A vulnerability identified as CVE-2026-98609 involves an object leak in the drm/virtio component when the function drm_gem_handle_create() fails. This issue affects Microsoft products version 3.0 and 4.0. No CVSS score or detailed impact information is provided.
A vulnerability identified as CVE-2026-98573 affects Microsoft products, specifically versions 3.0 and 4.0. It involves a pull-bound underflow issue in the skb_checksum_setup_ipv6() function within the network socket buffer (skbuff) handling. No CVSS score or detailed impact information is provided.
CVE-2026-98646 is a vulnerability involving the skipping of the cond_resched() function in inet_csk_listen_stop() when operating under BPF context. The vulnerability affects Microsoft products with versions 3.0 and 4.0. No detailed impact or exploitation information is provided.
This vulnerability involves the Bluetooth hci_sock component where event length validation is insufficient before filtering. It affects Microsoft products versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.
This vulnerability involves the network component 'xps' in Microsoft products version 3.0 and 4.0, where an out of range traffic class is rejected. No detailed technical information or impact description is provided.
A vulnerability in the Bluetooth RFCOMM component causes a NULL pointer dereference due to improper handling of dlc->session in RFCOMM_CONNINFO. This flaw affects Microsoft products with versions 3.0 and 4.0.
This vulnerability, identified as CVE-2026-98561, relates to the handling of IPsec RX state under the XArray lock in Microsoft software versions 3.0 and 4.0. No detailed technical information or impact description is provided. The advisory references Microsoft's support lifecycle for further information.
A vulnerability identified as CVE-2026-98608 involves an object leak in the function virtio_gpu_resource_create_ioctl() within the drm/virtio component. The issue has been published but lacks detailed technical information and CVSS scoring. The affected versions are Microsoft product versions 3.0 and 4.0.
A vulnerability identified as CVE-2026-98499 affects Microsoft products versions 3.0 and 4.0 related to the HID wacom driver, specifically an out-of-bounds (OOB) read issue in the function wacom_wac_pen_serial_enforce(). The advisory provides no detailed technical information or impact description beyond the identification of the flaw. No CVSS score or exploit information is available.
A vulnerability identified as CVE-2026-98531 affects Microsoft products version 3.0 and 4.0 related to IPv6 Segment Routing (SR). The issue involves enforcing exact attribute length for the SEG6_ATTR_DST attribute. No CVSS score or detailed impact information is provided.
This vulnerability concerns a reference leak in the drm/nouveau driver component, specifically in the nv1a_ram_new() function. It affects Microsoft products version 3.0 and 4.0. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation or available patches.
This vulnerability, identified as CVE-2026-98621, relates to the network component 'gue' in Microsoft software, specifically addressing the rejection of invalid REMCSUM offsets. The advisory references Microsoft's support lifecycle for software but does not provide detailed technical or impact information.
CVE-2026-98536 is a reported vulnerability related to Microsoft software versions 3.0 and 4.0. The provided information is minimal and does not describe the nature of the vulnerability, its impact, or exploitation details. No CVSS score or detailed technical data is available.
This vulnerability involves a use-after-free issue in the HID alps driver related to input2 registration failure. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.
A vulnerability identified as CVE-2026-98498 involves a reference leak in the function mlx5_tc_ct_shared_counter_get() within the net/mlx5 component. The affected versions are 3.0 and 4.0. No CVSS score or detailed impact information is provided, and there is no indication of known exploits in the wild. No patch or remediation details are available in the provided data.
A vulnerability identified as CVE-2026-98636 affects Microsoft products involving squashfs, where a missing dictionary size range check could lead to a shift-out-of-bounds condition. The vulnerability is present in versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.
CVE-2026-98631 is a vulnerability in Microsoft products version 3.0 and 4.0 related to the xsk component, specifically involving the use of a 32-bit compare in xsk_map_gen_lookup. No detailed impact or exploitation information is provided.
CVE-2026-98625 is a published vulnerability related to the netfilter flowtable component, specifically involving the publication of HW_DEAD after a worker process completes. The information provided is minimal and does not include technical details, impact, or remediation guidance.
This vulnerability involves a memory leak in the drm/virtio component related to fence event handling on execbuffer failure. It affects specific versions 3.0 and 4.0 of the Microsoft product. No CVSS score or detailed impact information is provided.
This vulnerability involves a NULL pointer dereference occurring during the unbind operation of MT7531 and MT7621 components in Microsoft software versions 3.0 and 4.0. The issue can cause a system crash or instability when the affected components are unbound.