Live threat intelligence radar

A NULL-pointer dereference vulnerability was fixed in the Linux kernel's i2c core subsystem. The flaw occurred when adapter registration failed, causing the release callback to dereference an uninitialized completion structure. Prior to the fix, this failure resulted in a minor memory leak instead of a crash. The issue affects multiple versions of the linux-hwe-edge kernel prior to version 7.0.0 with specific builds identified. A patch is available that resolves this issue.

A vulnerability in the Linux kernel's ethtool tsconfig component was fixed by ensuring the ethnl_ops_complete() function is called after ethnl_ops_begin() in error paths. This resolves an issue where missing completion calls could lead to improper operation handling. The flaw affects various Linux kernel versions prior to 7.0.0-1014.14~24.04.1 and specific earlier builds. The issue has been addressed in multiple fixed kernel releases. The vulnerability has a medium severity score and no known exploits in the wild.

CVE-2026-64522 is a high-severity vulnerability in the Linux kernel's net/mlx5e driver related to eswitch mode block underflow during IPsec acquire SA processing. The flaw occurs because the code decrements a counter without a matching increment when handling temporary acquire-flow SAs, potentially leading to inconsistent state. This issue has been fixed in Linux kernel versions 7.0.0 and later.

A deadlock vulnerability was identified and fixed in the Linux kernel's pinctrl subsystem for the Amlogic A4 platform. The issue occurs when accessing the pinconf-pins sysfs node, where a mutex is acquired twice leading to a deadlock. The fix replaces the problematic function call with a non-locking variant to prevent this condition.

A vulnerability in the Linux kernel's NFSD subsystem caused an infinite loop during layout state revocation. The issue arises because the revocation function does not properly set a status flag before calling a close operation, causing a retry loop to repeatedly find the same layout state and hang indefinitely. This flaw has been fixed in Linux kernel versions 7.0.0 and later.

A double-free vulnerability was identified and fixed in the Linux kernel's drm/xe/gsc driver. The issue occurs in the error handling path of xe_gsc_init_post_hwconfig(), where a managed buffer object (BO) is explicitly freed despite already having a devm cleanup action registered, leading to a double-free scenario. This flaw has been corrected by removing the explicit free and relying on devm to manage cleanup, consistent with other similar calls.

A vulnerability in the Linux kernel's AMD GPU driver (drm/amdgpu/vce1) related to incorrect calculation of firmware size and offsets has been fixed. The issue involved the VCPU buffer object size not accounting for the firmware offset, potentially leading to out-of-bounds access. The fix ensures proper alignment and size checks for the firmware microcode. This vulnerability is addressed in Linux kernel versions 7.0.0 and later.

A vulnerability in the Linux kernel's mac80211 wifi subsystem related to MLE defragmentation was fixed. The flaw involved incorrect handling of multi-link elements (MLE) in non-transmitted profiles, causing potential heap overruns and incorrect data parsing. This issue was resolved by improving the defragmentation routine to correctly track the container along with the pointer. The vulnerability affects specific Linux kernel versions prior to 7.0.0 with certain build identifiers. The fix is included in Linux kernel versions 7.0.0 and later with specified builds.

A memory management flaw in the Linux kernel's Rust block subsystem was fixed. The issue involved improper cleanup of GenDisk objects during error handling in GenDiskBuilder::build(), leading to resource leaks of temporary gendisk and request_queue structures. This could cause retained blk-mq state after tag sets were dropped. The fix ensures proper reference dropping to complete the release path and prevent leaks.

A vulnerability in the Linux kernel's rtw89 wifi driver causes improper handling of malformed AMPDU frames. The flaw leads to unexpected packet drops, particularly during busy traffic and rekey processes, which can cause disconnection from the access point.