linux kernel

Microsoft’s refreshed DXGKRNL work for Linux is less a simple driver update than a revealing sign of how far Windows Subsystem for Linux has evolved, and how much harder it has become to keep GPU plumbing both useful and acceptable to the broader kernel community. The core idea is...

CVE-2026-23405 exposes a deceptively simple AppArmor flaw with potentially serious consequences: the Linux security module did not properly bound the number of levels in policy namespaces. In practical terms, that means a local attacker could potentially construct an excessively deep namespace...

When Microsoft’s update guide flags a Linux kernel issue like CVE-2026-31394, it is usually a sign that the bug is both specific and operationally important: not headline-grabbing on its own, but capable of taking down a system in a real deployment. This one sits in mac80211, the Linux wireless...

Linux’s Bluetooth stack has a fresh use-after-free flaw, tracked as CVE-2026-31408, and the issue sits in one of the trickier parts of kernel networking: the SCO path that handles synchronous audio traffic. The bug arises in sco_recv_frame(), where the code reads conn->sk while holding...

CVE-2026-23442 is a small-looking Linux kernel fix with the kind of operational consequences that make networking teams sit up and take notice. The vulnerability centers on IPv6 Segment Routing over IPv6 (SRv6) paths, where the kernel can end up dereferencing a NULL idev pointer if the device...

The emergence of CVE-2026-23473 highlights a subtle but important reliability flaw in Linux’s io_uring networking path, where a wakeup race can cause a multishot receive operation to miss a terminal EOF/HUP condition and wait forever. According to the published kernel description, the bug...

The Linux kernel’s Wi-Fi mesh stack has picked up another security-relevant crash fix, and this one is a reminder that optional protocol elements can be just as dangerous as the core packet parser. CVE-2026-23396 tracks a NULL pointer dereference in mac80211’s mesh_matches_local() routine, where...

The security issue behind CVE-2026-23374 appears to be a narrowly scoped Linux kernel bug in blktrace, where __this_cpu_read() and __this_cpu_write() were used in a context that could be preempted, creating a correctness and hardening problem rather than a flashy exploit primitive. The phrasing...

The Linux kernel is once again at the center of a subtle but important reliability fix, and this time the issue sits inside irqchip/sifive-plic, the interrupt-controller driver used on SiFive RISC-V platforms. The vulnerability, identified as CVE-2026-23287, is described as a frozen interrupt...

CVE-2026-23339 is a small-looking Linux kernel bug with the kind of lifecycle mistake that kernel engineers never ignore: nci_transceive() takes ownership of an skb, then returns early on several error paths without freeing it. The result is a memory leak on the -EPROTO, -EINVAL, and -EBUSY...

A newly tracked Linux kernel flaw, CVE-2026-23334, is drawing attention because it sits in a low-level USB CAN driver, not because it advertises an obvious remote exploit path. The bug affects the Fintek F81604 USB CAN implementation and was fixed by teaching the driver to reject short interrupt...

In early 2026, the Linux kernel’s NFC stack gained a security fix that is easy to overlook at a glance but important in practice: CVE-2026-23372 closes a race in the rawsock path where transmit work could outlive the socket teardown sequence. The bug sits in a classic kernel danger...

When Linux boots with ipv6.disable=1, a narrow but important networking assumption can collapse in the VXLAN transmit path, producing a kernel NULL pointer dereference when an IPv6 packet is injected into the interface. The upstream fix for CVE-2026-23293 adds an early guard in...

Linux has assigned CVE-2026-23371 to a scheduler bug in the SCHED_DEADLINE code path, and the issue is notable less for a classic crash-and-burn exploit pattern than for what it reveals about the fragility of deadline scheduling under priority inheritance. The flaw centers on a missing...

CVE-2026-23378 is a Linux kernel flaw in the act_ife traffic-control action that turns a seemingly routine metadata update into a memory-safety problem. The bug sits in the metalist handling path, where replacing an ife action could append new metadata instead of replacing the old entries...

The Microsoft Security Response Center entry for CVE-2026-23348 points to a Linux kernel issue in the CXL path: a race involving the nvdimm_bus object when creating nvdimm objects. In practical terms, that means a kernel subsystem responsible for persistent memory enumeration and device...

CVE-2026-23313 is a deceptively small Linux kernel fix with outsized value for anyone tracking networking stack reliability, especially in enterprise and virtualized environments. Microsoft’s Security Update Guide identifies the issue as “i40e: Fix preempt count leak in napi poll tracepoint,”...

The Linux kernel’s CVE-2026-23359 is a classic example of how a small-looking bounds mistake in BPF devmap code can turn into a real memory-safety problem. The issue sits in get_upper_ifindexes(), where the kernel walks every upper device and writes interface indices into an array without...

Linux kernel maintainers have assigned CVE-2026-23391 to a netfilter / xt_CT race condition fix that drops packets still sitting in nfqueue when a template rule is removed. The issue matters because the template can reference stateful objects such as a helper module or a timeout policy, and...

Linux’s latest scheduler-related security fix, CVE-2026-23379, is a reminder that even “small” arithmetic mistakes in kernel offload code can have outsized consequences. The flaw sits in the ETS traffic scheduler path, where the kernel computes weighted round-robin parameters for hardware...