linux kernel

CVE-2026-53304 is a newly published Linux kernel vulnerability, added to NVD on June 26, 2026, in the SCSI generic driver, where an invalid def_reserved_size module parameter can trigger a CPU soft lockup when a process opens /dev/sgX. The bug is not a cinematic remote-code-execution disaster...

CVE-2026-53284 is a newly published Linux kernel vulnerability in Btrfs, disclosed in the NVD on June 26, 2026 and modified on June 28, that fixes a transaction writeback bug where dirty metadata tracking could be cleared after failed writes, leaving cleanup code unable to release dirty extent...

CVE-2026-53292 is a newly published Linux kernel denial-of-service vulnerability, disclosed through kernel.org and added to NVD on June 26, 2026, in the Phonet networking code path where a failed autobind operation could trigger a kernel BUG and panic the system. The bug is small, old, and...

CVE-2026-53252 is a newly published Linux kernel Bluetooth vulnerability, disclosed through NVD on June 25, 2026, that fixes a memory leak in the hci_alloc_dev() error path when early Bluetooth HCI UART setup fails before device registration completes. It is not the kind of bug that should send...

CVE-2026-53176 is a newly published Linux kernel denial-of-service flaw, disclosed through Microsoft’s Security Update Guide and kernel vulnerability tracking on June 25, 2026, affecting the IB/isert driver used for iSCSI Extensions for RDMA target logins. The bug is not a Windows desktop...

CVE-2026-53091 is a newly published Linux kernel networking vulnerability, added to NVD on June 24, 2026 and modified on June 28, that affects packet handling in qdisc_pkt_len_segs_init() and has been rated high severity by kernel.org with a CVSS 3.1 score of 8.4. The bug is not a splashy remote...

CVE-2026-53080 is a newly published Linux kernel vulnerability, added to the NVD dataset on June 24, 2026, in which the cls_fw traffic-control classifier can dereference a NULL pointer after malformed old-style filters are briefly exposed to the packet datapath. The bug is narrow, technical, and...

CVE-2026-53135 is a newly published Linux kernel vulnerability in AMD’s display driver, disclosed through kernel.org and added to NVD on June 25, 2026, affecting the drm/amd/display debugfs path used for DisplayPort SDP message testing on systems using amdgpu. The bug is not a Windows...

CVE-2026-53160, published June 25, 2026, describes a Linux kernel FastRPC driver use-after-free race in fastrpc_map_create, where a concurrent memory-unmap operation can free a map object before the caller safely takes a reference to it. The bug is not a Windows kernel flaw, but its appearance...

CVE-2026-53199 is a newly published Linux kernel vulnerability affecting the Hyper-V network driver, hv_netvsc, where an unsafe memory-address conversion in netvsc_copy_to_send_buf can crash certain Linux guests during packet transmission on Hyper-V-based systems, including Windows-hosted and...

CVE-2026-53245 is a newly published Linux kernel vulnerability, added to NVD on June 25, 2026, in the Multiple Registration Protocol parser under net/802/mrp.c, where malformed vector attributes can make the kernel misread MRP events and corrupt subsequent packet parsing. The bug is not the kind...

CVE-2026-53262 is a Linux kernel vulnerability published on June 25, 2026, covering a use-after-free bug in the PPP-over-L2TP ioctl path, with the underlying fix holding a proper session reference inside pppol2tp_ioctl() before user-space copy operations can sleep. For WindowsForum readers, the...

CVE-2026-53225 is a Linux kernel SCTP vulnerability disclosed in late June 2026 that fixes an uninitialized-memory read in __sctp_rcv_asconf_lookup(), where a malformed ASCONF chunk can make the receive path read beyond a truncated IPv6 address parameter. The bug is narrow, but the lesson is...

CVE-2026-53000 is a newly published Linux kernel vulnerability in netfilter NAT hook handling, disclosed through kernel.org and added to NVD on June 24, 2026, with a kernel.org CVSS 3.1 score of 7.8 High and fixes identified in stable kernel commits. The bug is not a flashy remote worm...

Linux 7.2 is adding a new wacom_w9000 input driver for Wacom W9000-series pen-enabled touchscreens, with verified support for W9002 and W9007A devices and a path for nearby models such as W9001 and W9010 once IDs and behavior are confirmed. That sounds like a small kernel changelog item, because...

NVD’s June 24, 2026 update for CVE-2026-46140 now lists Linux kernel CPE ranges covering affected 6.6.142-through-6.7, 6.11-through-6.12.87, 6.13-through-6.18.29, 6.19-through-7.0.6, and 7.1 release candidates. That means the obvious “missing CPE” concern has mostly been answered, though the...

Microsoft’s original Surface RT, announced in June 2012 and released that October, is finally getting mainline Linux battery and charger reporting through a new surface-rt-ec power-supply driver queued for Linux 7.2. That is a small patch for a very old tablet, but it is not a small story. It is...

CVE-2026-46331 is a newly published Linux kernel vulnerability, disclosed by kernel.org and added to NVD on June 16, 2026, that fixes a net/sched packet-editing bug where partial copy-on-write handling in pedit could corrupt the kernel page cache. The bug is narrow, deeply technical, and not yet...

Linux 7.1 was released by Linus Torvalds on June 14, 2026, bringing a rewritten optional NTFS driver, Steam Deck OLED audio fixes, Apple Silicon battery reporting, AMD power-management changes, Intel FRED enablement, and a large purge of obsolete kernel code. The interesting part is not that...

Linux 7.1 became stable on June 14, 2026, bringing a new NTFS driver, Intel FRED support for Panther Lake-era processors, faster Intel Arc Battlemage graphics, and other hardware-facing improvements, while Intel separately moved to end development of its open-source BigDL AI framework by June...