linux kernel

CVE-2026-31496 is a narrowly scoped Linux kernel vulnerability, but it sits in one of the kernel’s most security-sensitive corners: netfilter and conntrack expectations. The newly published record says the bug was resolved by skipping expectation entries that do not belong to the current network...

The Linux kernel has a new CVE tied to a subtle but important synchronization bug in the PMBus regulator path, and this one is a good example of how a seemingly narrow race condition can ripple into broader reliability concerns. CVE-2026-31486 covers a fix in hwmon: (pmbus/core) Protect...

CVE-2026-31486 is a useful reminder that some of the most serious Linux kernel bugs are not glamorous memory-corruption exploits but plain old synchronization failures that can still destabilize a system. In this case, the flaw sits in the hwmon pmbus/core path, where regulator voltage...

CVE-2026-31450 is a textbook example of how a tiny ordering mistake in the Linux kernel can become a real crash in the field. The bug lives in ext4’s journaling glue, where ext4_inode_attach_jinode() could expose a partially initialized jinode to concurrent readers before the embedded jbd2_inode...

The Linux kernel’s ext4 filesystem has a newly published vulnerability, CVE-2026-31448, that can trap the filesystem in an infinite loop under a narrow but nasty failure sequence involving extent allocation, xattr block reuse, and metadata inconsistency. NVD published the record on April 22...

When CVE-2026-31461 landed, it looked like a small kernel hygiene issue with a very specific trigger: in amdgpu_dm, the driver could overwrite aconnector->drm_edid on resume without freeing the previous allocation first. The result was a memory leak in the Linux kernel’s AMD display path, and...

The Linux kernel has a new security issue on the radar, and this one is a reminder that even highly specialized storage and virtualization paths can leak sensitive state when a single bounds check is missed. CVE-2026-31464 affects the ibmvfc SCSI driver, where a malicious or compromised VIO...

Background CVE-2026-31474 is a Linux kernel use-after-free in the CAN ISO-TP path, specifically in isotp_sendmsg, where the transmit buffer can be freed too early while the sender is still consuming it for the final CAN frame. The kernel record describes a race between isotp_sendmsg and...

In this article, I'll explain the significance of CVE-2026-23410, a Linux kernel AppArmor race condition that can turn into a use-after-free and, under the right circumstances, a serious denial-of-service or even broader compromise vector. The issue sits in a subtle corner of AppArmor’s...

The Linux kernel has another networking-focused security fix on its hands, and this one is a classic example of how a tiny input-validation oversight can escalate into a system-wide stability problem. CVE-2026-31420 affects the bridge MRP path, where a zero test interval supplied through netlink...

The Linux kernel has received a fresh netfilter fix under CVE-2026-31414, and although the NVD entry is still awaiting enrichment, the upstream remediation is already clear: nf_conntrack_expect now uses the expectation’s stored helper pointer instead of calling into nfct_help() in contexts where...

Overview A newly assigned Linux kernel CVE, CVE-2026-31421, highlights a small but very real class of bug that security teams have learned to take seriously: a NULL pointer dereference in the traffic control classifier path. The flaw sits in net/sched/cls_fw, the classic firewall-style...

CVE-2026-31419 is a good example of how a kernel bug can look deceptively narrow while still carrying real operational weight. The flaw sits in the Linux bonding driver’s broadcast transmit path, where the code reused the original skb for the “last” slave and cloned it for the others. Under...

CVE-2026-31427 is a small-looking Linux kernel bug with an outsized lesson: a stack variable meant to carry RTP address state can remain uninitialized, then get handed to the SIP NAT helper and used to rewrite SDP fields with whatever happens to be in memory. In the common case where stack...

CVE-2026-31424 is a good example of the kind of Linux kernel vulnerability that looks narrow on paper but reveals a deeper subsystem design flaw once you unpack the mechanics. The issue affects the netfilter x_tables compatibility layer and centers on how xt_check_match and xt_check_target...

CVE-2026-31423 is a sharp reminder that kernel bugs do not need to be glamorous to matter. In this case, the Linux kernel’s sch_hfsc traffic scheduler could hit a divide-by-zero in rtsc_min() when an internal slope calculation produced a boundary-value result that was silently truncated to zero...

Linux kernel maintainers have assigned CVE-2026-31416 to a narrow but noteworthy bug in nfnetlink_log, the netfilter logging path that formats messages for userspace. The issue is not a classic memory-corruption headline; instead, it is a correctness fix that ensures NLMSG_DONE accounts for the...

Microsoft’s refreshed DXGKRNL work for Linux is less a simple driver update than a revealing sign of how far Windows Subsystem for Linux has evolved, and how much harder it has become to keep GPU plumbing both useful and acceptable to the broader kernel community. The core idea is...

CVE-2026-23405 exposes a deceptively simple AppArmor flaw with potentially serious consequences: the Linux security module did not properly bound the number of levels in policy namespaces. In practical terms, that means a local attacker could potentially construct an excessively deep namespace...

When Microsoft’s update guide flags a Linux kernel issue like CVE-2026-31394, it is usually a sign that the bug is both specific and operationally important: not headline-grabbing on its own, but capable of taking down a system in a real deployment. This one sits in mac80211, the Linux wireless...