Amazon Linux 2023 Security Advisory: ALAS2023-2026-3192
Advisory Released Date: 2026-10-12
Advisory Updated Date: 2026-10-26
FAQs regarding Amazon Linux ALAS/CVE Severity
An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt host kernel memory on KVM-based hypervisors running unpatched Linux kernel versions 4.4 through 6.18. This could result in disclosure of host memory or a denial of service.
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet (CVE-2026-100070)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark bpf_refcount field as unique (CVE-2026-100074)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: xsk: Fix unlocked writing to ICOSQ (CVE-2026-64210)
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (CVE-2026-68289)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject redirect helpers without a bpf_net_context (CVE-2026-68337)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix busy dentry warning on unmount after DIO (CVE-2026-72315)
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix barriering when walking subrequest list (CVE-2026-72355)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mask pseudo pointer values in verifier logs (CVE-2026-72402)
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix err_chunk memory leaks in INIT handling (CVE-2026-72413)
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix writes_pending and barrier reference leaks on discard failures (CVE-2026-72438)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix dev use-after-free in xfrm async resumption (CVE-2026-72463)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Guard __get_user acesss with access_ok for uprobe_multi data (CVE-2026-74258)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). (CVE-2026-74289)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Fix locking when accessing mr->pd (CVE-2026-74334)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount (CVE-2026-74347)
In the Linux kernel, the following vulnerability has been resolved:
fou: Fix use-after-free in fou_create() (CVE-2026-74496)
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: initialise workingset state before folio split (CVE-2026-80729)
In the Linux kernel, the following vulnerability has been resolved:
io_uring/waitid: honor task_work cancellation
io_waitid_cb() may run through the fallback task_work path when
task_work_add() can no longer queue work to the originating task. The
fallback runs from a kworker and io_uring marks such task work as
canceled through tw.cancel.
io_waitid_cb() currently ignores tw.cancel and calls __do_wait().
waitid is task-context dependent: __do_wait() performs child lookup
relative to current, and the retry path also uses
current->signal->wait_chldexit. If the callback runs from the fallback
kworker, current is therefore not the task that submitted the request.
Honor tw.cancel before entering __do_wait(). Complete the request with
-ECANCELED and skip the siginfo copy, since canceled task work may run
without the submitting task's userspace execution context.
Keep the existing siginfo handling for normal waitid completion and
explicit cancellation. (CVE-2026-81010)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes (CVE-2026-89776)
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777)
In the Linux kernel, the following vulnerability has been resolved:
isofs: fix out-of-bounds page array access on empty zisofs block (CVE-2026-89778)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: validate ef->size covers the record's name and value (CVE-2026-89779)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() (CVE-2026-89781)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: reject restart table growth beyond U16_MAX entries (CVE-2026-89782)
In the Linux kernel, the following vulnerability has been resolved:
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full (CVE-2026-89783)
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (CVE-2026-89784)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init (CVE-2026-89785)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix out-of-bounds read in ext4_read_inline_dir() (CVE-2026-89786)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: avoid divide by zero in rt6_multipath_rebalance (CVE-2026-89790)
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix use-after-free when perf mmap() revival races with the last munmap() (CVE-2026-89791)
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/core: avoid infinite kdamond_merge_regions() internal loop (CVE-2026-89796)
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Drop tt->restore after successful restore (CVE-2026-89815)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Remove VM-wide VNCR mapping counter (CVE-2026-89915)
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping (CVE-2026-89917)
In the Linux kernel, the following vulnerability has been resolved:
nvme: skip the zoned limits update if the zone info query failed (CVE-2026-89971)
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: transfer the pmd dirty bit to the folio on zap (CVE-2026-89987)
In the Linux kernel, the following vulnerability has been resolved:
dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds (CVE-2026-89996)
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Take trace_array reference before accessing its ftrace_ops (CVE-2026-90002)
In the Linux kernel, the following vulnerability has been resolved:
tracing: Take trace_array reference when opening options file (CVE-2026-90013)
In the Linux kernel, the following vulnerability has been resolved:
tcp: reject non zerocopy devmem tx (CVE-2026-90051)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_htb: limit htb_classify inner-class filter hops (CVE-2026-90053)
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix corruption of urgent data on multi-segment retransmit (CVE-2026-90054)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (CVE-2026-90058)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: move hardware offload step after building the chain blob (CVE-2026-90062)
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: Ensure that TCP packets don't overflow gso_segs (CVE-2026-90063)
In the Linux kernel, the following vulnerability has been resolved:
libceph: validate banner payload length (CVE-2026-90067)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_teql: restore skb->dev on the slave failure path (CVE-2026-90071)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sfq: clamp quantum to avoid signed overflow soft lockup (CVE-2026-90072)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: hhf: clamp quantum before hhf_change() to avoid overflow (CVE-2026-90073)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fq_codel: clamp default quantum and mtu (CVE-2026-90075)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fq: add overflow bounds to quantum and initial quantum (CVE-2026-90076)
In the Linux kernel, the following vulnerability has been resolved:
net: fix a resource leak in copy_net_ns() error handling path (CVE-2026-90077)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: use wq_has_sleeper() in rds_cong_map_updated() (CVE-2026-90081)
In the Linux kernel, the following vulnerability has been resolved:
xsk: honor XDP_TX_METADATA in zero-copy path (CVE-2026-90086)
In the Linux kernel, the following vulnerability has been resolved:
arm64: process: Fix context switching MTE store-only tag check (CVE-2026-90094)
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (CVE-2026-90097)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pnfs: key the data server cache on the NFS version (CVE-2026-90102)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (CVE-2026-90103)
In the Linux kernel, the following vulnerability has been resolved:
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue (CVE-2026-90109)
In the Linux kernel, the following vulnerability has been resolved:
inetpeer: randomize RB-tree node comparison using SipHash (CVE-2026-90110)
In the Linux kernel, the following vulnerability has been resolved:
netdevsim: update queue NAPI association on queue reset (CVE-2026-90113)
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: Reject descending VLAN tunnel ranges (CVE-2026-90114)
In the Linux kernel, the following vulnerability has been resolved:
xsk: fix NULL pointer dereference in __xsk_rcv() (CVE-2026-90115)
In the Linux kernel, the following vulnerability has been resolved:
virtio_balloon: quiesce balloon work before device shutdown (CVE-2026-90129)
In the Linux kernel, the following vulnerability has been resolved:
vsock: don't check the listener's sk_err in vsock_accept() (CVE-2026-90138)
In the Linux kernel, the following vulnerability has been resolved:
fuse: check for NULL root inode in fuse_fill_super_submount (CVE-2026-90139)
In the Linux kernel, the following vulnerability has been resolved:
cuse: wait for pending RCU callbacks on module exit (CVE-2026-90140)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix integer overflow in ftp helper port/address parsing (CVE-2026-90141)
In the Linux kernel, the following vulnerability has been resolved:
bpf, xdp: move offload check into dev_xdp_install() (CVE-2026-90146)
In the Linux kernel, the following vulnerability has been resolved:
clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() (CVE-2026-90147)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (CVE-2026-90148)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (CVE-2026-90149)
In the Linux kernel, the following vulnerability has been resolved:
pnfs/blocklayout: Fix device leaks on parse failure (CVE-2026-90150)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure (CVE-2026-90151)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject negative optlen in cgroup getsockopt hook (CVE-2026-90157)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks (CVE-2026-90159)
In the Linux kernel, the following vulnerability has been resolved:
lwt_bpf: Restore reserved headroom after xmit program (CVE-2026-90160)
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix interlaced ztailpacking pclusters (CVE-2026-90161)
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Fix core_data leak on CPUs without PTS (CVE-2026-90178)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: serialize configfs attribute updates with device setup (CVE-2026-90184)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: serialize configfs attribute stores with the lock (CVE-2026-90185)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: reject per-device queue resize for shared tag set (CVE-2026-90186)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: free zones array on device power-off (CVE-2026-90187)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: free global tag_set on init error path (CVE-2026-90188)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: register configfs subsystem after creating default devices (CVE-2026-90189)
In the Linux kernel, the following vulnerability has been resolved:
null_blk: use DEFINE_MUTEX for the file-scope mutex (CVE-2026-90190)
In the Linux kernel, the following vulnerability has been resolved:
ACPI: scan: fix bus ID cleanup on device_add() failures (CVE-2026-90194)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: reject out-of-range evcn in mi_enum_attr() (CVE-2026-90199)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: fix integer overflow in MFT cluster validation (CVE-2026-90200)
In the Linux kernel, the following vulnerability has been resolved:
net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race (CVE-2026-90201)
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (CVE-2026-90202)
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check block offset is not negative (CVE-2026-90203)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/cma: Fix WARNING in res_to_rt (CVE-2026-90218)
In the Linux kernel, the following vulnerability has been resolved:
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
In the Linux kernel, the following vulnerability has been resolved:
nvme-pci: release descriptor pools on probe failure (CVE-2026-90233)
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE (CVE-2026-90235)
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush context cache with correct SID when tearing down aliases (CVE-2026-90240)
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Tear down scalable-mode context on probe failure (CVE-2026-90241)
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Clear Present bit before tearing down copied context entry (CVE-2026-90243)
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Restore locking around msi_page_list (CVE-2026-90244)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix mmap_lock leak in irq_work path (CVE-2026-90247)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_api: fix teardown of an adopted proto on insert-race loss (CVE-2026-90248)
In the Linux kernel, the following vulnerability has been resolved:
bpf, cgroup: Fix storage null-ptr-deref after replacing prog (CVE-2026-90250)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (CVE-2026-90259)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: don't clobber the extent buffer when zeroing it out (CVE-2026-90260)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: always wait for ordered extents to avoid OE races (CVE-2026-90264)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: defrag: fix deadlock between defrag and delalloc space reservation (CVE-2026-90265)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject load-acquire from pointers requiring fault protection (CVE-2026-90269)
In the Linux kernel, the following vulnerability has been resolved:
perf: arm_pmuv3: Zero initialize hw_id branch stack field (CVE-2026-90272)
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: don't set array_frozen in raid1_takeover() (CVE-2026-90275)
In the Linux kernel, the following vulnerability has been resolved:
md: wait for behind writes before destroying bitmap (CVE-2026-90278)
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: round bitmap stripes with sector division (CVE-2026-90279)
In the Linux kernel, the following vulnerability has been resolved:
hugetlbfs: release subpool on fill_super failure (CVE-2026-90283)
In the Linux kernel, the following vulnerability has been resolved:
firmware_loader: do not queue completed sysfs fallback requests (CVE-2026-90284)
In the Linux kernel, the following vulnerability has been resolved:
arm64: hibernate: Restore DAIF state on error (CVE-2026-90290)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Check load-acquire src ptr type before the load (CVE-2026-90312)
In the Linux kernel, the following vulnerability has been resolved:
bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed (CVE-2026-90313)
In the Linux kernel, the following vulnerability has been resolved:
fat: release buffer head after rebuilding parent (CVE-2026-90318)
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: skip dying blkg in blkcg_activate_policy()
When switching IO schedulers on a block device, blkcg_activate_policy()
can race with concurrent blkcg deletion, leading to a use-after-free in
rcu_accelerate_cbs.
T1: T2:
blkg_destroy
kill(&blkg->refcnt) // blkg->refcnt=1->0
blkg_release // call_rcu(__blkg_release)
...
blkg_free_workfn
->pd_free_fn(pd)
elv_iosched_store
elevator_switch
...
iterate blkg list
blkg_get(blkg) // blkg->refcnt=0->1
list_del_init(&blkg->q_node)
blkg_put(pinned_blkg) // blkg->refcnt=1->0
blkg_release // call_rcu again
rcu_accelerate_cbs // uaf
Fix this by checking hlist_unhashed(&blkg->blkcg_node) before getting
a reference to the blkg. This is the same check used in blkg_destroy()
to detect if a blkg has already been destroyed. If the blkg is already
unhashed, skip processing it since it's being destroyed. (CVE-2026-90325)
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix race between policy activation and blkg destruction (CVE-2026-90326)
In the Linux kernel, the following vulnerability has been resolved:
HID: synchronize input before cleaning up a failed probe (CVE-2026-90329)
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: replace forgeable discard filler with a keyed sector marker (CVE-2026-90333)
In the Linux kernel, the following vulnerability has been resolved:
tty: clear cdev pointer after cdev_add() failure (CVE-2026-90334)
In the Linux kernel, the following vulnerability has been resolved:
serial: amba-pl011: keep console clock enabled for atomic writes (CVE-2026-90338)
In the Linux kernel, the following vulnerability has been resolved:
bpf, x86: Fix trampoline stack size for 128-bit arguments (CVE-2026-90358)
In the Linux kernel, the following vulnerability has been resolved:
ACPI: processor: Unregister cpufreq notifier on init failure (CVE-2026-90364)
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: create serial pool adding rdev to array with serialize_policy=1 (CVE-2026-90385)
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Check atomic pool allocation result directly (CVE-2026-90388)
In the Linux kernel, the following vulnerability has been resolved:
md: scope memalloc_noio to allocation critical sections (CVE-2026-90389)
In the Linux kernel, the following vulnerability has been resolved:
md/bitmap: resume array on backlog_store() error path (CVE-2026-90390)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix potential UAF when reading bpf link info (CVE-2026-90392)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix potential UAF in bpf_netns_link_update_prog (CVE-2026-90393)
In the Linux kernel, the following vulnerability has been resolved:
block: fix dio leak on metadata mapping error (CVE-2026-90396)
In the Linux kernel, the following vulnerability has been resolved:
md: recheck spare changes before starting sync (CVE-2026-90400)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs (CVE-2026-90416)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path (CVE-2026-90424)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID (CVE-2026-90425)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (CVE-2026-90426)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (CVE-2026-90428)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init (CVE-2026-90429)
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (CVE-2026-90430)
In the Linux kernel, the following vulnerability has been resolved:
isofs: release zisofs block pointer buffer head (CVE-2026-90434)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix integer overflow of user QP buffer size (CVE-2026-90435)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix skb double-free in xfrm_dev_direct_output() (CVE-2026-92489)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix buffer_head leak in ext4_init_orphan_info (CVE-2026-92494)
In the Linux kernel, the following vulnerability has been resolved:
ext4: validate readdir offset before accessing dirent (CVE-2026-92499)
In the Linux kernel, the following vulnerability has been resolved:
ext4: use fsdata to track inline data write state and fix race (CVE-2026-92500)
In the Linux kernel, the following vulnerability has been resolved:
ext4: drain in-flight DIO before buffered write fallback (CVE-2026-92501)
In the Linux kernel, the following vulnerability has been resolved:
ext4: clear stale xarray tags on folios skipped during writeback (CVE-2026-92502)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (CVE-2026-92507)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_free_cq() (CVE-2026-92508)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in counter_release() (CVE-2026-92509)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_srq_user() (CVE-2026-92510)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_cq_user() (CVE-2026-92511)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix use after free in ib_query_qp() (CVE-2026-92512)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Preserve unique-field state across nested structs (CVE-2026-92515)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix offset warn check for bpf_res_spin_lock (CVE-2026-92516)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Zero queue and stack outputs on lock failure (CVE-2026-92520)
In the Linux kernel, the following vulnerability has been resolved:
ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (CVE-2026-92521)
In the Linux kernel, the following vulnerability has been resolved:
ACPI: processor: validate MADT IOAPIC entry bounds (CVE-2026-92522)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: validate dynamic counter attribute length (CVE-2026-92523)
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() (CVE-2026-92524)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject arena frees below the arena base (CVE-2026-93045)
In the Linux kernel, the following vulnerability has been resolved:
software node: Fix software_node_get_reference_args() with index -1 (CVE-2026-93046)
In the Linux kernel, the following vulnerability has been resolved:
mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (CVE-2026-93048)
In the Linux kernel, the following vulnerability has been resolved:
uio: Fix stale info pointer in failed registration path (CVE-2026-93054)
In the Linux kernel, the following vulnerability has been resolved:
UDF symlink pathComponent header OOB read (CVE-2026-93055)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Take cpa_lock around large-page collapse (CVE-2026-93066)
In the Linux kernel, the following vulnerability has been resolved:
dax: read holder_ops once in dax_holder_notify_failure() (CVE-2026-93073)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Drain RCU callbacks during module teardown (CVE-2026-93109)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Wait for RCU callbacks before unloading ib_core (CVE-2026-93110)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Require a BPF cpumask for bpf_cpumask_populate() (CVE-2026-93112)
In the Linux kernel, the following vulnerability has been resolved:
usb: fix UAF when probe runs concurrent to dyn ID removal (CVE-2026-93117)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max (CVE-2026-93125)
In the Linux kernel, the following vulnerability has been resolved:
printk: Fix possible console use-after-free (CVE-2026-93134)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix use-after-free on mm_struct in bpf_find_vma() (CVE-2026-93137)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux (CVE-2026-93138)
In the Linux kernel, the following vulnerability has been resolved:
udf: Mark LVID buffer as uptodate before marking it dirty (CVE-2026-93140)
In the Linux kernel, the following vulnerability has been resolved:
time/namespace: Validate nanosecond field in proc_timens_set_offset() (CVE-2026-93146)
In the Linux kernel, the following vulnerability has been resolved:
cgroup/cpuset: Make nr_deadline_tasks an atomic_t (CVE-2026-93150)
In the Linux kernel, the following vulnerability has been resolved:
hwrng: core - fix rng list on registration error (CVE-2026-93163)
In the Linux kernel, the following vulnerability has been resolved:
mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug (CVE-2026-93172)
In the Linux kernel, the following vulnerability has been resolved:
bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks (CVE-2026-93173)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Copy per-CPU map value padding in copy_map_value_long() (CVE-2026-93174)
In the Linux kernel, the following vulnerability has been resolved:
sched/fair: Fix overflow in update_tg_cfs_runnable() (CVE-2026-93182)
In the Linux kernel, the following vulnerability has been resolved:
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (CVE-2026-93189)
In the Linux kernel, the following vulnerability has been resolved:
mm/secretmem: properly account locked pages (CVE-2026-93243)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (CVE-2026-93250)
In the Linux kernel, the following vulnerability has been resolved:
arm64: hibernate: mask DAIF before restoring hibernated kernel (CVE-2026-93256)
In the Linux kernel, the following vulnerability has been resolved:
md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)
In the Linux kernel, the following vulnerability has been resolved:
ext4: skip extra isize expansion during mount to prevent deadlock (CVE-2026-93268)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix circular lock dependency in ext4_ext_migrate (CVE-2026-93269)
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel/pt: Fix stop/start with no update (CVE-2026-93275)
In the Linux kernel, the following vulnerability has been resolved:
i2c: smbus: reject oversized block transfers in the common path (CVE-2026-93287)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288)
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Do not block on tag allocation in scsi_eh_lock_door() (CVE-2026-93781)
In the Linux kernel, the following vulnerability has been resolved:
cifs: validate idmap key payload length (CVE-2026-93785)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
In the Linux kernel, the following vulnerability has been resolved:
smb/client: flush dirty data before punching a hole (CVE-2026-93794)
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix leaks and online flag on radix_tree_insert failure (CVE-2026-93795)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix reloc root cleanup in merge_reloc_roots() (CVE-2026-93798)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (CVE-2026-93800)
In the Linux kernel, the following vulnerability has been resolved:
smb/client: zero-initialize stack-allocated cifs_open_info_data (CVE-2026-93801)
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Fix double fput (CVE-2026-93810)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree-checker: validate INODE_REF's namelen (CVE-2026-93813)
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix addr_filter_ranges lifetime (CVE-2026-93817)
In the Linux kernel, the following vulnerability has been resolved:
tls: reject the combination of TLS and sockmap (CVE-2026-93824)
In the Linux kernel, the following vulnerability has been resolved:
spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (CVE-2026-93825)
In the Linux kernel, the following vulnerability has been resolved:
virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix handling of damaged volume in exfat_create_upcase_table() (CVE-2026-93828)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix races in cifsd thread creation (CVE-2026-93829)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (CVE-2026-97415)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (CVE-2026-97416)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
In the Linux kernel, the following vulnerability has been resolved:
bpf: NUL-terminate replaced sysctl value (CVE-2026-97420)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (CVE-2026-97421)
In the Linux kernel, the following vulnerability has been resolved:
xhci: Prevent queuing new commands if xhci is inaccessible (CVE-2026-97430)
In the Linux kernel, the following vulnerability has been resolved:
nvme: validate FDP configuration descriptor sizes (CVE-2026-97433)
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() (CVE-2026-97437)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: validate index entry key bounds (CVE-2026-97438)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib (CVE-2026-97439)
In the Linux kernel, the following vulnerability has been resolved:
ata: ahci: fail probe if BAR too small for claimed ports (CVE-2026-97441)
In the Linux kernel, the following vulnerability has been resolved:
perf/ftrace: Fix WARNING in __unregister_ftrace_function (CVE-2026-97443)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add boundary checks in two places (CVE-2026-97444)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (CVE-2026-97445)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (CVE-2026-97446)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (CVE-2026-97447)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add validation for node in acpi_ns_build_normalized_path() (CVE-2026-97448)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add package limit checks in parser functions (CVE-2026-97449)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: validate handler object type in two places (CVE-2026-97450)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (CVE-2026-97451)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Prevent adding invalid references (CVE-2026-97452)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: validate byte_count in acpi_ps_get_next_package_length() (CVE-2026-97453)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add boundary checks in acpi_ps_get_next_field() (CVE-2026-97454)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (CVE-2026-97455)
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix condition check in acpi_ps_parse_loop() (CVE-2026-97456)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: addrconf: fix temp address generation after prefix deprecation (CVE-2026-97472)
In the Linux kernel, the following vulnerability has been resolved:
rds: filter RDS_INFO_* getsockopt by caller's netns (CVE-2026-97476)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (CVE-2026-97477)
In the Linux kernel, the following vulnerability has been resolved:
driver core: Avoid warning when removing a device while its supplier is unbinding (CVE-2026-97479)
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: 8250: protect against NULL uart->port.dev in register (CVE-2026-97480)
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: fix possible ISR soft lockup (CVE-2026-97481)
In the Linux kernel, the following vulnerability has been resolved:
usb: core: hcd: fix possible deadlock in rh control transfers (CVE-2026-97483)
In the Linux kernel, the following vulnerability has been resolved:
usbip: vhci_hcd: fix NULL deref in status_show_vhci (CVE-2026-97484)
In the Linux kernel, the following vulnerability has been resolved:
genirq/proc: Size interrupt directory names for 10-digit interrupt numbers (CVE-2026-97503)
In the Linux kernel, the following vulnerability has been resolved:
PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (CVE-2026-97505)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix bad accounting in __mptcp_subflow_push_pending() (CVE-2026-97522)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: close race between scheduler and state change (CVE-2026-97523)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: avoid unneeded actions on subflow reset (CVE-2026-97524)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Allocate split page tables as kernel page tables (CVE-2026-97525)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (CVE-2026-97533)
In the Linux kernel, the following vulnerability has been resolved:
xfs: initialise args->total for parent pointer updates (CVE-2026-97551)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix heap overflow in DACL owner/group rewrite (CVE-2026-97555)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: avoid leaking refcount when cifs_sb_tlink() fails (CVE-2026-97556)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix cifsFileInfo reference leak in deferred close (CVE-2026-97558)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fail DACL rewrite when the new DACL exceeds 64K (CVE-2026-97559)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix one-byte OOB read in smb2_parse_native_symlink() (CVE-2026-97560)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: pin DFS superblock in iterator callback (CVE-2026-97562)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject userspace cifs.idmap descriptions (CVE-2026-97564)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject short READ responses in CIFSSMBRead() (CVE-2026-97565)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 (CVE-2026-97566)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: prevent race between disconnect() and rtx (CVE-2026-97567)
In the Linux kernel, the following vulnerability has been resolved:
mptcp: syncookies: remember the request backup flag (CVE-2026-97568)
In the Linux kernel, the following vulnerability has been resolved:
landlock: Fix use-after-free of the source's parent directory (CVE-2026-97594)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: reject invalid states in connection template sync records (CVE-2026-97596)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: flowlabel: cap duplicate leases per socket (CVE-2026-97597)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: fib: bound automatic table ID allocation (CVE-2026-97598)
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: invalidate queues before flushing them (CVE-2026-97602)
In the Linux kernel, the following vulnerability has been resolved:
fs: autofs: fix memory leak in autofs_fill_super() (CVE-2026-97606)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_log: unregister loggers before per-net teardown (CVE-2026-97608)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: cttimeout: prevent UAF during module unload (CVE-2026-97609)
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix uninitialized return value in netfs_unbuffered_write() (CVE-2026-97610)
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix use-after-free of the flow table mask array (CVE-2026-97611)
In the Linux kernel, the following vulnerability has been resolved:
net: mpls: clear inner_protocol when the last label is popped (CVE-2026-97612)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_api: release all action references on NEWACTION failure (CVE-2026-97616)
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Check resize_disabled before publishing the new subbuf order (CVE-2026-97617)
In the Linux kernel, the following vulnerability has been resolved:
io_uring/net: don't overconsume buffers when using MSG_TRUNC (CVE-2026-97618)
In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: end write accounting from ->ki_complete (CVE-2026-97619)
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Fix memory leak in query_perf_config_list() (CVE-2026-97899)
In the Linux kernel, the following vulnerability has been resolved:
drm/drm_exec: fix up contended obj when num_objects is 0 (CVE-2026-97900)
In the Linux kernel, the following vulnerability has been resolved:
genetlink: pin family module during policy dump (CVE-2026-97901)
In the Linux kernel, the following vulnerability has been resolved:
fs: don't return -EINVAL for successful nested thaw (CVE-2026-97902)
In the Linux kernel, the following vulnerability has been resolved:
exit: hold a reference to thread_pid across proc_flush_pid (CVE-2026-97903)
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: initialize policy rwsem before sysfs publication (CVE-2026-97904)
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: zero-initialize policy cpumask before sysfs publication (CVE-2026-97905)
In the Linux kernel, the following vulnerability has been resolved:
bootconfig: Fix integer overflow in initrd size check (CVE-2026-97906)
In the Linux kernel, the following vulnerability has been resolved:
tick/broadcast: Plug clockevents replacement race (CVE-2026-97925)
In the Linux kernel, the following vulnerability has been resolved:
reboot: fix cad_pid use-after-free race (CVE-2026-97938)
In the Linux kernel, the following vulnerability has been resolved:
ipmr: account multicast table and route memory (CVE-2026-97939)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix fib6 walker UAF on seq stop (CVE-2026-97940)
In the Linux kernel, the following vulnerability has been resolved:
x86/alternatives: Exclude text poking against change_page_attr() (CVE-2026-97942)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (CVE-2026-97943)
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix user-space data loss with MADV_FREE and THP (CVE-2026-97945)
In the Linux kernel, the following vulnerability has been resolved:
x86/amd_node: Fix PCI device reference counting in amd_smn_init() (CVE-2026-97946)
In the Linux kernel, the following vulnerability has been resolved:
x86/amd_node: Fix potential NULL pointer dereference (CVE-2026-97947)
In the Linux kernel, the following vulnerability has been resolved:
configfs: unhash the dentry before dropping the item in rmdir (CVE-2026-97949)
In the Linux kernel, the following vulnerability has been resolved:
configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (CVE-2026-97950)
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands (CVE-2026-97951)
In the Linux kernel, the following vulnerability has been resolved:
net: net_failover: Fix the deadlock in net_failover_slave_name_change() (CVE-2026-97956)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). (CVE-2026-97958)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_route: free emptied bucket on filter move (CVE-2026-97959)
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel: Prevent drain_pebs() reentry (CVE-2026-97960)
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Allow list_del during perf_event_overflow() (CVE-2026-97961)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Move representor vnic reporter to eswitch devlink port (CVE-2026-97962)
In the Linux kernel, the following vulnerability has been resolved:
ppp_synctty: ensure a writeable skb header (CVE-2026-97964)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: initialize _md in vxlan_xmit_one() (CVE-2026-97965)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() (CVE-2026-97974)
In the Linux kernel, the following vulnerability has been resolved:
eth: ice: don't dereference pointers from TP_printk() (CVE-2026-97978)
In the Linux kernel, the following vulnerability has been resolved:
ice: add missing xa_destroy for sched_node_ids (CVE-2026-97979)
In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: Fix UDP length overflow with PMTU discover and big MTU (CVE-2026-97984)
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Update last skb marker in manage_oob(). (CVE-2026-97985)
In the Linux kernel, the following vulnerability has been resolved:
virtio_console: do not free control-out buffers on remove (CVE-2026-97995)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_log: cope with concurrent instance destruction (CVE-2026-97998)
In the Linux kernel, the following vulnerability has been resolved:
hwmon: Fix potential UAF in pec_store (CVE-2026-98000)
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Do not reallocate GA log buffers on resume (CVE-2026-98003)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject non-scalar bpf_loop iteration counts (CVE-2026-98007)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: drr: clamp quantum in change class (CVE-2026-98010)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: hhf: clamp quantum in change and init paths (CVE-2026-98011)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sfq: clamp quantum in change path (CVE-2026-98012)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (CVE-2026-98014)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (CVE-2026-98015)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix use-after-free race in sample_restore_put() (CVE-2026-98016)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: defer qdisc freeing after failed creation (CVE-2026-98017)
In the Linux kernel, the following vulnerability has been resolved:
net: reject oversized tx_queue_len at netlink parse time (CVE-2026-98021)
In the Linux kernel, the following vulnerability has been resolved:
net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (CVE-2026-98022)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: reject dynamic fdb entries that reference a nexthop id (CVE-2026-98023)
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mcast: properly convert mglist to rcu (CVE-2026-98026)
In the Linux kernel, the following vulnerability has been resolved:
nexthop: Initialize extack in remove_nh_grp_entry() (CVE-2026-98031)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject untrusted allocated-object pointers (CVE-2026-98037)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Require MEM_PERCPU for percpu kptr stores (CVE-2026-98039)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't predict JMP32 pointer vs zero comparisons (CVE-2026-98041)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject legacy packet loads from callbacks (CVE-2026-98044)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark faultable stack helpers as sleepable (CVE-2026-98045)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark bpf_btf_find_by_name_kind() as sleepable (CVE-2026-98046)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Check ancestor frames for rbtree callbacks (CVE-2026-98047)
In the Linux kernel, the following vulnerability has been resolved:
nvme: remove stale namespaces by NSID range during scan (CVE-2026-98056)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark sched_process_wait argument as nullable (CVE-2026-98059)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject resilient lock operations in rbtree callbacks (CVE-2026-98060)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject tail calls directly from callback frames (CVE-2026-98061)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark signal tracepoint siginfo arguments as scalar (CVE-2026-98062)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix NULL-ptr-deref in btf_var_show() (CVE-2026-98063)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix NULL-ptr-deref when showing a void BTF type (CVE-2026-98064)
In the Linux kernel, the following vulnerability has been resolved:
erofs: disable LZ4 rolling decompression for now (CVE-2026-98067)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: don't let rds_conn_shutdown() consume a concurrent drop (CVE-2026-98068)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: acquire the fastpath locks in rds_conn_shutdown() (CVE-2026-98069)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (CVE-2026-98070)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: clear cp_flags bits individually in rds_conn_path_reset() (CVE-2026-98071)
In the Linux kernel, the following vulnerability has been resolved:
net/rds: use wq_has_sleeper() in release_in_xmit() (CVE-2026-98072)
In the Linux kernel, the following vulnerability has been resolved:
bonding: do not clear curr_active_slave prematurely when releasing all slaves (CVE-2026-98074)
In the Linux kernel, the following vulnerability has been resolved:
bpf: reject BPF_PSEUDO_FUNC reference to the main program (CVE-2026-98075)
In the Linux kernel, the following vulnerability has been resolved:
tracing/probes: Fix use-after-free on field name/type of events with multiple probes (CVE-2026-98076)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (CVE-2026-98077)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix reversed sequence option serialization (CVE-2026-98078)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zstd: fix lost wakeup when waiting for a workspace (CVE-2026-98079)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: do not force reloc root creation during qgroup_account_snapshot() (CVE-2026-98080)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: finish active block group cleanup if call_zone_finish() fails (CVE-2026-98081)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix the possible bioc_list memory leak during error (CVE-2026-98082)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix transaction use-after-free in raid stripe insertion (CVE-2026-98083)
In the Linux kernel, the following vulnerability has been resolved:
sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (CVE-2026-98087)
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() (CVE-2026-98088)
In the Linux kernel, the following vulnerability has been resolved:
bonding: alb: fix uninitialized transport header access in alb_determine_nd() (CVE-2026-98089)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: restore active device pointers after failed sprout (CVE-2026-98090)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: detach failed sprout device from transaction update list (CVE-2026-98091)
In the Linux kernel, the following vulnerability has been resolved:
af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). (CVE-2026-98095)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: restore network header before routing and forwarding (CVE-2026-98096)
In the Linux kernel, the following vulnerability has been resolved:
tipc: Dont send random pad bytes in RESET/ACTIVATE messages (CVE-2026-98097)
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix NULL deref in tipc_named_node_up() on empty publication list (CVE-2026-98098)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() (CVE-2026-98101)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() (CVE-2026-98102)
In the Linux kernel, the following vulnerability has been resolved:
igmp: convert struct ip_sf_list to RCU (CVE-2026-98103)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted (CVE-2026-98104)
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Fix potential UAF/KASAN warning (CVE-2026-98117)
In the Linux kernel, the following vulnerability has been resolved:
netfs: break unbuffered write when netfs_alloc_subrequest() fails (CVE-2026-98119)
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix subreq ref leak (CVE-2026-98120)
In the Linux kernel, the following vulnerability has been resolved:
vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (CVE-2026-98122)
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration (CVE-2026-98123)
In the Linux kernel, the following vulnerability has been resolved:
smb/client: validate new EOF for zero range (CVE-2026-98126)
In the Linux kernel, the following vulnerability has been resolved:
smb/client: validate new EOF for insert range (CVE-2026-98127)
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() (CVE-2026-98128)
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() (CVE-2026-98129)
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (CVE-2026-98130)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic (CVE-2026-98151)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: use the DMA API for resource backing on Xen (CVE-2026-98156)
In the Linux kernel, the following vulnerability has been resolved:
EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation (CVE-2026-98157)
In the Linux kernel, the following vulnerability has been resolved:
ppp_async: drop the errored frame instead of resetting its headroom (CVE-2026-98158)
In the Linux kernel, the following vulnerability has been resolved:
nvdimm: pmem: keep PREFLUSH before data writes (CVE-2026-98161)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix server->total_read for compound encrypted PDUs (CVE-2026-98167)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix reparse buffer bounds in cifs_query_reparse_point() (CVE-2026-98168)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential OOB read in smb3_enum_snapshots() (CVE-2026-98169)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (CVE-2026-98170)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (CVE-2026-98171)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free of iface in cifs_try_adding_channels() (CVE-2026-98173)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix rlist race and missing initialization (CVE-2026-98174)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: cancel reconnect work in clean_demultiplex_info() (CVE-2026-98175)
In the Linux kernel, the following vulnerability has been resolved:
Input: zero ff_effect before compat copy in input_ff_effect_from_user (CVE-2026-98201)
In the Linux kernel, the following vulnerability has been resolved:
Input: evdev - zero absinfo before partial copy in EVIOCSABS (CVE-2026-98205)
In the Linux kernel, the following vulnerability has been resolved:
selinux: recheck intermediate backing files on mprotect() (CVE-2026-98214)
In the Linux kernel, the following vulnerability has been resolved:
selinux: preserve user SID across nested backing files (CVE-2026-98215)
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix tpm2_load_cmd() boundary check (CVE-2026-98221)
In the Linux kernel, the following vulnerability has been resolved:
KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)
In the Linux kernel, the following vulnerability has been resolved:
mm: filemap: retain mapped dropbehind folios (CVE-2026-98223)
In the Linux kernel, the following vulnerability has been resolved:
mm/vma: correctly unaccount on mmap_prepare() failure (CVE-2026-98224)
In the Linux kernel, the following vulnerability has been resolved:
mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count (CVE-2026-98226)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: save input state data before secpath resets (CVE-2026-98229)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: use hlist_del_init_rcu for state_cache and state_cache_input (CVE-2026-98230)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: serialize state GC with device state flush (CVE-2026-98231)
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() (CVE-2026-98232)
In the Linux kernel, the following vulnerability has been resolved:
net/packet: clear RX owner on VNET header error (CVE-2026-98233)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: hhf: cap hh_flows_limit at change time (CVE-2026-98234)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_api: release tail references on DELACTION failure (CVE-2026-98235)
In the Linux kernel, the following vulnerability has been resolved:
net: ip_tunnel: initialize `options_len` before referencing options (CVE-2026-98240)
In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm: use full sockets in local error paths (CVE-2026-98241)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: clear free space tree creation state on rebuild failure (CVE-2026-98244)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() (CVE-2026-98245)
In the Linux kernel, the following vulnerability has been resolved:
arm64: percpu: Fix LSE operations on {8,16}-bit types (CVE-2026-98248)
In the Linux kernel, the following vulnerability has been resolved:
arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (CVE-2026-98249)
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: avoid reallocating confirmed conntrack labels (CVE-2026-98251)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (CVE-2026-98252)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ucma: Serialize join and leave on copy_to_user failure (CVE-2026-98253)
In the Linux kernel, the following vulnerability has been resolved:
tcp: exclude old ACKs from tcp fast path (CVE-2026-98255)
In the Linux kernel, the following vulnerability has been resolved:
signal: Prevent exec() race (CVE-2026-98256)
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (CVE-2026-98258)
In the Linux kernel, the following vulnerability has been resolved:
fs/dax: check zero or empty entry before converting xarray entry (CVE-2026-98259)
In the Linux kernel, the following vulnerability has been resolved:
exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (CVE-2026-98261)
In the Linux kernel, the following vulnerability has been resolved:
ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY (CVE-2026-98262)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: abort transaction on failure to update inode for hole punching and reflinking (CVE-2026-98269)
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: do not leave stale header offsets after pskb_carve() (CVE-2026-98271)
In the Linux kernel, the following vulnerability has been resolved:
x86/kprobes: Fix crash when probing CS CALL instructions (CVE-2026-98273)
In the Linux kernel, the following vulnerability has been resolved:
net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() (CVE-2026-98274)
In the Linux kernel, the following vulnerability has been resolved:
net: lock the socket in sock_gettstamp() (CVE-2026-98276)
In the Linux kernel, the following vulnerability has been resolved:
futex: Also allocate private hash on vfork() (CVE-2026-98281)
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). (CVE-2026-98289)
In the Linux kernel, the following vulnerability has been resolved:
tcp: do not let tcp_rmem be set below 4096 (CVE-2026-98299)
In the Linux kernel, the following vulnerability has been resolved:
tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). (CVE-2026-98300)
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mst: move switchdev call outside rcu (CVE-2026-98301)
In the Linux kernel, the following vulnerability has been resolved:
ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup (CVE-2026-98303)
In the Linux kernel, the following vulnerability has been resolved:
seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (CVE-2026-98306)
In the Linux kernel, the following vulnerability has been resolved:
neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. (CVE-2026-98317)
In the Linux kernel, the following vulnerability has been resolved:
drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (CVE-2026-98319)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_nat: unregister and release hooks on error (CVE-2026-98321)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_nat: fully initialise new_addr in netmap setup (CVE-2026-98322)
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: wait for RCU readers before releasing dma_device (CVE-2026-98342)
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (CVE-2026-98343)
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: Fix device kref underflow in dma_chan_put() (CVE-2026-98344)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mad: Fix receive buffer leak when PKey enforcement fails (CVE-2026-98354)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (CVE-2026-98359)
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (CVE-2026-98363)
In the Linux kernel, the following vulnerability has been resolved:
esp: downgrade zerocopy managed frags before mutating skb frags (CVE-2026-98368)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() (CVE-2026-98369)
In the Linux kernel, the following vulnerability has been resolved:
exec: do_close_on_exec() before taking exec_update_lock (CVE-2026-98388)
In the Linux kernel, the following vulnerability has been resolved:
x86/amd_node: Avoid divide by zero on virtualized systems (CVE-2026-98390)
In the Linux kernel, the following vulnerability has been resolved:
net: ipv4: Fix UDP length overflow with PMTU discover and big MTU (CVE-2026-98393)
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. (CVE-2026-98394)
In the Linux kernel, the following vulnerability has been resolved:
locking/lockdep: Invalidate stale class_cache entries for zapped classes (CVE-2026-98398)
In the Linux kernel, the following vulnerability has been resolved:
net: iptunnel: fix stale transport header during tunnel decapsulation (CVE-2026-98401)
In the Linux kernel, the following vulnerability has been resolved:
net: icmp: avoid invalid transport header access in icmp_send tracepoint (CVE-2026-98402)
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (CVE-2026-98404)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix missing iov bounds check in parse_posix_sids() (CVE-2026-98405)
In the Linux kernel, the following vulnerability has been resolved:
selinux: always fill AVC decision in avc_has_perm_noaudit() (CVE-2026-98413)
In the Linux kernel, the following vulnerability has been resolved:
memcg: avoid charging the root memcg from obj_cgroup_charge_pages() (CVE-2026-98414)
In the Linux kernel, the following vulnerability has been resolved:
net: xfrm: reject unrepresentable espintcp transport headers (CVE-2026-98417)
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: undo netns switch if renaming the wiphy fails (CVE-2026-98424)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/efa: Keep EQ resources alive while IRQ is registered (CVE-2026-98429)
In the Linux kernel, the following vulnerability has been resolved:
writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes (CVE-2026-98538)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: zero at allocation time (CVE-2026-98873)
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed (CVE-2026-98877)
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v5: Immediately exec priority drop following activate (CVE-2026-98878)
In the Linux kernel, the following vulnerability has been resolved:
isofs: handle set_blocksize failures (CVE-2026-98879)
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: handle set_blocksize failures (CVE-2026-98880)
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() (CVE-2026-98881)
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250_port: recognize UPIO_AU (CVE-2026-98883)
In the Linux kernel, the following vulnerability has been resolved:
ima: return error early if file xattr cannot be changed (CVE-2026-98885)
In the Linux kernel, the following vulnerability has been resolved:
arm64: kprobes: Allow reentering kprobes while single-stepping (CVE-2026-98888)
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: HWS, Handle destroying table that has a miss table (CVE-2026-98895)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: mark the rcu locked areas properly (CVE-2026-98899)
In the Linux kernel, the following vulnerability has been resolved:
xen/gntalloc: validate grant count before allocation (CVE-2026-98900)
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: let stripe batch bm_seq comparison wrap-safe (CVE-2026-98902)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: protect sb_write_pointer() with invalidate lock (CVE-2026-98907)
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work. (CVE-2026-99999)
Affected Packages:
kernel6.18
Issue Correction:
Run dnf update kernel6.18 --releasever 2023.12.20261012 or dnf update --advisory ALAS2023-2026-3192 --releasever 2023.12.20261012 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
aarch64:
perf6.18-debuginfo-6.18.54-121.166.amzn2023.aarch64
python3-perf6.18-debuginfo-6.18.54-121.166.amzn2023.aarch64
kernel6.18-modules-extra-common-6.18.54-121.166.amzn2023.aarch64
kernel-livepatch-6.18.54-121.166-1.0-0.amzn2023.aarch64
kernel6.18-tools-devel-6.18.54-121.166.amzn2023.aarch64
bpftool6.18-debuginfo-6.18.54-121.166.amzn2023.aarch64
microvm-kernel6.18-6.18.54-121.166.amzn2023.aarch64
kernel6.18-tools-6.18.54-121.166.amzn2023.aarch64
kernel6.18-modules-extra-6.18.54-121.166.amzn2023.aarch64
kernel6.18-tools-debuginfo-6.18.54-121.166.amzn2023.aarch64
bpftool6.18-6.18.54-121.166.amzn2023.aarch64
python3-perf6.18-6.18.54-121.166.amzn2023.aarch64
perf6.18-6.18.54-121.166.amzn2023.aarch64
kernel6.18-headers-6.18.54-121.166.amzn2023.aarch64
kernel6.18-6.18.54-121.166.amzn2023.aarch64
kernel6.18-debuginfo-6.18.54-121.166.amzn2023.aarch64
kernel6.18-debuginfo-common-aarch64-6.18.54-121.166.amzn2023.aarch64
kernel6.18-devel-6.18.54-121.166.amzn2023.aarch64
src:
kernel6.18-6.18.54-121.166.amzn2023.src
x86_64:
perf6.18-debuginfo-6.18.54-121.166.amzn2023.x86_64
kernel6.18-modules-extra-6.18.54-121.166.amzn2023.x86_64
microvm-kernel6.18-6.18.54-121.166.amzn2023.x86_64
kernel6.18-tools-debuginfo-6.18.54-121.166.amzn2023.x86_64
kernel6.18-modules-extra-common-6.18.54-121.166.amzn2023.x86_64
bpftool6.18-debuginfo-6.18.54-121.166.amzn2023.x86_64
bpftool6.18-6.18.54-121.166.amzn2023.x86_64
python3-perf6.18-debuginfo-6.18.54-121.166.amzn2023.x86_64
kernel-livepatch-6.18.54-121.166-1.0-0.amzn2023.x86_64
python3-perf6.18-6.18.54-121.166.amzn2023.x86_64
kernel6.18-tools-6.18.54-121.166.amzn2023.x86_64
kernel6.18-tools-devel-6.18.54-121.166.amzn2023.x86_64
kernel6.18-debuginfo-6.18.54-121.166.amzn2023.x86_64
kernel6.18-headers-6.18.54-121.166.amzn2023.x86_64
perf6.18-6.18.54-121.166.amzn2023.x86_64
kernel6.18-6.18.54-121.166.amzn2023.x86_64
kernel6.18-debuginfo-common-x86_64-6.18.54-121.166.amzn2023.x86_64
kernel6.18-devel-6.18.54-121.166.amzn2023.x86_64
2026-10-26: CVE-2026-98900 was added to this advisory.
2026-10-26: CVE-2026-98878 was added to this advisory.
2026-10-26: CVE-2026-98907 was added to this advisory.
2026-10-26: CVE-2026-98877 was added to this advisory.
2026-10-26: CVE-2026-98888 was added to this advisory.
2026-10-26: CVE-2026-98885 was added to this advisory.
2026-10-26: CVE-2026-98883 was added to this advisory.
2026-10-26: CVE-2026-98902 was added to this advisory.
2026-10-26: CVE-2026-98895 was added to this advisory.
2026-10-26: CVE-2026-98899 was added to this advisory.
2026-10-26: CVE-2026-98873 was added to this advisory.
2026-10-26: CVE-2026-98879 was added to this advisory.
2026-10-26: CVE-2026-98880 was added to this advisory.
2026-10-26: CVE-2026-98881 was added to this advisory.
2026-10-22: CVE-2026-98538 was added to this advisory.
2026-10-21: CVE-2026-92502 was added to this advisory.
2026-10-21: CVE-2026-90129 was added to this advisory.
2026-10-21: CVE-2026-90390 was added to this advisory.
2026-10-21: CVE-2026-90081 was added to this advisory.
2026-10-21: CVE-2026-97447 was added to this advisory.
2026-10-21: CVE-2026-97483 was added to this advisory.
2026-10-21: CVE-2026-97476 was added to this advisory.
2026-10-21: CVE-2026-98405 was added to this advisory.
2026-10-21: CVE-2026-97903 was added to this advisory.
2026-10-21: CVE-2026-98414 was added to this advisory.
2026-10-21: CVE-2026-93045 was added to this advisory.
2026-10-21: CVE-2026-97900 was added to this advisory.
2026-10-21: CVE-2026-97456 was added to this advisory.
2026-10-21: CVE-2026-98251 was added to this advisory.
2026-10-21: CVE-2026-90400 was added to this advisory.
2026-10-21: CVE-2026-98083 was added to this advisory.
2026-10-21: CVE-2026-98127 was added to this advisory.
2026-10-21: CVE-2026-97995 was added to this advisory.
2026-10-21: CVE-2026-98354 was added to this advisory.
2026-10-21: CVE-2026-98388 was added to this advisory.
2026-10-21: CVE-2026-97448 was added to this advisory.
2026-10-21: CVE-2026-90326 was added to this advisory.
2026-10-21: CVE-2026-90114 was added to this advisory.
2026-10-21: CVE-2026-98276 was added to this advisory.
2026-10-21: CVE-2026-98398 was added to this advisory.
2026-10-21: CVE-2026-98205 was added to this advisory.
2026-10-21: CVE-2026-98224 was added to this advisory.
2026-10-21: CVE-2026-98061 was added to this advisory.
2026-10-21: CVE-2026-98090 was added to this advisory.
2026-10-21: CVE-2026-98248 was added to this advisory.
2026-10-21: CVE-2026-98253 was added to this advisory.
2026-10-21: CVE-2026-97451 was added to this advisory.
2026-10-21: CVE-2026-97560 was added to this advisory.
2026-10-21: CVE-2026-90203 was added to this advisory.
2026-10-21: CVE-2026-98128 was added to this advisory.
2026-10-21: CVE-2026-98363 was added to this advisory.
2026-10-21: CVE-2026-98151 was added to this advisory.
2026-10-21: CVE-2026-89781 was added to this advisory.
2026-10-21: CVE-2026-97961 was added to this advisory.
2026-10-21: CVE-2026-97453 was added to this advisory.
2026-10-21: CVE-2026-98342 was added to this advisory.
2026-10-21: CVE-2026-89987 was added to this advisory.
2026-10-21: CVE-2026-93189 was added to this advisory.
2026-10-21: CVE-2026-98022 was added to this advisory.
2026-10-21: CVE-2026-90150 was added to this advisory.
2026-10-21: CVE-2026-98260 was added to this advisory.
2026-10-21: CVE-2026-90426 was added to this advisory.
2026-10-21: CVE-2026-97998 was added to this advisory.
2026-10-21: CVE-2026-98299 was added to this advisory.
2026-10-21: CVE-2026-98234 was added to this advisory.
2026-10-21: CVE-2026-98074 was added to this advisory.
2026-10-21: CVE-2026-97618 was added to this advisory.
2026-10-21: CVE-2026-92500 was added to this advisory.
2026-10-21: CVE-2026-97558 was added to this advisory.
2026-10-21: CVE-2026-90385 was added to this advisory.
2026-10-21: CVE-2026-98229 was added to this advisory.
2026-10-21: CVE-2026-97985 was added to this advisory.
2026-10-21: CVE-2026-90110 was added to this advisory.
2026-10-21: CVE-2026-97420 was added to this advisory.
2026-10-21: CVE-2026-90396 was added to this advisory.
2026-10-21: CVE-2026-97567 was added to this advisory.
2026-10-21: CVE-2026-93795 was added to this advisory.
2026-10-21: CVE-2026-98003 was added to this advisory.
2026-10-21: CVE-2026-98262 was added to this advisory.
2026-10-21: CVE-2026-98245 was added to this advisory.
2026-10-21: CVE-2026-98230 was added to this advisory.
2026-10-21: CVE-2026-90187 was added to this advisory.
2026-10-21: CVE-2026-97450 was added to this advisory.
2026-10-21: CVE-2026-90279 was added to this advisory.
2026-10-21: CVE-2026-97525 was added to this advisory.
2026-10-21: CVE-2026-98045 was added to this advisory.
2026-10-21: CVE-2026-97958 was added to this advisory.
2026-10-21: CVE-2026-98000 was added to this advisory.
2026-10-21: CVE-2026-98214 was added to this advisory.
2026-10-21: CVE-2026-80729 was added to this advisory.
2026-10-21: CVE-2026-90149 was added to this advisory.
2026-10-21: CVE-2026-97979 was added to this advisory.
2026-10-21: CVE-2026-92510 was added to this advisory.
2026-10-21: CVE-2026-72355 was added to this advisory.
2026-10-21: CVE-2026-98215 was added to this advisory.
2026-10-21: CVE-2026-98117 was added to this advisory.
2026-10-21: CVE-2026-89776 was added to this advisory.
2026-10-21: CVE-2026-92515 was added to this advisory.
2026-10-21: CVE-2026-98306 was added to this advisory.
2026-10-21: CVE-2026-97522 was added to this advisory.
2026-10-21: CVE-2026-89815 was added to this advisory.
2026-10-21: CVE-2026-90428 was added to this advisory.
2026-10-21: CVE-2026-90434 was added to this advisory.
2026-10-21: CVE-2026-98274 was added to this advisory.
2026-10-21: CVE-2026-97960 was added to this advisory.
2026-10-21: CVE-2026-98261 was added to this advisory.
2026-10-21: CVE-2026-97904 was added to this advisory.
2026-10-21: CVE-2026-98404 was added to this advisory.
2026-10-21: CVE-2026-93256 was added to this advisory.
2026-10-21: CVE-2026-98321 was added to this advisory.
2026-10-21: CVE-2026-90160 was added to this advisory.
2026-10-21: CVE-2026-98081 was added to this advisory.
2026-10-21: CVE-2026-90244 was added to this advisory.
2026-10-21: CVE-2026-98161 was added to this advisory.
2026-10-21: CVE-2026-98098 was added to this advisory.
2026-10-21: CVE-2026-98368 was added to this advisory.
2026-10-21: CVE-2026-97454 was added to this advisory.
2026-10-21: CVE-2026-98258 was added to this advisory.
2026-10-21: CVE-2026-93048 was added to this advisory.
2026-10-21: CVE-2026-90269 was added to this advisory.
2026-10-21: CVE-2026-97608 was added to this advisory.
2026-10-21: CVE-2026-98087 was added to this advisory.
2026-10-21: CVE-2026-93066 was added to this advisory.
2026-10-21: CVE-2026-90140 was added to this advisory.
2026-10-21: CVE-2026-93163 was added to this advisory.
2026-10-21: CVE-2026-98359 was added to this advisory.
2026-10-21: CVE-2026-98157 was added to this advisory.
2026-10-21: CVE-2026-97906 was added to this advisory.
2026-10-21: CVE-2026-98303 was added to this advisory.
2026-10-21: CVE-2026-98244 was added to this advisory.
2026-10-21: CVE-2026-98241 was added to this advisory.
2026-10-21: CVE-2026-90325 was added to this advisory.
2026-10-21: CVE-2026-98259 was added to this advisory.
2026-10-21: CVE-2026-98102 was added to this advisory.
2026-10-21: CVE-2026-74334 was added to this advisory.
2026-10-21: CVE-2026-98063 was added to this advisory.
2026-10-21: CVE-2026-90185 was added to this advisory.
2026-10-21: CVE-2026-97946 was added to this advisory.
2026-10-21: CVE-2026-90002 was added to this advisory.
2026-10-21: CVE-2026-90190 was added to this advisory.
2026-10-21: CVE-2026-97566 was added to this advisory.
2026-10-21: CVE-2026-90233 was added to this advisory.
2026-10-21: CVE-2026-92524 was added to this advisory.
2026-10-21: CVE-2026-97430 was added to this advisory.
2026-10-21: CVE-2026-98064 was added to this advisory.
2026-10-21: CVE-2026-100070 was added to this advisory.
2026-10-21: CVE-2026-98301 was added to this advisory.
2026-10-21: CVE-2026-68289 was added to this advisory.
2026-10-21: CVE-2026-89915 was added to this advisory.
2026-10-21: CVE-2026-93810 was added to this advisory.
2026-10-21: CVE-2026-98046 was added to this advisory.
2026-10-21: CVE-2026-98167 was added to this advisory.
2026-10-21: CVE-2026-97505 was added to this advisory.
2026-10-21: CVE-2026-98091 was added to this advisory.
2026-10-21: CVE-2026-98079 was added to this advisory.
2026-10-21: CVE-2026-90139 was added to this advisory.
2026-10-21: CVE-2026-98069 was added to this advisory.
2026-10-21: CVE-2026-98026 was added to this advisory.
2026-10-21: CVE-2026-89782 was added to this advisory.
2026-10-21: CVE-2026-97612 was added to this advisory.
2026-10-21: CVE-2026-90283 was added to this advisory.
2026-10-21: CVE-2026-97416 was added to this advisory.
2026-10-21: CVE-2026-90243 was added to this advisory.
2026-10-21: CVE-2026-98068 was added to this advisory.
2026-10-21: CVE-2026-98271 was added to this advisory.
2026-10-21: CVE-2026-90247 was added to this advisory.
2026-10-21: CVE-2026-93798 was added to this advisory.
2026-10-21: CVE-2026-98031 was added to this advisory.
2026-10-21: CVE-2026-89784 was added to this advisory.
2026-10-21: CVE-2026-90278 was added to this advisory.
2026-10-21: CVE-2026-90218 was added to this advisory.
2026-10-21: CVE-2026-90265 was added to this advisory.
2026-10-21: CVE-2026-98413 was added to this advisory.
2026-10-21: CVE-2026-93146 was added to this advisory.
2026-10-21: CVE-2026-97480 was added to this advisory.
2026-10-21: CVE-2026-97901 was added to this advisory.
2026-10-21: CVE-2026-97974 was added to this advisory.
2026-10-21: CVE-2026-97598 was added to this advisory.
2026-10-21: CVE-2026-93137 was added to this advisory.
2026-10-21: CVE-2026-92521 was added to this advisory.
2026-10-21: CVE-2026-97964 was added to this advisory.
2026-10-21: CVE-2026-98401 was added to this advisory.
2026-10-21: CVE-2026-98393 was added to this advisory.
2026-10-21: CVE-2026-97472 was added to this advisory.
2026-10-21: CVE-2026-98158 was added to this advisory.
2026-10-21: CVE-2026-92509 was added to this advisory.
2026-10-21: CVE-2026-93794 was added to this advisory.
2026-10-21: CVE-2026-93174 was added to this advisory.
2026-10-21: CVE-2026-90334 was added to this advisory.
2026-10-21: CVE-2026-93829 was added to this advisory.
2026-10-21: CVE-2026-98067 was added to this advisory.
2026-10-21: CVE-2026-98300 was added to this advisory.
2026-10-21: CVE-2026-90202 was added to this advisory.
2026-10-21: CVE-2026-93110 was added to this advisory.
2026-10-21: CVE-2026-98429 was added to this advisory.
2026-10-21: CVE-2026-97441 was added to this advisory.
2026-10-21: CVE-2026-97433 was added to this advisory.
2026-10-21: CVE-2026-97443 was added to this advisory.
2026-10-21: CVE-2026-97947 was added to this advisory.
2026-10-21: CVE-2026-89779 was added to this advisory.
2026-10-21: CVE-2026-97417 was added to this advisory.
2026-10-21: CVE-2026-98256 was added to this advisory.
2026-10-21: CVE-2026-90113 was added to this advisory.
2026-10-21: CVE-2026-97446 was added to this advisory.
2026-10-21: CVE-2026-97449 was added to this advisory.
2026-10-21: CVE-2026-98269 was added to this advisory.
2026-10-21: CVE-2026-98174 was added to this advisory.
2026-10-21: CVE-2026-98344 was added to this advisory.
2026-10-21: CVE-2026-98221 was added to this advisory.
2026-10-21: CVE-2026-97559 was added to this advisory.
2026-10-21: CVE-2026-92489 was added to this advisory.
2026-10-21: CVE-2026-90147 was added to this advisory.
2026-10-21: CVE-2026-97562 was added to this advisory.
2026-10-21: CVE-2026-93117 was added to this advisory.
2026-10-21: CVE-2026-90077 was added to this advisory.
2026-10-21: CVE-2026-97568 was added to this advisory.
2026-10-21: CVE-2026-98072 was added to this advisory.
2026-10-21: CVE-2026-90259 was added to this advisory.
2026-10-21: CVE-2026-97616 was added to this advisory.
2026-10-21: CVE-2026-98235 was added to this advisory.
2026-10-21: CVE-2026-68337 was added to this advisory.
2026-10-21: CVE-2026-90194 was added to this advisory.
2026-10-21: CVE-2026-93275 was added to this advisory.
2026-10-21: CVE-2026-90062 was added to this advisory.
2026-10-21: CVE-2026-72438 was added to this advisory.
2026-10-21: CVE-2026-93269 was added to this advisory.
2026-10-21: CVE-2026-90364 was added to this advisory.
2026-10-21: CVE-2026-90275 was added to this advisory.
2026-10-21: CVE-2026-98101 was added to this advisory.
2026-10-21: CVE-2026-100074 was added to this advisory.
2026-10-21: CVE-2026-89796 was added to this advisory.
2026-10-21: CVE-2026-98097 was added to this advisory.
2026-10-21: CVE-2026-97444 was added to this advisory.
2026-10-21: CVE-2026-97609 was added to this advisory.
2026-10-21: CVE-2026-98252 was added to this advisory.
2026-10-21: CVE-2026-98232 was added to this advisory.
2026-10-21: CVE-2026-98062 was added to this advisory.
2026-10-21: CVE-2026-97945 was added to this advisory.
2026-10-21: CVE-2026-98201 was added to this advisory.
2026-10-21: CVE-2026-90086 was added to this advisory.
2026-10-21: CVE-2026-97942 was added to this advisory.
2026-10-21: CVE-2026-98080 was added to this advisory.
2026-10-21: CVE-2026-90094 was added to this advisory.
2026-10-21: CVE-2026-98223 was added to this advisory.
2026-10-21: CVE-2026-97905 was added to this advisory.
2026-10-21: CVE-2026-97956 was added to this advisory.
2026-10-21: CVE-2026-98119 was added to this advisory.
2026-10-21: CVE-2026-92522 was added to this advisory.
2026-10-21: CVE-2026-97902 was added to this advisory.
2026-10-21: CVE-2026-90284 was added to this advisory.
2026-10-21: CVE-2026-98044 was added to this advisory.
2026-10-21: CVE-2026-92523 was added to this advisory.
2026-10-21: CVE-2026-90161 was added to this advisory.
2026-10-21: CVE-2026-97556 was added to this advisory.
2026-10-21: CVE-2026-92516 was added to this advisory.
2026-10-21: CVE-2026-97984 was added to this advisory.
2026-10-21: CVE-2026-90425 was added to this advisory.
2026-10-21: CVE-2026-97479 was added to this advisory.
2026-10-21: CVE-2026-90097 was added to this advisory.
2026-10-21: CVE-2026-89996 was added to this advisory.
2026-10-21: CVE-2026-98222 was added to this advisory.
2026-10-21: CVE-2026-90338 was added to this advisory.
2026-10-21: CVE-2026-90188 was added to this advisory.
2026-10-21: CVE-2026-92499 was added to this advisory.
2026-10-21: CVE-2026-97564 was added to this advisory.
2026-10-21: CVE-2026-90184 was added to this advisory.
2026-10-21: CVE-2026-89786 was added to this advisory.
2026-10-21: CVE-2026-97978 was added to this advisory.
2026-10-21: CVE-2026-90241 was added to this advisory.
2026-10-21: CVE-2026-97962 was added to this advisory.
2026-10-21: CVE-2026-93140 was added to this advisory.
2026-10-21: CVE-2026-93182 was added to this advisory.
2026-10-21: CVE-2026-97617 was added to this advisory.
2026-10-21: CVE-2026-98417 was added to this advisory.
2026-10-21: CVE-2026-98168 was added to this advisory.
2026-10-21: CVE-2026-93055 was added to this advisory.
2026-10-21: CVE-2026-90240 was added to this advisory.
2026-10-21: CVE-2026-90146 was added to this advisory.
2026-10-21: CVE-2026-98390 was added to this advisory.
2026-10-21: CVE-2026-98240 was added to this advisory.
2026-10-21: CVE-2026-98231 was added to this advisory.
2026-10-21: CVE-2026-97503 was added to this advisory.
2026-10-21: CVE-2026-89790 was added to this advisory.
2026-10-21: CVE-2026-98075 was added to this advisory.
2026-10-21: CVE-2026-98226 was added to this advisory.
2026-10-21: CVE-2026-92511 was added to this advisory.
2026-10-21: CVE-2026-93262 was added to this advisory.
2026-10-21: CVE-2026-97523 was added to this advisory.
2026-10-21: CVE-2026-97965 was added to this advisory.
2026-10-21: CVE-2026-90430 was added to this advisory.
2026-10-21: CVE-2026-90157 was added to this advisory.
2026-10-21: CVE-2026-81010 was added to this advisory.
2026-10-21: CVE-2026-90109 was added to this advisory.
2026-10-21: CVE-2026-90067 was added to this advisory.
2026-10-21: CVE-2026-93781 was added to this advisory.
2026-10-21: CVE-2026-98322 was added to this advisory.
2026-10-21: CVE-2026-93172 was added to this advisory.
2026-10-21: CVE-2026-90250 was added to this advisory.
2026-10-21: CVE-2026-98281 was added to this advisory.
2026-10-21: CVE-2026-90201 was added to this advisory.
2026-10-21: CVE-2026-90272 was added to this advisory.
2026-10-21: CVE-2026-93138 was added to this advisory.
2026-10-21: CVE-2026-98233 was added to this advisory.
2026-10-21: CVE-2026-98023 was added to this advisory.
2026-10-21: CVE-2026-97619 was added to this advisory.
2026-10-21: CVE-2026-98170 was added to this advisory.
2026-10-21: CVE-2026-93173 was added to this advisory.
2026-10-21: CVE-2026-90071 was added to this advisory.
2026-10-21: CVE-2026-98343 was added to this advisory.
2026-10-21: CVE-2026-98021 was added to this advisory.
2026-10-21: CVE-2026-90389 was added to this advisory.
2026-10-21: CVE-2026-97610 was added to this advisory.
2026-10-21: CVE-2026-92508 was added to this advisory.
2026-10-21: CVE-2026-92512 was added to this advisory.
2026-10-21: CVE-2026-98129 was added to this advisory.
2026-10-21: CVE-2026-97551 was added to this advisory.
2026-10-21: CVE-2026-90424 was added to this advisory.
2026-10-21: CVE-2026-90290 was added to this advisory.
2026-10-21: CVE-2026-98169 was added to this advisory.
2026-10-21: CVE-2026-90178 was added to this advisory.
2026-10-21: CVE-2026-90388 was added to this advisory.
2026-10-21: CVE-2026-90200 was added to this advisory.
2026-10-21: CVE-2026-93134 was added to this advisory.
2026-10-21: CVE-2026-97484 was added to this advisory.
2026-10-21: CVE-2026-90151 was added to this advisory.
2026-10-21: CVE-2026-97939 was added to this advisory.
2026-10-21: CVE-2026-89917 was added to this advisory.
2026-10-21: CVE-2026-93787 was added to this advisory.
2026-10-21: CVE-2026-98076 was added to this advisory.
2026-10-21: CVE-2026-98088 was added to this advisory.
2026-10-21: CVE-2026-93073 was added to this advisory.
2026-10-21: CVE-2026-97452 was added to this advisory.
2026-10-21: CVE-2026-98089 was added to this advisory.
2026-10-21: CVE-2026-72402 was added to this advisory.
2026-10-21: CVE-2026-98289 was added to this advisory.
2026-10-21: CVE-2026-98017 was added to this advisory.
2026-10-21: CVE-2026-90141 was added to this advisory.
2026-10-21: CVE-2026-98320 was added to this advisory.
2026-10-21: CVE-2026-93109 was added to this advisory.
2026-10-21: CVE-2026-98175 was added to this advisory.
2026-10-21: CVE-2026-90392 was added to this advisory.
2026-10-21: CVE-2026-98249 was added to this advisory.
2026-10-21: CVE-2026-93150 was added to this advisory.
2026-10-21: CVE-2026-98402 was added to this advisory.
2026-10-21: CVE-2026-98424 was added to this advisory.
2026-10-21: CVE-2026-97606 was added to this advisory.
2026-10-21: CVE-2026-97950 was added to this advisory.
2026-10-21: CVE-2026-98014 was added to this advisory.
2026-10-21: CVE-2026-98059 was added to this advisory.
2026-10-21: CVE-2026-64210 was added to this advisory.
2026-10-21: CVE-2026-98173 was added to this advisory.
2026-10-21: CVE-2026-97959 was added to this advisory.
2026-10-21: CVE-2026-98126 was added to this advisory.
2026-10-21: CVE-2026-72315 was added to this advisory.
2026-10-21: CVE-2026-93785 was added to this advisory.
2026-10-21: CVE-2026-98077 was added to this advisory.
2026-10-21: CVE-2026-97481 was added to this advisory.
2026-10-21: CVE-2026-90054 was added to this advisory.
2026-10-21: CVE-2026-90248 was added to this advisory.
2026-10-21: CVE-2026-90260 was added to this advisory.
2026-10-21: CVE-2026-92501 was added to this advisory.
2026-10-21: CVE-2026-97938 was added to this advisory.
2026-10-21: CVE-2026-90264 was added to this advisory.
2026-10-21: CVE-2026-98103 was added to this advisory.
2026-10-21: CVE-2026-93112 was added to this advisory.
2026-10-21: CVE-2026-97445 was added to this advisory.
2026-10-21: CVE-2026-93825 was added to this advisory.
2026-10-21: CVE-2026-90013 was added to this advisory.
2026-10-21: CVE-2026-89785 was added to this advisory.
2026-10-21: CVE-2026-98255 was added to this advisory.
2026-10-21: CVE-2026-97477 was added to this advisory.
2026-10-21: CVE-2026-98394 was added to this advisory.
2026-10-21: CVE-2026-98319 was added to this advisory.
2026-10-21: CVE-2026-89783 was added to this advisory.
2026-10-21: CVE-2026-97899 was added to this advisory.
2026-10-21: CVE-2026-98369 was added to this advisory.
2026-10-21: CVE-2026-90416 was added to this advisory.
2026-10-21: CVE-2026-90159 was added to this advisory.
2026-10-21: CVE-2026-90148 was added to this advisory.
2026-10-21: CVE-2026-90186 was added to this advisory.
2026-10-21: CVE-2026-93800 was added to this advisory.
2026-10-21: CVE-2026-98171 was added to this advisory.
2026-10-21: CVE-2026-90318 was added to this advisory.
2026-10-21: CVE-2026-98071 was added to this advisory.
2026-10-21: CVE-2026-98317 was added to this advisory.
2026-10-21: CVE-2026-97437 was added to this advisory.
2026-10-21: CVE-2026-98082 was added to this advisory.
2026-10-21: CVE-2026-97925 was added to this advisory.
2026-10-21: CVE-2026-92520 was added to this advisory.
2026-10-21: CVE-2026-98273 was added to this advisory.
2026-10-21: CVE-2026-90329 was added to this advisory.
2026-10-21: CVE-2026-98007 was added to this advisory.
2026-10-21: CVE-2026-92494 was added to this advisory.
2026-10-21: CVE-2026-90235 was added to this advisory.
2026-10-15: CVE-2026-99999 was added to this advisory.