linux kernel

CVE-2026-31424 is a good example of the kind of Linux kernel vulnerability that looks narrow on paper but reveals a deeper subsystem design flaw once you unpack the mechanics. The issue affects the netfilter x_tables compatibility layer and centers on how xt_check_match and xt_check_target...

CVE-2026-31423 is a sharp reminder that kernel bugs do not need to be glamorous to matter. In this case, the Linux kernel’s sch_hfsc traffic scheduler could hit a divide-by-zero in rtsc_min() when an internal slope calculation produced a boundary-value result that was silently truncated to zero...

Linux kernel maintainers have assigned CVE-2026-31416 to a narrow but noteworthy bug in nfnetlink_log, the netfilter logging path that formats messages for userspace. The issue is not a classic memory-corruption headline; instead, it is a correctness fix that ensures NLMSG_DONE accounts for the...

Microsoft’s refreshed DXGKRNL work for Linux is less a simple driver update than a revealing sign of how far Windows Subsystem for Linux has evolved, and how much harder it has become to keep GPU plumbing both useful and acceptable to the broader kernel community. The core idea is...

CVE-2026-23405 exposes a deceptively simple AppArmor flaw with potentially serious consequences: the Linux security module did not properly bound the number of levels in policy namespaces. In practical terms, that means a local attacker could potentially construct an excessively deep namespace...

When Microsoft’s update guide flags a Linux kernel issue like CVE-2026-31394, it is usually a sign that the bug is both specific and operationally important: not headline-grabbing on its own, but capable of taking down a system in a real deployment. This one sits in mac80211, the Linux wireless...

Linux’s Bluetooth stack has a fresh use-after-free flaw, tracked as CVE-2026-31408, and the issue sits in one of the trickier parts of kernel networking: the SCO path that handles synchronous audio traffic. The bug arises in sco_recv_frame(), where the code reads conn->sk while holding...

CVE-2026-23442 is a small-looking Linux kernel fix with the kind of operational consequences that make networking teams sit up and take notice. The vulnerability centers on IPv6 Segment Routing over IPv6 (SRv6) paths, where the kernel can end up dereferencing a NULL idev pointer if the device...

The emergence of CVE-2026-23473 highlights a subtle but important reliability flaw in Linux’s io_uring networking path, where a wakeup race can cause a multishot receive operation to miss a terminal EOF/HUP condition and wait forever. According to the published kernel description, the bug...

The Linux kernel’s Wi-Fi mesh stack has picked up another security-relevant crash fix, and this one is a reminder that optional protocol elements can be just as dangerous as the core packet parser. CVE-2026-23396 tracks a NULL pointer dereference in mac80211’s mesh_matches_local() routine, where...

The security issue behind CVE-2026-23374 appears to be a narrowly scoped Linux kernel bug in blktrace, where __this_cpu_read() and __this_cpu_write() were used in a context that could be preempted, creating a correctness and hardening problem rather than a flashy exploit primitive. The phrasing...

The Linux kernel is once again at the center of a subtle but important reliability fix, and this time the issue sits inside irqchip/sifive-plic, the interrupt-controller driver used on SiFive RISC-V platforms. The vulnerability, identified as CVE-2026-23287, is described as a frozen interrupt...

CVE-2026-23339 is a small-looking Linux kernel bug with the kind of lifecycle mistake that kernel engineers never ignore: nci_transceive() takes ownership of an skb, then returns early on several error paths without freeing it. The result is a memory leak on the -EPROTO, -EINVAL, and -EBUSY...

A newly tracked Linux kernel flaw, CVE-2026-23334, is drawing attention because it sits in a low-level USB CAN driver, not because it advertises an obvious remote exploit path. The bug affects the Fintek F81604 USB CAN implementation and was fixed by teaching the driver to reject short interrupt...

In early 2026, the Linux kernel’s NFC stack gained a security fix that is easy to overlook at a glance but important in practice: CVE-2026-23372 closes a race in the rawsock path where transmit work could outlive the socket teardown sequence. The bug sits in a classic kernel danger...

When Linux boots with ipv6.disable=1, a narrow but important networking assumption can collapse in the VXLAN transmit path, producing a kernel NULL pointer dereference when an IPv6 packet is injected into the interface. The upstream fix for CVE-2026-23293 adds an early guard in...

Linux has assigned CVE-2026-23371 to a scheduler bug in the SCHED_DEADLINE code path, and the issue is notable less for a classic crash-and-burn exploit pattern than for what it reveals about the fragility of deadline scheduling under priority inheritance. The flaw centers on a missing...

CVE-2026-23378 is a Linux kernel flaw in the act_ife traffic-control action that turns a seemingly routine metadata update into a memory-safety problem. The bug sits in the metalist handling path, where replacing an ife action could append new metadata instead of replacing the old entries...

The Microsoft Security Response Center entry for CVE-2026-23348 points to a Linux kernel issue in the CXL path: a race involving the nvdimm_bus object when creating nvdimm objects. In practical terms, that means a kernel subsystem responsible for persistent memory enumeration and device...