gmail.com", "fix_sha": "1bb30b181d9f0484e141f8411e15ed906d5c6780", "subject": "xsk: require at least 16 bytes of TX metadata", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74710", "commit_url": "https://git.kernel.org/stable/c/1bb30b181d9f0484e141f8411e15ed906d5c6780" }, { "cve": "CVE-2026-74711", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "59bd68ab05a8f9c9a60b6ec44682084184803ff4", "subject": "hwmon: (pmbus) Fix type confusion in notification logic", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74711", "commit_url": "https://git.kernel.org/stable/c/59bd68ab05a8f9c9a60b6ec44682084184803ff4" }, { "cve": "CVE-2026-74712", "author_name": "Christian Borntraeger", "author_email": "borntraeger@linux.ibm.com", "fix_sha": "727e1f569855df83579edbd73dcb4a0723543a12", "subject": "vdpa/mlx5: Fix buffer length in create_direct_keys()", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74712", "commit_url": "https://git.kernel.org/stable/c/727e1f569855df83579edbd73dcb4a0723543a12" }, { "cve": "CVE-2026-74713", "author_name": "Linfeng Sun", "author_email": "linfeng.sun.dev@gamil.com", "fix_sha": "1ed35ac7f3fe2b4396bdd29ac3a7f0ebc0829e94", "subject": "vhost_iotlb: bound map allocation in add_range", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74713", "commit_url": "https://git.kernel.org/stable/c/1ed35ac7f3fe2b4396bdd29ac3a7f0ebc0829e94" }, { "cve": "CVE-2026-74714", "author_name": "Jose Fernandez (Anthropic)", "author_email": "jose.fernandez@linux.dev", "fix_sha": "e5fd3f514e27db1f05fbd72ba615d74941e23c51", "subject": "bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74714", "commit_url": "https://git.kernel.org/stable/c/e5fd3f514e27db1f05fbd72ba615d74941e23c51" }, { "cve": "CVE-2026-74715", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "fdeba03fea78407a8c52faa99177c9f7f29f90eb", "subject": "bpf: Fix netns reference imbalance in conntrack kfuncs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74715", "commit_url": "https://git.kernel.org/stable/c/fdeba03fea78407a8c52faa99177c9f7f29f90eb" }, { "cve": "CVE-2026-74716", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "4a19f7ab5972ef608b31ae921419bc3e04b3f8ad", "subject": "accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74716", "commit_url": "https://git.kernel.org/stable/c/4a19f7ab5972ef608b31ae921419bc3e04b3f8ad" }, { "cve": "CVE-2026-74717", "author_name": "Michael Guralnik", "author_email": "michaelgur@nvidia.com", "fix_sha": "af39eb111ce6b5eba9c08513b62c4868eb7e7fd5", "subject": "net/mlx5: fw_tracer, return NULL on create error", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74717", "commit_url": "https://git.kernel.org/stable/c/af39eb111ce6b5eba9c08513b62c4868eb7e7fd5" }, { "cve": "CVE-2026-74718", "author_name": "Or Har-Toov", "author_email": "ohartoov@nvidia.com", "fix_sha": "1c4dac9bf1d2ac31da63b794bdec697777cbd0fd", "subject": "devlink: fix net namespace reference leak in reload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74718", "commit_url": "https://git.kernel.org/stable/c/1c4dac9bf1d2ac31da63b794bdec697777cbd0fd" }, { "cve": "CVE-2026-74719", "author_name": "Mahanta Jambigi", "author_email": "mjambigi@linux.ibm.com", "fix_sha": "976245094925bab9bc39366b2e9ab44ffcde61d0", "subject": "net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74719", "commit_url": "https://git.kernel.org/stable/c/976245094925bab9bc39366b2e9ab44ffcde61d0" }, { "cve": "CVE-2026-74720", "author_name": "Yiyang Chen", "author_email": "chenyy23@mails.tsinghua.edu.cn", "fix_sha": "a4c6f804b44c5c790269b25e0e61cf4e9f117c86", "subject": "bpf: Preserve pointer state for commuted arithmetic", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74720", "commit_url": "https://git.kernel.org/stable/c/a4c6f804b44c5c790269b25e0e61cf4e9f117c86" }, { "cve": "CVE-2026-74721", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "8d51e0fd3e698919d2adeff71936377f0c0d4aa0", "subject": "accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74721", "commit_url": "https://git.kernel.org/stable/c/8d51e0fd3e698919d2adeff71936377f0c0d4aa0" }, { "cve": "CVE-2026-74722", "author_name": "Dmitry Antipov", "author_email": "dmantipov@yandex.ru", "fix_sha": "d2a4e4e626b2f4670b69b430c357f03f53eb6632", "subject": "btrfs: fix memory leak in btrfs_do_encoded_write()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74722", "commit_url": "https://git.kernel.org/stable/c/d2a4e4e626b2f4670b69b430c357f03f53eb6632" }, { "cve": "CVE-2026-74723", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "0fa78ef637deb5dbe341582f88553a4bce496de0", "subject": "btrfs: lzo: reject inline extents without valid headers", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74723", "commit_url": "https://git.kernel.org/stable/c/0fa78ef637deb5dbe341582f88553a4bce496de0" }, { "cve": "CVE-2026-74724", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "646922a0379496154e8c8faca4f8e2fd9100cacc", "subject": "ipvs: avoid out-of-bounds write in ip_vs_nat_icmp", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74724", "commit_url": "https://git.kernel.org/stable/c/646922a0379496154e8c8faca4f8e2fd9100cacc" }, { "cve": "CVE-2026-74725", "author_name": "Satish Kharat", "author_email": "satishkh@cisco.com", "fix_sha": "ec680ea4ba1bca92a767fb7e7869758bfdd886e3", "subject": "enic: fix tx_hang_reset use-after-free on device removal", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74725", "commit_url": "https://git.kernel.org/stable/c/ec680ea4ba1bca92a767fb7e7869758bfdd886e3" }, { "cve": "CVE-2026-74726", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "683c6ba6e58e6ed1037831ea97dd58d9c0e76b8d", "subject": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74726", "commit_url": "https://git.kernel.org/stable/c/683c6ba6e58e6ed1037831ea97dd58d9c0e76b8d" }, { "cve": "CVE-2026-74727", "author_name": "Antonio Quartulli", "author_email": "antonio@openvpn.net", "fix_sha": "33ec10567fe14456063daf549fdf1a4f53448e4c", "subject": "ovpn: skip rehash for peers already removed from by_id", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74727", "commit_url": "https://git.kernel.org/stable/c/33ec10567fe14456063daf549fdf1a4f53448e4c" }, { "cve": "CVE-2026-74728", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "d852729c5f4f830fbe7413df032e29459b3daf83", "subject": "xfs: handle NULL b_addr in xfs_buf_free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74728", "commit_url": "https://git.kernel.org/stable/c/d852729c5f4f830fbe7413df032e29459b3daf83" }, { "cve": "CVE-2026-74729", "author_name": "Karthikeyan KS", "author_email": "karthiproffesional@gmail.com", "fix_sha": "1acef6d85bfd98bd9dfe1f08bffa397a4dda8a6f", "subject": "soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74729", "commit_url": "https://git.kernel.org/stable/c/1acef6d85bfd98bd9dfe1f08bffa397a4dda8a6f" }, { "cve": "CVE-2026-74730", "author_name": "Anna Schumaker", "author_email": "anna.schumaker@hammerspace.com", "fix_sha": "cf616096a0f3a2b60f7d68b6b39674a6867ded9c", "subject": "NFS: Pin the 'struct nfs_server' during a FREE_STATEID call", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74730", "commit_url": "https://git.kernel.org/stable/c/cf616096a0f3a2b60f7d68b6b39674a6867ded9c" }, { "cve": "CVE-2026-74731", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "8c13364db9c9a43ed286f3a8d0fb9477b1adc43c", "subject": "sched_ext: Skip sub-disable teardown for never-linked sub-schedulers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74731", "commit_url": "https://git.kernel.org/stable/c/8c13364db9c9a43ed286f3a8d0fb9477b1adc43c" }, { "cve": "CVE-2026-74732", "author_name": "Ray Wu", "author_email": "ray.wu@amd.com", "fix_sha": "3141e3d61469bba2624a91c5e2407f110b33b29e", "subject": "drm/amd/display: Check for tg ops in dce110_set_avmute", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74732", "commit_url": "https://git.kernel.org/stable/c/3141e3d61469bba2624a91c5e2407f110b33b29e" }, { "cve": "CVE-2026-74733", "author_name": "Mark Tomlinson", "author_email": "mark.tomlinson@alliedtelesis.co.nz", "fix_sha": "9dc325327babe7f159e84cbe9380a45342da0585", "subject": "gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74733", "commit_url": "https://git.kernel.org/stable/c/9dc325327babe7f159e84cbe9380a45342da0585" }, { "cve": "CVE-2026-74734", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "42d217add8d80d6e7d9f58f80d11ea9b07ea113e", "subject": "firewire: ohci: fix NULL pointer dereference in ar_context_release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74734", "commit_url": "https://git.kernel.org/stable/c/42d217add8d80d6e7d9f58f80d11ea9b07ea113e" }, { "cve": "CVE-2026-74735", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "9006c116dd111d457bf5d074990210f70a4ad2c8", "subject": "l2tp: fix tunnel and session refcount leak on seq_file release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74735", "commit_url": "https://git.kernel.org/stable/c/9006c116dd111d457bf5d074990210f70a4ad2c8" }, { "cve": "CVE-2026-74736", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "120977e2c096deea4e866e4273be9220b957c29e", "subject": "net/sched: cls_bpf: reject dev-bound programs bound to a different device", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74736", "commit_url": "https://git.kernel.org/stable/c/120977e2c096deea4e866e4273be9220b957c29e" }, { "cve": "CVE-2026-74737", "author_name": "Siddharth Vadapalli", "author_email": "s-vadapalli@ti.com", "fix_sha": "36a05d2820077bb3955acb8111e1041d39148037", "subject": "net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74737", "commit_url": "https://git.kernel.org/stable/c/36a05d2820077bb3955acb8111e1041d39148037" }, { "cve": "CVE-2026-74738", "author_name": "Andrey Golovko", "author_email": "andrey.golovko@gmail.com", "fix_sha": "00268f9452d2a0d660aa9c1bb0ca07a994af6a4f", "subject": "regmap: sdw-mbq: don't call an unset readable_reg callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74738", "commit_url": "https://git.kernel.org/stable/c/00268f9452d2a0d660aa9c1bb0ca07a994af6a4f" }, { "cve": "CVE-2026-74739", "author_name": "Zhang Changzhong", "author_email": "zhangchangzhong@huawei.com", "fix_sha": "6d3724e616faf952c3adcf8414fc21a828ef3709", "subject": "net/sched: cls_u32: skip hash tables in u32_bind_class()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74739", "commit_url": "https://git.kernel.org/stable/c/6d3724e616faf952c3adcf8414fc21a828ef3709" }, { "cve": "CVE-2026-74740", "author_name": "Jamal Hadi Salim", "author_email": "jhs@mojatatu.com", "fix_sha": "f60b396ee174206fe08ebf997d16cd3801b77b22", "subject": "net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74740", "commit_url": "https://git.kernel.org/stable/c/f60b396ee174206fe08ebf997d16cd3801b77b22" }, { "cve": "CVE-2026-74741", "author_name": "Jiawen Wu", "author_email": "jiawenwu@trustnetic.com", "fix_sha": "5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea", "subject": "net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74741", "commit_url": "https://git.kernel.org/stable/c/5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea" }, { "cve": "CVE-2026-74742", "author_name": "Jonas K\u00f6ppeler", "author_email": "j.koeppeler@tu-berlin.de", "fix_sha": "60db47f02bfa2aa688938aa199117ec4f8e31d23", "subject": "veth: fix queue index used to wake the peer txq in veth_poll", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74742", "commit_url": "https://git.kernel.org/stable/c/60db47f02bfa2aa688938aa199117ec4f8e31d23" }, { "cve": "CVE-2026-74743", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "cef51860becd9700217c81732ca1eb1ea6ed6fe1", "subject": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74743", "commit_url": "https://git.kernel.org/stable/c/cef51860becd9700217c81732ca1eb1ea6ed6fe1" }, { "cve": "CVE-2026-74744", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "e16e960d55a40d36bd7c2494cc005e757dc9a1ef", "subject": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74744", "commit_url": "https://git.kernel.org/stable/c/e16e960d55a40d36bd7c2494cc005e757dc9a1ef" }, { "cve": "CVE-2026-74745", "author_name": "Jakub Kicinski", "author_email": "kuba@kernel.org", "fix_sha": "51e96fa31f7e7eac2cba8f854e24d36600cc040b", "subject": "eth: bnxt: avoid deadlock when canceling IRQ affinity notifier", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74745", "commit_url": "https://git.kernel.org/stable/c/51e96fa31f7e7eac2cba8f854e24d36600cc040b" }, { "cve": "CVE-2026-74746", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "2014ac62df9d45bb9a004a043e85df7be09ed780", "subject": "netfilter: flowtable: publish GC-visible tuple last", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74746", "commit_url": "https://git.kernel.org/stable/c/2014ac62df9d45bb9a004a043e85df7be09ed780" }, { "cve": "CVE-2026-74747", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "d93660df4dd1d116f608ada4a29a80a5d6f0a6ed", "subject": "ipvs: revalidate ihl to prevent out-of-bounds access", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74747", "commit_url": "https://git.kernel.org/stable/c/d93660df4dd1d116f608ada4a29a80a5d6f0a6ed" }, { "cve": "CVE-2026-74748", "author_name": "Xiang Mei (Microsoft)", "author_email": "xmei5@asu.edu", "fix_sha": "0c88868271653537ed443272dd8e7d13634d214b", "subject": "netfilter: ipset: fix refcount race between list:set GC and swap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74748", "commit_url": "https://git.kernel.org/stable/c/0c88868271653537ed443272dd8e7d13634d214b" }, { "cve": "CVE-2026-74749", "author_name": "Niels Pressel", "author_email": "npressel@ethz.ch", "fix_sha": "ada54c2ba652348c590d1ace6a2f4ff77cbbf809", "subject": "rseq: Prevent hard lockup on granted time slice extension", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74749", "commit_url": "https://git.kernel.org/stable/c/ada54c2ba652348c590d1ace6a2f4ff77cbbf809" }, { "cve": "CVE-2026-74750", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "2da3dfa1ddfe55a065f484750c83660e3bd4ac00", "subject": "ovpn: defer key slot crypto freeing to workqueue", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74750", "commit_url": "https://git.kernel.org/stable/c/2da3dfa1ddfe55a065f484750c83660e3bd4ac00" }, { "cve": "CVE-2026-74751", "author_name": "Michael Neuling", "author_email": "mikey@neuling.org", "fix_sha": "5d588c684833e678a0008eb69c33190f01a65f4b", "subject": "riscv: lib: Fix ZBB strnlen reading past count boundary", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74751", "commit_url": "https://git.kernel.org/stable/c/5d588c684833e678a0008eb69c33190f01a65f4b" }, { "cve": "CVE-2026-74752", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "3dbb44d88b1e94dd31fe43588af7437b34b44d56", "subject": "sctp: validate cookie AUTH state before use", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74752", "commit_url": "https://git.kernel.org/stable/c/3dbb44d88b1e94dd31fe43588af7437b34b44d56" }, { "cve": "CVE-2026-74753", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "fa091f46c3833fb22384f10eade2b4e1e1d0b278", "subject": "perf: Reject exited events as group leaders", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74753", "commit_url": "https://git.kernel.org/stable/c/fa091f46c3833fb22384f10eade2b4e1e1d0b278" }, { "cve": "CVE-2026-74754", "author_name": "Hongjie Fang", "author_email": "hongjiefang@asrmicro.com", "fix_sha": "872f486259ae0bc6b73ca4735a15d013241f73e9", "subject": "scsi: core: pair EH runtime PM get and put", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74754", "commit_url": "https://git.kernel.org/stable/c/872f486259ae0bc6b73ca4735a15d013241f73e9" }, { "cve": "CVE-2026-80519", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "9e163917a86c6adfbe150e13f4c73653a54616de", "subject": "ovpn: finish crypto callback cleanup before peer release", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80519", "commit_url": "https://git.kernel.org/stable/c/9e163917a86c6adfbe150e13f4c73653a54616de" }, { "cve": "CVE-2026-80520", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "41d44ac7a61e2f74453af40d4fe1b82af9ea0ada", "subject": "ovpn: fix NULL dereference when killing missing key", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80520", "commit_url": "https://git.kernel.org/stable/c/41d44ac7a61e2f74453af40d4fe1b82af9ea0ada" }, { "cve": "CVE-2026-80521", "author_name": "Kuniyuki Iwashima", "author_email": "kuniyu@google.com", "fix_sha": "594d905195024b228c962627ae5ae7c17bd582a4", "subject": "af_unix: Unlink scc_entry in unix_del_edge().", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80521", "commit_url": "https://git.kernel.org/stable/c/594d905195024b228c962627ae5ae7c17bd582a4" }, { "cve": "CVE-2026-80522", "author_name": "Vladislav Dronov", "author_email": "vdronov@redhat.com", "fix_sha": "360f2974fcea49c61f6d6f81554741a9eeee7168", "subject": "crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80522", "commit_url": "https://git.kernel.org/stable/c/360f2974fcea49c61f6d6f81554741a9eeee7168" }, { "cve": "CVE-2026-80523", "author_name": "Yixun Lan", "author_email": "dlan@kernel.org", "fix_sha": "eb525edd48907795c0d4e498ff57ad168070b289", "subject": "clk: spacemit: k3: set hdma clock as critical", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80523", "commit_url": "https://git.kernel.org/stable/c/eb525edd48907795c0d4e498ff57ad168070b289" }, { "cve": "CVE-2026-80524", "author_name": "Mostafa Saleh", "author_email": "smostafa@google.com", "fix_sha": "650c88738ae8976f46ba71b24dd8aa311adc6fde", "subject": "optee: ffa: Add NULL check in optee_ffa_lend_protmem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80524", "commit_url": "https://git.kernel.org/stable/c/650c88738ae8976f46ba71b24dd8aa311adc6fde" }, { "cve": "CVE-2026-80525", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "0c0e418dbcf0582bf80d8dbfd9b306607c065992", "subject": "ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80525", "commit_url": "https://git.kernel.org/stable/c/0c0e418dbcf0582bf80d8dbfd9b306607c065992" }, { "cve": "CVE-2026-80526", "author_name": "Mark Brown", "author_email": "broonie@kernel.org", "fix_sha": "8fb41964f7e4e4207c8999af2056894caa7a252a", "subject": "ASoC: tas2562: Validate values for volume writes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80526", "commit_url": "https://git.kernel.org/stable/c/8fb41964f7e4e4207c8999af2056894caa7a252a" }, { "cve": "CVE-2026-80527", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "50958bb928bad3bdba9e5d1b7ff4bbadcf6951e6", "subject": "ceph: fix hanging __ceph_get_caps() with stale mds_wanted", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80527", "commit_url": "https://git.kernel.org/stable/c/50958bb928bad3bdba9e5d1b7ff4bbadcf6951e6" }, { "cve": "CVE-2026-80528", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "5b602344a49e039e792ce5a8923bcc61412ee134", "subject": "ceph: avoid fs reclaim while using current->journal_info", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80528", "commit_url": "https://git.kernel.org/stable/c/5b602344a49e039e792ce5a8923bcc61412ee134" }, { "cve": "CVE-2026-80529", "author_name": "Long Li", "author_email": "leo.lilong@huawei.com", "fix_sha": "e2b4a856085e9bd939bde2dee0d08b1d41babde9", "subject": "xfs: don't swallow dquot recovery verification errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80529", "commit_url": "https://git.kernel.org/stable/c/e2b4a856085e9bd939bde2dee0d08b1d41babde9" }, { "cve": "CVE-2026-80530", "author_name": "Lin Jiapeng", "author_email": "ljp1205831794@gmail.com", "fix_sha": "b2d5a81dae385333f9734910277fbf94c78bd17f", "subject": "xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80530", "commit_url": "https://git.kernel.org/stable/c/b2d5a81dae385333f9734910277fbf94c78bd17f" }, { "cve": "CVE-2026-80531", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "0c88e10d12de9ca7cbed1467bb1b52310101bff8", "subject": "xfs: avoid UAF on sc->tempip in xrep_tempfile_create", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80531", "commit_url": "https://git.kernel.org/stable/c/0c88e10d12de9ca7cbed1467bb1b52310101bff8" }, { "cve": "CVE-2026-80532", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "6d67c6b99f1fc07c64b97fcbc974c6f1ada7f622", "subject": "xfs: fix another iunlink infinite loop bug in online fsck", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80532", "commit_url": "https://git.kernel.org/stable/c/6d67c6b99f1fc07c64b97fcbc974c6f1ada7f622" }, { "cve": "CVE-2026-80533", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "1e96a00e0d3a00be6e4f368b2f18e2d345f813ce", "subject": "xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80533", "commit_url": "https://git.kernel.org/stable/c/1e96a00e0d3a00be6e4f368b2f18e2d345f813ce" }, { "cve": "CVE-2026-80534", "author_name": "Long Li", "author_email": "leo.lilong@huawei.com", "fix_sha": "63320a0f70f66f311f4bccff3af0719c2119f46c", "subject": "xfs: fix ilock leak on error in xfs_dq_get_next_id", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80534", "commit_url": "https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c" }, { "cve": "CVE-2026-80535", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "5fc643fb86599e29b38e7b2c2680b4b15bf8f772", "subject": "xfs: don't double-lock when deleting a self-referential directory", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80535", "commit_url": "https://git.kernel.org/stable/c/5fc643fb86599e29b38e7b2c2680b4b15bf8f772" }, { "cve": "CVE-2026-80536", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "813f8136a2ce1fee266d02a7df73db6e8a541604", "subject": "xfs: bounds-check buffer log item's dirty bitmap", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80536", "commit_url": "https://git.kernel.org/stable/c/813f8136a2ce1fee266d02a7df73db6e8a541604" }, { "cve": "CVE-2026-80537", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "cc3144da377de5fb422d44a2311f978623f7c900", "subject": "xfs: fix off-by-one in rtrefcount btree root level validation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80537", "commit_url": "https://git.kernel.org/stable/c/cc3144da377de5fb422d44a2311f978623f7c900" }, { "cve": "CVE-2026-80538", "author_name": "Guanghui Yang", "author_email": "3497809730@qq.com", "fix_sha": "b7e53968cb8882c2d276429ea8550848a4940874", "subject": "xfs: propagate errors from xfs_rtginode_load", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80538", "commit_url": "https://git.kernel.org/stable/c/b7e53968cb8882c2d276429ea8550848a4940874" }, { "cve": "CVE-2026-80539", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "931cd1d1baeae68e8eb2c23bc1f3d8934dca6241", "subject": "drm/amdgpu: disallow multiple FENCE chunks in one submit", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80539", "commit_url": "https://git.kernel.org/stable/c/931cd1d1baeae68e8eb2c23bc1f3d8934dca6241" }, { "cve": "CVE-2026-80540", "author_name": "David Rosca", "author_email": "david.rosca@amd.com", "fix_sha": "b8bb9ba3f101a1b0011f785a577a4a0a38371174", "subject": "drm/amdgpu: Fix UVD decode image min size calculation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80540", "commit_url": "https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174" }, { "cve": "CVE-2026-80541", "author_name": "Candice Li", "author_email": "candice.li@amd.com", "fix_sha": "5e9d136ad74df4edec67e502ce267597064d8f86", "subject": "drm/amdgpu: validate GEM_CREATE domain combinations", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80541", "commit_url": "https://git.kernel.org/stable/c/5e9d136ad74df4edec67e502ce267597064d8f86" }, { "cve": "CVE-2026-80542", "author_name": "Samuel Pitoiset", "author_email": "samuel.pitoiset@gmail.com", "fix_sha": "f2a1c4c6fe0a6fcde02e59dde546dba28d283635", "subject": "drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80542", "commit_url": "https://git.kernel.org/stable/c/f2a1c4c6fe0a6fcde02e59dde546dba28d283635" }, { "cve": "CVE-2026-80543", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "eb363254472493e3458156fc11fd56dca92f4333", "subject": "s390/zcrypt: Pad trailing CCA or EP11 message with zeros", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80543", "commit_url": "https://git.kernel.org/stable/c/eb363254472493e3458156fc11fd56dca92f4333" }, { "cve": "CVE-2026-80544", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "0864a163783bff109b548266921829ea794edc93", "subject": "s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80544", "commit_url": "https://git.kernel.org/stable/c/0864a163783bff109b548266921829ea794edc93" }, { "cve": "CVE-2026-80545", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "17ac0bc866fc624cd05f022dcd8b730c0af11bb1", "subject": "s390/zcrypt: Improve EP11 CPRB length and overflow checks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80545", "commit_url": "https://git.kernel.org/stable/c/17ac0bc866fc624cd05f022dcd8b730c0af11bb1" }, { "cve": "CVE-2026-80546", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "35ac6754ba6da45fd193f5ce3f665f7490b830d5", "subject": "s390/zcrypt: Improve CCA CPRB length and overflow checks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80546", "commit_url": "https://git.kernel.org/stable/c/35ac6754ba6da45fd193f5ce3f665f7490b830d5" }, { "cve": "CVE-2026-80547", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "16b0798024c0e9117e395829ddbbe70981c79d9c", "subject": "s390/vfio_ccw: Implement a crw lock", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80547", "commit_url": "https://git.kernel.org/stable/c/16b0798024c0e9117e395829ddbbe70981c79d9c" }, { "cve": "CVE-2026-80548", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "34f4feff3e90bd09308fad0974e97113b23b812a", "subject": "s390/vfio_ccw: Selectively expand io_mutex", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80548", "commit_url": "https://git.kernel.org/stable/c/34f4feff3e90bd09308fad0974e97113b23b812a" }, { "cve": "CVE-2026-80549", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "0c11f61a876ed6fcca53d442ed3f33ea8362a0f9", "subject": "s390/vfio_ccw: Move cp cleanup out of not operational", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80549", "commit_url": "https://git.kernel.org/stable/c/0c11f61a876ed6fcca53d442ed3f33ea8362a0f9" }, { "cve": "CVE-2026-80550", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "a005b7f1a491ffda61bff0fd0f6548f8986fb977", "subject": "s390/vfio_ccw: Fix out of bounds check on CCW array", "cvss_score": 7.9, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80550", "commit_url": "https://git.kernel.org/stable/c/a005b7f1a491ffda61bff0fd0f6548f8986fb977" }, { "cve": "CVE-2026-80551", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "565bef268d75bf7df665bce6923a88cd0eb74592", "subject": "s390/vfio_ccw: Ensure first IDAW remains constant", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80551", "commit_url": "https://git.kernel.org/stable/c/565bef268d75bf7df665bce6923a88cd0eb74592" }, { "cve": "CVE-2026-80552", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "9f5f9a78fedc45bc29d6a0a64e3a3472361afae5", "subject": "s390/vfio_ccw: Ensure index for read/write regions are within range", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80552", "commit_url": "https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5" }, { "cve": "CVE-2026-80553", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "79c60b2c61105368dcc8444eb45847e21734f7c4", "subject": "s390/vfio_ccw: Cancel existing workqueues", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80553", "commit_url": "https://git.kernel.org/stable/c/79c60b2c61105368dcc8444eb45847e21734f7c4" }, { "cve": "CVE-2026-80554", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "5405c90d6a47b3014e74ee0618a162449abbbc93", "subject": "s390/vfio_ccw: Limit the number of channel program segments", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80554", "commit_url": "https://git.kernel.org/stable/c/5405c90d6a47b3014e74ee0618a162449abbbc93" }, { "cve": "CVE-2026-80555", "author_name": "Eric Farman", "author_email": "farman@linux.ibm.com", "fix_sha": "74186c2968f8f756ac3226b545b598457c910c75", "subject": "s390/vfio_ccw: Free all memory if cp_init() fails", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80555", "commit_url": "https://git.kernel.org/stable/c/74186c2968f8f756ac3226b545b598457c910c75" }, { "cve": "CVE-2026-80556", "author_name": "Pei Xiao", "author_email": "xiaopei01@kylinos.cn", "fix_sha": "c125ee35a49a0518521b52b27631eef061b8719a", "subject": "mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80556", "commit_url": "https://git.kernel.org/stable/c/c125ee35a49a0518521b52b27631eef061b8719a" }, { "cve": "CVE-2026-80557", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "00ead17c7de137a692edee59f2772e6af687e8eb", "subject": "libceph: fix OOB read in decode_watchers() via missing bounds check", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80557", "commit_url": "https://git.kernel.org/stable/c/00ead17c7de137a692edee59f2772e6af687e8eb" }, { "cve": "CVE-2026-80558", "author_name": "Raphael Zimmer", "author_email": "raphael.zimmer@tu-ilmenau.de", "fix_sha": "3660b98d1204b419f6a77e9a295f148dcf38d042", "subject": "libceph: Avoid using invalid osd indices from primary_temp", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80558", "commit_url": "https://git.kernel.org/stable/c/3660b98d1204b419f6a77e9a295f148dcf38d042" }, { "cve": "CVE-2026-80559", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "9da976eb649c9e2f588a4499410e4d8af687925f", "subject": "Input: sur40 - fix input device registration ordering", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80559", "commit_url": "https://git.kernel.org/stable/c/9da976eb649c9e2f588a4499410e4d8af687925f" }, { "cve": "CVE-2026-80560", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "32ef1b30ad736519f7a207bcc2986f3d4129d972", "subject": "openrisc: signal: do not restore privileged SR bits on sigreturn", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80560", "commit_url": "https://git.kernel.org/stable/c/32ef1b30ad736519f7a207bcc2986f3d4129d972" }, { "cve": "CVE-2026-80561", "author_name": "Pavitra Jha", "author_email": "jhapavitra98@gmail.com", "fix_sha": "437b6551cfcc235eea1d735a874f9d421f555e17", "subject": "libceph: fix multiple unsafe decodes in decode_locker()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80561", "commit_url": "https://git.kernel.org/stable/c/437b6551cfcc235eea1d735a874f9d421f555e17" }, { "cve": "CVE-2026-80562", "author_name": "Junjie Cao", "author_email": "junjie.cao@intel.com", "fix_sha": "600411ea1f2443fdf5b1af9b6480f616d7aff9d0", "subject": "gpio: ml-ioh: use raw_spinlock_t for the register lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80562", "commit_url": "https://git.kernel.org/stable/c/600411ea1f2443fdf5b1af9b6480f616d7aff9d0" }, { "cve": "CVE-2026-80563", "author_name": "Cengiz Can", "author_email": "cengiz.can@canonical.com", "fix_sha": "44f3468a0aef1aabdad551898ab7cfa2a9d20e99", "subject": "gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80563", "commit_url": "https://git.kernel.org/stable/c/44f3468a0aef1aabdad551898ab7cfa2a9d20e99" }, { "cve": "CVE-2026-80564", "author_name": "Jordan Rhee", "author_email": "jordanrhee@google.com", "fix_sha": "3992ced109c70b771efad9e51ae68e5c7a04dea3", "subject": "gve: fix NULL dereference due to missing ptp adjfine", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80564", "commit_url": "https://git.kernel.org/stable/c/3992ced109c70b771efad9e51ae68e5c7a04dea3" }, { "cve": "CVE-2026-80565", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "9c75402286409f5e1a75e4a445555c84066f89db", "subject": "crypto: qce - fix error path in devm_qce_register_algs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80565", "commit_url": "https://git.kernel.org/stable/c/9c75402286409f5e1a75e4a445555c84066f89db" }, { "cve": "CVE-2026-80566", "author_name": "Jianing Li", "author_email": "m13940358460@163.com", "fix_sha": "27f380ef0e1d3de3cde114e02d33f9320ce3a5a6", "subject": "Input: hynitron_cstxxx - validate touch count and finger IDs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80566", "commit_url": "https://git.kernel.org/stable/c/27f380ef0e1d3de3cde114e02d33f9320ce3a5a6" }, { "cve": "CVE-2026-80567", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "8786d74bf50e6797b6f655eb381ef6b25451161f", "subject": "Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80567", "commit_url": "https://git.kernel.org/stable/c/8786d74bf50e6797b6f655eb381ef6b25451161f" }, { "cve": "CVE-2026-80568", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "fbfd76746adc16d64be29ff113f673b70bc3f5c2", "subject": "Input: synaptics-rmi4 - block s_input when F54 queue is busy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80568", "commit_url": "https://git.kernel.org/stable/c/fbfd76746adc16d64be29ff113f673b70bc3f5c2" }, { "cve": "CVE-2026-80569", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "49c5adc2b7d6e43c5cf033e1c86fdb9c16ababb1", "subject": "Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80569", "commit_url": "https://git.kernel.org/stable/c/49c5adc2b7d6e43c5cf033e1c86fdb9c16ababb1" }, { "cve": "CVE-2026-80570", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "dc76c3c8e8ad09362b8c1561f3928288c15cba2e", "subject": "Input: synaptics-rmi4 - zero report size on F54 work error", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80570", "commit_url": "https://git.kernel.org/stable/c/dc76c3c8e8ad09362b8c1561f3928288c15cba2e" }, { "cve": "CVE-2026-80571", "author_name": "George Wilson", "author_email": "gcwilson@linux.ibm.com", "fix_sha": "5b17f3f34391372faf03e79d947e0c50ab6dd258", "subject": "powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80571", "commit_url": "https://git.kernel.org/stable/c/5b17f3f34391372faf03e79d947e0c50ab6dd258" }, { "cve": "CVE-2026-80572", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "c83e79c0842ed29860648bcce5022ef0ba5001c6", "subject": "Input: byd - synchronize timer deletion before freeing private data", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80572", "commit_url": "https://git.kernel.org/stable/c/c83e79c0842ed29860648bcce5022ef0ba5001c6" }, { "cve": "CVE-2026-80573", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "5751c781d3c97ab6ce0e2a966156ed882152c415", "subject": "Input: iforce - validate input packet lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80573", "commit_url": "https://git.kernel.org/stable/c/5751c781d3c97ab6ce0e2a966156ed882152c415" }, { "cve": "CVE-2026-80574", "author_name": "Richard Davies", "author_email": "richard@arachsys.com", "fix_sha": "296736076b3fd078742651c719555a488624023a", "subject": "Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80574", "commit_url": "https://git.kernel.org/stable/c/296736076b3fd078742651c719555a488624023a" }, { "cve": "CVE-2026-80575", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "7d5c576cb1c86047b1fcb1aa9532e17fc5e46c1d", "subject": "Input: cs40l50-vibra - validate custom data from user space", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80575", "commit_url": "https://git.kernel.org/stable/c/7d5c576cb1c86047b1fcb1aa9532e17fc5e46c1d" }, { "cve": "CVE-2026-80576", "author_name": "Candice Li", "author_email": "candice.li@amd.com", "fix_sha": "fd37f9dd5b5ab70a46fa7bc76623c0528d602b27", "subject": "drm/amdgpu: reject oversized IBs with per-ring packet limits", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80576", "commit_url": "https://git.kernel.org/stable/c/fd37f9dd5b5ab70a46fa7bc76623c0528d602b27" }, { "cve": "CVE-2026-80577", "author_name": "Osama Abdelkader", "author_email": "osama.abdelkader@gmail.com", "fix_sha": "2b8f13d3c7e26c46c20d9e367904cf01729c88e6", "subject": "drm/panthor: skip zero-sized firmware sections", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80577", "commit_url": "https://git.kernel.org/stable/c/2b8f13d3c7e26c46c20d9e367904cf01729c88e6" }, { "cve": "CVE-2026-80578", "author_name": "Mingyu Wang", "author_email": "25181214217@stu.xidian.edu.cn", "fix_sha": "81cc73be40c6f028f1ee3f438ace46afe666dbae", "subject": "fbdev: core: Fix pointer desynchronization in fb_io_read()", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80578", "commit_url": "https://git.kernel.org/stable/c/81cc73be40c6f028f1ee3f438ace46afe666dbae" }, { "cve": "CVE-2026-80579", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "95e647d2a5304a8fd11f1ba3c8502de700650131", "subject": "fbdev: clear fb_info->mode before deleting a videomode", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80579", "commit_url": "https://git.kernel.org/stable/c/95e647d2a5304a8fd11f1ba3c8502de700650131" }, { "cve": "CVE-2026-80580", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "d15d51fb26e830af58f3f21964f1c09c239077ea", "subject": "fbdev: bound mode sysfs output to the sysfs buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80580", "commit_url": "https://git.kernel.org/stable/c/d15d51fb26e830af58f3f21964f1c09c239077ea" }, { "cve": "CVE-2026-80581", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "17661c67b206612cb3ba65d5ae726cd2015d0a53", "subject": "ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80581", "commit_url": "https://git.kernel.org/stable/c/17661c67b206612cb3ba65d5ae726cd2015d0a53" }, { "cve": "CVE-2026-80582", "author_name": "Christian A. Ehrhardt", "author_email": "lk@c--e.de", "fix_sha": "617bbd08714857c1613d7c550d43a9092ec0fb97", "subject": "drm/shmem_helper: Check VMA boundaries for PMD mappings", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80582", "commit_url": "https://git.kernel.org/stable/c/617bbd08714857c1613d7c550d43a9092ec0fb97" }, { "cve": "CVE-2026-80583", "author_name": "Dawid Wro\u0301bel", "author_email": "me@dawidwrobel.com", "fix_sha": "1ba381759e45d5d0442452cfa5c42e836191a568", "subject": "ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80583", "commit_url": "https://git.kernel.org/stable/c/1ba381759e45d5d0442452cfa5c42e836191a568" }, { "cve": "CVE-2026-80584", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "d141f087b1af656f055d7c5793a3e87817ba0bbe", "subject": "s390/qeth: validate user buffer length in SNMP and ARP query ioctls", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80584", "commit_url": "https://git.kernel.org/stable/c/d141f087b1af656f055d7c5793a3e87817ba0bbe" }, { "cve": "CVE-2026-80585", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "e00b63056fb4f261455b3e5df5268a1f8ce47a87", "subject": "mptcp: fastopen: only mark MPTFO subflows with SYN data", "cvss_score": 9.4, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80585", "commit_url": "https://git.kernel.org/stable/c/e00b63056fb4f261455b3e5df5268a1f8ce47a87" }, { "cve": "CVE-2026-80586", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "35772b4981f38ba8059372cde8753e8e477e98ec", "subject": "mptcp: options: reset DSS fields in case of unexpected size", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80586", "commit_url": "https://git.kernel.org/stable/c/35772b4981f38ba8059372cde8753e8e477e98ec" }, { "cve": "CVE-2026-80587", "author_name": "Matthieu Baerts (NGI0)", "author_email": "matttbe@kernel.org", "fix_sha": "b6ee361524641f57b2e2363f7737f20e17f67827", "subject": "mptcp: avoid combining some incoming suboptions", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80587", "commit_url": "https://git.kernel.org/stable/c/b6ee361524641f57b2e2363f7737f20e17f67827" }, { "cve": "CVE-2026-80588", "author_name": "Paolo Abeni", "author_email": "pabeni@redhat.com", "fix_sha": "41b49a8b914ec7dcb03eae93fb27f3c464078644", "subject": "mptcp: reclaim forward-allocated memory on RX path errors", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80588", "commit_url": "https://git.kernel.org/stable/c/41b49a8b914ec7dcb03eae93fb27f3c464078644" }, { "cve": "CVE-2026-80589", "author_name": "Chao Shi", "author_email": "coshi036@gmail.com", "fix_sha": "26cb8ebbfaf713c82e142d08828d4d765057633b", "subject": "block: stop the timeout timer when releasing a never added disk", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80589", "commit_url": "https://git.kernel.org/stable/c/26cb8ebbfaf713c82e142d08828d4d765057633b" }, { "cve": "CVE-2026-80590", "author_name": "Xinyang Ge", "author_email": "xinyang@anthropic.com", "fix_sha": "d5dc1e69fd7258ea605c9952e5d5947539159ae3", "subject": "inet: frags: strip GSO state from fragments before reassembly", "cvss_score": 8.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80590", "commit_url": "https://git.kernel.org/stable/c/d5dc1e69fd7258ea605c9952e5d5947539159ae3" }, { "cve": "CVE-2026-80591", "author_name": "Keshav Verma", "author_email": "iganschel@gmail.com", "fix_sha": "5ef5bc304f23c3fe255d4936472378dcb74d0e94", "subject": "f2fs: fix listxattr handling of corrupted xattr entries", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80591", "commit_url": "https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94" }, { "cve": "CVE-2026-80592", "author_name": "Zenghui Yu", "author_email": "yuzenghui@huawei.com", "fix_sha": "7746d72c64054976887928d64d2caf25c5a6dcc0", "subject": "samples/damon/mtier: fail early if address range parameters are invalid", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80592", "commit_url": "https://git.kernel.org/stable/c/7746d72c64054976887928d64d2caf25c5a6dcc0" }, { "cve": "CVE-2026-80593", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "e2735b39f044bad7bf2017aef248935525bc0b97", "subject": "hwmon: (asus_atk0110) Check package count before accessing element", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80593", "commit_url": "https://git.kernel.org/stable/c/e2735b39f044bad7bf2017aef248935525bc0b97" }, { "cve": "CVE-2026-80594", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "d4579af29e67ca8722db0a1194227f8015c8981d", "subject": "Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80594", "commit_url": "https://git.kernel.org/stable/c/d4579af29e67ca8722db0a1194227f8015c8981d" }, { "cve": "CVE-2026-80595", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c", "subject": "Input: ims-pcu - add response length checks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80595", "commit_url": "https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c" }, { "cve": "CVE-2026-80596", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "001428ea4d2c371107cb984108e266adf99f1f1e", "subject": "Input: ims-pcu - only expose sysfs attributes on control interface", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80596", "commit_url": "https://git.kernel.org/stable/c/001428ea4d2c371107cb984108e266adf99f1f1e" }, { "cve": "CVE-2026-80597", "author_name": "Florian Fuchs", "author_email": "fuchsfl@gmail.com", "fix_sha": "357e3b8e3a8769ba36eb8ec5e053e4825f1a9329", "subject": "mtd: maps: vmu-flash: fix NULL pointer dereference in initialization", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80597", "commit_url": "https://git.kernel.org/stable/c/357e3b8e3a8769ba36eb8ec5e053e4825f1a9329" }, { "cve": "CVE-2026-80598", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "7160a57192fb16d7a6fa9b7f5c7ac341d2444a89", "subject": "ntfs3: fix out-of-bounds read in decompress_lznt", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80598", "commit_url": "https://git.kernel.org/stable/c/7160a57192fb16d7a6fa9b7f5c7ac341d2444a89" }, { "cve": "CVE-2026-80599", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "26560c4a03dc4d607331600c187f59ab2df5f341", "subject": "batman-adv: dat: ensure accessible eth_hdr proto field", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80599", "commit_url": "https://git.kernel.org/stable/c/26560c4a03dc4d607331600c187f59ab2df5f341" }, { "cve": "CVE-2026-80600", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "48067b2ae4504500a7093d9e1e16b42e70330480", "subject": "batman-adv: dat: acquire ARP hw source only after skb realloc", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80600", "commit_url": "https://git.kernel.org/stable/c/48067b2ae4504500a7093d9e1e16b42e70330480" }, { "cve": "CVE-2026-80601", "author_name": "Sven Eckelmann", "author_email": "sven@narfation.org", "fix_sha": "77880a3be88d378d60cc1e8f8ec70430e2ed0518", "subject": "batman-adv: gw: acquire ethernet header only after skb realloc", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80601", "commit_url": "https://git.kernel.org/stable/c/77880a3be88d378d60cc1e8f8ec70430e2ed0518" }, { "cve": "CVE-2026-80602", "author_name": "Sandipan Das", "author_email": "sandipan.das@amd.com", "fix_sha": "2a892294b83f541115c94b0bb637f39bef187657", "subject": "perf/x86/amd/lbr: Fix kernel address leakage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80602", "commit_url": "https://git.kernel.org/stable/c/2a892294b83f541115c94b0bb637f39bef187657" }, { "cve": "CVE-2026-80603", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "ef6400ca25a13fd6dedbe8ef4a1d0979bbbfe88a", "subject": "netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80603", "commit_url": "https://git.kernel.org/stable/c/ef6400ca25a13fd6dedbe8ef4a1d0979bbbfe88a" }, { "cve": "CVE-2026-80604", "author_name": "Lee Jones", "author_email": "lee@kernel.org", "fix_sha": "af1a9b65ebe8a948eda805c14b78d4d0767cb1b5", "subject": "HID: core: Fix OOB read in hid_get_report for numbered reports", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80604", "commit_url": "https://git.kernel.org/stable/c/af1a9b65ebe8a948eda805c14b78d4d0767cb1b5" }, { "cve": "CVE-2026-80605", "author_name": "Georgiy Osokin", "author_email": "g.osokin@auroraos.dev", "fix_sha": "0021eb09041f021c079be1022934a280f7f176c0", "subject": "HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80605", "commit_url": "https://git.kernel.org/stable/c/0021eb09041f021c079be1022934a280f7f176c0" }, { "cve": "CVE-2026-80606", "author_name": "Shuicheng Lin", "author_email": "shuicheng.lin@intel.com", "fix_sha": "dca6e08c923a44d2d66b955e03dd57a3a38c2b94", "subject": "drm/xe/userptr: Hold notifier_lock for write on inject test path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80606", "commit_url": "https://git.kernel.org/stable/c/dca6e08c923a44d2d66b955e03dd57a3a38c2b94" }, { "cve": "CVE-2026-80607", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "251a8fe1b9aedccd298b77bc28426d564c5a923f", "subject": "tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80607", "commit_url": "https://git.kernel.org/stable/c/251a8fe1b9aedccd298b77bc28426d564c5a923f" }, { "cve": "CVE-2026-80608", "author_name": "Lizhi Hou", "author_email": "lizhi.hou@amd.com", "fix_sha": "b4a0500fdf6e61a6c5f92ff2e61bc91578075803", "subject": "accel/amdxdna: Fix iommu domain lifetime race during device removal", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80608", "commit_url": "https://git.kernel.org/stable/c/b4a0500fdf6e61a6c5f92ff2e61bc91578075803" }, { "cve": "CVE-2026-80609", "author_name": "Matvey Kovalev", "author_email": "matvey.kovalev@ispras.ru", "fix_sha": "f9ba47fce5932c15891c89c60e76dfaca919cb8d", "subject": "qede: fix out-of-bounds check for cqe->len_list[]", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80609", "commit_url": "https://git.kernel.org/stable/c/f9ba47fce5932c15891c89c60e76dfaca919cb8d" }, { "cve": "CVE-2026-80610", "author_name": "Wei Fang", "author_email": "wei.fang@nxp.com", "fix_sha": "5da65537792b68b6052ffcab65e04c27aea6dfe4", "subject": "net: enetc: fix potential divide-by-zero when num_vsi is zero", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80610", "commit_url": "https://git.kernel.org/stable/c/5da65537792b68b6052ffcab65e04c27aea6dfe4" }, { "cve": "CVE-2026-80611", "author_name": "Li RongQing", "author_email": "lirongqing@baidu.com", "fix_sha": "956ca5d72c76504824c8eb601879da9476973e15", "subject": "ACPI: processor_idle: Mark LPI enter functions as __cpuidle", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80611", "commit_url": "https://git.kernel.org/stable/c/956ca5d72c76504824c8eb601879da9476973e15" }, { "cve": "CVE-2026-80612", "author_name": "Jakub Sitnicki", "author_email": "jakub@cloudflare.com", "fix_sha": "c00320b0e355c4bf0ae4743a53b4180fea237546", "subject": "net: lwtunnel: Drop skb metadata before LWT encapsulation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80612", "commit_url": "https://git.kernel.org/stable/c/c00320b0e355c4bf0ae4743a53b4180fea237546" }, { "cve": "CVE-2026-80613", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "6739027cb72da26890edd424c77080d187b2a92e", "subject": "veth: fix NAPI leak in XDP enable error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80613", "commit_url": "https://git.kernel.org/stable/c/6739027cb72da26890edd424c77080d187b2a92e" }, { "cve": "CVE-2026-80614", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "f623d38fe6c4e8c40b23f42cc6fe6963fa49997b", "subject": "net: emac: Fix NULL pointer dereference in emac_probe", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80614", "commit_url": "https://git.kernel.org/stable/c/f623d38fe6c4e8c40b23f42cc6fe6963fa49997b" }, { "cve": "CVE-2026-80615", "author_name": "Ilya Maximets", "author_email": "i.maximets@ovn.org", "fix_sha": "4c6d43db2a4d2cef3921e885cf34798f790d34ea", "subject": "net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80615", "commit_url": "https://git.kernel.org/stable/c/4c6d43db2a4d2cef3921e885cf34798f790d34ea" }, { "cve": "CVE-2026-80616", "author_name": "Ivan Abramov", "author_email": "i.abramov@mt-integration.ru", "fix_sha": "0569f67ed6a7af838e2141da93c68e6b6013f483", "subject": "ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80616", "commit_url": "https://git.kernel.org/stable/c/0569f67ed6a7af838e2141da93c68e6b6013f483" }, { "cve": "CVE-2026-80617", "author_name": "Wayen Yan", "author_email": "win847@gmail.com", "fix_sha": "5c121ee635680c93d7074becf14cfbaac140f80d", "subject": "net: airoha: fix foe_check_time allocation size", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80617", "commit_url": "https://git.kernel.org/stable/c/5c121ee635680c93d7074becf14cfbaac140f80d" }, { "cve": "CVE-2026-80618", "author_name": "Yunxiang Li", "author_email": "yunxiang.li@amd.com", "fix_sha": "3f0cc1735273a57c5116710cf0202e12152f59cc", "subject": "drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80618", "commit_url": "https://git.kernel.org/stable/c/3f0cc1735273a57c5116710cf0202e12152f59cc" }, { "cve": "CVE-2026-80619", "author_name": "Maxime B\u00e9lair", "author_email": "maxime.belair@canonical.com", "fix_sha": "7b42f95813dc9ceb6bda35afcf914630909a19f9", "subject": "apparmor: fix potential UAF in aa_replace_profiles", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80619", "commit_url": "https://git.kernel.org/stable/c/7b42f95813dc9ceb6bda35afcf914630909a19f9" }, { "cve": "CVE-2026-80620", "author_name": "Yuanhe Shu", "author_email": "xiangzao@linux.alibaba.com", "fix_sha": "f64e03da0d83cb173743888bff4a7e61476a8fc2", "subject": "Revert \"PCI/MSI: Unmap MSI-X region on error\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80620", "commit_url": "https://git.kernel.org/stable/c/f64e03da0d83cb173743888bff4a7e61476a8fc2" }, { "cve": "CVE-2026-80621", "author_name": "Shuvam Pandey", "author_email": "shuvampandey1@gmail.com", "fix_sha": "26b67fa10ef84ea667942491b50e6261a45f098d", "subject": "PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80621", "commit_url": "https://git.kernel.org/stable/c/26b67fa10ef84ea667942491b50e6261a45f098d" }, { "cve": "CVE-2026-80622", "author_name": "James Kim", "author_email": "james010kim@gmail.com", "fix_sha": "bbf003b7794d6ad6f939fdd29f1f1bde8ac554c1", "subject": "char: tlclk: fix use-after-free in tlclk_cleanup()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80622", "commit_url": "https://git.kernel.org/stable/c/bbf003b7794d6ad6f939fdd29f1f1bde8ac554c1" }, { "cve": "CVE-2026-80623", "author_name": "James Clark", "author_email": "james.clark@linaro.org", "fix_sha": "2ab4645fe4206c142a5f1491e191c906279686cf", "subject": "coresight: ete: Always save state on power down", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80623", "commit_url": "https://git.kernel.org/stable/c/2ab4645fe4206c142a5f1491e191c906279686cf" }, { "cve": "CVE-2026-80624", "author_name": "Charles Keepax", "author_email": "ckeepax@opensource.cirrus.com", "fix_sha": "b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c", "subject": "mfd: cs42l43: Sanity check firmware size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80624", "commit_url": "https://git.kernel.org/stable/c/b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c" }, { "cve": "CVE-2026-80625", "author_name": "Junxian Huang", "author_email": "huangjunxian6@hisilicon.com", "fix_sha": "c0bd03b850d81a8914168d87ddf7f6ffa58875ef", "subject": "RDMA/hns: Fix memory leak of bonding resources", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80625", "commit_url": "https://git.kernel.org/stable/c/c0bd03b850d81a8914168d87ddf7f6ffa58875ef" }, { "cve": "CVE-2026-80626", "author_name": "Aboorva Devarajan", "author_email": "aboorvad@linux.ibm.com", "fix_sha": "81e3a86030462824a67d697739cf3f387f4ba350", "subject": "powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80626", "commit_url": "https://git.kernel.org/stable/c/81e3a86030462824a67d697739cf3f387f4ba350" }, { "cve": "CVE-2026-80627", "author_name": "Yadan Fan", "author_email": "ydfan@suse.com", "fix_sha": "1b001b16bc88f3f7817e228acfd91ee01bdcfcce", "subject": "MIPS: mm: Fix out-of-bounds write in maar_res_walk()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80627", "commit_url": "https://git.kernel.org/stable/c/1b001b16bc88f3f7817e228acfd91ee01bdcfcce" }, { "cve": "CVE-2026-80628", "author_name": "Cen Zhang", "author_email": "zzzccc427@gmail.com", "fix_sha": "49ce92d207820f588b0406add82f053decfbe5d9", "subject": "ALSA: seq: oss: Serialize readq reset state with q->lock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80628", "commit_url": "https://git.kernel.org/stable/c/49ce92d207820f588b0406add82f053decfbe5d9" }, { "cve": "CVE-2026-80629", "author_name": "Ratheesh Kannoth", "author_email": "rkannoth@marvell.com", "fix_sha": "f9cd6fabe0e7c7f6fc30c6c192c7ed72aba37232", "subject": "octeontx2-af: npc: Fix size of entry2cntr_map", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80629", "commit_url": "https://git.kernel.org/stable/c/f9cd6fabe0e7c7f6fc30c6c192c7ed72aba37232" }, { "cve": "CVE-2026-80630", "author_name": "Victor Nogueira", "author_email": "victor@mojatatu.com", "fix_sha": "097f6fc7b1ae362dd7a9444b2572162fda73b284", "subject": "net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80630", "commit_url": "https://git.kernel.org/stable/c/097f6fc7b1ae362dd7a9444b2572162fda73b284" }, { "cve": "CVE-2026-80631", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "b0d27d43791b7a3057c3c4aedf9b4aa033d37c46", "subject": "btrfs: lzo: reject compressed segment that overflows the compressed input", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80631", "commit_url": "https://git.kernel.org/stable/c/b0d27d43791b7a3057c3c4aedf9b4aa033d37c46" }, { "cve": "CVE-2026-80633", "author_name": "Ankit Soni", "author_email": "ankit.soni@amd.com", "fix_sha": "e745cd2c749e557c14a15ac931761c3f58c24489", "subject": "iommufd: Take dma_resv lock before dma_buf_unpin() in release path", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80633", "commit_url": "https://git.kernel.org/stable/c/e745cd2c749e557c14a15ac931761c3f58c24489" }, { "cve": "CVE-2026-80634", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "e052f920773b73be49eb4d8702a9f85de7464363", "subject": "netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80634", "commit_url": "https://git.kernel.org/stable/c/e052f920773b73be49eb4d8702a9f85de7464363" }, { "cve": "CVE-2026-80635", "author_name": "Tristan Madani", "author_email": "tristan@talencesecurity.com", "fix_sha": "b5e6f21923ca89d90256e7346301056f6502691e", "subject": "wifi: wcn36xx: fix OOB read from short trigger BA firmware response", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80635", "commit_url": "https://git.kernel.org/stable/c/b5e6f21923ca89d90256e7346301056f6502691e" }, { "cve": "CVE-2026-80636", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "35e21a4dccc5c255ba59ccfbfeb4629ed21da972", "subject": "netfilter: conntrack: revert ct extension genid infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80636", "commit_url": "https://git.kernel.org/stable/c/35e21a4dccc5c255ba59ccfbfeb4629ed21da972" }, { "cve": "CVE-2026-80637", "author_name": "Fernando Fernandez Mancera", "author_email": "fmancera@suse.de", "fix_sha": "992c20bc8a4aba220c8b95b467d049289778dad6", "subject": "netfilter: synproxy: fix unaligned memory access in timestamp adjustment", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80637", "commit_url": "https://git.kernel.org/stable/c/992c20bc8a4aba220c8b95b467d049289778dad6" }, { "cve": "CVE-2026-80638", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "1ec3cca2d8b6b9ff6584ca626d4c8918bbf48d44", "subject": "ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80638", "commit_url": "https://git.kernel.org/stable/c/1ec3cca2d8b6b9ff6584ca626d4c8918bbf48d44" }, { "cve": "CVE-2026-80639", "author_name": "Dan Williams", "author_email": "djbw@kernel.org", "fix_sha": "08326b92c7a414a73b5b308d1daf0e91e0134dfc", "subject": "cxl/test: Fix __fortify_panic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80639", "commit_url": "https://git.kernel.org/stable/c/08326b92c7a414a73b5b308d1daf0e91e0134dfc" }, { "cve": "CVE-2026-80640", "author_name": "Dan Williams", "author_email": "djbw@kernel.org", "fix_sha": "6c9d2e87df40d606f1c85143e9acb1ecff463d5e", "subject": "cxl/fwctl: Fix __fortify_panic", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80640", "commit_url": "https://git.kernel.org/stable/c/6c9d2e87df40d606f1c85143e9acb1ecff463d5e" }, { "cve": "CVE-2026-80641", "author_name": "Andreas Kemnade", "author_email": "andreas@kemnade.info", "fix_sha": "7495adaa0e45e180f4b6b7436675c6266edff1ff", "subject": "wifi: wlcore: enable the right set of ciphers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80641", "commit_url": "https://git.kernel.org/stable/c/7495adaa0e45e180f4b6b7436675c6266edff1ff" }, { "cve": "CVE-2026-80642", "author_name": "David Matlack", "author_email": "dmatlack@google.com", "fix_sha": "d8e47bd066d7e626f9f45d416182d585b7e18b9b", "subject": "liveupdate: Reference count incoming FLB data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80642", "commit_url": "https://git.kernel.org/stable/c/d8e47bd066d7e626f9f45d416182d585b7e18b9b" }, { "cve": "CVE-2026-80643", "author_name": "Qiuxu Zhuo", "author_email": "qiuxu.zhuo@intel.com", "fix_sha": "ab1f9d466c7d83ab0d2a529e07984e53b5960dcd", "subject": "EDAC/igen6: Fix call trace due to missing release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80643", "commit_url": "https://git.kernel.org/stable/c/ab1f9d466c7d83ab0d2a529e07984e53b5960dcd" }, { "cve": "CVE-2026-80644", "author_name": "ZhengYuan Huang", "author_email": "gality369@gmail.com", "fix_sha": "c0438198c28b1d22c272751af5e717c11d9fa8dd", "subject": "ocfs2: don't BUG_ON an invalid journal dinode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80644", "commit_url": "https://git.kernel.org/stable/c/c0438198c28b1d22c272751af5e717c11d9fa8dd" }, { "cve": "CVE-2026-80645", "author_name": "Dan Carpenter", "author_email": "error27@gmail.com", "fix_sha": "fc15e3a30ddd950f009c76765331783b9af94a87", "subject": "rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80645", "commit_url": "https://git.kernel.org/stable/c/fc15e3a30ddd950f009c76765331783b9af94a87" }, { "cve": "CVE-2026-80646", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "507541c2a8eeb76c02bd2511958f73a8cfa3e1bc", "subject": "ipv6: guard against possible NULL deref in __in6_dev_stats_get()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80646", "commit_url": "https://git.kernel.org/stable/c/507541c2a8eeb76c02bd2511958f73a8cfa3e1bc" }, { "cve": "CVE-2026-80647", "author_name": "Lianfa Weng", "author_email": "wenglianfa@huawei.com", "fix_sha": "3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a", "subject": "RDMA/hns: Fix warning in poll cq direct mode", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80647", "commit_url": "https://git.kernel.org/stable/c/3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a" }, { "cve": "CVE-2026-80648", "author_name": "Han Gao", "author_email": "gaohan@iscas.ac.cn", "fix_sha": "09c816e5c4d3a8d6d6e4b7537433e5e98505d934", "subject": "pinctrl: spacemit: fix NULL check in spacemit_pin_set_config", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80648", "commit_url": "https://git.kernel.org/stable/c/09c816e5c4d3a8d6d6e4b7537433e5e98505d934" }, { "cve": "CVE-2026-80649", "author_name": "Geert Uytterhoeven", "author_email": "geert+renesas@glider.be", "fix_sha": "f9ef3f66f4b18078e464b7606f9497e4dbeb9905", "subject": "firmware: arm_scmi: Fix OOB in scmi_power_name_get()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80649", "commit_url": "https://git.kernel.org/stable/c/f9ef3f66f4b18078e464b7606f9497e4dbeb9905" }, { "cve": "CVE-2026-80650", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "628f763aee0047ff44974388d6f70f75a763026b", "subject": "media: atomisp: gc2235: fix UAF and memory leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80650", "commit_url": "https://git.kernel.org/stable/c/628f763aee0047ff44974388d6f70f75a763026b" }, { "cve": "CVE-2026-80651", "author_name": "Stepan Ionichev", "author_email": "sozdayvek@gmail.com", "fix_sha": "930d9d36ea618a775985446a125aedeb401db522", "subject": "crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80651", "commit_url": "https://git.kernel.org/stable/c/930d9d36ea618a775985446a125aedeb401db522" }, { "cve": "CVE-2026-80652", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "ef8c9dacda2871accd64e3eda951fef6b788b1ea", "subject": "crypto: ccp - Treat zero-length cert chain as query for blob lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80652", "commit_url": "https://git.kernel.org/stable/c/ef8c9dacda2871accd64e3eda951fef6b788b1ea" }, { "cve": "CVE-2026-80653", "author_name": "Yihang Li", "author_email": "liyihang9@huawei.com", "fix_sha": "67b85a88265df19f049241d8c00571a5408f4eeb", "subject": "scsi: hisi_sas: Add slave_destroy interface for v3 hw", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80653", "commit_url": "https://git.kernel.org/stable/c/67b85a88265df19f049241d8c00571a5408f4eeb" }, { "cve": "CVE-2026-80654", "author_name": "Prasanna Kumar T S M", "author_email": "ptsm@linux.microsoft.com", "fix_sha": "fdee7c66c0d7b6869c36b9f9a915abf29ab5b550", "subject": "soc: xilinx: Shutdown and free rx mailbox channel", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80654", "commit_url": "https://git.kernel.org/stable/c/fdee7c66c0d7b6869c36b9f9a915abf29ab5b550" }, { "cve": "CVE-2026-80655", "author_name": "Prasanna Kumar T S M", "author_email": "ptsm@linux.microsoft.com", "fix_sha": "fb445935338405110baca8f541a2df3b4cb8d712", "subject": "soc: xilinx: Fix race condition in event registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80655", "commit_url": "https://git.kernel.org/stable/c/fb445935338405110baca8f541a2df3b4cb8d712" }, { "cve": "CVE-2026-80656", "author_name": "Edward Adam Davis", "author_email": "eadavis@qq.com", "fix_sha": "3f95e2661574ff13f099dd13456751933c280628", "subject": "hfsplus: Add a sanity check for btree node size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80656", "commit_url": "https://git.kernel.org/stable/c/3f95e2661574ff13f099dd13456751933c280628" }, { "cve": "CVE-2026-80657", "author_name": "Max Zhen", "author_email": "max.zhen@amd.com", "fix_sha": "506255d46bdb93a281cf39e72abbca124f5c7a1b", "subject": "accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80657", "commit_url": "https://git.kernel.org/stable/c/506255d46bdb93a281cf39e72abbca124f5c7a1b" }, { "cve": "CVE-2026-80658", "author_name": "Cristian Ciocaltea", "author_email": "cristian.ciocaltea@collabora.com", "fix_sha": "9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12", "subject": "drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80658", "commit_url": "https://git.kernel.org/stable/c/9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12" }, { "cve": "CVE-2026-80659", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "ee5fb641c4ccac8406c668d3e947eb20ce44f233", "subject": "mmc: vub300: defer reset until cmd_mutex is unlocked", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80659", "commit_url": "https://git.kernel.org/stable/c/ee5fb641c4ccac8406c668d3e947eb20ce44f233" }, { "cve": "CVE-2026-80660", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "e31408734332b8cc611342cdaaab6ba492180156", "subject": "hwmon: (occ) unregister sysfs devices outside occ lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80660", "commit_url": "https://git.kernel.org/stable/c/e31408734332b8cc611342cdaaab6ba492180156" }, { "cve": "CVE-2026-80661", "author_name": "Steven Rostedt", "author_email": "rostedt@goodmis.org", "fix_sha": "535fcf4b8a261fbb8cc4f91e4597343c135a90f2", "subject": "ufs: core: tracing: Do not dereference pointers in TP_printk()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80661", "commit_url": "https://git.kernel.org/stable/c/535fcf4b8a261fbb8cc4f91e4597343c135a90f2" }, { "cve": "CVE-2026-80662", "author_name": "Terry Bowman", "author_email": "terry.bowman@amd.com", "fix_sha": "c268f949e219f9e179558e836f457f6c5fbec416", "subject": "cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80662", "commit_url": "https://git.kernel.org/stable/c/c268f949e219f9e179558e836f457f6c5fbec416" }, { "cve": "CVE-2026-80663", "author_name": "Ali Ahmet MEMIS", "author_email": "dev@unknownbbqr.xyz", "fix_sha": "607af438e6430893a822964c841a1994b33acccc", "subject": "tools/power/x86/intel-speed-select: Harden daemon pidfile open", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80663", "commit_url": "https://git.kernel.org/stable/c/607af438e6430893a822964c841a1994b33acccc" }, { "cve": "CVE-2026-80664", "author_name": "Wyatt Feng", "author_email": "bronzed_45_vested@icloud.com", "fix_sha": "5d1a2240935ea47e2673d0ea17fdb058e4dc91dd", "subject": "netfilter: xt_nat: reject unsupported target families", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80664", "commit_url": "https://git.kernel.org/stable/c/5d1a2240935ea47e2673d0ea17fdb058e4dc91dd" }, { "cve": "CVE-2026-80665", "author_name": "Oliver Upton", "author_email": "oupton@kernel.org", "fix_sha": "9f3e83345a56280efffe235c65593c7e544c0fcc", "subject": "KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80665", "commit_url": "https://git.kernel.org/stable/c/9f3e83345a56280efffe235c65593c7e544c0fcc" }, { "cve": "CVE-2026-80666", "author_name": "Sungwoo Kim", "author_email": "iam@sung-woo.kim", "fix_sha": "0f8a5dcc66648b6e1458a9f3ba4c5a0463a228fc", "subject": "Bluetooth: sco: Fix a race condition in sco_sock_timeout()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80666", "commit_url": "https://git.kernel.org/stable/c/0f8a5dcc66648b6e1458a9f3ba4c5a0463a228fc" }, { "cve": "CVE-2026-80667", "author_name": "Shay Drory", "author_email": "shayd@nvidia.com", "fix_sha": "d4b85f9a668b9c44216bb78daf4ec1a915cc92d1", "subject": "net/mlx5: LAG, MPESW, Fix missing complete() on devcom error", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80667", "commit_url": "https://git.kernel.org/stable/c/d4b85f9a668b9c44216bb78daf4ec1a915cc92d1" }, { "cve": "CVE-2026-80668", "author_name": "Pablo Neira Ayuso", "author_email": "pablo@netfilter.org", "fix_sha": "b8b09dc2bf35a00d4e0556b5d6308c7b917ebda2", "subject": "netfilter: nf_conntrack_expect: use conntrack GC to reap expectations", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80668", "commit_url": "https://git.kernel.org/stable/c/b8b09dc2bf35a00d4e0556b5d6308c7b917ebda2" }, { "cve": "CVE-2026-80669", "author_name": "Bradley Morgan", "author_email": "include@grrlz.net", "fix_sha": "12091470c6b4c1c14b2de12dcbae2ada6cb6d20b", "subject": "bpf: Disable xfrm_decode_session hook attachment", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80669", "commit_url": "https://git.kernel.org/stable/c/12091470c6b4c1c14b2de12dcbae2ada6cb6d20b" }, { "cve": "CVE-2026-80670", "author_name": "Arnaldo Carvalho de Melo", "author_email": "acme@redhat.com", "fix_sha": "5484b43a0ec8231c36fba6ead654cb72dbba8b8f", "subject": "perf tools: Use perf_env__get_cpu_topology() in machine__resolve()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80670", "commit_url": "https://git.kernel.org/stable/c/5484b43a0ec8231c36fba6ead654cb72dbba8b8f" }, { "cve": "CVE-2026-80671", "author_name": "Arnaldo Carvalho de Melo", "author_email": "acme@redhat.com", "fix_sha": "5949d339f5ec98752d56dcd4e36f619a59d513a5", "subject": "perf sched: Fix register_pid() overflow, strcpy, and BUG_ON", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80671", "commit_url": "https://git.kernel.org/stable/c/5949d339f5ec98752d56dcd4e36f619a59d513a5" }, { "cve": "CVE-2026-80672", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "390936fb15053d8d8991ca3a22776e251a5a7f2f", "subject": "ntfs: fix u16 truncation of restart-area length check", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80672", "commit_url": "https://git.kernel.org/stable/c/390936fb15053d8d8991ca3a22776e251a5a7f2f" }, { "cve": "CVE-2026-80673", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "344b18f389f9934d59c7b0cf3d20541ea2e0da58", "subject": "ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80673", "commit_url": "https://git.kernel.org/stable/c/344b18f389f9934d59c7b0cf3d20541ea2e0da58" }, { "cve": "CVE-2026-80674", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "7d19e1ffee084c4f7d321a360c14ba43404f7cc8", "subject": "ntfs: validate resident attribute lists and harden the validator", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80674", "commit_url": "https://git.kernel.org/stable/c/7d19e1ffee084c4f7d321a360c14ba43404f7cc8" }, { "cve": "CVE-2026-80675", "author_name": "KP Singh", "author_email": "kpsingh@kernel.org", "fix_sha": "0fb6c9ed6493b4af01be8bb0a384574eba7df636", "subject": "libbpf: Reject non-exclusive metadata maps in the signed loader", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80675", "commit_url": "https://git.kernel.org/stable/c/0fb6c9ed6493b4af01be8bb0a384574eba7df636" }, { "cve": "CVE-2026-80676", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "331d8900121a1d74ecd45cd2db742ddcb5a0a565", "subject": "Drivers: hv: vmbus: use generic driver_override infrastructure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80676", "commit_url": "https://git.kernel.org/stable/c/331d8900121a1d74ecd45cd2db742ddcb5a0a565" }, { "cve": "CVE-2026-80677", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "e9506871a8ea304cde48ff4a57226df2aadddae3", "subject": "driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80677", "commit_url": "https://git.kernel.org/stable/c/e9506871a8ea304cde48ff4a57226df2aadddae3" }, { "cve": "CVE-2026-80678", "author_name": "Liem", "author_email": "liem16213@gmail.com", "fix_sha": "d64ec362c369bbc33833f7936d5f3a706b0d5c45", "subject": "i2c: imx: Fix slave registration race and error handling", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80678", "commit_url": "https://git.kernel.org/stable/c/d64ec362c369bbc33833f7936d5f3a706b0d5c45" }, { "cve": "CVE-2026-80679", "author_name": "Jan H\u00f6ppner", "author_email": "hoeppner@linux.ibm.com", "fix_sha": "9973026f572db6b67570cadc30942f3014e41079", "subject": "s390/dasd: Fix potential NULL pointer dereference", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80679", "commit_url": "https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079" }, { "cve": "CVE-2026-80680", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "82048795242f04275a3f49ffc66ad851b6120954", "subject": "i2c: amd-mp2: Unregister callback on adapter add failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80680", "commit_url": "https://git.kernel.org/stable/c/82048795242f04275a3f49ffc66ad851b6120954" }, { "cve": "CVE-2026-80681", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "1395a676ec15a0a02a2a6d86602324f2d5fd41d5", "subject": "vxlan: re-fetch eth header after route_shortcircuit()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80681", "commit_url": "https://git.kernel.org/stable/c/1395a676ec15a0a02a2a6d86602324f2d5fd41d5" }, { "cve": "CVE-2026-80682", "author_name": "Jiakai Xu", "author_email": "xujiakai2025@iscas.ac.cn", "fix_sha": "45ebe4540817cb540a59e4dc04014ac5dddc9990", "subject": "riscv/mm: use physical alignment for vmemmap_start_pfn", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80682", "commit_url": "https://git.kernel.org/stable/c/45ebe4540817cb540a59e4dc04014ac5dddc9990" }, { "cve": "CVE-2026-80683", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "abd93c85c8667add738ee82aeab95dd9fc8265a2", "subject": "Bluetooth: SCO: give the socket its own sco_conn reference", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80683", "commit_url": "https://git.kernel.org/stable/c/abd93c85c8667add738ee82aeab95dd9fc8265a2" }, { "cve": "CVE-2026-80684", "author_name": "Farhan Ali", "author_email": "alifm@linux.ibm.com", "fix_sha": "8bf09b9b7d3232806df95f409581f8a9fd99a3fa", "subject": "KVM: s390: pci: Fix NULL dereference on AIBV allocation failure", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80684", "commit_url": "https://git.kernel.org/stable/c/8bf09b9b7d3232806df95f409581f8a9fd99a3fa" }, { "cve": "CVE-2026-80685", "author_name": "Aboorva Devarajan", "author_email": "aboorvad@linux.ibm.com", "fix_sha": "7441d6348c70738e9ed307510db171c7a9b3f4bf", "subject": "mm/util: don't read __page_2 for order-1 folios in snapshot_page()", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80685", "commit_url": "https://git.kernel.org/stable/c/7441d6348c70738e9ed307510db171c7a9b3f4bf" }, { "cve": "CVE-2026-80686", "author_name": "Kefeng Wang", "author_email": "wangkefeng.wang@huawei.com", "fix_sha": "63867c82d0c0c2d182016a32b1cc0103116b0ea5", "subject": "mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80686", "commit_url": "https://git.kernel.org/stable/c/63867c82d0c0c2d182016a32b1cc0103116b0ea5" }, { "cve": "CVE-2026-80687", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "339bd11591593ab7ce88136ab7fd01ef3813b724", "subject": "iommufd/viommu: Release the igroup lock on the vdevice_size error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80687", "commit_url": "https://git.kernel.org/stable/c/339bd11591593ab7ce88136ab7fd01ef3813b724" }, { "cve": "CVE-2026-80688", "author_name": "Anirudh Srinivasan", "author_email": "asrinivasan@oss.tenstorrent.com", "fix_sha": "f51fed61eea0daba2f95f1a6074085e4cd513c7b", "subject": "riscv: drop __init from vec_check_unaligned_access_speed_all_cpus", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80688", "commit_url": "https://git.kernel.org/stable/c/f51fed61eea0daba2f95f1a6074085e4cd513c7b" }, { "cve": "CVE-2026-80689", "author_name": "Masami Hiramatsu (Google)", "author_email": "mhiramat@kernel.org", "fix_sha": "12b80cdbc54cf615b4717a4e8180063408091ea2", "subject": "tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80689", "commit_url": "https://git.kernel.org/stable/c/12b80cdbc54cf615b4717a4e8180063408091ea2" }, { "cve": "CVE-2026-80690", "author_name": "Ao Sun", "author_email": "ao.sun@transsion.com", "fix_sha": "0279fd451a9971c0d5b959fc59f3e11b55e1694e", "subject": "scsi: ufs: core: Initialize hba->rpmbs list in ufshcd", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80690", "commit_url": "https://git.kernel.org/stable/c/0279fd451a9971c0d5b959fc59f3e11b55e1694e" }, { "cve": "CVE-2026-80691", "author_name": "TanZheng", "author_email": "tanzheng@kylinos.cn", "fix_sha": "9c33222bd387312874fbe36ca8002e5c945b9653", "subject": "scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80691", "commit_url": "https://git.kernel.org/stable/c/9c33222bd387312874fbe36ca8002e5c945b9653" }, { "cve": "CVE-2026-80692", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "2f5d635ad5906b0235bc0c870e8beba3116e1e98", "subject": "Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80692", "commit_url": "https://git.kernel.org/stable/c/2f5d635ad5906b0235bc0c870e8beba3116e1e98" }, { "cve": "CVE-2026-80693", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9f7007ee9858c99aa43101bc8352c672fee85644", "subject": "idpf: bound interrupt-vector register fill to the allocated array", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80693", "commit_url": "https://git.kernel.org/stable/c/9f7007ee9858c99aa43101bc8352c672fee85644" }, { "cve": "CVE-2026-80694", "author_name": "Chenguang Zhao", "author_email": "zhaochenguang@kylinos.cn", "fix_sha": "e095f249e2209674f6366f6db0383a2b96e19239", "subject": "net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80694", "commit_url": "https://git.kernel.org/stable/c/e095f249e2209674f6366f6db0383a2b96e19239" }, { "cve": "CVE-2026-80695", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "f46d5ab43a572b84773015a76966f5da56fc1748", "subject": "hwmon: (sht3x) Fix unaligned accesses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80695", "commit_url": "https://git.kernel.org/stable/c/f46d5ab43a572b84773015a76966f5da56fc1748" }, { "cve": "CVE-2026-80696", "author_name": "Guenter Roeck", "author_email": "linux@roeck-us.net", "fix_sha": "00feb1cce93dab948a299b69753d99c681d45a0b", "subject": "hwmon: (ltc4282) Fix reading the minimum alarm voltage", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80696", "commit_url": "https://git.kernel.org/stable/c/00feb1cce93dab948a299b69753d99c681d45a0b" }, { "cve": "CVE-2026-80697", "author_name": "Gao Xiang", "author_email": "xiang@kernel.org", "fix_sha": "96b2dbbe58a1ea5df8d29c2fe24b5f04715f4443", "subject": "erofs: ensure valid f_path for page cache sharing", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80697", "commit_url": "https://git.kernel.org/stable/c/96b2dbbe58a1ea5df8d29c2fe24b5f04715f4443" }, { "cve": "CVE-2026-80698", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "ec2d428b2e32dd157de8f86a86dd85c5b2c8f45c", "subject": "dmaengine: idxd: fix double free of wq, engine, and group structs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80698", "commit_url": "https://git.kernel.org/stable/c/ec2d428b2e32dd157de8f86a86dd85c5b2c8f45c" }, { "cve": "CVE-2026-80699", "author_name": "D Scott Phillips", "author_email": "scott@os.amperecomputing.com", "fix_sha": "8a570b19b4b16a8a3b5ffa2b332bd5613110b2d8", "subject": "KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80699", "commit_url": "https://git.kernel.org/stable/c/8a570b19b4b16a8a3b5ffa2b332bd5613110b2d8" }, { "cve": "CVE-2026-80700", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "706c93c5813caabbb0d0a576c017d15aeec2c113", "subject": "drm/vmwgfx: validate external BO copy bounds for both stride paths", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80700", "commit_url": "https://git.kernel.org/stable/c/706c93c5813caabbb0d0a576c017d15aeec2c113" }, { "cve": "CVE-2026-80701", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "d5ed8749168ad13c0dbaa8300f68d854b6076966", "subject": "drm/vmwgfx: enforce cursor size limits for MOB cursors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80701", "commit_url": "https://git.kernel.org/stable/c/d5ed8749168ad13c0dbaa8300f68d854b6076966" }, { "cve": "CVE-2026-80702", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "83195b778f2d109a3a4f3ffaba4dce7e4cdb58aa", "subject": "drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80702", "commit_url": "https://git.kernel.org/stable/c/83195b778f2d109a3a4f3ffaba4dce7e4cdb58aa" }, { "cve": "CVE-2026-80703", "author_name": "Gang Ba", "author_email": "gang.ba@amd.com", "fix_sha": "99b2fe4f19e3be0a8d0a0b5ea98d855970889653", "subject": "drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80703", "commit_url": "https://git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653" }, { "cve": "CVE-2026-80704", "author_name": "Jiri Slaby (SUSE)", "author_email": "jirislaby@kernel.org", "fix_sha": "114b42507b6a23d9d24e24e4ef165233332c64d4", "subject": "drm/amd/display: use proper context for logging", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80704", "commit_url": "https://git.kernel.org/stable/c/114b42507b6a23d9d24e24e4ef165233332c64d4" }, { "cve": "CVE-2026-80705", "author_name": "Alex Deucher", "author_email": "alexander.deucher@amd.com", "fix_sha": "000acb4ce7fb9feba3072ce468ad681f6585cd5d", "subject": "drm/amd/display: check if dml21_add_phantom_plane() is successful", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80705", "commit_url": "https://git.kernel.org/stable/c/000acb4ce7fb9feba3072ce468ad681f6585cd5d" }, { "cve": "CVE-2026-80706", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "856d6cb04e5407523566b075841dcd6423757d1c", "subject": "can: softing: fw_parse(): validate firmware record spans", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80706", "commit_url": "https://git.kernel.org/stable/c/856d6cb04e5407523566b075841dcd6423757d1c" }, { "cve": "CVE-2026-80707", "author_name": "Oleksij Rempel", "author_email": "o.rempel@pengutronix.de", "fix_sha": "eb96c58907922546e415e545fe9a14ea63b02719", "subject": "can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80707", "commit_url": "https://git.kernel.org/stable/c/eb96c58907922546e415e545fe9a14ea63b02719" }, { "cve": "CVE-2026-80708", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "01476391aecef36a3b789ee844357b22fbc90665", "subject": "s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80708", "commit_url": "https://git.kernel.org/stable/c/01476391aecef36a3b789ee844357b22fbc90665" }, { "cve": "CVE-2026-80709", "author_name": "Harald Freudenberger", "author_email": "freude@linux.ibm.com", "fix_sha": "983279d7f86ade73db86f886e09172dd567031b5", "subject": "s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80709", "commit_url": "https://git.kernel.org/stable/c/983279d7f86ade73db86f886e09172dd567031b5" }, { "cve": "CVE-2026-80710", "author_name": "Stefan Haberland", "author_email": "sth@linux.ibm.com", "fix_sha": "7f40b346462f563a0d6e841a77b5163d2a882a04", "subject": "s390/dasd: Fix undersized format-check buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80710", "commit_url": "https://git.kernel.org/stable/c/7f40b346462f563a0d6e841a77b5163d2a882a04" }, { "cve": "CVE-2026-80711", "author_name": "Jianing Li", "author_email": "m13940358460@163.com", "fix_sha": "725668c6b6aa3971fe850659102c250d0d676e18", "subject": "power: supply: max17040: handle missing status supplier", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80711", "commit_url": "https://git.kernel.org/stable/c/725668c6b6aa3971fe850659102c250d0d676e18" }, { "cve": "CVE-2026-80712", "author_name": "Stanislaw Pal", "author_email": "kuncy7@gmail.com", "fix_sha": "8fd62901d6bf03f274a49dd0060793cc07dd51b0", "subject": "spi: spi-qpic-snand: write the feature value before executing SET_FEATURE", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80712", "commit_url": "https://git.kernel.org/stable/c/8fd62901d6bf03f274a49dd0060793cc07dd51b0" }, { "cve": "CVE-2026-80713", "author_name": "Kyumin Lee", "author_email": "fyonglkm@gmail.com", "fix_sha": "bc0e8faf90e776a2f1f3967a04e8091e6bdb4977", "subject": "io_uring: preserve task restrictions across exec", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80713", "commit_url": "https://git.kernel.org/stable/c/bc0e8faf90e776a2f1f3967a04e8091e6bdb4977" }, { "cve": "CVE-2026-80714", "author_name": "Zhiling Zou", "author_email": "roxy520tt@gmail.com", "fix_sha": "a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b", "subject": "ipvs: do not propagate one-packet flag to synced conns", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80714", "commit_url": "https://git.kernel.org/stable/c/a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b" }, { "cve": "CVE-2026-80715", "author_name": "David Carlier", "author_email": "devnexen@gmail.com", "fix_sha": "5ffab5b9589c50e4cfc0cf36ffd76c89422d4019", "subject": "igc: remove napi_synchronize() in igc_down()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80715", "commit_url": "https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019" }, { "cve": "CVE-2026-80716", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "f495b6c4c8594122918552c9be2b51eb71647cd9", "subject": "ALSA: pcm: wake linked drain waiters on unlink", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80716", "commit_url": "https://git.kernel.org/stable/c/f495b6c4c8594122918552c9be2b51eb71647cd9" }, { "cve": "CVE-2026-80717", "author_name": "Charles Vosburgh", "author_email": "trilobyte777@gmail.com", "fix_sha": "74b21f52c5c5a71a05c0ff70e513f4f04ff28b17", "subject": "sctp: validate Adaptation Indication parameter length", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80717", "commit_url": "https://git.kernel.org/stable/c/74b21f52c5c5a71a05c0ff70e513f4f04ff28b17" }, { "cve": "CVE-2026-80718", "author_name": "Zi Yan", "author_email": "ziy@nvidia.com", "fix_sha": "89b1b79c308818a715e75f28744b70d8940a07c9", "subject": "mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80718", "commit_url": "https://git.kernel.org/stable/c/89b1b79c308818a715e75f28744b70d8940a07c9" }, { "cve": "CVE-2026-80719", "author_name": "Qi Zheng", "author_email": "zhengqi.arch@bytedance.com", "fix_sha": "de4660898b7aa7e03d3b120a6bfa6b26211e4e77", "subject": "mm: mglru: fix stale batch updates after memcg reparenting", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80719", "commit_url": "https://git.kernel.org/stable/c/de4660898b7aa7e03d3b120a6bfa6b26211e4e77" }, { "cve": "CVE-2026-80720", "author_name": "Christoph Hellwig", "author_email": "hch@lst.de", "fix_sha": "c679ce3be6cb63763d68ab9b5d9d73ddc0a40762", "subject": "iomap: add a separate bio_set for iomap_split_ioend", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80720", "commit_url": "https://git.kernel.org/stable/c/c679ce3be6cb63763d68ab9b5d9d73ddc0a40762" }, { "cve": "CVE-2026-80721", "author_name": "Pauli Virtanen", "author_email": "pav@iki.fi", "fix_sha": "aa9f7cb2bd3a2be998ceb739fc9a2f986eba43eb", "subject": "Bluetooth: ISO: ensure no dangling hcon references in iso_conn", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80721", "commit_url": "https://git.kernel.org/stable/c/aa9f7cb2bd3a2be998ceb739fc9a2f986eba43eb" }, { "cve": "CVE-2026-80722", "author_name": "Zhao Li", "author_email": "enderaoelyther@gmail.com", "fix_sha": "0502d5077e419427d80f4d46ba95d0067f5fb916", "subject": "wifi: mac80211: validate individual TWT params before driver setup", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80722", "commit_url": "https://git.kernel.org/stable/c/0502d5077e419427d80f4d46ba95d0067f5fb916" }, { "cve": "CVE-2026-80723", "author_name": "Sang-Heon Jeon", "author_email": "ekffu200098@gmail.com", "fix_sha": "db3dbdfea1b8f38774419c5c2c14e4b81c48708d", "subject": "of: reserved_mem: prevent OOB when too many dynamic regions are defined", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80723", "commit_url": "https://git.kernel.org/stable/c/db3dbdfea1b8f38774419c5c2c14e4b81c48708d" }, { "cve": "CVE-2026-80724", "author_name": "Abdifatah Suruur", "author_email": "suruurism@gmail.com", "fix_sha": "a5edadbae57e2298a56cf7a4e774a027905a331f", "subject": "ptp: vmclock: prevent read-only mappings from becoming writable", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80724", "commit_url": "https://git.kernel.org/stable/c/a5edadbae57e2298a56cf7a4e774a027905a331f" }, { "cve": "CVE-2026-80726", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "5ec42d57655c690234c14aece6dd3f209778c1d8", "subject": "KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80726", "commit_url": "https://git.kernel.org/stable/c/5ec42d57655c690234c14aece6dd3f209778c1d8" }, { "cve": "CVE-2026-80727", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "a213dfaa2596c1c0dc4dae91c14fbfa499c03223", "subject": "x86/mce: Set up the polling timer before CMCI discovery", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80727", "commit_url": "https://git.kernel.org/stable/c/a213dfaa2596c1c0dc4dae91c14fbfa499c03223" }, { "cve": "CVE-2026-80728", "author_name": "Asad Kamal", "author_email": "asad.kamal@amd.com", "fix_sha": "b96c529cd2551b78316a4afa3237b2ed96ba03c8", "subject": "Revert \"drm/amdgpu: fix aperture mapping leak\"", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80728", "commit_url": "https://git.kernel.org/stable/c/b96c529cd2551b78316a4afa3237b2ed96ba03c8" }, { "cve": "CVE-2026-80729", "author_name": "Matt Fleming", "author_email": "mfleming@cloudflare.com", "fix_sha": "aca1f2d5de17e138bc6c4859126b77e516b82541", "subject": "mm/huge_memory: initialise workingset state before folio split", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80729", "commit_url": "https://git.kernel.org/stable/c/aca1f2d5de17e138bc6c4859126b77e516b82541" }, { "cve": "CVE-2026-80730", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "91542863abade2fd4f2b361991f5386ad9d19c8c", "subject": "ring-buffer: Fix crash passing ERR_PTR to kthread_stop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80730", "commit_url": "https://git.kernel.org/stable/c/91542863abade2fd4f2b361991f5386ad9d19c8c" }, { "cve": "CVE-2026-80731", "author_name": "Qihang Tang", "author_email": "q.h.hack.winter@gmail.com", "fix_sha": "3b9a324e646d3657a8d9806dfbfe4f3e4066e882", "subject": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80731", "commit_url": "https://git.kernel.org/stable/c/3b9a324e646d3657a8d9806dfbfe4f3e4066e882" }, { "cve": "CVE-2026-80732", "author_name": "Hongyan Xu", "author_email": "getshell@seu.edu.cn", "fix_sha": "7700a31039cdc6715cb6cce7e7a664ee4e945f67", "subject": "ata: pata_sl82c105: fix bridge revision use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80732", "commit_url": "https://git.kernel.org/stable/c/7700a31039cdc6715cb6cce7e7a664ee4e945f67" }, { "cve": "CVE-2026-80733", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "b8a39a09ae4eaae04309e1e38ed6a1101d967496", "subject": "net: remove WARN_ON_ONCE() from sk_mc_loop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80733", "commit_url": "https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496" }, { "cve": "CVE-2026-80734", "author_name": "Qu Wenruo", "author_email": "wqu@suse.com", "fix_sha": "0ef349734a93227b45f65fc50a3311d1cc5f03e9", "subject": "btrfs: initialize inode mapping flags for cached inodes", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80734", "commit_url": "https://git.kernel.org/stable/c/0ef349734a93227b45f65fc50a3311d1cc5f03e9" }, { "cve": "CVE-2026-80735", "author_name": "Antonio Quartulli", "author_email": "antonio@openvpn.net", "fix_sha": "59aed1eb60d70678a53acccb0cb337a26ce6680e", "subject": "ovpn: ensure socket is owned by ovpn before deref sk_user_data", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80735", "commit_url": "https://git.kernel.org/stable/c/59aed1eb60d70678a53acccb0cb337a26ce6680e" }, { "cve": "CVE-2026-80736", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "d2ee4d47aacbd2ba456092eeec670dba35fde291", "subject": "thunderbolt: Fix bandwidth group reservation indexing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80736", "commit_url": "https://git.kernel.org/stable/c/d2ee4d47aacbd2ba456092eeec670dba35fde291" }, { "cve": "CVE-2026-80737", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "440915499231e9db1c361aa45bb702e8fd3b4a32", "subject": "serial: amba-pl011: synchronize DMA teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80737", "commit_url": "https://git.kernel.org/stable/c/440915499231e9db1c361aa45bb702e8fd3b4a32" }, { "cve": "CVE-2026-80738", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "31a420a822ff92e2090bd5d65efe8e34e2d6d9b8", "subject": "bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80738", "commit_url": "https://git.kernel.org/stable/c/31a420a822ff92e2090bd5d65efe8e34e2d6d9b8" }, { "cve": "CVE-2026-80739", "author_name": "Shay Drory", "author_email": "shayd@nvidia.com", "fix_sha": "6ddfba2ea98db21b001e0e5c472499156224650c", "subject": "net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80739", "commit_url": "https://git.kernel.org/stable/c/6ddfba2ea98db21b001e0e5c472499156224650c" }, { "cve": "CVE-2026-80740", "author_name": "Shixiong Ou", "author_email": "oushixiong@kylinos.cn", "fix_sha": "f4f2bba28df9b9aaa00262a462139dbbcdc38d9f", "subject": "drm/log: Fix infinite loop when scale is too large for display", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80740", "commit_url": "https://git.kernel.org/stable/c/f4f2bba28df9b9aaa00262a462139dbbcdc38d9f" }, { "cve": "CVE-2026-80741", "author_name": "Shixiong Ou", "author_email": "oushixiong@kylinos.cn", "fix_sha": "60baa179ed1333535f6e2da4133511db55278ee4", "subject": "drm/log: Fix out-of-bounds read on empty message length", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80741", "commit_url": "https://git.kernel.org/stable/c/60baa179ed1333535f6e2da4133511db55278ee4" }, { "cve": "CVE-2026-80742", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "6bcd76c134c55c697148acb5c0194e9666abdf84", "subject": "af_packet: Don't send zero-byte data in tpacket_snd().", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80742", "commit_url": "https://git.kernel.org/stable/c/6bcd76c134c55c697148acb5c0194e9666abdf84" }, { "cve": "CVE-2026-80743", "author_name": "Rosen Penev", "author_email": "rosenp@gmail.com", "fix_sha": "f12afefb7b01f94d6d66d397f323a9914edbf70e", "subject": "ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80743", "commit_url": "https://git.kernel.org/stable/c/f12afefb7b01f94d6d66d397f323a9914edbf70e" }, { "cve": "CVE-2026-80744", "author_name": "Alexey Velichayshiy", "author_email": "a.velichayshiy@ispras.ru", "fix_sha": "d02f592064347e0c1e0d84f24941ad338838cc48", "subject": "netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80744", "commit_url": "https://git.kernel.org/stable/c/d02f592064347e0c1e0d84f24941ad338838cc48" }, { "cve": "CVE-2026-80745", "author_name": "Robby Cai", "author_email": "robby.cai@nxp.com", "fix_sha": "66694b5f90f3876fccb87bbd02b453cdc33b3ae4", "subject": "regulator: fp9931: Fix VPOS/VNEG voltage selector table", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80745", "commit_url": "https://git.kernel.org/stable/c/66694b5f90f3876fccb87bbd02b453cdc33b3ae4" }, { "cve": "CVE-2026-80746", "author_name": "Krzysztof Kozlowski", "author_email": "krzysztof.kozlowski@oss.qualcomm.com", "fix_sha": "2ef00630c5c0b7b2c08aba7643f47594952d357e", "subject": "clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80746", "commit_url": "https://git.kernel.org/stable/c/2ef00630c5c0b7b2c08aba7643f47594952d357e" }, { "cve": "CVE-2026-80747", "author_name": "William Palacek", "author_email": "william.palacek@amd.com", "fix_sha": "6e7566ba4739dd573c331adde1c96690f7a567bd", "subject": "drm/amdkfd: Add bounds check for CRAT subtype length", "cvss_score": 8.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80747", "commit_url": "https://git.kernel.org/stable/c/6e7566ba4739dd573c331adde1c96690f7a567bd" }, { "cve": "CVE-2026-80748", "author_name": "Binbin Zhou", "author_email": "zhoubinbin@loongson.cn", "fix_sha": "00179ed9fbe07799676e2cb63c4e7f0e7cd80a5c", "subject": "mmc: loongson2: Fix sg iteration in data reorder functions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80748", "commit_url": "https://git.kernel.org/stable/c/00179ed9fbe07799676e2cb63c4e7f0e7cd80a5c" }, { "cve": "CVE-2026-80749", "author_name": "John Harrison", "author_email": "john.harrison@igalia.com", "fix_sha": "9ecf8ba763d0ffe0673538eb4bf7806f20455d19", "subject": "drm/connector/hdmi: Fix out of bounds memory read", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80749", "commit_url": "https://git.kernel.org/stable/c/9ecf8ba763d0ffe0673538eb4bf7806f20455d19" }, { "cve": "CVE-2026-80750", "author_name": "Guangshuo Li", "author_email": "lgs201920130244@gmail.com", "fix_sha": "3e013bc8b941bd52c8e3a99798d0ae8792cb71ca", "subject": "pmdomain: mediatek: fix remaining %pOF after of_node_put()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80750", "commit_url": "https://git.kernel.org/stable/c/3e013bc8b941bd52c8e3a99798d0ae8792cb71ca" }, { "cve": "CVE-2026-80751", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "090a95dbe13df9965279b588d97eda134831769c", "subject": "pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80751", "commit_url": "https://git.kernel.org/stable/c/090a95dbe13df9965279b588d97eda134831769c" }, { "cve": "CVE-2026-80752", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "732f38c36059e68ba3b4b89c56911d777fd3185c", "subject": "Input: psxpad-spi - set driver data before use", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80752", "commit_url": "https://git.kernel.org/stable/c/732f38c36059e68ba3b4b89c56911d777fd3185c" }, { "cve": "CVE-2026-80753", "author_name": "Ralf Lici", "author_email": "ralf@mandelbit.com", "fix_sha": "e9714db8041763f59dde152c812b96b3de05c6d9", "subject": "ovpn: run deferred work on a module-owned workqueue", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80753", "commit_url": "https://git.kernel.org/stable/c/e9714db8041763f59dde152c812b96b3de05c6d9" }, { "cve": "CVE-2026-80754", "author_name": "Dmitry Torokhov", "author_email": "dmitry.torokhov@gmail.com", "fix_sha": "6058f0fea10f3caf63a435677358d1b8e9325114", "subject": "Input: synaptics-rmi4 - fix F55 transmitter electrode count typo", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80754", "commit_url": "https://git.kernel.org/stable/c/6058f0fea10f3caf63a435677358d1b8e9325114" }, { "cve": "CVE-2026-80755", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d14b5d0e97fccd27974fedc03b903408872907fd", "subject": "selinux: reject a permission value exceeding the class permission count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80755", "commit_url": "https://git.kernel.org/stable/c/d14b5d0e97fccd27974fedc03b903408872907fd" }, { "cve": "CVE-2026-80756", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "e5c0235a3c4e9eb047a16cd02323fe4ecf2f570e", "subject": "selinux: do not cancel a policy conversion that never started", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80756", "commit_url": "https://git.kernel.org/stable/c/e5c0235a3c4e9eb047a16cd02323fe4ecf2f570e" }, { "cve": "CVE-2026-80757", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "9a82dcd98b6e6e11cfd162410967951f12152528", "subject": "selinux: reject a class permission count below its inherited common", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80757", "commit_url": "https://git.kernel.org/stable/c/9a82dcd98b6e6e11cfd162410967951f12152528" }, { "cve": "CVE-2026-80758", "author_name": "Felix Hoffmann", "author_email": "f3lix.dev@gmx.de", "fix_sha": "1c7efabfbaf796f11000a46094a69955a01ec6cc", "subject": "futex: Avoid private hash use-after-free on final put", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80758", "commit_url": "https://git.kernel.org/stable/c/1c7efabfbaf796f11000a46094a69955a01ec6cc" }, { "cve": "CVE-2026-80759", "author_name": "Laxman Acharya Padhya", "author_email": "acharyalaxman8848@gmail.com", "fix_sha": "2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4", "subject": "Bluetooth: hci_aml: validate firmware segment lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80759", "commit_url": "https://git.kernel.org/stable/c/2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4" }, { "cve": "CVE-2026-80760", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "5d95286b6d6e8f1d304da7522bfa6860fc017e48", "subject": "Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80760", "commit_url": "https://git.kernel.org/stable/c/5d95286b6d6e8f1d304da7522bfa6860fc017e48" }, { "cve": "CVE-2026-80761", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "884cf2cc957da7ac178a0e6c6c69ddfec0481cc8", "subject": "Bluetooth: ISO: zero the sockaddr before returning it in getname", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80761", "commit_url": "https://git.kernel.org/stable/c/884cf2cc957da7ac178a0e6c6c69ddfec0481cc8" }, { "cve": "CVE-2026-80762", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "f57b399c4fa1501b2d5451f52d861ece86bcf3db", "subject": "Bluetooth: hci_sync: Fix accept list UAF during suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80762", "commit_url": "https://git.kernel.org/stable/c/f57b399c4fa1501b2d5451f52d861ece86bcf3db" }, { "cve": "CVE-2026-80763", "author_name": "Laxman Acharya Padhya", "author_email": "acharyalaxman8848@gmail.com", "fix_sha": "0acd4eeb4b225b9bebbf9ef96cc10cdd79b94899", "subject": "Bluetooth: hci_event: validate LE Set CIG Parameters response", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80763", "commit_url": "https://git.kernel.org/stable/c/0acd4eeb4b225b9bebbf9ef96cc10cdd79b94899" }, { "cve": "CVE-2026-80764", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "33af47e847fe4a28b109673affb5874015d54f5a", "subject": "Bluetooth: hci_event: fix LE list UAF on reset", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80764", "commit_url": "https://git.kernel.org/stable/c/33af47e847fe4a28b109673affb5874015d54f5a" }, { "cve": "CVE-2026-80765", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "934b7778aa7b7c8f6bb073d2a73ba3674885bae0", "subject": "HID: hyperv: validate initial device info bounds", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80765", "commit_url": "https://git.kernel.org/stable/c/934b7778aa7b7c8f6bb073d2a73ba3674885bae0" }, { "cve": "CVE-2026-80766", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "506fd50a9027340f0e9dcc587d10ccb03312dba6", "subject": "HID: uclogic: fix use-after-free of inrange_timer on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80766", "commit_url": "https://git.kernel.org/stable/c/506fd50a9027340f0e9dcc587d10ccb03312dba6" }, { "cve": "CVE-2026-80767", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "ad8fb82b04422f49530d2aa2753cc81d1c60102c", "subject": "HID: sensor: custom: Fix use-after-free in enable_sensor", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80767", "commit_url": "https://git.kernel.org/stable/c/ad8fb82b04422f49530d2aa2753cc81d1c60102c" }, { "cve": "CVE-2026-80768", "author_name": "Raman Varabets", "author_email": "kernel-linux-20260610-80b7ab08@raman.v1.sg", "fix_sha": "bf3e39df3a397fd82967a31d17c4e02c7feab221", "subject": "HID: ft260: fix stack-use-after-return write in I2C read race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80768", "commit_url": "https://git.kernel.org/stable/c/bf3e39df3a397fd82967a31d17c4e02c7feab221" }, { "cve": "CVE-2026-80769", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "b57af2448268c30c25509a832b6ff6dc27176b28", "subject": "HID: rapoo: fix missing hid_is_usb() check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80769", "commit_url": "https://git.kernel.org/stable/c/b57af2448268c30c25509a832b6ff6dc27176b28" }, { "cve": "CVE-2026-80770", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "1f74d3bff6fe04a64e02ab3661d2e0d554565aa6", "subject": "HID: nintendo: stop device IO before hid_hw_stop on probe failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80770", "commit_url": "https://git.kernel.org/stable/c/1f74d3bff6fe04a64e02ab3661d2e0d554565aa6" }, { "cve": "CVE-2026-80771", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "d723bc1fe2e72b9252234e94c11af644ec477bf7", "subject": "HID: nintendo: register input device after capabilities are set", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80771", "commit_url": "https://git.kernel.org/stable/c/d723bc1fe2e72b9252234e94c11af644ec477bf7" }, { "cve": "CVE-2026-80772", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "27b376b945c0aac46fcdfcc950b14a85b874b557", "subject": "HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80772", "commit_url": "https://git.kernel.org/stable/c/27b376b945c0aac46fcdfcc950b14a85b874b557" }, { "cve": "CVE-2026-80773", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "4cdb6b4b34d7823254f6e1b22faf56c96ac57fb9", "subject": "HID: huawei: fix missing hid_is_usb() check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80773", "commit_url": "https://git.kernel.org/stable/c/4cdb6b4b34d7823254f6e1b22faf56c96ac57fb9" }, { "cve": "CVE-2026-80774", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "02bf61dfb44f17ec187d1da1a82495951bbd12df", "subject": "HID: asus: fix missing hid_is_usb() check", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80774", "commit_url": "https://git.kernel.org/stable/c/02bf61dfb44f17ec187d1da1a82495951bbd12df" }, { "cve": "CVE-2026-80775", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "bde0238083647381d4747355c5a19115a3422b96", "subject": "futex: Fix race on the initial mm->futex.phash.ref allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80775", "commit_url": "https://git.kernel.org/stable/c/bde0238083647381d4747355c5a19115a3422b96" }, { "cve": "CVE-2026-80776", "author_name": "Yao Kai", "author_email": "yaokai34@huawei.com", "fix_sha": "8e7ff730dd96519a333d1570edf1c3fabb6d3629", "subject": "futex: Fix race in futex_pivot_pending() during private hash resize", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80776", "commit_url": "https://git.kernel.org/stable/c/8e7ff730dd96519a333d1570edf1c3fabb6d3629" }, { "cve": "CVE-2026-80777", "author_name": "Thomas Gleixner", "author_email": "tglx@kernel.org", "fix_sha": "c5f0bc9fd1cec4a00400cc727fcde03e0fde17cc", "subject": "futex/pi: Plug private futex exec() race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80777", "commit_url": "https://git.kernel.org/stable/c/c5f0bc9fd1cec4a00400cc727fcde03e0fde17cc" }, { "cve": "CVE-2026-80778", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "59b3732f95dda1fbd2234514d35f4fb6b5bb6d85", "subject": "futex/pi: Reject cross-mm private futex owners", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80778", "commit_url": "https://git.kernel.org/stable/c/59b3732f95dda1fbd2234514d35f4fb6b5bb6d85" }, { "cve": "CVE-2026-80779", "author_name": "Anand Khoje", "author_email": "anand.a.khoje@oracle.com", "fix_sha": "d92255b405fb6f5acca408239ccd742e0a42c9cb", "subject": "net/ionic: avoid OOB TX partner lookup for hwstamp RXQ", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80779", "commit_url": "https://git.kernel.org/stable/c/d92255b405fb6f5acca408239ccd742e0a42c9cb" }, { "cve": "CVE-2026-80780", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "67bb1074e3d2d12fa059a9cc707e89398a4e4704", "subject": "HID: pidff: fix OOB write when hid->inputs is empty", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80780", "commit_url": "https://git.kernel.org/stable/c/67bb1074e3d2d12fa059a9cc707e89398a4e4704" }, { "cve": "CVE-2026-80781", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "a13cdb19fcb223ed41bdab3bab42b98dba87e90b", "subject": "HID: core: fix OOB read of field->usage in hid_set_field()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80781", "commit_url": "https://git.kernel.org/stable/c/a13cdb19fcb223ed41bdab3bab42b98dba87e90b" }, { "cve": "CVE-2026-80782", "author_name": "Jose Villase\u00f1or Montfort", "author_email": "pepemontfort@gmail.com", "fix_sha": "0af3b89705688af01aa06025b84fa7a1e06ba6cc", "subject": "HID: magicmouse: do not keep a stale msc->input if no input is claimed", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80782", "commit_url": "https://git.kernel.org/stable/c/0af3b89705688af01aa06025b84fa7a1e06ba6cc" }, { "cve": "CVE-2026-80783", "author_name": "Jose Villase\u00f1or Montfort", "author_email": "pepemontfort@gmail.com", "fix_sha": "db8d634128d2ba88d79c0b601e983ebe14bb0519", "subject": "HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80783", "commit_url": "https://git.kernel.org/stable/c/db8d634128d2ba88d79c0b601e983ebe14bb0519" }, { "cve": "CVE-2026-80784", "author_name": "Shardul Bankar", "author_email": "shardul.b@mpiricsoftware.com", "fix_sha": "efc33b5102ff859bacd390a5f30112d8e0c084c0", "subject": "mptcp: pm: fix memory leak from alloc-during-teardown race", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80784", "commit_url": "https://git.kernel.org/stable/c/efc33b5102ff859bacd390a5f30112d8e0c084c0" }, { "cve": "CVE-2026-80785", "author_name": "Melbin K Mathew", "author_email": "mlbnkm1@gmail.com", "fix_sha": "061db6b7a910b8378f3b2df64f8c0a3ddc6e85f2", "subject": "fbdev: serialize mode sysfs access with lock_fb_info()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80785", "commit_url": "https://git.kernel.org/stable/c/061db6b7a910b8378f3b2df64f8c0a3ddc6e85f2" }, { "cve": "CVE-2026-80786", "author_name": "Thomas Zimmermann", "author_email": "tzimmermann@suse.de", "fix_sha": "6f611e5e5f3327cf2e2daabe6ee5acac58cc784e", "subject": "fbdev: Wrap user-invoked calls to fb_set_var() in helper", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80786", "commit_url": "https://git.kernel.org/stable/c/6f611e5e5f3327cf2e2daabe6ee5acac58cc784e" }, { "cve": "CVE-2026-80787", "author_name": "Shin'ichiro Kawasaki", "author_email": "shinichiro.kawasaki@wdc.com", "fix_sha": "c9e9bb757971485b4e8414b1744507af186d72c9", "subject": "nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80787", "commit_url": "https://git.kernel.org/stable/c/c9e9bb757971485b4e8414b1744507af186d72c9" }, { "cve": "CVE-2026-80788", "author_name": "Greg Kroah-Hartman", "author_email": "gregkh@linuxfoundation.org", "fix_sha": "737a3b535247226f6e1a7988fd9d6e63e7d6fc71", "subject": "nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80788", "commit_url": "https://git.kernel.org/stable/c/737a3b535247226f6e1a7988fd9d6e63e7d6fc71" }, { "cve": "CVE-2026-80789", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "4a3f00262a044e8e15064b1a6860968bf0500bf4", "subject": "nvmet-tcp: bound SGL data length before allocating command buffers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80789", "commit_url": "https://git.kernel.org/stable/c/4a3f00262a044e8e15064b1a6860968bf0500bf4" }, { "cve": "CVE-2026-80790", "author_name": "Jiang HongHui", "author_email": "jiang_hh2019@163.com", "fix_sha": "ba98d6796d12258e837ece065d2ecb59d76ce4ff", "subject": "nvmet-fc: fix invalid free in LS IOD error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80790", "commit_url": "https://git.kernel.org/stable/c/ba98d6796d12258e837ece065d2ecb59d76ce4ff" }, { "cve": "CVE-2026-80791", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "3ddcfb013322aa37eaa7a0d344b73079c38dfa21", "subject": "nvmet-auth: zero the AUTH_RECEIVE response buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80791", "commit_url": "https://git.kernel.org/stable/c/3ddcfb013322aa37eaa7a0d344b73079c38dfa21" }, { "cve": "CVE-2026-80792", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "d0d48d999b0eee6bb176ef4e39d9be868fa80f7e", "subject": "ipv6: fix use-after-free in ip6_finish_output2()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80792", "commit_url": "https://git.kernel.org/stable/c/d0d48d999b0eee6bb176ef4e39d9be868fa80f7e" }, { "cve": "CVE-2026-80793", "author_name": "Yong Wang", "author_email": "edragain@163.com", "fix_sha": "c0726f0caf8c6b3208552949e17d23634a2f3129", "subject": "ipv4: reject undersized MTUs in ip_do_fragment()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80793", "commit_url": "https://git.kernel.org/stable/c/c0726f0caf8c6b3208552949e17d23634a2f3129" }, { "cve": "CVE-2026-80794", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "8cbe06c1e699c0a165dae5093a2550e65f914818", "subject": "nfc: nci: fix uninit-value in the RF discover/activated NTF handlers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80794", "commit_url": "https://git.kernel.org/stable/c/8cbe06c1e699c0a165dae5093a2550e65f914818" }, { "cve": "CVE-2026-80795", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "ac200079db50af81e6b04d058b33ec92901d8edd", "subject": "nfc: nci: fix out-of-bounds write in nci_target_auto_activated()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80795", "commit_url": "https://git.kernel.org/stable/c/ac200079db50af81e6b04d058b33ec92901d8edd" }, { "cve": "CVE-2026-80796", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "0428fa2c22e2ba0cff766d3b80d461e149102045", "subject": "nfc: nci: add data_len bound checks to activation parameter extractors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80796", "commit_url": "https://git.kernel.org/stable/c/0428fa2c22e2ba0cff766d3b80d461e149102045" }, { "cve": "CVE-2026-80797", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "5718fc62198c38c2de5316020a90506f9e75e0bb", "subject": "nfc: pn533: purge fragmented skbs during cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80797", "commit_url": "https://git.kernel.org/stable/c/5718fc62198c38c2de5316020a90506f9e75e0bb" }, { "cve": "CVE-2026-80798", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "95674f506c6376d6722a23144c9acd26609771ed", "subject": "nfc: llcp: reject PDUs shorter than the LLCP header", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80798", "commit_url": "https://git.kernel.org/stable/c/95674f506c6376d6722a23144c9acd26609771ed" }, { "cve": "CVE-2026-80799", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "78b20c8eeacd2e44a2d8a4cb5316d3c521d90911", "subject": "nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80799", "commit_url": "https://git.kernel.org/stable/c/78b20c8eeacd2e44a2d8a4cb5316d3c521d90911" }, { "cve": "CVE-2026-80800", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "55c68ac93e7dacc0f5f608b9c39dd4ff48cf28e8", "subject": "nfc: llcp: bound the connect_sn TLV walk to the skb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80800", "commit_url": "https://git.kernel.org/stable/c/55c68ac93e7dacc0f5f608b9c39dd4ff48cf28e8" }, { "cve": "CVE-2026-80801", "author_name": "Pengpeng Hou", "author_email": "pengpeng@iscas.ac.cn", "fix_sha": "25519469972ef57c3edb1805dabd6c5612b90211", "subject": "nfc: microread: validate target discovery payload lengths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80801", "commit_url": "https://git.kernel.org/stable/c/25519469972ef57c3edb1805dabd6c5612b90211" }, { "cve": "CVE-2026-80802", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "7ad21dcfeb5181af0c3ee2608808c0c0a5283aa1", "subject": "nfc: fdp: bound the device-reported read length and fix an skb leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80802", "commit_url": "https://git.kernel.org/stable/c/7ad21dcfeb5181af0c3ee2608808c0c0a5283aa1" }, { "cve": "CVE-2026-80803", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16", "subject": "nfc: digital: clamp SENSF_RES length to the destination buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80803", "commit_url": "https://git.kernel.org/stable/c/344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16" }, { "cve": "CVE-2026-80804", "author_name": "Yun Zhou", "author_email": "yun.zhou@windriver.com", "fix_sha": "0241ea5fb0fe86d2a673163b2f5815111aadc7f7", "subject": "xfs: restore nofs context unconditionally in xfs_trans_roll", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80804", "commit_url": "https://git.kernel.org/stable/c/0241ea5fb0fe86d2a673163b2f5815111aadc7f7" }, { "cve": "CVE-2026-80805", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "b7eea80be25f3334f131d52982b3131aba77b97d", "subject": "xfs: validate attr entry pointer before field access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80805", "commit_url": "https://git.kernel.org/stable/c/b7eea80be25f3334f131d52982b3131aba77b97d" }, { "cve": "CVE-2026-80806", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "da32af420d6d466e247c43ac0b829edeac7ae0ad", "subject": "ext4: don't enable DAX on new encrypted files", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80806", "commit_url": "https://git.kernel.org/stable/c/da32af420d6d466e247c43ac0b829edeac7ae0ad" }, { "cve": "CVE-2026-80807", "author_name": "Ryusuke Konishi", "author_email": "konishi.ryusuke@gmail.com", "fix_sha": "a1735eae55448bc79c2da6593455791e886f6ed8", "subject": "nilfs2: reject invalid block index in GC ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80807", "commit_url": "https://git.kernel.org/stable/c/a1735eae55448bc79c2da6593455791e886f6ed8" }, { "cve": "CVE-2026-80808", "author_name": "Matthias Goergens", "author_email": "matthias.goergens@gmail.com", "fix_sha": "54b6bd40898de7906acb2bccc9a96d1b8e6b4323", "subject": "ext4: stop retrying saturated xattr cache entries", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80808", "commit_url": "https://git.kernel.org/stable/c/54b6bd40898de7906acb2bccc9a96d1b8e6b4323" }, { "cve": "CVE-2026-80809", "author_name": "Ian Bridges", "author_email": "icb@fastmail.org", "fix_sha": "0cdc7dde00ec63ac714271fa8b2918d630b8da1a", "subject": "ocfs2: fix missing metadata reservation for large xattrs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80809", "commit_url": "https://git.kernel.org/stable/c/0cdc7dde00ec63ac714271fa8b2918d630b8da1a" }, { "cve": "CVE-2026-80810", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "3f3a6a16bbe8bde76532d9415438f8cdef439e5d", "subject": "io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80810", "commit_url": "https://git.kernel.org/stable/c/3f3a6a16bbe8bde76532d9415438f8cdef439e5d" }, { "cve": "CVE-2026-80811", "author_name": "Woraphat Khiaodaeng", "author_email": "worapat.kd2@gmail.com", "fix_sha": "bb34ae5da3365699d53a756f4c96b6ea9f8ba0c1", "subject": "io_uring/cmd: fix iovec leak when the async cmd is not recycled", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80811", "commit_url": "https://git.kernel.org/stable/c/bb34ae5da3365699d53a756f4c96b6ea9f8ba0c1" }, { "cve": "CVE-2026-80812", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "02442d5fe8ee365a084b055d4fa81a0c1abfc3fd", "subject": "ALSA: dummy: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80812", "commit_url": "https://git.kernel.org/stable/c/02442d5fe8ee365a084b055d4fa81a0c1abfc3fd" }, { "cve": "CVE-2026-80813", "author_name": "Guixin Liu", "author_email": "kanie@linux.alibaba.com", "fix_sha": "79aba4c9403419d822972d2851f2a96a2c0531cf", "subject": "nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80813", "commit_url": "https://git.kernel.org/stable/c/79aba4c9403419d822972d2851f2a96a2c0531cf" }, { "cve": "CVE-2026-80814", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "965a251f23ff69cfb4486974d4532e9bb551c7fc", "subject": "rndis_host: add overflow check in rndis_rx_fixup()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80814", "commit_url": "https://git.kernel.org/stable/c/965a251f23ff69cfb4486974d4532e9bb551c7fc" }, { "cve": "CVE-2026-80815", "author_name": "Geoffrey D. Bennett", "author_email": "g@b4.vu", "fix_sha": "cd17d6ff7b7d2b1dd9bcc80ae7b4a83773f918c6", "subject": "ALSA: scarlett2: Use a private URB for the notification endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80815", "commit_url": "https://git.kernel.org/stable/c/cd17d6ff7b7d2b1dd9bcc80ae7b4a83773f918c6" }, { "cve": "CVE-2026-80816", "author_name": "Geoffrey D. Bennett", "author_email": "g@b4.vu", "fix_sha": "918b8d231c571c50a00efe92ffc8404a537a0490", "subject": "ALSA: FCP: Use a private URB for the notification endpoint", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80816", "commit_url": "https://git.kernel.org/stable/c/918b8d231c571c50a00efe92ffc8404a537a0490" }, { "cve": "CVE-2026-80817", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "d616de490ec0242dcf78f02f1adf7baa035c4d0d", "subject": "iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80817", "commit_url": "https://git.kernel.org/stable/c/d616de490ec0242dcf78f02f1adf7baa035c4d0d" }, { "cve": "CVE-2026-80818", "author_name": "Shameer Kolothum", "author_email": "skolothumtho@nvidia.com", "fix_sha": "9ff145a25c5c8a26b06ef7cf558fb536b18bba6d", "subject": "iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80818", "commit_url": "https://git.kernel.org/stable/c/9ff145a25c5c8a26b06ef7cf558fb536b18bba6d" }, { "cve": "CVE-2026-80819", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "43a556b2fd43f2df6dded59c2e26560a27874c24", "subject": "Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80819", "commit_url": "https://git.kernel.org/stable/c/43a556b2fd43f2df6dded59c2e26560a27874c24" }, { "cve": "CVE-2026-80820", "author_name": "Darrick J. Wong", "author_email": "djwong@kernel.org", "fix_sha": "527eaaefddb6ec5c83a06c9a1559960dd6361753", "subject": "xfs: don't livelock in scrub on a circular unlinked list", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80820", "commit_url": "https://git.kernel.org/stable/c/527eaaefddb6ec5c83a06c9a1559960dd6361753" }, { "cve": "CVE-2026-80821", "author_name": "Yifei Gao", "author_email": "gyf161023@gmail.com", "fix_sha": "659ae9d02cb5d72c76f74fff7441eb8fb64d8f5c", "subject": "nvmet: pci-epf: put CQ ref on create_cq mapping failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80821", "commit_url": "https://git.kernel.org/stable/c/659ae9d02cb5d72c76f74fff7441eb8fb64d8f5c" }, { "cve": "CVE-2026-80822", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "b37c4d0a2fd90c0c31223acd37f763eb8953ed1a", "subject": "mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80822", "commit_url": "https://git.kernel.org/stable/c/b37c4d0a2fd90c0c31223acd37f763eb8953ed1a" }, { "cve": "CVE-2026-80823", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "5cdcca5d62a66eda6b774110a44cba67bc1a8d1d", "subject": "nfc: st21nfca: validate ATR_REQ length against the received frame", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80823", "commit_url": "https://git.kernel.org/stable/c/5cdcca5d62a66eda6b774110a44cba67bc1a8d1d" }, { "cve": "CVE-2026-80824", "author_name": "Miguel Pe\u00f1aranda", "author_email": "mig.penaranda07@gmail.com", "fix_sha": "0dd68b5d01d022fc9c5e71c82a82b0a94d3d0671", "subject": "usb: usbfs: fix use-after-free of usb_device in usbdev_release()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80824", "commit_url": "https://git.kernel.org/stable/c/0dd68b5d01d022fc9c5e71c82a82b0a94d3d0671" }, { "cve": "CVE-2026-80825", "author_name": "Devin Wittmayer", "author_email": "lucid_duck@justthetip.ca", "fix_sha": "ef3e34874d2332d0f63e72c2c35ce5c93568c125", "subject": "wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80825", "commit_url": "https://git.kernel.org/stable/c/ef3e34874d2332d0f63e72c2c35ce5c93568c125" }, { "cve": "CVE-2026-80826", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "b1e24de475bf2d66fffc9103f3444b783527d55a", "subject": "USB: c67x00: fix use-after-free in c67x00_add_iso_urb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80826", "commit_url": "https://git.kernel.org/stable/c/b1e24de475bf2d66fffc9103f3444b783527d55a" }, { "cve": "CVE-2026-80827", "author_name": "Jiale Yao", "author_email": "yaojiale02@163.com", "fix_sha": "885d802f544ca7bfa8f3984d94233cce715bb6b3", "subject": "USB: serial: option: fix slab OOB read in interrupt URB callback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80827", "commit_url": "https://git.kernel.org/stable/c/885d802f544ca7bfa8f3984d94233cce715bb6b3" }, { "cve": "CVE-2026-80828", "author_name": "Will Porter", "author_email": "mrwillporter@gmail.com", "fix_sha": "1739a976312e110c93a8dee66a1cdf893a1b187e", "subject": "ALSA: usb-audio: Complete cleanup after system-resume errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80828", "commit_url": "https://git.kernel.org/stable/c/1739a976312e110c93a8dee66a1cdf893a1b187e" }, { "cve": "CVE-2026-80829", "author_name": "Marouane El Moufid", "author_email": "eun0us@espilon.net", "fix_sha": "1035a8f63bae28e498b0e7b5ac91d749844a7158", "subject": "ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80829", "commit_url": "https://git.kernel.org/stable/c/1035a8f63bae28e498b0e7b5ac91d749844a7158" }, { "cve": "CVE-2026-80830", "author_name": "Griffin Kroah-Hartman", "author_email": "griffin@kroah.com", "fix_sha": "e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6", "subject": "usb: core: Add lock to usb_wakeup_notification()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80830", "commit_url": "https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6" }, { "cve": "CVE-2026-80831", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "c5bcb084a9871e5b62afb5f48b60adfa13b5d9f8", "subject": "crypto: mxs-dcp - fix source scatterlist length access", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80831", "commit_url": "https://git.kernel.org/stable/c/c5bcb084a9871e5b62afb5f48b60adfa13b5d9f8" }, { "cve": "CVE-2026-80832", "author_name": "Md Sadre Alam", "author_email": "md.alam@oss.qualcomm.com", "fix_sha": "7f2345f47dd189625f657cd72437179ab4170ee1", "subject": "crypto: qce - fix CCM AAD buffer underallocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80832", "commit_url": "https://git.kernel.org/stable/c/7f2345f47dd189625f657cd72437179ab4170ee1" }, { "cve": "CVE-2026-80833", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "a78446ee6fae86ac8733f120e3ffce2e5d9384f5", "subject": "crypto: sun8i-ss - Remove crypto_rng interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80833", "commit_url": "https://git.kernel.org/stable/c/a78446ee6fae86ac8733f120e3ffce2e5d9384f5" }, { "cve": "CVE-2026-80834", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "011556f71d094da61379ae3672692cae2795304e", "subject": "crypto: sun8i-ce - Remove crypto_rng interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80834", "commit_url": "https://git.kernel.org/stable/c/011556f71d094da61379ae3672692cae2795304e" }, { "cve": "CVE-2026-80835", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "2ecdf5c9910e20f73639bc322f0518a3439d17c0", "subject": "crypto: qcom-rng - Remove crypto_rng interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80835", "commit_url": "https://git.kernel.org/stable/c/2ecdf5c9910e20f73639bc322f0518a3439d17c0" }, { "cve": "CVE-2026-80836", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "f77a956f6a19f9463ef1527c9d0cda50dded6b92", "subject": "crypto: virtio - bound the akcipher result length", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80836", "commit_url": "https://git.kernel.org/stable/c/f77a956f6a19f9463ef1527c9d0cda50dded6b92" }, { "cve": "CVE-2026-80837", "author_name": "Fourie Zhang", "author_email": "littleddfu@gmail.com", "fix_sha": "7904b94768e983bcb2be34a8d6d1f3450f5b838b", "subject": "netfilter: nf_tables: don't queue packet path object notifications", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80837", "commit_url": "https://git.kernel.org/stable/c/7904b94768e983bcb2be34a8d6d1f3450f5b838b" }, { "cve": "CVE-2026-80838", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "d5d4a7b538b52db63927773a8905fcd9f78a42e2", "subject": "vxlan: keep the last remote linked during FDB flush", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80838", "commit_url": "https://git.kernel.org/stable/c/d5d4a7b538b52db63927773a8905fcd9f78a42e2" }, { "cve": "CVE-2026-80839", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "f12c2de4f542e3220e17e0606f492110064f04cb", "subject": "batman-adv: reject unrepresentable multicast TVLV offsets", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80839", "commit_url": "https://git.kernel.org/stable/c/f12c2de4f542e3220e17e0606f492110064f04cb" }, { "cve": "CVE-2026-80840", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "44930446dde45a7a90fe1446fa38eb0e2c561646", "subject": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80840", "commit_url": "https://git.kernel.org/stable/c/44930446dde45a7a90fe1446fa38eb0e2c561646" }, { "cve": "CVE-2026-80841", "author_name": "Kyle Zeng", "author_email": "kylebot@openai.com", "fix_sha": "992cc9f94ca924089a506ba9b327caa9af797529", "subject": "net/packet: defer vmalloc TX_RING free until skbs finish", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80841", "commit_url": "https://git.kernel.org/stable/c/992cc9f94ca924089a506ba9b327caa9af797529" }, { "cve": "CVE-2026-80842", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "50e5c6605cc9c2dd57bd2d1b3459674d19738983", "subject": "net: bridge: mcast: fix use-after-free of a master VLAN's multicast context", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80842", "commit_url": "https://git.kernel.org/stable/c/50e5c6605cc9c2dd57bd2d1b3459674d19738983" }, { "cve": "CVE-2026-80843", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "c12cbf56320fb633484ee0ca1fb7d68d6b64b213", "subject": "xfrm: fix xfrm_state_construct() auth-trunc leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80843", "commit_url": "https://git.kernel.org/stable/c/c12cbf56320fb633484ee0ca1fb7d68d6b64b213" }, { "cve": "CVE-2026-80844", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "7bad4bda74dc4713f398d3b7624ff05478e3a568", "subject": "xfrm: ah6: validate routing header segments_left", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80844", "commit_url": "https://git.kernel.org/stable/c/7bad4bda74dc4713f398d3b7624ff05478e3a568" }, { "cve": "CVE-2026-80845", "author_name": "Zihan Xi", "author_email": "xizh2024@lzu.edu.cn", "fix_sha": "763fe700b7c58ad64fe5202c5638848244dd4127", "subject": "xfrm: avoid lock inversion in nat keepalive work", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80845", "commit_url": "https://git.kernel.org/stable/c/763fe700b7c58ad64fe5202c5638848244dd4127" }, { "cve": "CVE-2026-80846", "author_name": "Zhiling Zou", "author_email": "roxy520tt@gmail.com", "fix_sha": "e1d7c5ac1c246ce5775f604515de0a59fbf2116e", "subject": "xfrm: drop ESP-in-TCP packets with no ingress device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80846", "commit_url": "https://git.kernel.org/stable/c/e1d7c5ac1c246ce5775f604515de0a59fbf2116e" }, { "cve": "CVE-2026-80847", "author_name": "Yong Wang", "author_email": "edragain@163.com", "fix_sha": "870a9e42ecc6fe1b8c25d87af043cb0d9c178fe1", "subject": "tcp: clamp route advmss to TCP_MIN_MSS", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80847", "commit_url": "https://git.kernel.org/stable/c/870a9e42ecc6fe1b8c25d87af043cb0d9c178fe1" }, { "cve": "CVE-2026-80848", "author_name": "Sabrina Dubroca", "author_email": "sd@queasysnail.net", "fix_sha": "deb232e884877bf10b4ce2580909eedec986c284", "subject": "xfrm: espintcp: fix UAF during close", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80848", "commit_url": "https://git.kernel.org/stable/c/deb232e884877bf10b4ce2580909eedec986c284" }, { "cve": "CVE-2026-80849", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "da4471557f279d0f56605158a625bb6e49ef7d41", "subject": "net/tcp-ao: fix use-after-free of current_key on reconnect to another peer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80849", "commit_url": "https://git.kernel.org/stable/c/da4471557f279d0f56605158a625bb6e49ef7d41" }, { "cve": "CVE-2026-80850", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "ea30dc5267e367b8a5e1e06cc074f813bcbf18b2", "subject": "tcp: fix AO info use-after-free in tcp_ao_connect_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80850", "commit_url": "https://git.kernel.org/stable/c/ea30dc5267e367b8a5e1e06cc074f813bcbf18b2" }, { "cve": "CVE-2026-80851", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "498386b6d402737db1e2eeed4c385acbf0ef9e34", "subject": "gtp: serialize PDP context updates", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80851", "commit_url": "https://git.kernel.org/stable/c/498386b6d402737db1e2eeed4c385acbf0ef9e34" }, { "cve": "CVE-2026-80852", "author_name": "Jiayuan Chen", "author_email": "jiayuan.chen@linux.dev", "fix_sha": "b17cf742eaad70ae29ac558cefb3aa9bbeea03d4", "subject": "tls: device: fix out-of-bounds write in tls_append_frag()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80852", "commit_url": "https://git.kernel.org/stable/c/b17cf742eaad70ae29ac558cefb3aa9bbeea03d4" }, { "cve": "CVE-2026-80853", "author_name": "Sean Christopherson", "author_email": "seanjc@google.com", "fix_sha": "a33c40b93ccf5177e042253807d40e0b92e7f206", "subject": "KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80853", "commit_url": "https://git.kernel.org/stable/c/a33c40b93ccf5177e042253807d40e0b92e7f206" }, { "cve": "CVE-2026-80854", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "c39d0916da47d94909391876c9e5bd429ea7b1b9", "subject": "usb: gadget: f_tcm: keep port count until LUN teardown completes", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80854", "commit_url": "https://git.kernel.org/stable/c/c39d0916da47d94909391876c9e5bd429ea7b1b9" }, { "cve": "CVE-2026-80855", "author_name": "Baokun Li", "author_email": "libaokun@linux.alibaba.com", "fix_sha": "a927f1867e61b78f39f9da0bbba3c98c2ca151fe", "subject": "fuse: fix invalidate lock leak on open O_TRUNC DAX failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80855", "commit_url": "https://git.kernel.org/stable/c/a927f1867e61b78f39f9da0bbba3c98c2ca151fe" }, { "cve": "CVE-2026-80856", "author_name": "Baokun Li", "author_email": "libaokun@linux.alibaba.com", "fix_sha": "9afeca0d569c9fc89d758fe7a9339d1e8afb1546", "subject": "fuse: fix invalidate lock leak on setattr writeback failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80856", "commit_url": "https://git.kernel.org/stable/c/9afeca0d569c9fc89d758fe7a9339d1e8afb1546" }, { "cve": "CVE-2026-80857", "author_name": "Rochan Avlur", "author_email": "rochan.avlur@gmail.com", "fix_sha": "64b0b5cacbd2fea88001464cb712c9dfc795b26e", "subject": "fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80857", "commit_url": "https://git.kernel.org/stable/c/64b0b5cacbd2fea88001464cb712c9dfc795b26e" }, { "cve": "CVE-2026-80858", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "42df916e5a5f8fb4b60c8cefb54318d1ec02c580", "subject": "fuse: publish io-uring queues with release semantics", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80858", "commit_url": "https://git.kernel.org/stable/c/42df916e5a5f8fb4b60c8cefb54318d1ec02c580" }, { "cve": "CVE-2026-80859", "author_name": "Joanne Koong", "author_email": "joannelkoong@gmail.com", "fix_sha": "edb310bc27f0ad83e7fd558a3caf1a94ca511654", "subject": "fuse: fix missing barrier when checking io-uring readiness", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80859", "commit_url": "https://git.kernel.org/stable/c/edb310bc27f0ad83e7fd558a3caf1a94ca511654" }, { "cve": "CVE-2026-80860", "author_name": "Miklos Szeredi", "author_email": "mszeredi@redhat.com", "fix_sha": "ed9c881f3b498383f73c42712b359419da42a7b0", "subject": "fuse: fix race between interrupt and resend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80860", "commit_url": "https://git.kernel.org/stable/c/ed9c881f3b498383f73c42712b359419da42a7b0" }, { "cve": "CVE-2026-80861", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "78203d5b54a40f0e36196ebf31c9c7a380fc8811", "subject": "usb: xhci: bail out of setup if the controller is inaccessible", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80861", "commit_url": "https://git.kernel.org/stable/c/78203d5b54a40f0e36196ebf31c9c7a380fc8811" }, { "cve": "CVE-2026-80862", "author_name": "Dmitry Bogdanov", "author_email": "d.bogdanov@yadro.com", "fix_sha": "36ac05f7cfd59d90c597071304b14e98090d5dd1", "subject": "nvme-tcp: fix usage of page_frag_cache", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80862", "commit_url": "https://git.kernel.org/stable/c/36ac05f7cfd59d90c597071304b14e98090d5dd1" }, { "cve": "CVE-2026-80863", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "de329533792a373186d79dca1ca120f8fa0afd05", "subject": "RDMA/rxe: Fix OOB in free_rd_atomic_resources()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80863", "commit_url": "https://git.kernel.org/stable/c/de329533792a373186d79dca1ca120f8fa0afd05" }, { "cve": "CVE-2026-80864", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "6f7014237405e7f032b5c53a82d9eccf6161c291", "subject": "RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80864", "commit_url": "https://git.kernel.org/stable/c/6f7014237405e7f032b5c53a82d9eccf6161c291" }, { "cve": "CVE-2026-80865", "author_name": "Jiri Olsa", "author_email": "jolsa@kernel.org", "fix_sha": "d5dc200c3a3f217de072af269dd90adddf90e48d", "subject": "bpf: Add missing access_ok call to copy_user_syms", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80865", "commit_url": "https://git.kernel.org/stable/c/d5dc200c3a3f217de072af269dd90adddf90e48d" }, { "cve": "CVE-2026-80866", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "c1481c94e74c955e0448ddf46b8615a44d840c1e", "subject": "tipc: avoid busy looping in tipc_exit_net()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80866", "commit_url": "https://git.kernel.org/stable/c/c1481c94e74c955e0448ddf46b8615a44d840c1e" }, { "cve": "CVE-2026-80867", "author_name": "Krzysztof Wilczy\u0144ski", "author_email": "kwilczynski@kernel.org", "fix_sha": "78a228f0aa0e9eba31955950c8a40a9945e2c8bb", "subject": "alpha/PCI: Add security_locked_down() check to pci_mmap_resource()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80867", "commit_url": "https://git.kernel.org/stable/c/78a228f0aa0e9eba31955950c8a40a9945e2c8bb" }, { "cve": "CVE-2026-80868", "author_name": "Mihai Brodschi", "author_email": "m.brodschi@gmail.com", "fix_sha": "70d3855594cf6e8791970714b65cac3202d6160e", "subject": "ntfs3: Allocate iomap inline_data using alloc_page", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80868", "commit_url": "https://git.kernel.org/stable/c/70d3855594cf6e8791970714b65cac3202d6160e" }, { "cve": "CVE-2026-80869", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "98634df5b1cb56c26299b7409227025ddb0167d8", "subject": "ntfs: bound the attribute-list entry in ntfs_read_inode_mount()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80869", "commit_url": "https://git.kernel.org/stable/c/98634df5b1cb56c26299b7409227025ddb0167d8" }, { "cve": "CVE-2026-80870", "author_name": "Srinivasan Shanmugam", "author_email": "srinivasan.shanmugam@amd.com", "fix_sha": "85043dd49c2f51a37b22618168e3ae59ab92f0d6", "subject": "drm/amdkfd: Validate CRIU-restored IDs before idr_alloc", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80870", "commit_url": "https://git.kernel.org/stable/c/85043dd49c2f51a37b22618168e3ae59ab92f0d6" }, { "cve": "CVE-2026-80871", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "32b4d29280ed2a991dc196d5845b892acedc63b8", "subject": "crypto: xilinx-trng - Remove crypto_rng interface", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80871", "commit_url": "https://git.kernel.org/stable/c/32b4d29280ed2a991dc196d5845b892acedc63b8" }, { "cve": "CVE-2026-80872", "author_name": "C\u00e1ssio Gabriel", "author_email": "cassiogabrielcontato@gmail.com", "fix_sha": "5367e2ad14f0ae9350a7aaf2e77c87de39a43ae9", "subject": "ALSA: hda/tas2781: Cancel async firmware request at unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80872", "commit_url": "https://git.kernel.org/stable/c/5367e2ad14f0ae9350a7aaf2e77c87de39a43ae9" }, { "cve": "CVE-2026-80873", "author_name": "Fuad Tabba", "author_email": "tabba@google.com", "fix_sha": "e2cb1f4578625e71f461d5c1ce70984193389cbb", "subject": "KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80873", "commit_url": "https://git.kernel.org/stable/c/e2cb1f4578625e71f461d5c1ce70984193389cbb" }, { "cve": "CVE-2026-80874", "author_name": "Marek Vasut", "author_email": "marek.vasut+renesas@mailbox.org", "fix_sha": "6fa6ee724d8dadf392139e242ac936b5da730c4b", "subject": "arm64: dts: renesas: ironhide: Describe inline ECC carveouts", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80874", "commit_url": "https://git.kernel.org/stable/c/6fa6ee724d8dadf392139e242ac936b5da730c4b" }, { "cve": "CVE-2026-80875", "author_name": "Yizhou Zhao", "author_email": "zhaoyz24@mails.tsinghua.edu.cn", "fix_sha": "2500fa3958b1ba51c2b065e39db1b04dfa7e23a2", "subject": "ipvs: use parsed transport offset in TCP state lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80875", "commit_url": "https://git.kernel.org/stable/c/2500fa3958b1ba51c2b065e39db1b04dfa7e23a2" }, { "cve": "CVE-2026-80876", "author_name": "Hui Wang", "author_email": "hui.wang@canonical.com", "fix_sha": "c37e0a4b79a6bbb96ce5ffe279d7c001e20529e0", "subject": "ring-buffer: Fix event length with forced 8-byte alignment", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80876", "commit_url": "https://git.kernel.org/stable/c/c37e0a4b79a6bbb96ce5ffe279d7c001e20529e0" }, { "cve": "CVE-2026-80877", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "fc10c0ecf06f2981af5d04357612b00051e03e9e", "subject": "afs: Fix vllist leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80877", "commit_url": "https://git.kernel.org/stable/c/fc10c0ecf06f2981af5d04357612b00051e03e9e" }, { "cve": "CVE-2026-80878", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "d672c276f685a540ed2b2a8bafaed4650a89022c", "subject": "afs: Fix leak of ungot volume", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80878", "commit_url": "https://git.kernel.org/stable/c/d672c276f685a540ed2b2a8bafaed4650a89022c" }, { "cve": "CVE-2026-80879", "author_name": "Aleksandr Nogikh", "author_email": "nogikh@google.com", "fix_sha": "ff6f26c58421614b02694ac9d219ac61d924bc68", "subject": "ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80879", "commit_url": "https://git.kernel.org/stable/c/ff6f26c58421614b02694ac9d219ac61d924bc68" }, { "cve": "CVE-2026-80880", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "ee7a8335069150c3f1893a697ab30bbeca00d796", "subject": "IB/mlx5: Properly support implicit ODP rereg_mr", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80880", "commit_url": "https://git.kernel.org/stable/c/ee7a8335069150c3f1893a697ab30bbeca00d796" }, { "cve": "CVE-2026-80881", "author_name": "Dmitry Antipov", "author_email": "dmantipov@yandex.ru", "fix_sha": "6371a07148ee979af22a9d6f4c277462953a9a4a", "subject": "ocfs2: fix buffer head management in ocfs2_read_blocks()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80881", "commit_url": "https://git.kernel.org/stable/c/6371a07148ee979af22a9d6f4c277462953a9a4a" }, { "cve": "CVE-2026-80882", "author_name": "Herbert Xu", "author_email": "herbert@gondor.apana.org.au", "fix_sha": "690a5f9e5c972a580565ce544ed1627ccf1e84de", "subject": "crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80882", "commit_url": "https://git.kernel.org/stable/c/690a5f9e5c972a580565ce544ed1627ccf1e84de" }, { "cve": "CVE-2026-80883", "author_name": "Svyatoslav Ryhel", "author_email": "clamor95@gmail.com", "fix_sha": "c4ef5ba1131346159e31f4ef858525cf377380a6", "subject": "drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80883", "commit_url": "https://git.kernel.org/stable/c/c4ef5ba1131346159e31f4ef858525cf377380a6" }, { "cve": "CVE-2026-80884", "author_name": "Leon Romanovsky", "author_email": "leonro@nvidia.com", "fix_sha": "da6d997ac556479c112554ab5d95cbd04683eb11", "subject": "ntb: Store original DMA address for future release", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80884", "commit_url": "https://git.kernel.org/stable/c/da6d997ac556479c112554ab5d95cbd04683eb11" }, { "cve": "CVE-2026-80885", "author_name": "David Howells", "author_email": "dhowells@redhat.com", "fix_sha": "a4057e58b07005d0fe0491bdbf1868c1491909ee", "subject": "afs: Fix uncancelled rxrpc OOB message handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80885", "commit_url": "https://git.kernel.org/stable/c/a4057e58b07005d0fe0491bdbf1868c1491909ee" }, { "cve": "CVE-2026-80886", "author_name": "Stephan Gerhold", "author_email": "stephan.gerhold@linaro.org", "fix_sha": "22dd2777e6c180e1c945b00f6d18550979436324", "subject": "serial: msm: Disable DMA for kernel console UART", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80886", "commit_url": "https://git.kernel.org/stable/c/22dd2777e6c180e1c945b00f6d18550979436324" }, { "cve": "CVE-2026-80887", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "54d56d5b42d2e4c72ba6e365e9774da90698aa22", "subject": "drm/vmwgfx: use check_add_overflow for shader size+offset bound", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80887", "commit_url": "https://git.kernel.org/stable/c/54d56d5b42d2e4c72ba6e365e9774da90698aa22" }, { "cve": "CVE-2026-80888", "author_name": "Zack Rusin", "author_email": "zack.rusin@broadcom.com", "fix_sha": "f739416dc555fa205a785e5135d73fa39b26f35d", "subject": "drm/vmwgfx: drop dma_buf reference on foreign-fd prime import", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80888", "commit_url": "https://git.kernel.org/stable/c/f739416dc555fa205a785e5135d73fa39b26f35d" }, { "cve": "CVE-2026-80889", "author_name": "Oliver Hartkopp", "author_email": "socketcan@hartkopp.net", "fix_sha": "050f010f920da17c1044a4f174766ad553e770b6", "subject": "can: isotp: fix timer drain order, wakeup handling and tx_gen ordering", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80889", "commit_url": "https://git.kernel.org/stable/c/050f010f920da17c1044a4f174766ad553e770b6" }, { "cve": "CVE-2026-80890", "author_name": "Yuxiang Yang", "author_email": "yangyx22@mails.tsinghua.edu.cn", "fix_sha": "9d8da8e0a9bce4a340af60dd0446bc7eb8d07587", "subject": "sctp: reject stale cookies with mismatched verification tags", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80890", "commit_url": "https://git.kernel.org/stable/c/9d8da8e0a9bce4a340af60dd0446bc7eb8d07587" }, { "cve": "CVE-2026-80891", "author_name": "Farhan Ali", "author_email": "alifm@linux.ibm.com", "fix_sha": "868d32ac72cba21c5c6d8a66a814b7c25a3a5c01", "subject": "KVM: s390: pci: Validate AIBV and AISB before pinning guest pages", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80891", "commit_url": "https://git.kernel.org/stable/c/868d32ac72cba21c5c6d8a66a814b7c25a3a5c01" }, { "cve": "CVE-2026-80892", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "c9b47e6b23114e939b17f818471c7a46e59006e7", "subject": "erofs: cap LZMA stream pool size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80892", "commit_url": "https://git.kernel.org/stable/c/c9b47e6b23114e939b17f818471c7a46e59006e7" }, { "cve": "CVE-2026-80893", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "83abe2fd5b3aeb3123b5408a5a91709c5538fb23", "subject": "mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80893", "commit_url": "https://git.kernel.org/stable/c/83abe2fd5b3aeb3123b5408a5a91709c5538fb23" }, { "cve": "CVE-2026-80894", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "ba5c0f28a26e7d9be1e0997f8920dd638e2782fd", "subject": "iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80894", "commit_url": "https://git.kernel.org/stable/c/ba5c0f28a26e7d9be1e0997f8920dd638e2782fd" }, { "cve": "CVE-2026-80895", "author_name": "Stanislav Kinsburskii", "author_email": "skinsburskii@linux.microsoft.com", "fix_sha": "b098dc869219c15dc49bf9cf63fb5fc1481d3373", "subject": "mshv: Order pt_vp_array publish against irqfd assertion path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80895", "commit_url": "https://git.kernel.org/stable/c/b098dc869219c15dc49bf9cf63fb5fc1481d3373" }, { "cve": "CVE-2026-80896", "author_name": "Stanislav Kinsburskii", "author_email": "skinsburskii@linux.microsoft.com", "fix_sha": "0762262ac3e70f65b3bb843fe892f8bac1562d08", "subject": "mshv: Fix race in mshv_irqfd_deassign", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80896", "commit_url": "https://git.kernel.org/stable/c/0762262ac3e70f65b3bb843fe892f8bac1562d08" }, { "cve": "CVE-2026-80897", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "87eb3d272dcbcbbfe5c1576c10e5dc72810cf1f6", "subject": "netfs: release readahead folios on iterator preparation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80897", "commit_url": "https://git.kernel.org/stable/c/87eb3d272dcbcbbfe5c1576c10e5dc72810cf1f6" }, { "cve": "CVE-2026-80898", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "a81fc9266e1c5fef9ccf675a9b44b2f4ab464923", "subject": "netfs: clear PG_private_2 on copy-to-cache append failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80898", "commit_url": "https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923" }, { "cve": "CVE-2026-80899", "author_name": "Gao Xiang", "author_email": "hsiangkao@linux.alibaba.com", "fix_sha": "c37460cd9b2fcb61ec66b7eb4fde737e65ec2a56", "subject": "erofs: remove fscache backend entirely", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80899", "commit_url": "https://git.kernel.org/stable/c/c37460cd9b2fcb61ec66b7eb4fde737e65ec2a56" }, { "cve": "CVE-2026-80900", "author_name": "Charles Keepax", "author_email": "ckeepax@opensource.cirrus.com", "fix_sha": "556d872e7c2a0b570c5b0974813847ef0d0cd637", "subject": "ASoC: SDCA: Make UMP message size check more robust", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80900", "commit_url": "https://git.kernel.org/stable/c/556d872e7c2a0b570c5b0974813847ef0d0cd637" }, { "cve": "CVE-2026-80901", "author_name": "Julian Anastasov", "author_email": "ja@ssi.bg", "fix_sha": "e876b75b9020a97bbdc79721e7fc749024891c65", "subject": "ipvs: fix the checksum validations", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80901", "commit_url": "https://git.kernel.org/stable/c/e876b75b9020a97bbdc79721e7fc749024891c65" }, { "cve": "CVE-2026-80902", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "ab1150115e68a46b687eb38c1ab92782018c9f2c", "subject": "dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80902", "commit_url": "https://git.kernel.org/stable/c/ab1150115e68a46b687eb38c1ab92782018c9f2c" }, { "cve": "CVE-2026-80903", "author_name": "Linmao Li", "author_email": "lilinmao@kylinos.cn", "fix_sha": "8d33c4987cd162527375a3905017ae129ba7c3fe", "subject": "drm/xe/oa: Fix sync entry leak on OA config emit failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80903", "commit_url": "https://git.kernel.org/stable/c/8d33c4987cd162527375a3905017ae129ba7c3fe" }, { "cve": "CVE-2026-80904", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "976df67f463db1fddaf2a32fb04f57ad2891a23d", "subject": "net/tls: Fail tls_sw_splice_read() after a failed async decrypt", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80904", "commit_url": "https://git.kernel.org/stable/c/976df67f463db1fddaf2a32fb04f57ad2891a23d" }, { "cve": "CVE-2026-80905", "author_name": "Wei Fang", "author_email": "wei.fang@nxp.com", "fix_sha": "cbb35cbe8db268fefe34c23df15348cf99025298", "subject": "net: tap: fix wrong transport_header when sending VLAN-tagged frame", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80905", "commit_url": "https://git.kernel.org/stable/c/cbb35cbe8db268fefe34c23df15348cf99025298" }, { "cve": "CVE-2026-80906", "author_name": "Wei Fang", "author_email": "wei.fang@nxp.com", "fix_sha": "01fdecc0480d916c799dbee584833a4a37e94d06", "subject": "net: packet: fix wrong transport_header when sending VLAN-tagged frame", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80906", "commit_url": "https://git.kernel.org/stable/c/01fdecc0480d916c799dbee584833a4a37e94d06" }, { "cve": "CVE-2026-80907", "author_name": "David Rosca", "author_email": "david.rosca@amd.com", "fix_sha": "21a8084cd76223a13493237e04d45f5226d7cee6", "subject": "drm/amdgpu: Fix UVD dpb min size calculation for H264", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80907", "commit_url": "https://git.kernel.org/stable/c/21a8084cd76223a13493237e04d45f5226d7cee6" }, { "cve": "CVE-2026-80908", "author_name": "David Rosca", "author_email": "david.rosca@amd.com", "fix_sha": "8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08", "subject": "drm/amdgpu: Reject UVD message with dimensions above 4096", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80908", "commit_url": "https://git.kernel.org/stable/c/8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08" }, { "cve": "CVE-2026-80909", "author_name": "David Rosca", "author_email": "david.rosca@amd.com", "fix_sha": "9fca434208f1f9ab977feac62df8ebb1cc7ce893", "subject": "drm/amdgpu: Reject UVD message with invalid number of h265 refs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80909", "commit_url": "https://git.kernel.org/stable/c/9fca434208f1f9ab977feac62df8ebb1cc7ce893" }, { "cve": "CVE-2026-80910", "author_name": "Dawid Wro\u0301bel", "author_email": "me@dawidwrobel.com", "fix_sha": "56f24311fd5607588a47e44675195a9efb200f29", "subject": "ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80910", "commit_url": "https://git.kernel.org/stable/c/56f24311fd5607588a47e44675195a9efb200f29" }, { "cve": "CVE-2026-80911", "author_name": "Peter Ujfalusi", "author_email": "peter.ujfalusi@linux.intel.com", "fix_sha": "e780e4917d43683224812400fe3dc4816fceba75", "subject": "ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80911", "commit_url": "https://git.kernel.org/stable/c/e780e4917d43683224812400fe3dc4816fceba75" }, { "cve": "CVE-2026-80912", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "22b05fec62c0fe9864cfceb52f7d0f3a34d9b1dd", "subject": "selinux: reject an unclaimed class value in security_get_classes()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80912", "commit_url": "https://git.kernel.org/stable/c/22b05fec62c0fe9864cfceb52f7d0f3a34d9b1dd" }, { "cve": "CVE-2026-80913", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "a93d37a09b863810653f93d371fb197457d59deb", "subject": "selinux: require every boolean value to be defined", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80913", "commit_url": "https://git.kernel.org/stable/c/a93d37a09b863810653f93d371fb197457d59deb" }, { "cve": "CVE-2026-80914", "author_name": "Hang Nan", "author_email": "2122295973@qq.com", "fix_sha": "560bef609fa5992745929e8d7d458b9d88dd2830", "subject": "Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80914", "commit_url": "https://git.kernel.org/stable/c/560bef609fa5992745929e8d7d458b9d88dd2830" }, { "cve": "CVE-2026-80915", "author_name": "Maarten Lankhorst", "author_email": "dev@lankhorst.se", "fix_sha": "fc648757908304aedbad74f74bf58192aec383db", "subject": "drm/xe: Fix DPT allocation paths.", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80915", "commit_url": "https://git.kernel.org/stable/c/fc648757908304aedbad74f74bf58192aec383db" }, { "cve": "CVE-2026-80916", "author_name": "Tetsuo Handa", "author_email": "penguin-kernel@i-love.sakura.ne.jp", "fix_sha": "2eed77fdcb0cc48e8eccb2bcd4b7f2c6d650e84c", "subject": "kcov: fix data corruption and race conditions on PREEMPT_RT", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80916", "commit_url": "https://git.kernel.org/stable/c/2eed77fdcb0cc48e8eccb2bcd4b7f2c6d650e84c" }, { "cve": "CVE-2026-80917", "author_name": "Steffen Persvold", "author_email": "spersvold@gmail.com", "fix_sha": "008cb88edb41f3c7c8e0ed763ff9f26719830984", "subject": "PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80917", "commit_url": "https://git.kernel.org/stable/c/008cb88edb41f3c7c8e0ed763ff9f26719830984" }, { "cve": "CVE-2026-80918", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "28abce951343fcec26e397610868efa4e1395c3f", "subject": "HID: core: fix number/pointer type confusion on long items", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80918", "commit_url": "https://git.kernel.org/stable/c/28abce951343fcec26e397610868efa4e1395c3f" }, { "cve": "CVE-2026-80919", "author_name": "Mikhail Gavrilov", "author_email": "mikhail.v.gavrilov@gmail.com", "fix_sha": "7152b248dc3c8d5fa8629e99ed5655dd41b51562", "subject": "drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80919", "commit_url": "https://git.kernel.org/stable/c/7152b248dc3c8d5fa8629e99ed5655dd41b51562" }, { "cve": "CVE-2026-80920", "author_name": "Jens Axboe", "author_email": "axboe@kernel.dk", "fix_sha": "cd305ee3633a45fcf5f3a5d83f99f3cb77d87b6e", "subject": "io_uring: defer eventfd signaling when queued from a wakeup handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80920", "commit_url": "https://git.kernel.org/stable/c/cd305ee3633a45fcf5f3a5d83f99f3cb77d87b6e" }, { "cve": "CVE-2026-80921", "author_name": "Christian Borntraeger", "author_email": "borntraeger@linux.ibm.com", "fix_sha": "34d5b5b646c91cfb9338d7a12c955a70ffb8c66b", "subject": "KVM: s390: vsie: zero stale crypto bits", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80921", "commit_url": "https://git.kernel.org/stable/c/34d5b5b646c91cfb9338d7a12c955a70ffb8c66b" }, { "cve": "CVE-2026-80922", "author_name": "Eric Biggers", "author_email": "ebiggers@kernel.org", "fix_sha": "4ef04bdc0c9f98836d1638be516f6bf1bad55f69", "subject": "crypto: qcom-rng - Allow zero as a random number", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80922", "commit_url": "https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69" }, { "cve": "CVE-2026-80923", "author_name": "Lucas De Marchi", "author_email": "ldemarchi@nvidia.com", "fix_sha": "a916fa66a43e10f63198b6ce978badffc678821a", "subject": "xhci: dbgtty: Fix unregister on tty_register_driver() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80923", "commit_url": "https://git.kernel.org/stable/c/a916fa66a43e10f63198b6ce978badffc678821a" }, { "cve": "CVE-2026-80924", "author_name": "Jan Sebastian G\u00f6tte", "author_email": "linux@jaseg.de", "fix_sha": "f7d53dd3f267e46a784f219a75072f2f400d42b9", "subject": "crypto: krb5 - use kfree_sensitive() for derived key buffers", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80924", "commit_url": "https://git.kernel.org/stable/c/f7d53dd3f267e46a784f219a75072f2f400d42b9" }, { "cve": "CVE-2026-80925", "author_name": "Eric Dumazet", "author_email": "edumazet@google.com", "fix_sha": "447cbe95ebb95392b5d8f6a01c0556826919ce23", "subject": "vlan: fix skb_under_panic and races when toggling HW VLAN offload", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80925", "commit_url": "https://git.kernel.org/stable/c/447cbe95ebb95392b5d8f6a01c0556826919ce23" }, { "cve": "CVE-2026-80927", "author_name": "Thomas Wei\u00dfschuh (Schneider Electric)", "author_email": "thomas.weissschuh@linutronix.de", "fix_sha": "4b61084b11bcecce86d03804ff30f8d7b465593c", "subject": "timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80927", "commit_url": "https://git.kernel.org/stable/c/4b61084b11bcecce86d03804ff30f8d7b465593c" }, { "cve": "CVE-2026-80928", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "fedc88e38ce979a720cd2de042578cb5df3dc8de", "subject": "smack: fix cred UAF in smack_file_send_sigiotask()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80928", "commit_url": "https://git.kernel.org/stable/c/fedc88e38ce979a720cd2de042578cb5df3dc8de" }, { "cve": "CVE-2026-80929", "author_name": "Oleg Nesterov", "author_email": "oleg@redhat.com", "fix_sha": "7170ca01623b399c97f2ae9d3e228badc1f25ea3", "subject": "sysctl: move the \"cad_pid\" entry from pid_table[] to kern_reboot_table[]", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80929", "commit_url": "https://git.kernel.org/stable/c/7170ca01623b399c97f2ae9d3e228badc1f25ea3" }, { "cve": "CVE-2026-80930", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "705c4ed0643366963547b2616d53165f2519c81f", "subject": "tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80930", "commit_url": "https://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f" }, { "cve": "CVE-2026-80931", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "169ae5e65e5aaf213b6a578f6478a9fd2e523606", "subject": "w1: ds28e17: reject an oversize length on an I2C block read", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80931", "commit_url": "https://git.kernel.org/stable/c/169ae5e65e5aaf213b6a578f6478a9fd2e523606" }, { "cve": "CVE-2026-80932", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "728836ebca239810f164262b10211ef59182f811", "subject": "vsock/virtio: flush works in dependency order", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80932", "commit_url": "https://git.kernel.org/stable/c/728836ebca239810f164262b10211ef59182f811" }, { "cve": "CVE-2026-80933", "author_name": "Laxman Acharya Padhya", "author_email": "acharyalaxman8848@gmail.com", "fix_sha": "653c6e289b13cc6942f3e8f8e3c568e70fa42d1f", "subject": "wifi: mt76: mt7996: validate default EEPROM firmware size", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80933", "commit_url": "https://git.kernel.org/stable/c/653c6e289b13cc6942f3e8f8e3c568e70fa42d1f" }, { "cve": "CVE-2026-80934", "author_name": "Felix Fietkau", "author_email": "nbd@nbd.name", "fix_sha": "deaa2e3656937fbbe312f0ee2616c756c6e2511f", "subject": "wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80934", "commit_url": "https://git.kernel.org/stable/c/deaa2e3656937fbbe312f0ee2616c756c6e2511f" }, { "cve": "CVE-2026-80935", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "13b3c29a782033ce4a230be9e5618032813dbcd4", "subject": "wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80935", "commit_url": "https://git.kernel.org/stable/c/13b3c29a782033ce4a230be9e5618032813dbcd4" }, { "cve": "CVE-2026-80936", "author_name": "Devin Wittmayer", "author_email": "lucid_duck@justthetip.ca", "fix_sha": "81faf578320df2dfc682a96baa6e85851dd68b6f", "subject": "wifi: mt76: mt7925: cancel mlo_pm_work on stop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80936", "commit_url": "https://git.kernel.org/stable/c/81faf578320df2dfc682a96baa6e85851dd68b6f" }, { "cve": "CVE-2026-80937", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "44b5adfe49499f53002737f5fe81d608c08122fc", "subject": "wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80937", "commit_url": "https://git.kernel.org/stable/c/44b5adfe49499f53002737f5fe81d608c08122fc" }, { "cve": "CVE-2026-80938", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "bda8324270b1ac91bfba1df8928e0570e29759e8", "subject": "wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80938", "commit_url": "https://git.kernel.org/stable/c/bda8324270b1ac91bfba1df8928e0570e29759e8" }, { "cve": "CVE-2026-80939", "author_name": "Yuhang.chen", "author_email": "yhchen312@gmail.com", "fix_sha": "667c12782aaf8dd3cb2213e528fe63a73cb63345", "subject": "wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80939", "commit_url": "https://git.kernel.org/stable/c/667c12782aaf8dd3cb2213e528fe63a73cb63345" }, { "cve": "CVE-2026-80940", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "e779df4806cd29cbcca5c9dc0a1073662c76b889", "subject": "wifi: rtw88: pci: fix resource leak on failed NAPI setup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80940", "commit_url": "https://git.kernel.org/stable/c/e779df4806cd29cbcca5c9dc0a1073662c76b889" }, { "cve": "CVE-2026-80941", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "9f2948010764d708bda27369d09ce6f194abe8e3", "subject": "wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80941", "commit_url": "https://git.kernel.org/stable/c/9f2948010764d708bda27369d09ce6f194abe8e3" }, { "cve": "CVE-2026-80942", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "6496ce90845df2d22fb8e8ed235cd2936fad41c8", "subject": "wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80942", "commit_url": "https://git.kernel.org/stable/c/6496ce90845df2d22fb8e8ed235cd2936fad41c8" }, { "cve": "CVE-2026-80943", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "ed4f05d9f2f42fd866f55108db8123eefcc5fb33", "subject": "wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids", "cvss_score": 7.6, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80943", "commit_url": "https://git.kernel.org/stable/c/ed4f05d9f2f42fd866f55108db8123eefcc5fb33" }, { "cve": "CVE-2026-80944", "author_name": "Fabio Estevam", "author_email": "festevam@nabladev.com", "fix_sha": "ef06882c7d8a7400b67d0d003b1008093dd589ed", "subject": "wifi: mwifiex: Detach sync cmd buffer on interrupted wait", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80944", "commit_url": "https://git.kernel.org/stable/c/ef06882c7d8a7400b67d0d003b1008093dd589ed" }, { "cve": "CVE-2026-80945", "author_name": "Vinicius Costa Gomes", "author_email": "vinicius.gomes@intel.com", "fix_sha": "94a25930477113730372e0fa2985da4c5ac95c9a", "subject": "crypto: iaa - unmap dst before software fallback on decompress", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80945", "commit_url": "https://git.kernel.org/stable/c/94a25930477113730372e0fa2985da4c5ac95c9a" }, { "cve": "CVE-2026-80946", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "fd10f40af314f07b6d6e028b1ca25c8b49903aab", "subject": "fuse: copy request headers via a stack buffer for io-uring", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80946", "commit_url": "https://git.kernel.org/stable/c/fd10f40af314f07b6d6e028b1ca25c8b49903aab" }, { "cve": "CVE-2026-80947", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "6c080026ecc17eecb103f8927c64ea73a74bb818", "subject": "wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80947", "commit_url": "https://git.kernel.org/stable/c/6c080026ecc17eecb103f8927c64ea73a74bb818" }, { "cve": "CVE-2026-80948", "author_name": "Dawei Feng", "author_email": "dawei.feng@seu.edu.cn", "fix_sha": "67105abd6195a685a84dcb8a5daf54a1f4bfdb60", "subject": "wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80948", "commit_url": "https://git.kernel.org/stable/c/67105abd6195a685a84dcb8a5daf54a1f4bfdb60" }, { "cve": "CVE-2026-80949", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "0d10db8e94fcb23a799789aaa696b4d8f937e207", "subject": "wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80949", "commit_url": "https://git.kernel.org/stable/c/0d10db8e94fcb23a799789aaa696b4d8f937e207" }, { "cve": "CVE-2026-80950", "author_name": "Claudiu Beznea", "author_email": "claudiu.beznea.uj@bp.renesas.com", "fix_sha": "5f1a76ecfe90544a28d657306c9b3caa66ba0e63", "subject": "i3c: renesas: Check that the transfer is valid before accessing it", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80950", "commit_url": "https://git.kernel.org/stable/c/5f1a76ecfe90544a28d657306c9b3caa66ba0e63" }, { "cve": "CVE-2026-80951", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "e2bda39d7f9f285ec803e200b5c1f17143d0b483", "subject": "i3c: master: svc: bound IBI payload to the requested max_payload_len", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80951", "commit_url": "https://git.kernel.org/stable/c/e2bda39d7f9f285ec803e200b5c1f17143d0b483" }, { "cve": "CVE-2026-80952", "author_name": "Adrian Hunter", "author_email": "adrian.hunter@intel.com", "fix_sha": "d2c743efd2d1ee64e94324664808f623dd865872", "subject": "i3c: master: Fix info leak and UAF in device unregister path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80952", "commit_url": "https://git.kernel.org/stable/c/d2c743efd2d1ee64e94324664808f623dd865872" }, { "cve": "CVE-2026-80953", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "8a53f9102a0d3eeb8784999f925028acf339c276", "subject": "i3c: master: adi: initialize the lock before enabling interrupts", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80953", "commit_url": "https://git.kernel.org/stable/c/8a53f9102a0d3eeb8784999f925028acf339c276" }, { "cve": "CVE-2026-80954", "author_name": "Adrian Hunter", "author_email": "adrian.hunter@intel.com", "fix_sha": "8bed7f4fa710914b7f05fd59998316bfb4d43385", "subject": "i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80954", "commit_url": "https://git.kernel.org/stable/c/8bed7f4fa710914b7f05fd59998316bfb4d43385" }, { "cve": "CVE-2026-80955", "author_name": "Jianyun Gao", "author_email": "jianyungao89@gmail.com", "fix_sha": "c2e894eac398b258f12fdec73ed6ba081047f7b3", "subject": "dm-pcache: fix use-after-free and invalid seg operations in kset_replay()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80955", "commit_url": "https://git.kernel.org/stable/c/c2e894eac398b258f12fdec73ed6ba081047f7b3" }, { "cve": "CVE-2026-80956", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "2df0fc042e299bae3c0f60ea5cd2af9285658e9f", "subject": "dm-pcache: only hand out initialized cache segments", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80956", "commit_url": "https://git.kernel.org/stable/c/2df0fc042e299bae3c0f60ea5cd2af9285658e9f" }, { "cve": "CVE-2026-80957", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "16c3b3a326e70f246a605b3dc27b7f83ba4743e3", "subject": "dm-pcache: detect a cycle in the last-kset chain during replay", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80957", "commit_url": "https://git.kernel.org/stable/c/16c3b3a326e70f246a605b3dc27b7f83ba4743e3" }, { "cve": "CVE-2026-80958", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "becf07e2b0053027495ecd671b1f82fb2e615f68", "subject": "dm-pcache: clamp the tail kset read to the segment data region", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80958", "commit_url": "https://git.kernel.org/stable/c/becf07e2b0053027495ecd671b1f82fb2e615f68" }, { "cve": "CVE-2026-80959", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "d1898576090a10d2ac2715218a652e78fb65a6b0", "subject": "dm-pcache: bound the persisted tail-position offset", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80959", "commit_url": "https://git.kernel.org/stable/c/d1898576090a10d2ac2715218a652e78fb65a6b0" }, { "cve": "CVE-2026-80960", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "62d92e45abe9e087370f9fc5d876b95673aced34", "subject": "dm-pcache: validate on-media seg_num against the cache device size", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80960", "commit_url": "https://git.kernel.org/stable/c/62d92e45abe9e087370f9fc5d876b95673aced34" }, { "cve": "CVE-2026-80961", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "f11deb032fd84081e7831cffcba895d893054a22", "subject": "dm-pcache: validate kset key_num and intra-segment bounds", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80961", "commit_url": "https://git.kernel.org/stable/c/f11deb032fd84081e7831cffcba895d893054a22" }, { "cve": "CVE-2026-80962", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "32d1809da31094ef76fd98dc1f1a8b55ca1295dd", "subject": "dm-pcache: validate geometry fields from on-disk cache_info", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80962", "commit_url": "https://git.kernel.org/stable/c/32d1809da31094ef76fd98dc1f1a8b55ca1295dd" }, { "cve": "CVE-2026-80963", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "cc87e26d9cce22061dc21e51e11afef29dbbc36a", "subject": "dm-stats: fix a crash if allocation of per-cpu data fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80963", "commit_url": "https://git.kernel.org/stable/c/cc87e26d9cce22061dc21e51e11afef29dbbc36a" }, { "cve": "CVE-2026-80964", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "b65d5182ecd6b7a24a83d980a0d06e809ef876c5", "subject": "ALSA: virmidi: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80964", "commit_url": "https://git.kernel.org/stable/c/b65d5182ecd6b7a24a83d980a0d06e809ef876c5" }, { "cve": "CVE-2026-80965", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "e0fb960b227fcdebe22e4f26c9486d60943c0424", "subject": "ALSA: serial-u16550: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80965", "commit_url": "https://git.kernel.org/stable/c/e0fb960b227fcdebe22e4f26c9486d60943c0424" }, { "cve": "CVE-2026-80966", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "3690ef20469d5959378260e2752f2314a2572913", "subject": "ALSA: portman2x4: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80966", "commit_url": "https://git.kernel.org/stable/c/3690ef20469d5959378260e2752f2314a2572913" }, { "cve": "CVE-2026-80967", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "6c97817e20598e5473094e0e38d1f51f1cf4dfff", "subject": "ALSA: pcxhr: initialize mutexes before requesting threaded IRQ", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80967", "commit_url": "https://git.kernel.org/stable/c/6c97817e20598e5473094e0e38d1f51f1cf4dfff" }, { "cve": "CVE-2026-80968", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8", "subject": "ALSA: mts64: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80968", "commit_url": "https://git.kernel.org/stable/c/d18a260720f86a5f8b5fcfefc4ba2e9dd01c10f8" }, { "cve": "CVE-2026-80969", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "f7dcecb92ed192ff5fcf842918fb1aaea84b5bdd", "subject": "ALSA: mpu401: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80969", "commit_url": "https://git.kernel.org/stable/c/f7dcecb92ed192ff5fcf842918fb1aaea84b5bdd" }, { "cve": "CVE-2026-80970", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "4335e387786479889e6db691fe06d345e52ea536", "subject": "ALSA: FCP: do not copy out an uninitialised init response", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80970", "commit_url": "https://git.kernel.org/stable/c/4335e387786479889e6db691fe06d345e52ea536" }, { "cve": "CVE-2026-80971", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "459d3a64766f5ca2f1886daeaf24582831a5f5ab", "subject": "ALSA: bcd2000: clear the URB pointers on disconnect", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80971", "commit_url": "https://git.kernel.org/stable/c/459d3a64766f5ca2f1886daeaf24582831a5f5ab" }, { "cve": "CVE-2026-80972", "author_name": "Takashi Iwai", "author_email": "tiwai@suse.de", "fix_sha": "819b106a9fd2ef3fd8abf898b9a8e4524eca8f48", "subject": "ALSA: aloop: Check card index validity at probe", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80972", "commit_url": "https://git.kernel.org/stable/c/819b106a9fd2ef3fd8abf898b9a8e4524eca8f48" }, { "cve": "CVE-2026-80973", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "a478893b59e36cfe7d77a76b352f2db55502e879", "subject": "ALSA: 6fire: bound the MIDI event length from the device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80973", "commit_url": "https://git.kernel.org/stable/c/a478893b59e36cfe7d77a76b352f2db55502e879" }, { "cve": "CVE-2026-80974", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "83feedd9d83c0c5199f98c72df0a6196b4aefb4d", "subject": "mfd: sm501: Fix potential memory leaks during remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80974", "commit_url": "https://git.kernel.org/stable/c/83feedd9d83c0c5199f98c72df0a6196b4aefb4d" }, { "cve": "CVE-2026-80975", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "47504742cea7878ebd1bf1491bbed923df6b90b1", "subject": "mfd: qnap-mcu: keep the reply buffer alive past a command timeout", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80975", "commit_url": "https://git.kernel.org/stable/c/47504742cea7878ebd1bf1491bbed923df6b90b1" }, { "cve": "CVE-2026-80976", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "f967455fb2a5a2079b9eb5823e9ccf359174bf9f", "subject": "seg6: reset IP6CB after IPv6 decapsulation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80976", "commit_url": "https://git.kernel.org/stable/c/f967455fb2a5a2079b9eb5823e9ccf359174bf9f" }, { "cve": "CVE-2026-80977", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "f66bdb1cc0fcd227a062378f8be0b5873aa5600a", "subject": "net: skbuff: don't touch shared zerocopy state in skb_tx_error()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80977", "commit_url": "https://git.kernel.org/stable/c/f66bdb1cc0fcd227a062378f8be0b5873aa5600a" }, { "cve": "CVE-2026-80978", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "6b222adeb9340306e2ff97127c76117abb9b3df8", "subject": "net: cap advertised IP tunnel headroom", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80978", "commit_url": "https://git.kernel.org/stable/c/6b222adeb9340306e2ff97127c76117abb9b3df8" }, { "cve": "CVE-2026-80979", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "36cdf5d48ca191dcd71c28cadbe0981b1d25318d", "subject": "net/smc: unregister the connection before draining the rx tasklet", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80979", "commit_url": "https://git.kernel.org/stable/c/36cdf5d48ca191dcd71c28cadbe0981b1d25318d" }, { "cve": "CVE-2026-80980", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "db51a8658c11a82432b64999519a269c3aabb447", "subject": "net/smc: stop killed, freed and out_of_sync sharing a byte", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80980", "commit_url": "https://git.kernel.org/stable/c/db51a8658c11a82432b64999519a269c3aabb447" }, { "cve": "CVE-2026-80981", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "a42a459ef0e54cb0c4b3e43e21cb0e658e664f64", "subject": "net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80981", "commit_url": "https://git.kernel.org/stable/c/a42a459ef0e54cb0c4b3e43e21cb0e658e664f64" }, { "cve": "CVE-2026-80982", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "c924884743e948e25625b7fbf3ee2a9325a204a7", "subject": "net/smc: fix use-after-free in smc_rx_pipe_buf_release()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80982", "commit_url": "https://git.kernel.org/stable/c/c924884743e948e25625b7fbf3ee2a9325a204a7" }, { "cve": "CVE-2026-80983", "author_name": "Hidayath Khan", "author_email": "hidayath@linux.ibm.com", "fix_sha": "719296c4aa8213d4ac8002e77d5956d436bc98d0", "subject": "net/smc: fix socket refcount leak in smc_switch_conns()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80983", "commit_url": "https://git.kernel.org/stable/c/719296c4aa8213d4ac8002e77d5956d436bc98d0" }, { "cve": "CVE-2026-80984", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "b395dd319cea422239cb45b998fb38d7e373af87", "subject": "net/smc: do not dereference an unset send buffer on the SMC-D teardown path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80984", "commit_url": "https://git.kernel.org/stable/c/b395dd319cea422239cb45b998fb38d7e373af87" }, { "cve": "CVE-2026-80985", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "8d3c1ab82c11d4fadebf817a825fd221b3e197ea", "subject": "net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80985", "commit_url": "https://git.kernel.org/stable/c/8d3c1ab82c11d4fadebf817a825fd221b3e197ea" }, { "cve": "CVE-2026-80986", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "2d1e7c5aaa3326e95e2058457f172ca99a9a4577", "subject": "net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80986", "commit_url": "https://git.kernel.org/stable/c/2d1e7c5aaa3326e95e2058457f172ca99a9a4577" }, { "cve": "CVE-2026-80987", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "a4f2387db6f1cc2f03abba7f3a6807ad61e26ff7", "subject": "NTB: ntb_transport: Reject oversized TX buffers", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80987", "commit_url": "https://git.kernel.org/stable/c/a4f2387db6f1cc2f03abba7f3a6807ad61e26ff7" }, { "cve": "CVE-2026-80988", "author_name": "Koichiro Den", "author_email": "den@valinux.co.jp", "fix_sha": "873ce713fef5dde0939220f04f3484ec86a16fba", "subject": "NTB: ntb_transport: Fail TX enqueue when the QP link is down", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80988", "commit_url": "https://git.kernel.org/stable/c/873ce713fef5dde0939220f04f3484ec86a16fba" }, { "cve": "CVE-2026-80989", "author_name": "Fan Ye", "author_email": "fy15309206903@gmail.com", "fix_sha": "3c8b26ebf525ba5960510f48c6e9936a79ebe76f", "subject": "net: thunderbolt: Mark the connection down when bringing it up fails", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80989", "commit_url": "https://git.kernel.org/stable/c/3c8b26ebf525ba5960510f48c6e9936a79ebe76f" }, { "cve": "CVE-2026-80990", "author_name": "Fan Ye", "author_email": "fy15309206903@gmail.com", "fix_sha": "2f1463554d0561a2fead81e3888604e5c1125e29", "subject": "net: thunderbolt: Release the Rx HopID that was handed out on mismatch", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80990", "commit_url": "https://git.kernel.org/stable/c/2f1463554d0561a2fead81e3888604e5c1125e29" }, { "cve": "CVE-2026-80991", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "1cb9663789c5b7a12fcd419fcca6d6254c398252", "subject": "net: ravb: serialize PTP clock teardown", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80991", "commit_url": "https://git.kernel.org/stable/c/1cb9663789c5b7a12fcd419fcca6d6254c398252" }, { "cve": "CVE-2026-80992", "author_name": "Xuanqiang Luo", "author_email": "luoxuanqiang@kylinos.cn", "fix_sha": "1f77af0aaf277413ff32f6ff8c2c4282bd64c897", "subject": "net: ravb: avoid dereferencing an invalid PTP clock", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80992", "commit_url": "https://git.kernel.org/stable/c/1f77af0aaf277413ff32f6ff8c2c4282bd64c897" }, { "cve": "CVE-2026-80993", "author_name": "Christian Marangi", "author_email": "ansuelsmth@gmail.com", "fix_sha": "f2849b1fd059ec9b3281b771e6ac5aad9feee851", "subject": "net: phylink: correctly validate returned PCS in phylink_inband_caps", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80993", "commit_url": "https://git.kernel.org/stable/c/f2849b1fd059ec9b3281b771e6ac5aad9feee851" }, { "cve": "CVE-2026-80994", "author_name": "Ilya Maximets", "author_email": "i.maximets@ovn.org", "fix_sha": "4e30317ff67a2eb12b4d890d39f72fd7e7117d48", "subject": "net: openvswitch: fix flow mask use-after-free on flow deletion", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80994", "commit_url": "https://git.kernel.org/stable/c/4e30317ff67a2eb12b4d890d39f72fd7e7117d48" }, { "cve": "CVE-2026-80995", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "408da1df18116c971c3392e21e50586688cd3fbf", "subject": "net: mctp: hold a reference to the route device in mctp_route_lookup()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80995", "commit_url": "https://git.kernel.org/stable/c/408da1df18116c971c3392e21e50586688cd3fbf" }, { "cve": "CVE-2026-80996", "author_name": "Zihan Xi", "author_email": "zihanx@nebusec.ai", "fix_sha": "af20e269f7459d2ce69887fdf2fad7caf986c865", "subject": "net: l2tp: do not propagate multicast notification errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80996", "commit_url": "https://git.kernel.org/stable/c/af20e269f7459d2ce69887fdf2fad7caf986c865" }, { "cve": "CVE-2026-80997", "author_name": "Jorijn van der Graaf", "author_email": "jorijnvdgraaf@catcrafts.net", "fix_sha": "3cbfd627ee720f3d2460d2cbe2fe9e4130240db6", "subject": "net: ipa: fix stalled modem TX queue after runtime resume", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80997", "commit_url": "https://git.kernel.org/stable/c/3cbfd627ee720f3d2460d2cbe2fe9e4130240db6" }, { "cve": "CVE-2026-80998", "author_name": "Joe Damato", "author_email": "joe@dama.to", "fix_sha": "4e15e89faac9f308baeb01f46c13a051814d2449", "subject": "net: bnxt: ring the doorbell when SW USO exits early", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80998", "commit_url": "https://git.kernel.org/stable/c/4e15e89faac9f308baeb01f46c13a051814d2449" }, { "cve": "CVE-2026-80999", "author_name": "Ahmad Fatoum", "author_email": "a.fatoum@pengutronix.de", "fix_sha": "fb58b6a696b30bcbfbe0cfc0a91b19c816a955fc", "subject": "net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80999", "commit_url": "https://git.kernel.org/stable/c/fb58b6a696b30bcbfbe0cfc0a91b19c816a955fc" }, { "cve": "CVE-2026-81000", "author_name": "Asim Viladi Oglu Manizada", "author_email": "manizada@pm.me", "fix_sha": "447c9303942c439a117d9b76ce6d6e2116b38ee7", "subject": "net: tun: bound receive headroom", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81000", "commit_url": "https://git.kernel.org/stable/c/447c9303942c439a117d9b76ce6d6e2116b38ee7" }, { "cve": "CVE-2026-81001", "author_name": "Aleksandr Khromov", "author_email": "haa@amicon.ru", "fix_sha": "2c4e7c42d77e78ad595dbb9e4b5886b58b45d89d", "subject": "slip: fix use-after-free in sl_sync()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81001", "commit_url": "https://git.kernel.org/stable/c/2c4e7c42d77e78ad595dbb9e4b5886b58b45d89d" }, { "cve": "CVE-2026-81002", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "71283aaa6c65b3cec84caf1dc78560985737641f", "subject": "xdp: fix zero-copy frame layout", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81002", "commit_url": "https://git.kernel.org/stable/c/71283aaa6c65b3cec84caf1dc78560985737641f" }, { "cve": "CVE-2026-81003", "author_name": "Alexandra Winter", "author_email": "wintera@linux.ibm.com", "fix_sha": "80230a18c164a4b5bbc048fe2768b219ac17bc5a", "subject": "net/iucv: filter frames in afiucv_hs_rcv() by ingress device", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81003", "commit_url": "https://git.kernel.org/stable/c/80230a18c164a4b5bbc048fe2768b219ac17bc5a" }, { "cve": "CVE-2026-81004", "author_name": "Corey Minyard", "author_email": "corey@minyard.net", "fix_sha": "ae84a2536577057e97f23f75a202e26d0e86cf01", "subject": "ipmi:msghandler: Cancel work cleanly on an error", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81004", "commit_url": "https://git.kernel.org/stable/c/ae84a2536577057e97f23f75a202e26d0e86cf01" }, { "cve": "CVE-2026-81005", "author_name": "Seiji Nishikawa", "author_email": "snishika@redhat.com", "fix_sha": "6d920a75df9a83ab096b3cde7a643b656e4fdfeb", "subject": "ipmi: si: Fix NULL pointer dereference after failed registration", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81005", "commit_url": "https://git.kernel.org/stable/c/6d920a75df9a83ab096b3cde7a643b656e4fdfeb" }, { "cve": "CVE-2026-81006", "author_name": "Yuho Choi", "author_email": "dbgh9129@gmail.com", "fix_sha": "b6c46ab0bdee90c238e96ea4a74972118c97900d", "subject": "ipmi: Remove all sysfs files on registration failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81006", "commit_url": "https://git.kernel.org/stable/c/b6c46ab0bdee90c238e96ea4a74972118c97900d" }, { "cve": "CVE-2026-81007", "author_name": "Yousef Alhouseen", "author_email": "alhouseenyousef@gmail.com", "fix_sha": "53637506884dbd5c91a89b1a3547d99d80f8ed2c", "subject": "ipmi: ipmb: validate write message length", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81007", "commit_url": "https://git.kernel.org/stable/c/53637506884dbd5c91a89b1a3547d99d80f8ed2c" }, { "cve": "CVE-2026-81008", "author_name": "Kuan-Wei Chiu", "author_email": "visitorckw@gmail.com", "fix_sha": "25c7e242aca084fdc1098248194032317dca625d", "subject": "interconnect: Fix use after free in icc_get() and of_icc_get_by_index()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81008", "commit_url": "https://git.kernel.org/stable/c/25c7e242aca084fdc1098248194032317dca625d" }, { "cve": "CVE-2026-81009", "author_name": "Laxman Acharya Padhya", "author_email": "acharyalaxman8848@gmail.com", "fix_sha": "ba77efee1b95b4ad7559b1cdbe7cd7fa36dca95b", "subject": "io_uring/query: cap user size passed to copy_struct_to_user", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81009", "commit_url": "https://git.kernel.org/stable/c/ba77efee1b95b4ad7559b1cdbe7cd7fa36dca95b" }, { "cve": "CVE-2026-81010", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "14572de82e5022899e5856008bc9cac97004a88c", "subject": "io_uring/waitid: honor task_work cancellation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81010", "commit_url": "https://git.kernel.org/stable/c/14572de82e5022899e5856008bc9cac97004a88c" }, { "cve": "CVE-2026-81011", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "e0ddfd77c0c320b7d12b6c9169303b140b798775", "subject": "platform/x86: hp-bioscfg: pass validated element count to package parsers", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81011", "commit_url": "https://git.kernel.org/stable/c/e0ddfd77c0c320b7d12b6c9169303b140b798775" }, { "cve": "CVE-2026-81012", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "dc03f05e419f3460342fb7564884f244622634b6", "subject": "platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81012", "commit_url": "https://git.kernel.org/stable/c/dc03f05e419f3460342fb7564884f244622634b6" }, { "cve": "CVE-2026-81013", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "2b2ec354f905c14e3270e8ec3ab50f7d8ad73bab", "subject": "platform/x86: hp-bioscfg: fix heap OOB read on empty password write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81013", "commit_url": "https://git.kernel.org/stable/c/2b2ec354f905c14e3270e8ec3ab50f7d8ad73bab" }, { "cve": "CVE-2026-81014", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "a7508c7959ff8d037327d377ed21a9c0eabe4674", "subject": "platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81014", "commit_url": "https://git.kernel.org/stable/c/a7508c7959ff8d037327d377ed21a9c0eabe4674" }, { "cve": "CVE-2026-81015", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "76f650a76d6a36a4bee79d94db90a0e935a95477", "subject": "platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81015", "commit_url": "https://git.kernel.org/stable/c/76f650a76d6a36a4bee79d94db90a0e935a95477" }, { "cve": "CVE-2026-81016", "author_name": "Mario Limonciello", "author_email": "mario.limonciello@amd.com", "fix_sha": "0225c1d637687b03726f00ac65b6def843d2c464", "subject": "platform/x86/amd/pmc: Propagate SMU errors and validate S2D address", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81016", "commit_url": "https://git.kernel.org/stable/c/0225c1d637687b03726f00ac65b6def843d2c464" }, { "cve": "CVE-2026-81017", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "833740a2333c2e4db4e02e3d0ffba04e8718a5f3", "subject": "platform/chrome: sensorhub: Bound the EC-reported sensor number", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81017", "commit_url": "https://git.kernel.org/stable/c/833740a2333c2e4db4e02e3d0ffba04e8718a5f3" }, { "cve": "CVE-2026-81018", "author_name": "Thorsten Blum", "author_email": "thorsten.blum@linux.dev", "fix_sha": "abca989604f60fe29d7170431f819e28ec7d868a", "subject": "platform/x86: think-lmi: Free system certificate signatures", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81018", "commit_url": "https://git.kernel.org/stable/c/abca989604f60fe29d7170431f819e28ec7d868a" }, { "cve": "CVE-2026-89436", "author_name": "Hilgad Montelo", "author_email": "hilgad.montelo@gmail.com", "fix_sha": "329f10d8be193bf36af124e00b9dd6644cd71724", "subject": "platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89436", "commit_url": "https://git.kernel.org/stable/c/329f10d8be193bf36af124e00b9dd6644cd71724" }, { "cve": "CVE-2026-89437", "author_name": "Abdun Nihaal", "author_email": "nihaal@cse.iitm.ac.in", "fix_sha": "30c906cff490c3601ee9ff110fe8115fabe75fd4", "subject": "platform/x86: int1092: Fix potential memory leak in sar_probe()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89437", "commit_url": "https://git.kernel.org/stable/c/30c906cff490c3601ee9ff110fe8115fabe75fd4" }, { "cve": "CVE-2026-89438", "author_name": "Srinivas Pandruvada", "author_email": "srinivas.pandruvada@linux.intel.com", "fix_sha": "124e2dbabe460c2a6e7440f4ad8af560131295c9", "subject": "platform/x86: ISST: Validate logical CPU id and clos id", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89438", "commit_url": "https://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9" }, { "cve": "CVE-2026-89439", "author_name": "Srinivas Pandruvada", "author_email": "srinivas.pandruvada@linux.intel.com", "fix_sha": "3de2776e9d7073765c10c2326c2bda5926811ea6", "subject": "platform/x86: ISST: Add a NULL check for sst_inst[]", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89439", "commit_url": "https://git.kernel.org/stable/c/3de2776e9d7073765c10c2326c2bda5926811ea6" }, { "cve": "CVE-2026-89440", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "088eaa92fcebaa6b957ccf9635afdf39643a577d", "subject": "mmc: via-sdmmc: stop card-detect handling on probe failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89440", "commit_url": "https://git.kernel.org/stable/c/088eaa92fcebaa6b957ccf9635afdf39643a577d" }, { "cve": "CVE-2026-89441", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "57e5d877f898d5e5c9d672a77bb6bdd24f0d9bf5", "subject": "mmc: via-sdmmc: cancel card-detect work on remove", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89441", "commit_url": "https://git.kernel.org/stable/c/57e5d877f898d5e5c9d672a77bb6bdd24f0d9bf5" }, { "cve": "CVE-2026-89442", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "a89f07db0cb95c54dac4a8406c79a04e44a73c3c", "subject": "platform/x86: ISST: Validate socket ID in clos_assoc ioctl", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89442", "commit_url": "https://git.kernel.org/stable/c/a89f07db0cb95c54dac4a8406c79a04e44a73c3c" }, { "cve": "CVE-2026-89443", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "80e0d353c86a9a168ad6d213f494796294381538", "subject": "platform/x86: ISST: Validate level in perf mask ioctls", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89443", "commit_url": "https://git.kernel.org/stable/c/80e0d353c86a9a168ad6d213f494796294381538" }, { "cve": "CVE-2026-89444", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "83c80495e45eddf64c6525fb582d8db68f256b71", "subject": "platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89444", "commit_url": "https://git.kernel.org/stable/c/83c80495e45eddf64c6525fb582d8db68f256b71" }, { "cve": "CVE-2026-89445", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "8c07df7cdfcf52f1ff276c588612aabc6c6b8399", "subject": "iommufd: Fix UAF in selftest IOPF reporting", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89445", "commit_url": "https://git.kernel.org/stable/c/8c07df7cdfcf52f1ff276c588612aabc6c6b8399" }, { "cve": "CVE-2026-89446", "author_name": "Shuai Xue", "author_email": "xueshuai@linux.alibaba.com", "fix_sha": "4ac2ce123824d5f885c868fa1f9f4d463141a2ba", "subject": "iommufd: Release current IOAS on xa_store() failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89446", "commit_url": "https://git.kernel.org/stable/c/4ac2ce123824d5f885c868fa1f9f4d463141a2ba" }, { "cve": "CVE-2026-89447", "author_name": "Shuai Xue", "author_email": "xueshuai@linux.alibaba.com", "fix_sha": "0dbcdf4473a614adbd732d567c9b39ac0e040e0c", "subject": "iommufd: Avoid locking internal accesses during unmap", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89447", "commit_url": "https://git.kernel.org/stable/c/0dbcdf4473a614adbd732d567c9b39ac0e040e0c" }, { "cve": "CVE-2026-89448", "author_name": "Kevin Tian", "author_email": "kevin.tian@intel.com", "fix_sha": "607432b2618b61df81134be0ef2562b8300c1216", "subject": "iommu/vt-d: Force requesting ACS when tboot is enabled", "cvss_score": 9.3, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89448", "commit_url": "https://git.kernel.org/stable/c/607432b2618b61df81134be0ef2562b8300c1216" }, { "cve": "CVE-2026-89449", "author_name": "Peiyang He", "author_email": "peiyang_he@smail.nju.edu.cn", "fix_sha": "b7b0b3851474883d4aba6ed72da87141204b23e5", "subject": "iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89449", "commit_url": "https://git.kernel.org/stable/c/b7b0b3851474883d4aba6ed72da87141204b23e5" }, { "cve": "CVE-2026-89450", "author_name": "Nicolin Chen", "author_email": "nicolinc@nvidia.com", "fix_sha": "4379610c79bd88ddbea10e7f6c21e16d4b338c6b", "subject": "iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89450", "commit_url": "https://git.kernel.org/stable/c/4379610c79bd88ddbea10e7f6c21e16d4b338c6b" }, { "cve": "CVE-2026-89451", "author_name": "Shuai Xue", "author_email": "xueshuai@linux.alibaba.com", "fix_sha": "530f8f9c3546cb3ebee1b135375aaee08a073ebb", "subject": "iommu/sva: Set handle->dev before the SVA handle is visible", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89451", "commit_url": "https://git.kernel.org/stable/c/530f8f9c3546cb3ebee1b135375aaee08a073ebb" }, { "cve": "CVE-2026-89452", "author_name": "Weimin Xiong", "author_email": "xiongwm2026@163.com", "fix_sha": "535a200220ca2c83bc8bf54bd2cbe045d6ee70c4", "subject": "iommu/msm: Unwind probe state on registration failure", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89452", "commit_url": "https://git.kernel.org/stable/c/535a200220ca2c83bc8bf54bd2cbe045d6ee70c4" }, { "cve": "CVE-2026-89453", "author_name": "Shuai Xue", "author_email": "xueshuai@linux.alibaba.com", "fix_sha": "af3b69b16383fbc8fe5f61b5b0150d2e41ede71f", "subject": "iommu/amd: Put PCI device after handling PPR faults", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89453", "commit_url": "https://git.kernel.org/stable/c/af3b69b16383fbc8fe5f61b5b0150d2e41ede71f" }, { "cve": "CVE-2026-89454", "author_name": "Ali Tariq", "author_email": "alitariq45892@gmail.com", "fix_sha": "19a30bbb6477bfd7e3109b7a2943e6597ee9de37", "subject": "PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89454", "commit_url": "https://git.kernel.org/stable/c/19a30bbb6477bfd7e3109b7a2943e6597ee9de37" }, { "cve": "CVE-2026-89455", "author_name": "Ali Tariq", "author_email": "alitariq45892@gmail.com", "fix_sha": "26b73bae01d6eb81a4a38f36101812f20b2639de", "subject": "PCI: plda: Fix use-after-free of event IRQs during teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89455", "commit_url": "https://git.kernel.org/stable/c/26b73bae01d6eb81a4a38f36101812f20b2639de" }, { "cve": "CVE-2026-89456", "author_name": "Stefan Haberland", "author_email": "sth@linux.ibm.com", "fix_sha": "6fb5ba2e7e43173a3761e46f091070a8185efa14", "subject": "s390/dasd: Propagate partial completion length across ERP recovery", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89456", "commit_url": "https://git.kernel.org/stable/c/6fb5ba2e7e43173a3761e46f091070a8185efa14" }, { "cve": "CVE-2026-89457", "author_name": "Stefan Haberland", "author_email": "sth@linux.ibm.com", "fix_sha": "2a1780f9fc2493bd34c418a0be6fc58943afcecf", "subject": "s390/dasd: Guard sysfs discipline callbacks against unallocated private data", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89457", "commit_url": "https://git.kernel.org/stable/c/2a1780f9fc2493bd34c418a0be6fc58943afcecf" }, { "cve": "CVE-2026-89458", "author_name": "Stefan Haberland", "author_email": "sth@linux.ibm.com", "fix_sha": "cddb447c62466f3076938ce120028d7b591f9f37", "subject": "s390/dasd: Do not complete a failed ESE read as successful", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89458", "commit_url": "https://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37" }, { "cve": "CVE-2026-89459", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "101782f8945a125044347312d74d488c05741c4a", "subject": "s390/percpu: Fix MVIY_PERCPU() with older binutils", "cvss_score": 7.0, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89459", "commit_url": "https://git.kernel.org/stable/c/101782f8945a125044347312d74d488c05741c4a" }, { "cve": "CVE-2026-89460", "author_name": "Thomas Richter", "author_email": "tmricht@linux.ibm.com", "fix_sha": "337bd95507a16063687cfc286ea90de5cca48c37", "subject": "s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89460", "commit_url": "https://git.kernel.org/stable/c/337bd95507a16063687cfc286ea90de5cca48c37" }, { "cve": "CVE-2026-89461", "author_name": "Jianing Li", "author_email": "m13940358460@163.com", "fix_sha": "86a3a8a926aa5969c329d1df2d3259f189961bbc", "subject": "power: supply: max17040: synchronize work cancellation on suspend", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89461", "commit_url": "https://git.kernel.org/stable/c/86a3a8a926aa5969c329d1df2d3259f189961bbc" }, { "cve": "CVE-2026-89462", "author_name": "Jianing Li", "author_email": "m13940358460@163.com", "fix_sha": "659cc3d8d5ef246263873fce72c8cadeeed073cc", "subject": "power: supply: max17040: propagate register read errors", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89462", "commit_url": "https://git.kernel.org/stable/c/659cc3d8d5ef246263873fce72c8cadeeed073cc" }, { "cve": "CVE-2026-89463", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "609af0ceeaefdfa42cd01dd060b20f2e41f9a232", "subject": "power: supply: ucs1002: fix use-after-free on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89463", "commit_url": "https://git.kernel.org/stable/c/609af0ceeaefdfa42cd01dd060b20f2e41f9a232" }, { "cve": "CVE-2026-89464", "author_name": "Maoyi Xie", "author_email": "maoyixie.tju@gmail.com", "fix_sha": "6eba34732524067da2aad5ddfdfbc641ded10e9e", "subject": "power: supply: twl4030_charger: cancel workers via devm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89464", "commit_url": "https://git.kernel.org/stable/c/6eba34732524067da2aad5ddfdfbc641ded10e9e" }, { "cve": "CVE-2026-89465", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "3e7a1ebc32fad5a558254a478efd401c17a24381", "subject": "power: supply: rt9455: quiesce delayed work before teardown", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89465", "commit_url": "https://git.kernel.org/stable/c/3e7a1ebc32fad5a558254a478efd401c17a24381" }, { "cve": "CVE-2026-89466", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "ab1112df8f4ffa88cb024dd370c432ced80f77d8", "subject": "power: supply: qcom_battmgr: terminate the strings from firmware", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89466", "commit_url": "https://git.kernel.org/stable/c/ab1112df8f4ffa88cb024dd370c432ced80f77d8" }, { "cve": "CVE-2026-89467", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "4e40befedfc8ed86f44e1f81df92d13c149c9f8d", "subject": "power: supply: qcom_battmgr: fix use-after-free", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89467", "commit_url": "https://git.kernel.org/stable/c/4e40befedfc8ed86f44e1f81df92d13c149c9f8d" }, { "cve": "CVE-2026-89468", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "831c29a12d560f8a3225f43050b3fbb5dfd79c66", "subject": "power: supply: lp8788-charger: fix use-after-free on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89468", "commit_url": "https://git.kernel.org/stable/c/831c29a12d560f8a3225f43050b3fbb5dfd79c66" }, { "cve": "CVE-2026-89469", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "ceb6ac43b0f591722401922ceb958ce2616935e0", "subject": "power: supply: lp8727: fix use-after-free in lp8727_release_irq()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89469", "commit_url": "https://git.kernel.org/stable/c/ceb6ac43b0f591722401922ceb958ce2616935e0" }, { "cve": "CVE-2026-89470", "author_name": "Jameson Thies", "author_email": "jthies@google.com", "fix_sha": "657cd3a42e937276262c0a8ae6b01a87004309de", "subject": "power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89470", "commit_url": "https://git.kernel.org/stable/c/657cd3a42e937276262c0a8ae6b01a87004309de" }, { "cve": "CVE-2026-89471", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "48355ce49359740f52e94d3623f6fc557ce341f0", "subject": "power: supply: cros_usbpd-charger: bound the EC-reported port count", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89471", "commit_url": "https://git.kernel.org/stable/c/48355ce49359740f52e94d3623f6fc557ce341f0" }, { "cve": "CVE-2026-89472", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "c57cb36f76eb7ced45f57af1a890d8f3a6d76342", "subject": "power: supply: charger-manager: register regulators before exposing sysfs", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89472", "commit_url": "https://git.kernel.org/stable/c/c57cb36f76eb7ced45f57af1a890d8f3a6d76342" }, { "cve": "CVE-2026-89473", "author_name": "Ma Ke", "author_email": "make_ruc2021@163.com", "fix_sha": "863c32a83e4235eb0cbf6106f2b124e645302156", "subject": "power: supply: bq25890: Fix power_supply reference leak", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89473", "commit_url": "https://git.kernel.org/stable/c/863c32a83e4235eb0cbf6106f2b124e645302156" }, { "cve": "CVE-2026-89474", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "2dd6cd823777bea6d9a880a12a92a73ec76aee0b", "subject": "power: supply: bq256xx: drain usb_work before freeing the charger", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89474", "commit_url": "https://git.kernel.org/stable/c/2dd6cd823777bea6d9a880a12a92a73ec76aee0b" }, { "cve": "CVE-2026-89475", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "9d34c9d660c3d0931d2cc749c46c47cf31f96e48", "subject": "power: supply: bq24257: fix use-after-free on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89475", "commit_url": "https://git.kernel.org/stable/c/9d34c9d660c3d0931d2cc749c46c47cf31f96e48" }, { "cve": "CVE-2026-89476", "author_name": "Jun Yang", "author_email": "junvyyang@tencent.com", "fix_sha": "3faf13aff243ca9f78d08b1a2956ef5a6fc77b6e", "subject": "sctp: fix stream->outcnt underflow on duplicate RECONF responses", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89476", "commit_url": "https://git.kernel.org/stable/c/3faf13aff243ca9f78d08b1a2956ef5a6fc77b6e" }, { "cve": "CVE-2026-89477", "author_name": "Weiming Shi", "author_email": "bestswngs@gmail.com", "fix_sha": "2db9bfa3e27bdea15e05ea70b56bad3d21e570ec", "subject": "sctp: fix NULL deref on untransmitted RECONF completion", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89477", "commit_url": "https://git.kernel.org/stable/c/2db9bfa3e27bdea15e05ea70b56bad3d21e570ec" }, { "cve": "CVE-2026-89478", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "03a9d10ecf71f54b2af8020935f2033d4a132be5", "subject": "sctp: drop a chunk if its transport was removed", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89478", "commit_url": "https://git.kernel.org/stable/c/03a9d10ecf71f54b2af8020935f2033d4a132be5" }, { "cve": "CVE-2026-89479", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "47e15a8d12e366d0d261bcbc394394f44418938d", "subject": "sctp: stop processing a packet once its association is deleted", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89479", "commit_url": "https://git.kernel.org/stable/c/47e15a8d12e366d0d261bcbc394394f44418938d" }, { "cve": "CVE-2026-89480", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "7fa3f73f6c8ddc5f0425b50fb2a626a782ef7d12", "subject": "nvme-tcp: reject a read that transferred too few bytes", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89480", "commit_url": "https://git.kernel.org/stable/c/7fa3f73f6c8ddc5f0425b50fb2a626a782ef7d12" }, { "cve": "CVE-2026-89481", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "6efbc52237facda35d2d874fe1765bb4839275d8", "subject": "nvme-tcp: fix host memory disclosure on R2T for a read command", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89481", "commit_url": "https://git.kernel.org/stable/c/6efbc52237facda35d2d874fe1765bb4839275d8" }, { "cve": "CVE-2026-89482", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "3a4aa9e6ad3e35f8e24d5eaf38ee4d437075fb36", "subject": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89482", "commit_url": "https://git.kernel.org/stable/c/3a4aa9e6ad3e35f8e24d5eaf38ee4d437075fb36" }, { "cve": "CVE-2026-89483", "author_name": "Yehyeong Lee", "author_email": "yhlee@isslab.korea.ac.kr", "fix_sha": "bededeaaeff404978a5a8e2a605a6c3017cddd3e", "subject": "nvme: zero the discard fallback page", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89483", "commit_url": "https://git.kernel.org/stable/c/bededeaaeff404978a5a8e2a605a6c3017cddd3e" }, { "cve": "CVE-2026-89484", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "4c7fc129db061c7daab841c4f3c342d894832362", "subject": "lockd: fix NULL dereference on lockowner allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89484", "commit_url": "https://git.kernel.org/stable/c/4c7fc129db061c7daab841c4f3c342d894832362" }, { "cve": "CVE-2026-89485", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "526c49cff3f72c3ec74752016380c7567040581b", "subject": "lockd: pin next file across nlm_inspect_file lock-drop", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89485", "commit_url": "https://git.kernel.org/stable/c/526c49cff3f72c3ec74752016380c7567040581b" }, { "cve": "CVE-2026-89486", "author_name": "Yifei Gao", "author_email": "gyf161023@gmail.com", "fix_sha": "05ec76cfbce653e07cec19b9b8b20e33449d5d87", "subject": "ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89486", "commit_url": "https://git.kernel.org/stable/c/05ec76cfbce653e07cec19b9b8b20e33449d5d87" }, { "cve": "CVE-2026-89487", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "0dbc2398fca3bb33eda963849f865ddb1b3aa05e", "subject": "openvswitch: only skb_tx_error() a packet we are about to drop", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89487", "commit_url": "https://git.kernel.org/stable/c/0dbc2398fca3bb33eda963849f865ddb1b3aa05e" }, { "cve": "CVE-2026-89488", "author_name": "Yuqi Xu", "author_email": "xuyuqiabc@gmail.com", "fix_sha": "403f96c32c9e24600093d7d0c61c17daeedca957", "subject": "openvswitch: Fix CT limit teardown use-after-free", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89488", "commit_url": "https://git.kernel.org/stable/c/403f96c32c9e24600093d7d0c61c17daeedca957" }, { "cve": "CVE-2026-89489", "author_name": "Ali Ahmet Memis", "author_email": "ali@iusegentoo.com", "fix_sha": "78004e9a87f240df03e2f73120d291763c32e0a7", "subject": "openrisc: fix arbitrary kernel memory access via or1k_atomic syscall", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89489", "commit_url": "https://git.kernel.org/stable/c/78004e9a87f240df03e2f73120d291763c32e0a7" }, { "cve": "CVE-2026-89490", "author_name": "Zhan Xusheng", "author_email": "zhanxusheng1024@gmail.com", "fix_sha": "a63308ab426f3a3c7e33b02c150ea59054620261", "subject": "ocfs2: fix readdir position truncation on 32-bit kernels", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89490", "commit_url": "https://git.kernel.org/stable/c/a63308ab426f3a3c7e33b02c150ea59054620261" }, { "cve": "CVE-2026-89491", "author_name": "Joseph Qi", "author_email": "joseph.qi@linux.alibaba.com", "fix_sha": "af09df89db9a68a1d76df0f75667998135bc8d65", "subject": "ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89491", "commit_url": "https://git.kernel.org/stable/c/af09df89db9a68a1d76df0f75667998135bc8d65" }, { "cve": "CVE-2026-89492", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "bc70726ddad53c7e9a9a85915bf2415b0d4f42f9", "subject": "ocfs2: validate directory-index entry counts when reading metadata", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89492", "commit_url": "https://git.kernel.org/stable/c/bc70726ddad53c7e9a9a85915bf2415b0d4f42f9" }, { "cve": "CVE-2026-89493", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "4ca62df6bc0708947b48da3f6a712ecb8e73929c", "subject": "ocfs2: validate rl_used against rl_count in refcount block validator", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89493", "commit_url": "https://git.kernel.org/stable/c/4ca62df6bc0708947b48da3f6a712ecb8e73929c" }, { "cve": "CVE-2026-89494", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "b54e03d9b3697d25f4a0063cf717d459c5e3ad94", "subject": "ocfs2: validate lengths in dlm_mig_lockres_handler", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89494", "commit_url": "https://git.kernel.org/stable/c/b54e03d9b3697d25f4a0063cf717d459c5e3ad94" }, { "cve": "CVE-2026-89495", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "ea5b5609305a8437bc955a0834a530c12246d78f", "subject": "ocfs2: bound namelen in dlm_migrate_request_handler", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89495", "commit_url": "https://git.kernel.org/stable/c/ea5b5609305a8437bc955a0834a530c12246d78f" }, { "cve": "CVE-2026-89496", "author_name": "Dmitry Antipov", "author_email": "dmantipov@yandex.ru", "fix_sha": "82ea9d4fc05fb7a387db547c6a7c0aa6a3719616", "subject": "ocfs2: always run deallocs on copy-on-write completion", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89496", "commit_url": "https://git.kernel.org/stable/c/82ea9d4fc05fb7a387db547c6a7c0aa6a3719616" }, { "cve": "CVE-2026-89497", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "d410cd5303ec59c7cf23dd61423752ce8e9ecb59", "subject": "orangefs: skip leading spaces before parsing client debug masks", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89497", "commit_url": "https://git.kernel.org/stable/c/d410cd5303ec59c7cf23dd61423752ce8e9ecb59" }, { "cve": "CVE-2026-89498", "author_name": "Yifei Gao", "author_email": "gyf161023@gmail.com", "fix_sha": "f574296be7f46eb60beca851240b526df232f480", "subject": "orangefs: fix double-free of trailer_buf on readdir copy failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89498", "commit_url": "https://git.kernel.org/stable/c/f574296be7f46eb60beca851240b526df232f480" }, { "cve": "CVE-2026-89499", "author_name": "Ivan Immanuel Shaji", "author_email": "ivanimmanuel1234@gmail.com", "fix_sha": "5eab74874d11160725c42ab676ba97a797a362eb", "subject": "ring-buffer: Stop remote reader update when page swap fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89499", "commit_url": "https://git.kernel.org/stable/c/5eab74874d11160725c42ab676ba97a797a362eb" }, { "cve": "CVE-2026-89500", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "7a1fb95de5404134f8758c1295ce88986bdf117c", "subject": "ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89500", "commit_url": "https://git.kernel.org/stable/c/7a1fb95de5404134f8758c1295ce88986bdf117c" }, { "cve": "CVE-2026-89501", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "24974bd0da1b47fd56c975533ead50abf754e74d", "subject": "ring-buffer: Hold cpu_buffer::lock when resizing a subbuf", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89501", "commit_url": "https://git.kernel.org/stable/c/24974bd0da1b47fd56c975533ead50abf754e74d" }, { "cve": "CVE-2026-89502", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "234b1a72e9706fe20c08c96f4374ec8e83b934cb", "subject": "ring-buffer: Free cpu_buffer::free_page with subbuf_order", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89502", "commit_url": "https://git.kernel.org/stable/c/234b1a72e9706fe20c08c96f4374ec8e83b934cb" }, { "cve": "CVE-2026-89503", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "e743527c5bfdceda1095bc0a9e596e2aebb6a9c3", "subject": "ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89503", "commit_url": "https://git.kernel.org/stable/c/e743527c5bfdceda1095bc0a9e596e2aebb6a9c3" }, { "cve": "CVE-2026-89504", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c", "subject": "regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89504", "commit_url": "https://git.kernel.org/stable/c/f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c" }, { "cve": "CVE-2026-89505", "author_name": "Yuhang Pan", "author_email": "242270054@hdu.edu.cn", "fix_sha": "60a42d510113f46de47e86a84bf5758597644487", "subject": "RDMA/uverbs: Guard legacy bundles without method_elm", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89505", "commit_url": "https://git.kernel.org/stable/c/60a42d510113f46de47e86a84bf5758597644487" }, { "cve": "CVE-2026-89506", "author_name": "Jason Gunthorpe", "author_email": "jgg@nvidia.com", "fix_sha": "011199f46f44a9fd93a9e5ab5d7fd1328d80e9bf", "subject": "RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89506", "commit_url": "https://git.kernel.org/stable/c/011199f46f44a9fd93a9e5ab5d7fd1328d80e9bf" }, { "cve": "CVE-2026-89507", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "f4cc21c6a8e9d392871477f9fd98d68e5ad80272", "subject": "RDMA/ucma: Lock the handler in ucma_write_cm_event()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89507", "commit_url": "https://git.kernel.org/stable/c/f4cc21c6a8e9d392871477f9fd98d68e5ad80272" }, { "cve": "CVE-2026-89508", "author_name": "Norbert Szetei", "author_email": "norbert@doyensec.com", "fix_sha": "ecbe7d36dc2de07e5dfbb4a8ff5b315ab43de820", "subject": "RDMA/ucma: Lock the handler in ucma_set_ib_path()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89508", "commit_url": "https://git.kernel.org/stable/c/ecbe7d36dc2de07e5dfbb4a8ff5b315ab43de820" }, { "cve": "CVE-2026-89509", "author_name": "Abhijit Gangurde", "author_email": "abhijit.gangurde@amd.com", "fix_sha": "cf3ebd89e754015625fee90aa938f6bc79a2c974", "subject": "RDMA/ionic: Embed counter driver data in rdma_counter allocation", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89509", "commit_url": "https://git.kernel.org/stable/c/cf3ebd89e754015625fee90aa938f6bc79a2c974" }, { "cve": "CVE-2026-89510", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "a7100601aa1a39f799a566acce10db20eaf4b7f2", "subject": "RDMA/cxgb4: Cancel reg_work before freeing device on remove", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89510", "commit_url": "https://git.kernel.org/stable/c/a7100601aa1a39f799a566acce10db20eaf4b7f2" }, { "cve": "CVE-2026-89511", "author_name": "Vaibhav Nagare", "author_email": "nagarevaibhav@gmail.com", "fix_sha": "06aa3d26327f24edd039ff249672fdf6f2ba5695", "subject": "qede: Fix NULL pointer dereference in TPA fragment processing", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89511", "commit_url": "https://git.kernel.org/stable/c/06aa3d26327f24edd039ff249672fdf6f2ba5695" }, { "cve": "CVE-2026-89512", "author_name": "Johan Hovold", "author_email": "johan@kernel.org", "fix_sha": "22f9efb3ae07f966a1901d929d16df1388cce65c", "subject": "remoteproc: scp: Fix device reference leak on failed lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89512", "commit_url": "https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c" }, { "cve": "CVE-2026-89513", "author_name": "Guidong Han", "author_email": "2045gemini@gmail.com", "fix_sha": "735bc20c24187ca419c9d5e63860a54b91be34bd", "subject": "RISC-V: KVM: Fix PMU event info array size overflow", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89513", "commit_url": "https://git.kernel.org/stable/c/735bc20c24187ca419c9d5e63860a54b91be34bd" }, { "cve": "CVE-2026-89514", "author_name": "Linkai Gong", "author_email": "gonglinkai@kylinos.cn", "fix_sha": "9639c6324524ea3f934908bd51f02430000954ab", "subject": "scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89514", "commit_url": "https://git.kernel.org/stable/c/9639c6324524ea3f934908bd51f02430000954ab" }, { "cve": "CVE-2026-89515", "author_name": "Petr Vaganov", "author_email": "p.vaganov@ideco.ru", "fix_sha": "626147717bea776b61ed3631d2c26283760c4cc4", "subject": "scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89515", "commit_url": "https://git.kernel.org/stable/c/626147717bea776b61ed3631d2c26283760c4cc4" }, { "cve": "CVE-2026-89516", "author_name": "Tao Cui", "author_email": "cuitao@kylinos.cn", "fix_sha": "8d8dd8ae89eaa78b37fc85528e926029f5facbdf", "subject": "sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89516", "commit_url": "https://git.kernel.org/stable/c/8d8dd8ae89eaa78b37fc85528e926029f5facbdf" }, { "cve": "CVE-2026-89517", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "d954004205c1a1d3f59ce8482b559266c15600fa", "subject": "sched_ext: Fix rq->core_pick corruption under core scheduling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89517", "commit_url": "https://git.kernel.org/stable/c/d954004205c1a1d3f59ce8482b559266c15600fa" }, { "cve": "CVE-2026-89518", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "3dd52416e44a70bc993adb96d2e0d71b9ea21359", "subject": "sched_ext: Fix this_rq() assumptions in dispatch kfuncs", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89518", "commit_url": "https://git.kernel.org/stable/c/3dd52416e44a70bc993adb96d2e0d71b9ea21359" }, { "cve": "CVE-2026-89519", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "ffaab58d217581cb75353168f8812a16e10463fc", "subject": "sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89519", "commit_url": "https://git.kernel.org/stable/c/ffaab58d217581cb75353168f8812a16e10463fc" }, { "cve": "CVE-2026-89520", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "f3629c63a4af3e491381780bc6c123cb498c4c40", "subject": "sched/core: Make core-sched flips wait for in-flight selections", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89520", "commit_url": "https://git.kernel.org/stable/c/f3629c63a4af3e491381780bc6c123cb498c4c40" }, { "cve": "CVE-2026-89521", "author_name": "Tejun Heo", "author_email": "tj@kernel.org", "fix_sha": "c10b216a072ff5c57bc880a05f87eb519aecc529", "subject": "sched/core: Handle pick_task() releasing the rq lock", "cvss_score": 7.3, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89521", "commit_url": "https://git.kernel.org/stable/c/c10b216a072ff5c57bc880a05f87eb519aecc529" }, { "cve": "CVE-2026-89522", "author_name": "Cong Nguyen", "author_email": "congnt264@gmail.com", "fix_sha": "d7f48aa7d60c65d3e6d5312c27f17d5525a245fb", "subject": "media: staging/ipu7: fix async notifier UAF on probe error path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89522", "commit_url": "https://git.kernel.org/stable/c/d7f48aa7d60c65d3e6d5312c27f17d5525a245fb" }, { "cve": "CVE-2026-89523", "author_name": "Wentao Guan", "author_email": "guanwentao@uniontech.com", "fix_sha": "2889e84282dda147f10b10d94cf0efd90a349c53", "subject": "wifi: mt76: mt7925: cancel pending mlo_pm_work", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89523", "commit_url": "https://git.kernel.org/stable/c/2889e84282dda147f10b10d94cf0efd90a349c53" }, { "cve": "CVE-2026-89524", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "3bbd05723d15dd06f0560bcd94fbf9a91b5f5613", "subject": "wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89524", "commit_url": "https://git.kernel.org/stable/c/3bbd05723d15dd06f0560bcd94fbf9a91b5f5613" }, { "cve": "CVE-2026-89525", "author_name": "David Lee", "author_email": "david.lee@trailofbits.com", "fix_sha": "cac0cb07f29ccfb373fd4a36c81e908ef3ce608c", "subject": "udf: reject VAT indexes equal to the entry count", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89525", "commit_url": "https://git.kernel.org/stable/c/cac0cb07f29ccfb373fd4a36c81e908ef3ce608c" }, { "cve": "CVE-2026-89526", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b", "subject": "svcrdma: Validate Read chunk positions before reconstruction", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89526", "commit_url": "https://git.kernel.org/stable/c/3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b" }, { "cve": "CVE-2026-89527", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "e346ef7bcb137f50c49f969330ab7dcf64ea1654", "subject": "svcrdma: Use svc_xprt_put to free listener on create failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89527", "commit_url": "https://git.kernel.org/stable/c/e346ef7bcb137f50c49f969330ab7dcf64ea1654" }, { "cve": "CVE-2026-89528", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "0ca487abb3bdf581851664b5db21f364caf57682", "subject": "svcrdma: Reject Read lists that exceed the page budget", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89528", "commit_url": "https://git.kernel.org/stable/c/0ca487abb3bdf581851664b5db21f364caf57682" }, { "cve": "CVE-2026-89529", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "af6f0e06bed818ee7fc8b869915964410020a1c5", "subject": "svcrdma: Reject oversized Read segments at decode time", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89529", "commit_url": "https://git.kernel.org/stable/c/af6f0e06bed818ee7fc8b869915964410020a1c5" }, { "cve": "CVE-2026-89530", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "0fbe20dfe74b783d255bf389a6ea77aa25dc7860", "subject": "svcrdma: Reject inline replies that overflow the pull-up buffer", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89530", "commit_url": "https://git.kernel.org/stable/c/0fbe20dfe74b783d255bf389a6ea77aa25dc7860" }, { "cve": "CVE-2026-89531", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "0944462247dcb7de7622cdaaadf5f05c52707dab", "subject": "svcrdma: Reject connection when transport allocation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89531", "commit_url": "https://git.kernel.org/stable/c/0944462247dcb7de7622cdaaadf5f05c52707dab" }, { "cve": "CVE-2026-89532", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "b7713a784c59515d0aba558c8f5df6a0164dd3a9", "subject": "svcrdma: Fix pcl_for_each_segment for empty chunks", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89532", "commit_url": "https://git.kernel.org/stable/c/b7713a784c59515d0aba558c8f5df6a0164dd3a9" }, { "cve": "CVE-2026-89533", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "4a44c140cc2f3643a39e258bb0c0ab9d0f494f5e", "subject": "svcrdma: Fix offset arithmetic in read_chunk_range", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89533", "commit_url": "https://git.kernel.org/stable/c/4a44c140cc2f3643a39e258bb0c0ab9d0f494f5e" }, { "cve": "CVE-2026-89534", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "01500306e1d50de7ca7a2cdcdfa28ac0523eb747", "subject": "svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89534", "commit_url": "https://git.kernel.org/stable/c/01500306e1d50de7ca7a2cdcdfa28ac0523eb747" }, { "cve": "CVE-2026-89535", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "4488e912973773d64368828acf3b8e39d93650ae", "subject": "svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89535", "commit_url": "https://git.kernel.org/stable/c/4488e912973773d64368828acf3b8e39d93650ae" }, { "cve": "CVE-2026-89536", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "a89dd597458848b463d284b15e42a8078beeb046", "subject": "SUNRPC: wait for in-flight client TLS handshake callback", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89536", "commit_url": "https://git.kernel.org/stable/c/a89dd597458848b463d284b15e42a8078beeb046" }, { "cve": "CVE-2026-89537", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "b94f6719dcd9f7a609bc5f459f85795900e77d25", "subject": "SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89537", "commit_url": "https://git.kernel.org/stable/c/b94f6719dcd9f7a609bc5f459f85795900e77d25" }, { "cve": "CVE-2026-89538", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "ad484748eec0a66eac0f13ab53b3fbedb7333c91", "subject": "SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89538", "commit_url": "https://git.kernel.org/stable/c/ad484748eec0a66eac0f13ab53b3fbedb7333c91" }, { "cve": "CVE-2026-89539", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "2e4ce62385c1b8a887c5370af058ac7b52a8eaf9", "subject": "SUNRPC: reject duplicate CREDS_VALUE options", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89539", "commit_url": "https://git.kernel.org/stable/c/2e4ce62385c1b8a887c5370af058ac7b52a8eaf9" }, { "cve": "CVE-2026-89540", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "5ce1ed6159731a41fdd0b03eedbed4e147036a5a", "subject": "sunrpc: init gssp_lock before publishing proc entry", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89540", "commit_url": "https://git.kernel.org/stable/c/5ce1ed6159731a41fdd0b03eedbed4e147036a5a" }, { "cve": "CVE-2026-89541", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "87831b92112c81db251d46756d65daa4f91af6a2", "subject": "SUNRPC: harden gss_unwrap_resp_priv length checks", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89541", "commit_url": "https://git.kernel.org/stable/c/87831b92112c81db251d46756d65daa4f91af6a2" }, { "cve": "CVE-2026-89542", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "6959297aaa9572783d620a226d73c3fb94494888", "subject": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89542", "commit_url": "https://git.kernel.org/stable/c/6959297aaa9572783d620a226d73c3fb94494888" }, { "cve": "CVE-2026-89543", "author_name": "Luxiao Xu", "author_email": "rakukuip@gmail.com", "fix_sha": "932a8cf6abb2b2f8677b79153a823108d8861fe2", "subject": "sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89543", "commit_url": "https://git.kernel.org/stable/c/932a8cf6abb2b2f8677b79153a823108d8861fe2" }, { "cve": "CVE-2026-89544", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "5e9a94539b1ec17a89177d952badfd0d844d694a", "subject": "SUNRPC: fix gssx_dec_option_array error path bugs", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89544", "commit_url": "https://git.kernel.org/stable/c/5e9a94539b1ec17a89177d952badfd0d844d694a" }, { "cve": "CVE-2026-89545", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "c479bde671cbe2f9e152834a8b0eb7c3c295bbaf", "subject": "sunrpc: defer rq_argp and rq_resp free until after RCU grace period", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89545", "commit_url": "https://git.kernel.org/stable/c/c479bde671cbe2f9e152834a8b0eb7c3c295bbaf" }, { "cve": "CVE-2026-89546", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "3674f780f47d2906b5a0f7199b66973067bdfeca", "subject": "SUNRPC: close backchannel before destroying callback service", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89546", "commit_url": "https://git.kernel.org/stable/c/3674f780f47d2906b5a0f7199b66973067bdfeca" }, { "cve": "CVE-2026-89547", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "43e11e164704dde975c9edb370de1a06bec67270", "subject": "SUNRPC: Check svc pool percpu counter allocation", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89547", "commit_url": "https://git.kernel.org/stable/c/43e11e164704dde975c9edb370de1a06bec67270" }, { "cve": "CVE-2026-89548", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "f42d0fda0c67695db6bc704b04b7c10240805377", "subject": "SUNRPC: always drain cache_cleaner before destroying a cache_detail", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89548", "commit_url": "https://git.kernel.org/stable/c/f42d0fda0c67695db6bc704b04b7c10240805377" }, { "cve": "CVE-2026-89549", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "f6310491c4cdb88af73aa551ec9df1f10a90c709", "subject": "sunrpc: route to a populated pool in svc_pool_for_cpu()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89549", "commit_url": "https://git.kernel.org/stable/c/f6310491c4cdb88af73aa551ec9df1f10a90c709" }, { "cve": "CVE-2026-89550", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "a919c5c88769cf8fb3ec071e6078d830bf512489", "subject": "SUNRPC: svcauth_gss: enforce krb5 token minimum length", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89550", "commit_url": "https://git.kernel.org/stable/c/a919c5c88769cf8fb3ec071e6078d830bf512489" }, { "cve": "CVE-2026-89551", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "3f491306dcb673ff5e78e1044ba450c58978774e", "subject": "SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89551", "commit_url": "https://git.kernel.org/stable/c/3f491306dcb673ff5e78e1044ba450c58978774e" }, { "cve": "CVE-2026-89552", "author_name": "Jiacheng Yu", "author_email": "yujiacheng3@huawei.com", "fix_sha": "3dfaae04243cde460d82dfc2a7dd0bb6664d20ae", "subject": "params: fix charp corruption on allocation failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89552", "commit_url": "https://git.kernel.org/stable/c/3dfaae04243cde460d82dfc2a7dd0bb6664d20ae" }, { "cve": "CVE-2026-89553", "author_name": "Dave Airlie", "author_email": "airlied@redhat.com", "fix_sha": "5e17160d41d92823f3379c1982e1369680c5ce4d", "subject": "nouveau/gem: reserve the bo in the info ioctl around the vma lookup", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89553", "commit_url": "https://git.kernel.org/stable/c/5e17160d41d92823f3379c1982e1369680c5ce4d" }, { "cve": "CVE-2026-89554", "author_name": "Harshit Varu", "author_email": "harshitvaru666@gmail.com", "fix_sha": "b878dfdd12d7a5b8722a78d35e313506140ca3d9", "subject": "mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89554", "commit_url": "https://git.kernel.org/stable/c/b878dfdd12d7a5b8722a78d35e313506140ca3d9" }, { "cve": "CVE-2026-89555", "author_name": "Qing Ming", "author_email": "a0yami@mailbox.org", "fix_sha": "29e63b8d9fc150cc191b1c6eb7e16e1247e1b650", "subject": "mpls: reload header after pskb_may_pull()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89555", "commit_url": "https://git.kernel.org/stable/c/29e63b8d9fc150cc191b1c6eb7e16e1247e1b650" }, { "cve": "CVE-2026-89556", "author_name": "Thi\u00e9baud Weksteen", "author_email": "tweek@google.com", "fix_sha": "9a5ff45689329835f874cefe5174e577d141d423", "subject": "module: validate string table section types", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89556", "commit_url": "https://git.kernel.org/stable/c/9a5ff45689329835f874cefe5174e577d141d423" }, { "cve": "CVE-2026-89557", "author_name": "Coly Li", "author_email": "colyli@fygo.io", "fix_sha": "35d522bd32462afcf1981dab6da8a9256c26c1e0", "subject": "md: do overflow check for sb->bblog_shift in super_1_load()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89557", "commit_url": "https://git.kernel.org/stable/c/35d522bd32462afcf1981dab6da8a9256c26c1e0" }, { "cve": "CVE-2026-89558", "author_name": "Yunye Zhao", "author_email": "yunye.zhao@linux.alibaba.com", "fix_sha": "47f1441b281decde6954a2fa82b4131637d685ac", "subject": "md/raid10: fix still_degraded being inverted in raid10_sync_request()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89558", "commit_url": "https://git.kernel.org/stable/c/47f1441b281decde6954a2fa82b4131637d685ac" }, { "cve": "CVE-2026-89559", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "037770686126155eafc44501312989e2837b9659", "subject": "libnvdimm/labels: Prevent integer overflow in __nd_label_validate()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89559", "commit_url": "https://git.kernel.org/stable/c/037770686126155eafc44501312989e2837b9659" }, { "cve": "CVE-2026-89560", "author_name": "G\u00fcnther Noack", "author_email": "gnoack@google.com", "fix_sha": "672fa082d48b21e1fb62cdb184fee41513e53421", "subject": "landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89560", "commit_url": "https://git.kernel.org/stable/c/672fa082d48b21e1fb62cdb184fee41513e53421" }, { "cve": "CVE-2026-89561", "author_name": "Andrea Mayer", "author_email": "andrea.mayer@uniroma2.it", "fix_sha": "f826df95332c07380206dbd54178b6eefb311aba", "subject": "ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89561", "commit_url": "https://git.kernel.org/stable/c/f826df95332c07380206dbd54178b6eefb311aba" }, { "cve": "CVE-2026-89562", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "505b6d296c486ef7d1274f279d4c43a172f63224", "subject": "ip6_gre: fix hardware header length for NBMA tunnels", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89562", "commit_url": "https://git.kernel.org/stable/c/505b6d296c486ef7d1274f279d4c43a172f63224" }, { "cve": "CVE-2026-89563", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "87f21b59ddc618eff9670c174842964ad65fdade", "subject": "ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89563", "commit_url": "https://git.kernel.org/stable/c/87f21b59ddc618eff9670c174842964ad65fdade" }, { "cve": "CVE-2026-89564", "author_name": "Zhiling Zou", "author_email": "zhilinz@nebusec.ai", "fix_sha": "e36ce6e78fe3fc3c071a26750783b7ba081ce10d", "subject": "ip: orphan prefetched skbs before multicast forwarding", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89564", "commit_url": "https://git.kernel.org/stable/c/e36ce6e78fe3fc3c071a26750783b7ba081ce10d" }, { "cve": "CVE-2026-89565", "author_name": "Anton Danilov", "author_email": "littlesmilingcloud@gmail.com", "fix_sha": "6776efe4a52f289a3fc18f8adf19b035a7d8e1bb", "subject": "ipip: fix skb leak in collect_md mode when metadata_dst allocation fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89565", "commit_url": "https://git.kernel.org/stable/c/6776efe4a52f289a3fc18f8adf19b035a7d8e1bb" }, { "cve": "CVE-2026-89566", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "f213e12ff5c9590b1034ae8da0e6d09665c772d0", "subject": "jbd2: check need_resched() when skipping busy checkpoint buffers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89566", "commit_url": "https://git.kernel.org/stable/c/f213e12ff5c9590b1034ae8da0e6d09665c772d0" }, { "cve": "CVE-2026-89567", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "15cb16496446b94e67f7abcb049b8e2c75cd3d02", "subject": "jbd2: bound shrinker scans by examined checkpoint buffers", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89567", "commit_url": "https://git.kernel.org/stable/c/15cb16496446b94e67f7abcb049b8e2c75cd3d02" }, { "cve": "CVE-2026-89568", "author_name": "Pratyush Yadav (Google)", "author_email": "pratyush@kernel.org", "fix_sha": "3a0b8fa2eb36afc88b62a95f33f0c77c71fa5ded", "subject": "kho: fix size calculation in kho_preserved_memory_reserve()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89568", "commit_url": "https://git.kernel.org/stable/c/3a0b8fa2eb36afc88b62a95f33f0c77c71fa5ded" }, { "cve": "CVE-2026-89569", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "759c185d0bbdb131357408f50b8735e04ed3caff", "subject": "Bluetooth: RFCOMM: serialize security confirmation handling", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89569", "commit_url": "https://git.kernel.org/stable/c/759c185d0bbdb131357408f50b8735e04ed3caff" }, { "cve": "CVE-2026-89570", "author_name": "Dave Jiang", "author_email": "dave.jiang@intel.com", "fix_sha": "775d0f4558f4cec0ee0c8966595d1add1791f36e", "subject": "cxl/mce: Make the MCE notifier per-region", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89570", "commit_url": "https://git.kernel.org/stable/c/775d0f4558f4cec0ee0c8966595d1add1791f36e" }, { "cve": "CVE-2026-89571", "author_name": "Zhenhao Wan", "author_email": "whi4ed0g@gmail.com", "fix_sha": "f687394af983df5660b6afae7e0d06969f3af206", "subject": "cxl/features: bound fwctl command payload to the input buffer", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89571", "commit_url": "https://git.kernel.org/stable/c/f687394af983df5660b6afae7e0d06969f3af206" }, { "cve": "CVE-2026-89572", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "d87cb889dc7ab1f2deecadf2a5e9023184bd7900", "subject": "cpufreq: apple-soc: Fix OPP table cleanup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89572", "commit_url": "https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900" }, { "cve": "CVE-2026-89573", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "4538a287bdf5d0f9a379c678e5262b9f5783f547", "subject": "dm array: reject an array block whose value size is not the caller's", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89573", "commit_url": "https://git.kernel.org/stable/c/4538a287bdf5d0f9a379c678e5262b9f5783f547" }, { "cve": "CVE-2026-89574", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "2965787723084835b18dfe993cd450ebf5bd4540", "subject": "dm array: validate array block headers on read", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89574", "commit_url": "https://git.kernel.org/stable/c/2965787723084835b18dfe993cd450ebf5bd4540" }, { "cve": "CVE-2026-89575", "author_name": "Ilya Krutskih", "author_email": "devsec@tpz.ru", "fix_sha": "73c37fe54cd056d07461b142ab0b8b81e1ef6ad8", "subject": "dm raid1: reserve space for NUL-terminator in build_constructor_string()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89575", "commit_url": "https://git.kernel.org/stable/c/73c37fe54cd056d07461b142ab0b8b81e1ef6ad8" }, { "cve": "CVE-2026-89576", "author_name": "liyouhong", "author_email": "liyouhong@kylinos.cn", "fix_sha": "39c5aa3bd8ec3912d2cd0b3fe092642b0d2b0713", "subject": "dm-era: fix shadowed superblock leak on take-snap failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89576", "commit_url": "https://git.kernel.org/stable/c/39c5aa3bd8ec3912d2cd0b3fe092642b0d2b0713" }, { "cve": "CVE-2026-89577", "author_name": "Mikulas Patocka", "author_email": "mpatocka@redhat.com", "fix_sha": "47a5e62f39875f371bded6e34ffb9cf15ccd813d", "subject": "dm-io: report non-retryable errors separatedly", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89577", "commit_url": "https://git.kernel.org/stable/c/47a5e62f39875f371bded6e34ffb9cf15ccd813d" }, { "cve": "CVE-2026-89578", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "62dc37a819a5a5de5cba989ad9e96ee214b9253e", "subject": "dm-io: clone the source bio instead of copying its biovec", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89578", "commit_url": "https://git.kernel.org/stable/c/62dc37a819a5a5de5cba989ad9e96ee214b9253e" }, { "cve": "CVE-2026-89579", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "11c1e836710dcba03e50454a4eedfdbaf8d3050e", "subject": "bpf: Harden bloom filter sizing and indexing on 32-bit kernels", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89579", "commit_url": "https://git.kernel.org/stable/c/11c1e836710dcba03e50454a4eedfdbaf8d3050e" }, { "cve": "CVE-2026-89580", "author_name": "Daniel Borkmann", "author_email": "borkmann@iogearbox.net", "fix_sha": "b1a47b2708d4e95dbd23aee2ec83752190897b3f", "subject": "bpf: Disable preemption in __bpf_get_stack", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89580", "commit_url": "https://git.kernel.org/stable/c/b1a47b2708d4e95dbd23aee2ec83752190897b3f" }, { "cve": "CVE-2026-89581", "author_name": "Vineet Gupta", "author_email": "vineet.gupta@linux.dev", "fix_sha": "5bbbce02e500d47d8e259a45be5a7be9741d0533", "subject": "bpf, x86: Fix per-CPU address resolution into an extended register", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89581", "commit_url": "https://git.kernel.org/stable/c/5bbbce02e500d47d8e259a45be5a7be9741d0533" }, { "cve": "CVE-2026-89582", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "d2796ffe38cb4155afe0eab23636295b096c27a5", "subject": "bnx2x: fix double free in bnx2x_init_firmware() error path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89582", "commit_url": "https://git.kernel.org/stable/c/d2796ffe38cb4155afe0eab23636295b096c27a5" }, { "cve": "CVE-2026-89583", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "4beb198bc59b242404a47c21990bc84165052c8a", "subject": "Bluetooth: eir: Fix OOB read in eir_get_service_data()", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89583", "commit_url": "https://git.kernel.org/stable/c/4beb198bc59b242404a47c21990bc84165052c8a" }, { "cve": "CVE-2026-89584", "author_name": "Keith Busch", "author_email": "kbusch@kernel.org", "fix_sha": "14b007e178811db72fbb1ebb3535160db6ec1e6a", "subject": "block: validate user space vectors during extraction", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89584", "commit_url": "https://git.kernel.org/stable/c/14b007e178811db72fbb1ebb3535160db6ec1e6a" }, { "cve": "CVE-2026-89585", "author_name": "Hongyan Xu", "author_email": "getshell@seu.edu.cn", "fix_sha": "e3e3bf40916c1e810df03958cfa7ba6883cdce79", "subject": "auxdisplay: charlcd: cancel backlight work on registration failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89585", "commit_url": "https://git.kernel.org/stable/c/e3e3bf40916c1e810df03958cfa7ba6883cdce79" }, { "cve": "CVE-2026-89586", "author_name": "Niklas Cassel", "author_email": "cassel@kernel.org", "fix_sha": "79cce911e623c0baa0fde307ce3a434e084b881a", "subject": "ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89586", "commit_url": "https://git.kernel.org/stable/c/79cce911e623c0baa0fde307ce3a434e084b881a" }, { "cve": "CVE-2026-89587", "author_name": "Anirudh Prasad", "author_email": "icarus@a0rg.com", "fix_sha": "ced45be0073a8a31b30b4a7f68cd3a15734515de", "subject": "ACPI: pfr_update: fix stack buffer overflow in query_capability()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89587", "commit_url": "https://git.kernel.org/stable/c/ced45be0073a8a31b30b4a7f68cd3a15734515de" }, { "cve": "CVE-2026-89588", "author_name": "TanZheng", "author_email": "tanzheng@kylinos.cn", "fix_sha": "903308ea40adf0577d82eab69882faf8836326ce", "subject": "ACPI: APEI: GHES: fix ARM section length accounting after header", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89588", "commit_url": "https://git.kernel.org/stable/c/903308ea40adf0577d82eab69882faf8836326ce" }, { "cve": "CVE-2026-89589", "author_name": "Terry Bowman", "author_email": "terry.bowman@amd.com", "fix_sha": "6625ca499c3131ef63be3215f8f942d7a097ea3a", "subject": "acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89589", "commit_url": "https://git.kernel.org/stable/c/6625ca499c3131ef63be3215f8f942d7a097ea3a" }, { "cve": "CVE-2026-89590", "author_name": "ZhaoJinming", "author_email": "zhaojinming@uniontech.com", "fix_sha": "9b2dedadf6a91ac3fc9fae268bb556a041222711", "subject": "accel/rocket: Fix error path handling in rocket_job_run()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89590", "commit_url": "https://git.kernel.org/stable/c/9b2dedadf6a91ac3fc9fae268bb556a041222711" }, { "cve": "CVE-2026-89591", "author_name": "Shuvam Pandey", "author_email": "shuvampandey1@gmail.com", "fix_sha": "70e6a33d68a9b03335c5426332666e52d07f45d6", "subject": "accel/rocket: initialize job domain before cleanup paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89591", "commit_url": "https://git.kernel.org/stable/c/70e6a33d68a9b03335c5426332666e52d07f45d6" }, { "cve": "CVE-2026-89592", "author_name": "Muhammad Bilal", "author_email": "meatuni001@gmail.com", "fix_sha": "a85402bff218f2b8f0d806e46c16c2f3d49cdda7", "subject": "accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89592", "commit_url": "https://git.kernel.org/stable/c/a85402bff218f2b8f0d806e46c16c2f3d49cdda7" }, { "cve": "CVE-2026-89593", "author_name": "Guillaume Morin", "author_email": "guillaume@morinfr.org", "fix_sha": "5120b1e048d48596ffaec1a8412012a91adba73b", "subject": "hugetlb: only adjust reservation during unmapping if mapcount is 0", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89593", "commit_url": "https://git.kernel.org/stable/c/5120b1e048d48596ffaec1a8412012a91adba73b" }, { "cve": "CVE-2026-89594", "author_name": "Ivaylo Dimitrov", "author_email": "ivo.g.dimitrov.75@gmail.com", "fix_sha": "e81250ec6b69248b00d38c523dc6a13efaf38aab", "subject": "hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89594", "commit_url": "https://git.kernel.org/stable/c/e81250ec6b69248b00d38c523dc6a13efaf38aab" }, { "cve": "CVE-2026-89595", "author_name": "Youngjae Kwon", "author_email": "yjkwon0026@snu.ac.kr", "fix_sha": "e422777fdd4746de1109575c51e65038d4c5c1be", "subject": "fsnotify: Fix stale object mask after concurrent mark updates", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89595", "commit_url": "https://git.kernel.org/stable/c/e422777fdd4746de1109575c51e65038d4c5c1be" }, { "cve": "CVE-2026-89596", "author_name": "Marek Czernohous", "author_email": "marek@czernohous.de", "fix_sha": "9393f1d656a79693e0c123ff7bc7c5c0f708046d", "subject": "forcedeth: fix off-by-one when saving/restoring non-PCI config space", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89596", "commit_url": "https://git.kernel.org/stable/c/9393f1d656a79693e0c123ff7bc7c5c0f708046d" }, { "cve": "CVE-2026-89597", "author_name": "Myeonghun Pak", "author_email": "mhun512@gmail.com", "fix_sha": "de8db23aa7c337e606fca9faf48b3ba72968597a", "subject": "fbdev: uvesafb: unregister connector callback on init failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89597", "commit_url": "https://git.kernel.org/stable/c/de8db23aa7c337e606fca9faf48b3ba72968597a" }, { "cve": "CVE-2026-89598", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "9ad709afdfa32509ed64938a6d9cd00db3cd54c2", "subject": "fbdev: ssd1307fb: defer I2C transfers from damage callbacks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89598", "commit_url": "https://git.kernel.org/stable/c/9ad709afdfa32509ed64938a6d9cd00db3cd54c2" }, { "cve": "CVE-2026-89599", "author_name": "Runyu Xiao", "author_email": "runyu.xiao@seu.edu.cn", "fix_sha": "f8e43fe0f22b7137ce456e6fe3581d3098174f74", "subject": "fbdev: omapfb: panel-dsi-cm: initialize lock before registering display", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89599", "commit_url": "https://git.kernel.org/stable/c/f8e43fe0f22b7137ce456e6fe3581d3098174f74" }, { "cve": "CVE-2026-89600", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "d7f1cf5be33ef0175a4e8ed8687aeb98fb00a851", "subject": "fanotify: fix use-after-free of file range info", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89600", "commit_url": "https://git.kernel.org/stable/c/d7f1cf5be33ef0175a4e8ed8687aeb98fb00a851" }, { "cve": "CVE-2026-89601", "author_name": "Jan Kara", "author_email": "jack@suse.cz", "fix_sha": "356984d1a5c32e94810cbb6c8dc7d8ff2d4d919a", "subject": "ext2: Fix lost inode updates for IS_SYNC inodes", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89601", "commit_url": "https://git.kernel.org/stable/c/356984d1a5c32e94810cbb6c8dc7d8ff2d4d919a" }, { "cve": "CVE-2026-89602", "author_name": "Nikhil Gurudasani", "author_email": "nikhilgurudasani314@gmail.com", "fix_sha": "a7d097cf01301c5da37927c8f26123d006f0fd8a", "subject": "erofs: skip sufficiently large global buffers when resizing", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89602", "commit_url": "https://git.kernel.org/stable/c/a7d097cf01301c5da37927c8f26123d006f0fd8a" }, { "cve": "CVE-2026-89603", "author_name": "Jinjie Ruan", "author_email": "ruanjinjie@huawei.com", "fix_sha": "4a3591287fb7f808e209b4974ed337f609a2006b", "subject": "entry: Fix seccomp bypass after ptrace with TSYNC", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89603", "commit_url": "https://git.kernel.org/stable/c/4a3591287fb7f808e209b4974ed337f609a2006b" }, { "cve": "CVE-2026-89604", "author_name": "Ard Biesheuvel", "author_email": "ardb@kernel.org", "fix_sha": "b2326338dc683e8c1067c0cbf7a47986c4190902", "subject": "efivarfs: Rate limit statfs() handler", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89604", "commit_url": "https://git.kernel.org/stable/c/b2326338dc683e8c1067c0cbf7a47986c4190902" }, { "cve": "CVE-2026-89605", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "219644a3ad5518217b2d62cad6d2c36a2308c949", "subject": "ecryptfs: release message context on send failure", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89605", "commit_url": "https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949" }, { "cve": "CVE-2026-89606", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f", "subject": "ecryptfs: reject too-small tag 70 packets", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89606", "commit_url": "https://git.kernel.org/stable/c/e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f" }, { "cve": "CVE-2026-89607", "author_name": "HanQuan", "author_email": "eilaimemedsnaimel@gmail.com", "fix_sha": "5babe9c177c364521e3e682b949c5a8c47f4a441", "subject": "ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89607", "commit_url": "https://git.kernel.org/stable/c/5babe9c177c364521e3e682b949c5a8c47f4a441" }, { "cve": "CVE-2026-89608", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2", "subject": "ecryptfs: pass packet set buffer size to parser", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89608", "commit_url": "https://git.kernel.org/stable/c/2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2" }, { "cve": "CVE-2026-89609", "author_name": "Yichong Chen", "author_email": "chenyichong@uniontech.com", "fix_sha": "779972513c2fa8c7938e54976f686091dafff22f", "subject": "ecryptfs: hold msg ctx list lock when cleaning daemon queue", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89609", "commit_url": "https://git.kernel.org/stable/c/779972513c2fa8c7938e54976f686091dafff22f" }, { "cve": "CVE-2026-89610", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "fea9e4488f384c0ef1c0e3d96b565127c1b98447", "subject": "ntfs: verify run length exceeding volume boundary", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89610", "commit_url": "https://git.kernel.org/stable/c/fea9e4488f384c0ef1c0e3d96b565127c1b98447" }, { "cve": "CVE-2026-89611", "author_name": "Hongling Zeng", "author_email": "zenghongling@kylinos.cn", "fix_sha": "a83e82b0ec3ae523028e24813f23f18b43e8fc1c", "subject": "ntfs: validate non-resident attribute offsets", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89611", "commit_url": "https://git.kernel.org/stable/c/a83e82b0ec3ae523028e24813f23f18b43e8fc1c" }, { "cve": "CVE-2026-89612", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "cc9d09fef78410bcd37ac05168cbd5f6dd75d3d2", "subject": "ntfs: reject invalid MFT LCNs from boot sector", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89612", "commit_url": "https://git.kernel.org/stable/c/cc9d09fef78410bcd37ac05168cbd5f6dd75d3d2" }, { "cve": "CVE-2026-89613", "author_name": "Hyunchul Lee", "author_email": "hyc.lee@gmail.com", "fix_sha": "766062a82e1ce4087c7dc077224144dfd34b3661", "subject": "ntfs: reject invalid empty mapping pairs", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89613", "commit_url": "https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661" }, { "cve": "CVE-2026-89614", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "19cac7902a8ab748e15f98ddaafcf5f8882be21d", "subject": "ntfs: bound the free-cluster bitmap scan to the volume", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89614", "commit_url": "https://git.kernel.org/stable/c/19cac7902a8ab748e15f98ddaafcf5f8882be21d" }, { "cve": "CVE-2026-89615", "author_name": "Konstantin Komarov", "author_email": "almaz.alexandrovich@paragon-software.com", "fix_sha": "6f7b9dbdc1b7520206abce0049bdd143eb536e75", "subject": "fs/ntfs3: bound page_lcns[] index by the log record", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89615", "commit_url": "https://git.kernel.org/stable/c/6f7b9dbdc1b7520206abce0049bdd143eb536e75" }, { "cve": "CVE-2026-89616", "author_name": "Samuel Page", "author_email": "sam@bynar.io", "fix_sha": "35d1ea92c7d946e2ebdbe36cdb2c969c8704bebd", "subject": "fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89616", "commit_url": "https://git.kernel.org/stable/c/35d1ea92c7d946e2ebdbe36cdb2c969c8704bebd" }, { "cve": "CVE-2026-89617", "author_name": "Xiang Mei", "author_email": "xmei5@asu.edu", "fix_sha": "006cb7713dec10368e699abc4367e5faa334c9a5", "subject": "fs/ntfs3: validate dirty page table on log replay", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89617", "commit_url": "https://git.kernel.org/stable/c/006cb7713dec10368e699abc4367e5faa334c9a5" }, { "cve": "CVE-2026-89618", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "1704aaaf5d22bc765c168402350d191e24e245bc", "subject": "eventfs: Initialize ei->children and ei->list in init_ei()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89618", "commit_url": "https://git.kernel.org/stable/c/1704aaaf5d22bc765c168402350d191e24e245bc" }, { "cve": "CVE-2026-89619", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "035ec4a71cb8020a927c123bbe75c2f88d614986", "subject": "HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89619", "commit_url": "https://git.kernel.org/stable/c/035ec4a71cb8020a927c123bbe75c2f88d614986" }, { "cve": "CVE-2026-89620", "author_name": "HyeongJun An", "author_email": "sammiee5311@gmail.com", "fix_sha": "a59cf84441f9a17323c89452cec2bf16724c48a9", "subject": "HID: intel-thc-hid: intel-quickspi: validate report size before copy", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89620", "commit_url": "https://git.kernel.org/stable/c/a59cf84441f9a17323c89452cec2bf16724c48a9" }, { "cve": "CVE-2026-89621", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "2c9a6998c19503626c57a2267bf279e204113079", "subject": "HID: mcp2221: validate report size in mcp2221_raw_event()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89621", "commit_url": "https://git.kernel.org/stable/c/2c9a6998c19503626c57a2267bf279e204113079" }, { "cve": "CVE-2026-89622", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "db2333f88729c8aae062cb171ed058725ff5c901", "subject": "HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89622", "commit_url": "https://git.kernel.org/stable/c/db2333f88729c8aae062cb171ed058725ff5c901" }, { "cve": "CVE-2026-89623", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "dca151633c0fde90935311c60e7cfc064aa56134", "subject": "HID: mcp2221: stop device IO before hid_hw_stop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89623", "commit_url": "https://git.kernel.org/stable/c/dca151633c0fde90935311c60e7cfc064aa56134" }, { "cve": "CVE-2026-89624", "author_name": "Baul Lee", "author_email": "baul.lee@xbow.com", "fix_sha": "ce08c5555cabcd444d8b77fa69a7cb68bb05f611", "subject": "HID: universal-pidff: stop the device when force-feedback init fails", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89624", "commit_url": "https://git.kernel.org/stable/c/ce08c5555cabcd444d8b77fa69a7cb68bb05f611" }, { "cve": "CVE-2026-89625", "author_name": "Doruk Tan Ozturk", "author_email": "doruk@0sec.ai", "fix_sha": "a26705bd2e2728833e7a538ce91e58a5eeff496a", "subject": "HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89625", "commit_url": "https://git.kernel.org/stable/c/a26705bd2e2728833e7a538ce91e58a5eeff496a" }, { "cve": "CVE-2026-89626", "author_name": "Haoxiang Li", "author_email": "haoxiang_li2024@163.com", "fix_sha": "3789d0802ddb4b3be04062caf4bfadd23496e9a7", "subject": "HID: sensor: custom: Fix field sysfs group cleanup on failure", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89626", "commit_url": "https://git.kernel.org/stable/c/3789d0802ddb4b3be04062caf4bfadd23496e9a7" }, { "cve": "CVE-2026-89627", "author_name": "Xu Rao", "author_email": "raoxu@uniontech.com", "fix_sha": "bbff0ccbff360a5498075525005f6a913239a3d7", "subject": "HID: roccat: free buffered reports when destroying device", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89627", "commit_url": "https://git.kernel.org/stable/c/bbff0ccbff360a5498075525005f6a913239a3d7" }, { "cve": "CVE-2026-89628", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "e9c667395ac1f8024f623250b32bae4c7af9caa0", "subject": "HID: picolcd: clamp eeprom debugfs read to bytes actually received", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89628", "commit_url": "https://git.kernel.org/stable/c/e9c667395ac1f8024f623250b32bae4c7af9caa0" }, { "cve": "CVE-2026-89629", "author_name": "Stuart Hayhurst", "author_email": "stuart.a.hayhurst@gmail.com", "fix_sha": "08d8814521885e67b1bdf6a3036ee264e3e58377", "subject": "HID: corsair-void: Check size of status and firmware events before reading them", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89629", "commit_url": "https://git.kernel.org/stable/c/08d8814521885e67b1bdf6a3036ee264e3e58377" }, { "cve": "CVE-2026-89630", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "ba22f575de9deeae4ae0859ca4315a7698226237", "subject": "smb: client: restore the data_offset bound in is_valid_oplock_break()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89630", "commit_url": "https://git.kernel.org/stable/c/ba22f575de9deeae4ae0859ca4315a7698226237" }, { "cve": "CVE-2026-89631", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "65deb18359341141d37dc86fc7853511be3c87a7", "subject": "smb: client: reject a tree connect response whose byte count is too small", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89631", "commit_url": "https://git.kernel.org/stable/c/65deb18359341141d37dc86fc7853511be3c87a7" }, { "cve": "CVE-2026-89632", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "05f78e6cf34ea3a285053bd5999e08e8ac298bd5", "subject": "smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89632", "commit_url": "https://git.kernel.org/stable/c/05f78e6cf34ea3a285053bd5999e08e8ac298bd5" }, { "cve": "CVE-2026-89633", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "6343c1da561962688f203362d80d6a3bfa39fa1b", "subject": "smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89633", "commit_url": "https://git.kernel.org/stable/c/6343c1da561962688f203362d80d6a3bfa39fa1b" }, { "cve": "CVE-2026-89634", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "62656b024efc21c3230eade1a847f25871c3d2bb", "subject": "smb: client: fix ALIGN() overflow in symlink_data() error context loop", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89634", "commit_url": "https://git.kernel.org/stable/c/62656b024efc21c3230eade1a847f25871c3d2bb" }, { "cve": "CVE-2026-89635", "author_name": "Aldo Ariel Panzardo", "author_email": "qwe.aldo@gmail.com", "fix_sha": "3f220a0a62e6b9b391c9d1f0e6580b05173cc7f7", "subject": "ksmbd: only rebind the reopened file's own oplock on durable reconnect", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89635", "commit_url": "https://git.kernel.org/stable/c/3f220a0a62e6b9b391c9d1f0e6580b05173cc7f7" }, { "cve": "CVE-2026-89636", "author_name": "Fredric Cover", "author_email": "fredric.cover.lkernel@gmail.com", "fix_sha": "b1b741cf8e7ce1b91d937e23decd3d3358748700", "subject": "smb: client: clear ce->tgthint in free_tgts()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89636", "commit_url": "https://git.kernel.org/stable/c/b1b741cf8e7ce1b91d937e23decd3d3358748700" }, { "cve": "CVE-2026-89637", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "730d0bb19507b9e19c2fe5343109ac618e2fbce5", "subject": "smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89637", "commit_url": "https://git.kernel.org/stable/c/730d0bb19507b9e19c2fe5343109ac618e2fbce5" }, { "cve": "CVE-2026-89638", "author_name": "Jiangshan Yi", "author_email": "yijiangshan@kylinos.cn", "fix_sha": "b8e5dc4f95e5484159b343903f302eb6d783f2e6", "subject": "smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89638", "commit_url": "https://git.kernel.org/stable/c/b8e5dc4f95e5484159b343903f302eb6d783f2e6" }, { "cve": "CVE-2026-89639", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "364b183230586a62660a7280c1eb20138338eeb5", "subject": "cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89639", "commit_url": "https://git.kernel.org/stable/c/364b183230586a62660a7280c1eb20138338eeb5" }, { "cve": "CVE-2026-89640", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "6c322f5cf7476ded7a9a20f7be72462065a03c68", "subject": "cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89640", "commit_url": "https://git.kernel.org/stable/c/6c322f5cf7476ded7a9a20f7be72462065a03c68" }, { "cve": "CVE-2026-89641", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "b96db32fed8dfb2478d7c208f89bf383beed1535", "subject": "cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89641", "commit_url": "https://git.kernel.org/stable/c/b96db32fed8dfb2478d7c208f89bf383beed1535" }, { "cve": "CVE-2026-89642", "author_name": "Frank Sorenson", "author_email": "sorenson@redhat.com", "fix_sha": "c510edb9734af1c274d18f4f31a471a166bbc7e8", "subject": "cifs: call pagecache_isize_extended() in cifs_setsize() when extending", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89642", "commit_url": "https://git.kernel.org/stable/c/c510edb9734af1c274d18f4f31a471a166bbc7e8" }, { "cve": "CVE-2026-89643", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "783f0f0974c156aca630f4ffff248671082a098d", "subject": "audit: avoid dropping live tree ref on fsnotify rule autoremove", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89643", "commit_url": "https://git.kernel.org/stable/c/783f0f0974c156aca630f4ffff248671082a098d" }, { "cve": "CVE-2026-89644", "author_name": "Shuangpeng Bai", "author_email": "shuangpeng.kernel@gmail.com", "fix_sha": "3f950867c307c5413d628a153ac44915bd117ffd", "subject": "btrfs: fix extent map leak in NOCOW direct I/O write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89644", "commit_url": "https://git.kernel.org/stable/c/3f950867c307c5413d628a153ac44915bd117ffd" }, { "cve": "CVE-2026-89645", "author_name": "Guanghui Yang", "author_email": "3497809730@qq.com", "fix_sha": "6d8ba4572922e336f0b59a80751b018e1e135164", "subject": "btrfs: drop recovered reloc root refs on recovery failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89645", "commit_url": "https://git.kernel.org/stable/c/6d8ba4572922e336f0b59a80751b018e1e135164" }, { "cve": "CVE-2026-89646", "author_name": "Matthew Brown", "author_email": "matthew@bargrove.com", "fix_sha": "c25aee9c630fb86f98d79eccb75765067079b972", "subject": "ceph: fix leaked inode reference on writeback abort at umount", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89646", "commit_url": "https://git.kernel.org/stable/c/c25aee9c630fb86f98d79eccb75765067079b972" }, { "cve": "CVE-2026-89647", "author_name": "Max Kellermann", "author_email": "max.kellermann@ionos.com", "fix_sha": "e7d7aa7b730178278109c41fa1b17b06873065d5", "subject": "ceph: do not repeat ceph_trim_dentries() if no progress possible", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89647", "commit_url": "https://git.kernel.org/stable/c/e7d7aa7b730178278109c41fa1b17b06873065d5" }, { "cve": "CVE-2026-89648", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "4bd3158bd62466d57ed72a3f7bc5f205fedd6919", "subject": "ceph: cap delegated inode count in ceph_parse_deleg_inos()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89648", "commit_url": "https://git.kernel.org/stable/c/4bd3158bd62466d57ed72a3f7bc5f205fedd6919" }, { "cve": "CVE-2026-89649", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "68d541754d6cd3bb98d1fd8314f57e5eb533557d", "subject": "ceph: bound xattr value length in __build_xattrs()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89649", "commit_url": "https://git.kernel.org/stable/c/68d541754d6cd3bb98d1fd8314f57e5eb533557d" }, { "cve": "CVE-2026-89650", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "a3eb169ee297aa99670ba927c659990bd1e453f3", "subject": "ceph: bound num_export_targets array for mds info v2/v3", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89650", "commit_url": "https://git.kernel.org/stable/c/a3eb169ee297aa99670ba927c659990bd1e453f3" }, { "cve": "CVE-2026-89651", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "77933e22adfe813be2bd10be08d6e950103c3967", "subject": "ceph: bound MDSCapAuth path and fs_name decode in handle_session()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89651", "commit_url": "https://git.kernel.org/stable/c/77933e22adfe813be2bd10be08d6e950103c3967" }, { "cve": "CVE-2026-89652", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "eff8013c5a8916613c742ae5a2cc341cb605c0ae", "subject": "ceph: bound copied dentry name length in NFS export get_name", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89652", "commit_url": "https://git.kernel.org/stable/c/eff8013c5a8916613c742ae5a2cc341cb605c0ae" }, { "cve": "CVE-2026-89653", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "aedc9053d909508a5f56c3f49f885fc030df4730", "subject": "ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89653", "commit_url": "https://git.kernel.org/stable/c/aedc9053d909508a5f56c3f49f885fc030df4730" }, { "cve": "CVE-2026-89654", "author_name": "Xiubo Li", "author_email": "xiubo.li@clyso.com", "fix_sha": "ee611a7509554c4ca1f54f6aefe592fb1df7ea70", "subject": "ceph: fix UAF in check_new_map() on session freed during unlock", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89654", "commit_url": "https://git.kernel.org/stable/c/ee611a7509554c4ca1f54f6aefe592fb1df7ea70" }, { "cve": "CVE-2026-89655", "author_name": "Xiubo Li", "author_email": "xiubo.li@clyso.com", "fix_sha": "7af4c4f01305b0935adf6d4301b1ec407025485d", "subject": "ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89655", "commit_url": "https://git.kernel.org/stable/c/7af4c4f01305b0935adf6d4301b1ec407025485d" }, { "cve": "CVE-2026-89656", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "3cde4a8302301679937474a5f7a851394cc1bd11", "subject": "libceph: reject buckets with mismatched CRUSH ids", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89656", "commit_url": "https://git.kernel.org/stable/c/3cde4a8302301679937474a5f7a851394cc1bd11" }, { "cve": "CVE-2026-89657", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "9ec08b7499a62c6d4afa93d36ab47a43fcad57d1", "subject": "libceph: validate OSD extent maps before cursor advance", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89657", "commit_url": "https://git.kernel.org/stable/c/9ec08b7499a62c6d4afa93d36ab47a43fcad57d1" }, { "cve": "CVE-2026-89658", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "7b4f8a1586c42d3afc3c0ac779af2db7ab1a5c55", "subject": "NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89658", "commit_url": "https://git.kernel.org/stable/c/7b4f8a1586c42d3afc3c0ac779af2db7ab1a5c55" }, { "cve": "CVE-2026-89659", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "4683ca76b3b7e5808338491c6eb3c20e6b4894d5", "subject": "NFSD: Prevent client use-after-free during delegation revoke", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89659", "commit_url": "https://git.kernel.org/stable/c/4683ca76b3b7e5808338491c6eb3c20e6b4894d5" }, { "cve": "CVE-2026-89660", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "e270e5a0778e5bff852c8862ce9576ce70359393", "subject": "NFSD: Prevent client use-after-free during admin state revocation", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89660", "commit_url": "https://git.kernel.org/stable/c/e270e5a0778e5bff852c8862ce9576ce70359393" }, { "cve": "CVE-2026-89661", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "292d915d3ba6fd15eeb88351fa10581683073109", "subject": "NFSD: Prevent post-shutdown use-after-free in unlock_filesystem", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89661", "commit_url": "https://git.kernel.org/stable/c/292d915d3ba6fd15eeb88351fa10581683073109" }, { "cve": "CVE-2026-89662", "author_name": "Chuck Lever", "author_email": "cel@kernel.org", "fix_sha": "5e2fa29d223a9a1e6a948e40b109d09081d1decd", "subject": "NFSD: Prevent lock owner use-after-free during client teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89662", "commit_url": "https://git.kernel.org/stable/c/5e2fa29d223a9a1e6a948e40b109d09081d1decd" }, { "cve": "CVE-2026-89663", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "3b0c3595db99bb4bebd7c8aa8a36f3c50e411bb7", "subject": "nfsd: revoke copy-notify stateids before dropping their reference", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89663", "commit_url": "https://git.kernel.org/stable/c/3b0c3595db99bb4bebd7c8aa8a36f3c50e411bb7" }, { "cve": "CVE-2026-89664", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "8215892993ea9f5231da4fa9eb42428a286fce8b", "subject": "nfsd: release OPEN-decoded posix ACLs via op_release", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89664", "commit_url": "https://git.kernel.org/stable/c/8215892993ea9f5231da4fa9eb42428a286fce8b" }, { "cve": "CVE-2026-89665", "author_name": "Robbie Ko", "author_email": "robbieko@synology.com", "fix_sha": "26709c8ffe73772eb69e68d553ac71d91228dccc", "subject": "nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89665", "commit_url": "https://git.kernel.org/stable/c/26709c8ffe73772eb69e68d553ac71d91228dccc" }, { "cve": "CVE-2026-89666", "author_name": "Robbie Ko", "author_email": "robbieko@synology.com", "fix_sha": "eb0eca7720662ba5847df1510e73801f7f473094", "subject": "nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89666", "commit_url": "https://git.kernel.org/stable/c/eb0eca7720662ba5847df1510e73801f7f473094" }, { "cve": "CVE-2026-89667", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "40162cfea79b9510380decfdd1795b754dc9f972", "subject": "nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89667", "commit_url": "https://git.kernel.org/stable/c/40162cfea79b9510380decfdd1795b754dc9f972" }, { "cve": "CVE-2026-89668", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "2c390c8a1764d67095fe444401861fac4c049362", "subject": "nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89668", "commit_url": "https://git.kernel.org/stable/c/2c390c8a1764d67095fe444401861fac4c049362" }, { "cve": "CVE-2026-89669", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "129643893b79f8a3c6b72045f933fbab5ee424ca", "subject": "nfsd: initialize copy-notify stateid before publishing it", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89669", "commit_url": "https://git.kernel.org/stable/c/129643893b79f8a3c6b72045f933fbab5ee424ca" }, { "cve": "CVE-2026-89670", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "58884694978a3d7d111edb433d7fd6a6c5af2f34", "subject": "nfsd: hold rcu across localio cmpxchg retry", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89670", "commit_url": "https://git.kernel.org/stable/c/58884694978a3d7d111edb433d7fd6a6c5af2f34" }, { "cve": "CVE-2026-89671", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "453d7198a0ab07a12d46e0575861ac7b932da17e", "subject": "nfsd: gate nfs3 setacl by argp->mask", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89671", "commit_url": "https://git.kernel.org/stable/c/453d7198a0ab07a12d46e0575861ac7b932da17e" }, { "cve": "CVE-2026-89672", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "a3a7e20ed66d3f04d37883c398da8a113b430769", "subject": "nfsd: gate nfs2 setacl by argp->mask", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89672", "commit_url": "https://git.kernel.org/stable/c/a3a7e20ed66d3f04d37883c398da8a113b430769" }, { "cve": "CVE-2026-89673", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "8b989aaec85e1293a871d602590c951fe44b8647", "subject": "nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89673", "commit_url": "https://git.kernel.org/stable/c/8b989aaec85e1293a871d602590c951fe44b8647" }, { "cve": "CVE-2026-89674", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "f9868174af49d207fbaf0c5e055d088a983684af", "subject": "nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89674", "commit_url": "https://git.kernel.org/stable/c/f9868174af49d207fbaf0c5e055d088a983684af" }, { "cve": "CVE-2026-89675", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "62c0f6eaf050bb9284c1f9cac6ed1770092e6b95", "subject": "nfsd: fix UAF in async copy cancel and shutdown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89675", "commit_url": "https://git.kernel.org/stable/c/62c0f6eaf050bb9284c1f9cac6ed1770092e6b95" }, { "cve": "CVE-2026-89676", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "d0beaee498e11880e72826026db0e9c9890fc114", "subject": "nfsd: fix stale s2s_cp_stateids IDR entry for async COPY", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89676", "commit_url": "https://git.kernel.org/stable/c/d0beaee498e11880e72826026db0e9c9890fc114" }, { "cve": "CVE-2026-89677", "author_name": "NeilBrown", "author_email": "neil@brown.name", "fix_sha": "3e2c79360c6a89975ec5b5a7d4ef937e4db91a27", "subject": "nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89677", "commit_url": "https://git.kernel.org/stable/c/3e2c79360c6a89975ec5b5a7d4ef937e4db91a27" }, { "cve": "CVE-2026-89678", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "250ec14932d5cfe102f68a57892bb566eee7f83e", "subject": "nfsd: fix partial-write detection in nfsd_direct_write", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89678", "commit_url": "https://git.kernel.org/stable/c/250ec14932d5cfe102f68a57892bb566eee7f83e" }, { "cve": "CVE-2026-89679", "author_name": "Nikol Kuklev", "author_email": "nikolk202@gmail.com", "fix_sha": "fe456c8c0931bb3e8a03d429920e87fd85747fba", "subject": "nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89679", "commit_url": "https://git.kernel.org/stable/c/fe456c8c0931bb3e8a03d429920e87fd85747fba" }, { "cve": "CVE-2026-89680", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "88a76145451d703eedd867b5989bf73d17340399", "subject": "nfsd: fix nfsd_file leak on inter-server COPY setup failure", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89680", "commit_url": "https://git.kernel.org/stable/c/88a76145451d703eedd867b5989bf73d17340399" }, { "cve": "CVE-2026-89681", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "8580571227451384399b3fa53fcde19848c48e5a", "subject": "nfsd: fix layout fence worker double-reference race", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89681", "commit_url": "https://git.kernel.org/stable/c/8580571227451384399b3fa53fcde19848c48e5a" }, { "cve": "CVE-2026-89682", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "bbf13732f74351d21c5e0e8dd9bd8e1c48dc35d4", "subject": "nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89682", "commit_url": "https://git.kernel.org/stable/c/bbf13732f74351d21c5e0e8dd9bd8e1c48dc35d4" }, { "cve": "CVE-2026-89683", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a", "subject": "nfsd: fix dentry ref leak on V4ROOT export filehandle lookup", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89683", "commit_url": "https://git.kernel.org/stable/c/6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a" }, { "cve": "CVE-2026-89684", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "be3a5c1d857b0dcbc11796cea603ef25834f75b2", "subject": "nfsd: fix cpntf publish race in nfs4_init_cp_state", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89684", "commit_url": "https://git.kernel.org/stable/c/be3a5c1d857b0dcbc11796cea603ef25834f75b2" }, { "cve": "CVE-2026-89685", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "09ea3eb9a518565f5bca386e81b993ed8825f5e8", "subject": "nfsd: fix clock domain mismatch in clients_still_reclaiming()", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89685", "commit_url": "https://git.kernel.org/stable/c/09ea3eb9a518565f5bca386e81b993ed8825f5e8" }, { "cve": "CVE-2026-89686", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "ca94ba36172046be6a694a7986f6931e47ed4d51", "subject": "nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89686", "commit_url": "https://git.kernel.org/stable/c/ca94ba36172046be6a694a7986f6931e47ed4d51" }, { "cve": "CVE-2026-89687", "author_name": "NeilBrown", "author_email": "neil@brown.name", "fix_sha": "5859cc01fee06a2cd7458905a9593082fbab06e1", "subject": "nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89687", "commit_url": "https://git.kernel.org/stable/c/5859cc01fee06a2cd7458905a9593082fbab06e1" }, { "cve": "CVE-2026-89688", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "5e4627d3513e60accfce9d5f4c7fa95251ef93d6", "subject": "nfsd: drop the stateid, not the stateowner, on seqid_op replay retry", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89688", "commit_url": "https://git.kernel.org/stable/c/5e4627d3513e60accfce9d5f4c7fa95251ef93d6" }, { "cve": "CVE-2026-89689", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "f5d22e372f4ac3eb287037a488c29691d52a6330", "subject": "nfsd: don't free session slots that are still in use", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89689", "commit_url": "https://git.kernel.org/stable/c/f5d22e372f4ac3eb287037a488c29691d52a6330" }, { "cve": "CVE-2026-89690", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "fca26a3fc19ed02278aa2a150af82d43db0302cb", "subject": "nfsd: defer vfree of compound ops to fix rpc_status UAF", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89690", "commit_url": "https://git.kernel.org/stable/c/fca26a3fc19ed02278aa2a150af82d43db0302cb" }, { "cve": "CVE-2026-89691", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "ae4c38555e81563b8dc5eae55ffd70f0ea97aa5a", "subject": "nfsd: clear opcnt on compound arg release to prevent OOB read", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89691", "commit_url": "https://git.kernel.org/stable/c/ae4c38555e81563b8dc5eae55ffd70f0ea97aa5a" }, { "cve": "CVE-2026-89692", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "b036727d334b1b7cd4c1f1fba3b59ba93a6bbe96", "subject": "nfsd: clear CALLBACK_RUNNING on failed delegation recall queue", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89692", "commit_url": "https://git.kernel.org/stable/c/b036727d334b1b7cd4c1f1fba3b59ba93a6bbe96" }, { "cve": "CVE-2026-89693", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "2c7912732184773dbd371a411da87af1cc080b86", "subject": "nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89693", "commit_url": "https://git.kernel.org/stable/c/2c7912732184773dbd371a411da87af1cc080b86" }, { "cve": "CVE-2026-89694", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "6bdbfab96e0cf25e5f57dac5c09dc1749751a4bf", "subject": "nfsd: check client ownership when cancelling a copy-notify stateid", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89694", "commit_url": "https://git.kernel.org/stable/c/6bdbfab96e0cf25e5f57dac5c09dc1749751a4bf" }, { "cve": "CVE-2026-89695", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "4bc1108e876153a2dd6d874052b99182c3603135", "subject": "nfsd: cap decoded POSIX ACL count to bound sort cost", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89695", "commit_url": "https://git.kernel.org/stable/c/4bc1108e876153a2dd6d874052b99182c3603135" }, { "cve": "CVE-2026-89696", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "c59738a00aa51b16adc1b5ceb7c80877168efb4d", "subject": "nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89696", "commit_url": "https://git.kernel.org/stable/c/c59738a00aa51b16adc1b5ceb7c80877168efb4d" }, { "cve": "CVE-2026-89697", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "4e475be769aa9f7a2c1ce55a2b8592cfccacddcc", "subject": "nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89697", "commit_url": "https://git.kernel.org/stable/c/4e475be769aa9f7a2c1ce55a2b8592cfccacddcc" }, { "cve": "CVE-2026-89698", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "a99d720ed2a5258564e5e9d5f39f3184a030d354", "subject": "nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89698", "commit_url": "https://git.kernel.org/stable/c/a99d720ed2a5258564e5e9d5f39f3184a030d354" }, { "cve": "CVE-2026-89699", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "041f57056e5fb9c80adc088269322d2c61074406", "subject": "nfsd: validate symlink target length in NFSv4 CREATE", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89699", "commit_url": "https://git.kernel.org/stable/c/041f57056e5fb9c80adc088269322d2c61074406" }, { "cve": "CVE-2026-89700", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "bdcc85c2b05a9378d8bd2d65f9fc41440a3cf464", "subject": "nfsd: validate sockaddr length per family in listener_set", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89700", "commit_url": "https://git.kernel.org/stable/c/bdcc85c2b05a9378d8bd2d65f9fc41440a3cf464" }, { "cve": "CVE-2026-89701", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "0f4a767340fad392bd656115b8752005518c9065", "subject": "nfsd: validate nseconds in TIME_DELEG decode paths", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89701", "commit_url": "https://git.kernel.org/stable/c/0f4a767340fad392bd656115b8752005518c9065" }, { "cve": "CVE-2026-89702", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "71d068490098b1d23c63b2345e40675d3a1ca763", "subject": "nfsd: size fh_verify server sockaddr slot by xpt_locallen", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89702", "commit_url": "https://git.kernel.org/stable/c/71d068490098b1d23c63b2345e40675d3a1ca763" }, { "cve": "CVE-2026-89703", "author_name": "Zhenghang Xiao", "author_email": "kipreyyy@gmail.com", "fix_sha": "650d370cfbc66a96dd14d517bd704689b5bda4e5", "subject": "nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89703", "commit_url": "https://git.kernel.org/stable/c/650d370cfbc66a96dd14d517bd704689b5bda4e5" }, { "cve": "CVE-2026-89704", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "20a67a7d18221af736f124770c2c5e859b479046", "subject": "nfsd: sample writeback error cursor before async COPY loop", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89704", "commit_url": "https://git.kernel.org/stable/c/20a67a7d18221af736f124770c2c5e859b479046" }, { "cve": "CVE-2026-89705", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "f6045886fe3f14f269f683d64021b004a50d0efa", "subject": "nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89705", "commit_url": "https://git.kernel.org/stable/c/f6045886fe3f14f269f683d64021b004a50d0efa" }, { "cve": "CVE-2026-89706", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "f5cb2276954cb80987a93ef9f9dfbfdbfc0f10b9", "subject": "nfsd: Reset write verifier when async COPY writeback fails", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89706", "commit_url": "https://git.kernel.org/stable/c/f5cb2276954cb80987a93ef9f9dfbfdbfc0f10b9" }, { "cve": "CVE-2026-89707", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "6cba08dc1922140d260cfeb30bbda4ee1bf869d8", "subject": "nfsd: release path refs on follow_down() error", "cvss_score": 7.5, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89707", "commit_url": "https://git.kernel.org/stable/c/6cba08dc1922140d260cfeb30bbda4ee1bf869d8" }, { "cve": "CVE-2026-89708", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "01c5d5f58a5db9b0ee5afba2e49d3157788687b2", "subject": "nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89708", "commit_url": "https://git.kernel.org/stable/c/01c5d5f58a5db9b0ee5afba2e49d3157788687b2" }, { "cve": "CVE-2026-89709", "author_name": "Jeff Layton", "author_email": "jlayton@kernel.org", "fix_sha": "641e5e20852359b8c31149be4598884e30652f60", "subject": "lockd, nfsd: RCU-protect nlmsvc_ops dispatch", "cvss_score": 8.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89709", "commit_url": "https://git.kernel.org/stable/c/641e5e20852359b8c31149be4598884e30652f60" }, { "cve": "CVE-2026-89710", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "ee5a386cfe60f3f8286de16a9db8e1a08f0bc124", "subject": "NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89710", "commit_url": "https://git.kernel.org/stable/c/ee5a386cfe60f3f8286de16a9db8e1a08f0bc124" }, { "cve": "CVE-2026-89711", "author_name": "Mike Snitzer", "author_email": "snitzer@kernel.org", "fix_sha": "aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e", "subject": "NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check", "cvss_score": 8.2, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89711", "commit_url": "https://git.kernel.org/stable/c/aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e" }, { "cve": "CVE-2026-89712", "author_name": "Michael Bommarito", "author_email": "michael.bommarito@gmail.com", "fix_sha": "036c1b182f4da65363e79ec0ac276edc6b7296e5", "subject": "NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock", "cvss_score": 9.8, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89712", "commit_url": "https://git.kernel.org/stable/c/036c1b182f4da65363e79ec0ac276edc6b7296e5" }, { "cve": "CVE-2026-89713", "author_name": "Chuck Lever", "author_email": "chuck.lever@oracle.com", "fix_sha": "b778e0e0a16759f22a70579c3cf8d254a40d4a7f", "subject": "NFSD: check truncate permission under inode lock", "cvss_score": 9.1, "cvss_severity": "CRITICAL", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89713", "commit_url": "https://git.kernel.org/stable/c/b778e0e0a16759f22a70579c3cf8d254a40d4a7f" }, { "cve": "CVE-2026-89714", "author_name": "Nate Prodromou", "author_email": "nate@prodromou.com", "fix_sha": "2092f5b38f88be306140c77aeeeb43fc1adacacc", "subject": "NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89714", "commit_url": "https://git.kernel.org/stable/c/2092f5b38f88be306140c77aeeeb43fc1adacacc" }, { "cve": "CVE-2026-89715", "author_name": "Chris Mason", "author_email": "clm@meta.com", "fix_sha": "ca018c19e0ba38975e5ddc3ef8117d5b734313aa", "subject": "NFS/localio: fix ref leak on nfs_uuid_add_file failure", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89715", "commit_url": "https://git.kernel.org/stable/c/ca018c19e0ba38975e5ddc3ef8117d5b734313aa" }, { "cve": "CVE-2026-89716", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "ec7607ac4717ff521c9c1e9d8271c26293345513", "subject": "zram: validate deflate params", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89716", "commit_url": "https://git.kernel.org/stable/c/ec7607ac4717ff521c9c1e9d8271c26293345513" }, { "cve": "CVE-2026-89717", "author_name": "Sergey Senozhatsky", "author_email": "senozhatsky@chromium.org", "fix_sha": "dde75313eed0b014c437f48dd75c0308b592cbf9", "subject": "zram: set default primary compressor in zram_destroy_comps()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89717", "commit_url": "https://git.kernel.org/stable/c/dde75313eed0b014c437f48dd75c0308b592cbf9" }, { "cve": "CVE-2026-89718", "author_name": "Longlong Xia", "author_email": "xialonglong@kylinos.cn", "fix_sha": "894913e2d35c46ff19a77530907771ae57862b96", "subject": "zram: fix out-of-bounds access in writeback_store()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89718", "commit_url": "https://git.kernel.org/stable/c/894913e2d35c46ff19a77530907771ae57862b96" }, { "cve": "CVE-2026-89719", "author_name": "Longlong Xia", "author_email": "xialonglong@kylinos.cn", "fix_sha": "391f057f44a51cc9418da5cba78b014324174264", "subject": "zram: fix out-of-bounds access in read_block_state()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89719", "commit_url": "https://git.kernel.org/stable/c/391f057f44a51cc9418da5cba78b014324174264" }, { "cve": "CVE-2026-89720", "author_name": "Ibrahim Hashimov", "author_email": "security@auditcode.ai", "fix_sha": "95d27c1708bb6e8823c8e7c623f9abc2a91bf4bf", "subject": "ubifs: fix out-of-bounds read in signature length check", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89720", "commit_url": "https://git.kernel.org/stable/c/95d27c1708bb6e8823c8e7c623f9abc2a91bf4bf" }, { "cve": "CVE-2026-89721", "author_name": "Jason Yang", "author_email": "jason98166@gmail.com", "fix_sha": "4486e75ba647bd8b98fc1f053101b40caceeed4b", "subject": "phy: rockchip-samsung-dcphy: fix out-of-range max_register", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89721", "commit_url": "https://git.kernel.org/stable/c/4486e75ba647bd8b98fc1f053101b40caceeed4b" }, { "cve": "CVE-2026-89722", "author_name": "Krzysztof Wilczy\u0144ski", "author_email": "kwilczynski@kernel.org", "fix_sha": "dc76258d0132df1d831a5a29758bd448ca9c566e", "subject": "PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89722", "commit_url": "https://git.kernel.org/stable/c/dc76258d0132df1d831a5a29758bd448ca9c566e" }, { "cve": "CVE-2026-89723", "author_name": "Ryusuke Konishi", "author_email": "konishi.ryusuke@gmail.com", "fix_sha": "45662dedb8f272ef7f16e69f13424c4bd0399240", "subject": "nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89723", "commit_url": "https://git.kernel.org/stable/c/45662dedb8f272ef7f16e69f13424c4bd0399240" }, { "cve": "CVE-2026-89724", "author_name": "Junrui Luo", "author_email": "moonafterrain@outlook.com", "fix_sha": "cf4500ebf6fb57bf4ab83c3dd349a40257dbe2a9", "subject": "media: vicodec: fix out-of-bounds write in FWHT encoder", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89724", "commit_url": "https://git.kernel.org/stable/c/cf4500ebf6fb57bf4ab83c3dd349a40257dbe2a9" }, { "cve": "CVE-2026-89725", "author_name": "Weigang He", "author_email": "geoffreyhe2@gmail.com", "fix_sha": "fb9dda38d4b9e90db07ed9a0ee2d35bf85494035", "subject": "media: cec: stm32: prevent out-of-bounds write on RX overflow", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89725", "commit_url": "https://git.kernel.org/stable/c/fb9dda38d4b9e90db07ed9a0ee2d35bf85494035" }, { "cve": "CVE-2026-89726", "author_name": "Vincent Mailhol", "author_email": "mailhol@kernel.org", "fix_sha": "cec0d03fe785380540dc1b4d07c80f67ae2ffc78", "subject": "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89726", "commit_url": "https://git.kernel.org/stable/c/cec0d03fe785380540dc1b4d07c80f67ae2ffc78" }, { "cve": "CVE-2026-89727", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "c6d9c8ac6521d3049ec90ac58bebd23ed03ac496", "subject": "KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89727", "commit_url": "https://git.kernel.org/stable/c/c6d9c8ac6521d3049ec90ac58bebd23ed03ac496" }, { "cve": "CVE-2026-89728", "author_name": "Claudiu Beznea", "author_email": "claudiu.beznea.uj@bp.renesas.com", "fix_sha": "50dec95c9d1f1f82819bc898ef2b60fa83fd4ccd", "subject": "i3c: renesas: Fix out-of-bounds access for newdevs mask", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89728", "commit_url": "https://git.kernel.org/stable/c/50dec95c9d1f1f82819bc898ef2b60fa83fd4ccd" }, { "cve": "CVE-2026-89729", "author_name": "Xingrui Li", "author_email": "baka9@bakabaka9.tech", "fix_sha": "c92693f3ed099401d0383ef35ca1fe1e6ba033de", "subject": "HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature", "cvss_score": 8.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89729", "commit_url": "https://git.kernel.org/stable/c/c92693f3ed099401d0383ef35ca1fe1e6ba033de" }, { "cve": "CVE-2026-89730", "author_name": "Daisuke Matsuda", "author_email": "matsuda@preferred.jp", "fix_sha": "9da70a43b5fea60d758137f7f0ccfe19356cb5bb", "subject": "fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89730", "commit_url": "https://git.kernel.org/stable/c/9da70a43b5fea60d758137f7f0ccfe19356cb5bb" }, { "cve": "CVE-2026-89731", "author_name": "Terry Bowman", "author_email": "terry.bowman@amd.com", "fix_sha": "29458e62d0829cbc99435f3e44fd560f9bbf1da7", "subject": "cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read", "cvss_score": 7.1, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89731", "commit_url": "https://git.kernel.org/stable/c/29458e62d0829cbc99435f3e44fd560f9bbf1da7" }, { "cve": "CVE-2026-89732", "author_name": "Neill Kapron", "author_email": "nkapron@google.com", "fix_sha": "569dd7e5dcffe1e1c6b26ca2cd3be57eb433e082", "subject": "usb: gadget: f_fs: Prevent deadlock during ep0 read loop", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89732", "commit_url": "https://git.kernel.org/stable/c/569dd7e5dcffe1e1c6b26ca2cd3be57eb433e082" }, { "cve": "CVE-2026-89733", "author_name": "Jeffin Philip", "author_email": "jeffinphilip14@gmail.com", "fix_sha": "bdab5605259ba5d6ff927c1a85cc83eb3ecfdacc", "subject": "usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89733", "commit_url": "https://git.kernel.org/stable/c/bdab5605259ba5d6ff927c1a85cc83eb3ecfdacc" }, { "cve": "CVE-2026-89734", "author_name": "Jeffin Philip", "author_email": "jeffinphilip14@gmail.com", "fix_sha": "5b1da38592efdc1a263d4c0353298cba19e9d6fc", "subject": "usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89734", "commit_url": "https://git.kernel.org/stable/c/5b1da38592efdc1a263d4c0353298cba19e9d6fc" }, { "cve": "CVE-2026-89735", "author_name": "Joshua Crofts", "author_email": "joshua.crofts1@gmail.com", "fix_sha": "0f6bffb5008f0cba9cad5ded2caccc64466a6e54", "subject": "usb: gadget: midi2: remove default configfs groups on teardown", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89735", "commit_url": "https://git.kernel.org/stable/c/0f6bffb5008f0cba9cad5ded2caccc64466a6e54" }, { "cve": "CVE-2026-89736", "author_name": "Sonali Pradhan", "author_email": "sonalipradhan@google.com", "fix_sha": "858965947081d10d41d9a1010a540d3d5eea958b", "subject": "usb: gadget: u_audio: Fix use-after-free on sound card disconnect", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89736", "commit_url": "https://git.kernel.org/stable/c/858965947081d10d41d9a1010a540d3d5eea958b" }, { "cve": "CVE-2026-89737", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "92090f6ff2acc81e9dd99881dcfb4f8c1bdaabd3", "subject": "usb: typec: thunderbolt: Disable work before freeing tbt on remove", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89737", "commit_url": "https://git.kernel.org/stable/c/92090f6ff2acc81e9dd99881dcfb4f8c1bdaabd3" }, { "cve": "CVE-2026-89738", "author_name": "Fan Wu", "author_email": "fanwu01@zju.edu.cn", "fix_sha": "c27d13ce4bab80fbdf6523928071b6c24b37606c", "subject": "usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89738", "commit_url": "https://git.kernel.org/stable/c/c27d13ce4bab80fbdf6523928071b6c24b37606c" }, { "cve": "CVE-2026-89739", "author_name": "Pei Xiao", "author_email": "xiaopei01@kylinos.cn", "fix_sha": "9c855832790cd488d87de1885974f4c37cfe7358", "subject": "usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89739", "commit_url": "https://git.kernel.org/stable/c/9c855832790cd488d87de1885974f4c37cfe7358" }, { "cve": "CVE-2026-89740", "author_name": "Karl Mehltretter", "author_email": "kmehltretter@gmail.com", "fix_sha": "8b0b29fdcb47907ae0296b8fe829e918e05e300f", "subject": "serial: imx: serialize imx_uart_ports[] lifetime", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89740", "commit_url": "https://git.kernel.org/stable/c/8b0b29fdcb47907ae0296b8fe829e918e05e300f" }, { "cve": "CVE-2026-89741", "author_name": "Hans Verkuil", "author_email": "hverkuil+cisco@kernel.org", "fix_sha": "e7600f5cee5de14065f950807931d6e6d40fb2d7", "subject": "Revert \"media: v4l2-dev: fix error handling in __video_register_device()\"", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89741", "commit_url": "https://git.kernel.org/stable/c/e7600f5cee5de14065f950807931d6e6d40fb2d7" }, { "cve": "CVE-2026-89742", "author_name": "James Kim", "author_email": "james010kim@gmail.com", "fix_sha": "5cbef379a94b161726c5f504598bf4791d45cedc", "subject": "rapidio: mport_cdev: fix use-after-free in dma_req_free()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89742", "commit_url": "https://git.kernel.org/stable/c/5cbef379a94b161726c5f504598bf4791d45cedc" }, { "cve": "CVE-2026-89743", "author_name": "Bryam Vargas", "author_email": "hexlabsecurity@proton.me", "fix_sha": "808e530654a5354e6df78863a5d61e4d44e67235", "subject": "misc: nsm: bound the device-reported response length", "cvss_score": 7.7, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89743", "commit_url": "https://git.kernel.org/stable/c/808e530654a5354e6df78863a5d61e4d44e67235" }, { "cve": "CVE-2026-89744", "author_name": "Xu Yang", "author_email": "xu.yang_2@nxp.com", "fix_sha": "1900692555826753adab8799a1a8d50bb1ee200c", "subject": "device property: fix infinite loop in fwnode_for_each_child_node()", "cvss_score": 8.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89744", "commit_url": "https://git.kernel.org/stable/c/1900692555826753adab8799a1a8d50bb1ee200c" }, { "cve": "CVE-2026-89745", "author_name": "Chun-Yi Lee", "author_email": "jlee@suse.com", "fix_sha": "f81808de37338aac8e167f99bfae647b1b835c70", "subject": "debugfs: Fix lockdown check for mmap_prepare", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89745", "commit_url": "https://git.kernel.org/stable/c/f81808de37338aac8e167f99bfae647b1b835c70" }, { "cve": "CVE-2026-89746", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "a7318172aa332a161fb9618286e64454c827f8fd", "subject": "tracing: Fix use-after-free with same-name named triggers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89746", "commit_url": "https://git.kernel.org/stable/c/a7318172aa332a161fb9618286e64454c827f8fd" }, { "cve": "CVE-2026-89747", "author_name": "Deepanshu Kartikey", "author_email": "kartikey406@gmail.com", "fix_sha": "372f8534244d632ad5118e8a87a11291b01712d3", "subject": "tracing: Fix use-after-free in trace_pipe read on sub-buffer order change", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89747", "commit_url": "https://git.kernel.org/stable/c/372f8534244d632ad5118e8a87a11291b01712d3" }, { "cve": "CVE-2026-89748", "author_name": "Ivan Immanuel Shaji", "author_email": "ivanimmanuel1234@gmail.com", "fix_sha": "e0d3aed7b12cf37b74c7cc5265073d0263b49cde", "subject": "tracing: Fix retry exhaustion in simple ring buffer reader swap", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89748", "commit_url": "https://git.kernel.org/stable/c/e0d3aed7b12cf37b74c7cc5265073d0263b49cde" }, { "cve": "CVE-2026-89749", "author_name": "Hui Su", "author_email": "sh_def@163.com", "fix_sha": "649bc7df3e5d7be6f7996a95084037dbf3cad1e5", "subject": "tracing: Fix crash passing ERR_PTR to kthread_stop()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89749", "commit_url": "https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5" }, { "cve": "CVE-2026-89750", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "390f6bd8583d177029d9df4bea6667509e55a765", "subject": "tracing/user_events: Clear copied tracing state before fork duplication", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89750", "commit_url": "https://git.kernel.org/stable/c/390f6bd8583d177029d9df4bea6667509e55a765" }, { "cve": "CVE-2026-89751", "author_name": "Kiryl Shutsemau (Meta)", "author_email": "kas@kernel.org", "fix_sha": "0f63e656b1c679d32ac595de29d10c03efca6a25", "subject": "x86/tdx: Fix off-by-one in port I/O handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89751", "commit_url": "https://git.kernel.org/stable/c/0f63e656b1c679d32ac595de29d10c03efca6a25" }, { "cve": "CVE-2026-89752", "author_name": "Guopeng Zhang", "author_email": "zhangguopeng@kylinos.cn", "fix_sha": "9477820c63cbf4d97114238f3d1ff10dfd6bee3f", "subject": "mm: memcg: stop reclaim when a limit update is superseded", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89752", "commit_url": "https://git.kernel.org/stable/c/9477820c63cbf4d97114238f3d1ff10dfd6bee3f" }, { "cve": "CVE-2026-89753", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "25f52e81216884a7444bf07a606691feb09a94e3", "subject": "mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89753", "commit_url": "https://git.kernel.org/stable/c/25f52e81216884a7444bf07a606691feb09a94e3" }, { "cve": "CVE-2026-89754", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "aedf2efd18977e0cef7eb963166e2b1fcc0aa321", "subject": "mm/pagewalk: fix stale walk->action escaping walk_pmd_range()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89754", "commit_url": "https://git.kernel.org/stable/c/aedf2efd18977e0cef7eb963166e2b1fcc0aa321" }, { "cve": "CVE-2026-89755", "author_name": "Arvind Yadav", "author_email": "arvind.yadav@intel.com", "fix_sha": "34a00895d032a414830d41106a09329ae6c251b6", "subject": "mm/migrate_device: clear stale mapping after freeing swapcache", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89755", "commit_url": "https://git.kernel.org/stable/c/34a00895d032a414830d41106a09329ae6c251b6" }, { "cve": "CVE-2026-89756", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "efe8f86c0916f0f74eea74ae21a3b37f728c6bad", "subject": "mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89756", "commit_url": "https://git.kernel.org/stable/c/efe8f86c0916f0f74eea74ae21a3b37f728c6bad" }, { "cve": "CVE-2026-89757", "author_name": "Kairui Song", "author_email": "kasong@tencent.com", "fix_sha": "f7e698e326b239a91ea15844817551921209e826", "subject": "mm/mglru: fix and remove redundant unevictable folio handling", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89757", "commit_url": "https://git.kernel.org/stable/c/f7e698e326b239a91ea15844817551921209e826" }, { "cve": "CVE-2026-89758", "author_name": "Usama Arif", "author_email": "usama.arif@linux.dev", "fix_sha": "2858b4027f491e6fdb8ee2d8923798b619bf2791", "subject": "mm/mempolicy: skip non-present PMDs when queueing folios", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89758", "commit_url": "https://git.kernel.org/stable/c/2858b4027f491e6fdb8ee2d8923798b619bf2791" }, { "cve": "CVE-2026-89759", "author_name": "Breno Leitao", "author_email": "leitao@debian.org", "fix_sha": "5d10d4e19e6daa487f0cd0ea6cba472325de92f9", "subject": "mm/kmemleak: avoid soft lockup when scanning task stacks", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89759", "commit_url": "https://git.kernel.org/stable/c/5d10d4e19e6daa487f0cd0ea6cba472325de92f9" }, { "cve": "CVE-2026-89760", "author_name": "Youngjun Park", "author_email": "youngjun.park@lge.com", "fix_sha": "10d9012e83efedde8718ceaa5053f836e0c8596c", "subject": "mm, swap: don't free a hibernation slot that is in the swap cache", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89760", "commit_url": "https://git.kernel.org/stable/c/10d9012e83efedde8718ceaa5053f836e0c8596c" }, { "cve": "CVE-2026-89761", "author_name": "Hyunwoo Kim", "author_email": "imv4bel@gmail.com", "fix_sha": "9f1e40193eef7f047e6b77cfb4b4cafdecd7a123", "subject": "apparmor: fix out-of-bounds write when null terminating a label vec", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89761", "commit_url": "https://git.kernel.org/stable/c/9f1e40193eef7f047e6b77cfb4b4cafdecd7a123" }, { "cve": "CVE-2026-89762", "author_name": "Jann Horn", "author_email": "jannh@google.com", "fix_sha": "3f4ae5fab613dca01d6a2a8210dd832e009fcf47", "subject": "apparmor: fix cred UAF caused by begin_current_label_crit_section()", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89762", "commit_url": "https://git.kernel.org/stable/c/3f4ae5fab613dca01d6a2a8210dd832e009fcf47" }, { "cve": "CVE-2026-89763", "author_name": "Chengfeng Ye", "author_email": "nicoyip.dev@gmail.com", "fix_sha": "5e2d672280d97d83de43031d93761b12dadd7b8a", "subject": "KEYS: trusted: Fix TPM teardown ordering", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89763", "commit_url": "https://git.kernel.org/stable/c/5e2d672280d97d83de43031d93761b12dadd7b8a" }, { "cve": "CVE-2026-89764", "author_name": "Danilo Krummrich", "author_email": "dakr@kernel.org", "fix_sha": "acc516dfa1972d31836b50abc0115216cd0fccc5", "subject": "rust: devres: fix race between concurrent revokers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89764", "commit_url": "https://git.kernel.org/stable/c/acc516dfa1972d31836b50abc0115216cd0fccc5" }, { "cve": "CVE-2026-89765", "author_name": "J\u00e9r\u00e9my Jean", "author_email": "jeremy.jean@oss.cyber.gouv.fr", "fix_sha": "18c7d85864e554adc8fad1e8d2e9d2cb6c3911c8", "subject": "timers/itimer: Zero-init old itimerval before copy to userspace", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89765", "commit_url": "https://git.kernel.org/stable/c/18c7d85864e554adc8fad1e8d2e9d2cb6c3911c8" }, { "cve": "CVE-2026-89766", "author_name": "Chen Linxuan", "author_email": "me@black-desk.cn", "fix_sha": "9688a46802939da28f00cb40e8129615d5d4af39", "subject": "pidfd: hold exec_update_lock around namespace ioctl", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89766", "commit_url": "https://git.kernel.org/stable/c/9688a46802939da28f00cb40e8129615d5d4af39" }, { "cve": "CVE-2026-89767", "author_name": "Vivek Parikh", "author_email": "vivek.parikh@breachx.ai", "fix_sha": "077ab8985ee278c3d8618182d335b0f0cd919e16", "subject": "ovl: fix double end_creating() on the casefold-mismatch path", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89767", "commit_url": "https://git.kernel.org/stable/c/077ab8985ee278c3d8618182d335b0f0cd919e16" }, { "cve": "CVE-2026-89768", "author_name": "Baokun Li", "author_email": "libaokun@linux.alibaba.com", "fix_sha": "f2381b546e7e6a35c9fcee0d0ccb6c042a9aeb5d", "subject": "fs: fix user path of nested backing files", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89768", "commit_url": "https://git.kernel.org/stable/c/f2381b546e7e6a35c9fcee0d0ccb6c042a9aeb5d" }, { "cve": "CVE-2026-89769", "author_name": "WenTao Liang", "author_email": "vulab@iscas.ac.cn", "fix_sha": "05520e035f8332c8e33f3011b5ca016fde61793d", "subject": "clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path", "cvss_score": 7.4, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89769", "commit_url": "https://git.kernel.org/stable/c/05520e035f8332c8e33f3011b5ca016fde61793d" }, { "cve": "CVE-2026-89770", "author_name": "Christoph Hellwig", "author_email": "hch@lst.de", "fix_sha": "8a8685b32c0718cc7b2cb4d6202e5a5b8e0a8e2d", "subject": "iomap: don't free integrity payload that doesn't exist", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89770", "commit_url": "https://git.kernel.org/stable/c/8a8685b32c0718cc7b2cb4d6202e5a5b8e0a8e2d" }, { "cve": "CVE-2026-89771", "author_name": "Vincent Donnefort", "author_email": "vdonnefort@google.com", "fix_sha": "8a5f63637890f03177146efddaba5ec7a1b4d61f", "subject": "ring-buffer: Fix subbuf resize race with ring buffer readers", "cvss_score": 7.8, "cvss_severity": "HIGH", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89771", "commit_url": "https://git.kernel.org/stable/c/8a5f63637890f03177146efddaba5ec7a1b4d61f" }, { "cve": "CVE-2026-89772", "author_name": "Boris Burkov", "author_email": "boris@bur.io", "fix_sha": "5376c9db45368eb210b4d71104ac00a59dc8b6e0", "subject": "btrfs: write-protect folios during data writeback", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89772", "commit_url": "https://git.kernel.org/stable/c/5376c9db45368eb210b4d71104ac00a59dc8b6e0" }, { "cve": "CVE-2026-89773", "author_name": "Fangzhi Zuo", "author_email": "jerry.zuo@amd.com", "fix_sha": "d5164580a99477dcfe15cea101b153b1e63f1535", "subject": "drm/amd/display: Skip Update HDCP Config In Transition State", "cvss_score": "", "cvss_severity": "", "cvss_vector": "", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89773", "commit_url": "https://git.kernel.org/stable/c/d5164580a99477dcfe15cea101b153b1e63f1535" } ] }