linux kernel

CVE-2026-31658: Linux Kernel Altera TSE Driver Memory Leak Fixed After DMA Mapping Failure Published: April 26, 2026 CVE: CVE-2026-31658 Component: Linux kernel networking driver, altera-tse Affected area: Altera Triple-Speed Ethernet transmit path Issue type: Memory leak / potential...

CVE-2026-31634 is a small Linux kernel fix with a large lesson for anyone running mixed Windows, Linux, cloud, or container infrastructure: resource-management bugs still matter, even when they look modest on paper. The flaw sits in the RxRPC networking subsystem, where a missing guard in...

CVE-2026-31675 is a newly published Linux kernel vulnerability that turns a rarely discussed testing feature into a reminder that edge-case packet handling can still matter in production security. The flaw sits in sch_netem, the kernel’s network emulation queuing discipline, where packet...

CVE-2026-31677 is a freshly published Linux kernel vulnerability that lands in a part of the kernel many administrators rarely think about: the AF_ALG cryptographic socket interface. The issue, now included in the NVD dataset but not yet scored by NIST, centers on receive-side scatterlist...

CVE-2026-31588 is the kind of Linux kernel flaw that looks tiny in code review and important in production: a narrow KVM x86 MMIO use-after-free triggered by page-splitting emulated writes, userspace exits, and stale stack-backed data. The fix changes how small write values are stored when KVM...

CVE-2026-31582 is a small Linux kernel bug with a familiar lesson: even niche USB hardware can expose fragile lifetime rules inside kernel drivers. The flaw sits in the POWER-Z hardware monitoring driver, where a USB disconnect could leave a freed URB pointer reachable by a later sysfs read. NVD...

CVE-2026-31616 is a narrowly scoped but technically important Linux kernel vulnerability in the USB gadget subsystem, where a hostile USB host can trigger a fragment-array overflow in the Phonet gadget receive path. The flaw sits in f_phonet, a legacy but still shipped kernel function used to...

CVE-2026-31665 is a newly published Linux kernel vulnerability in netfilter, the packet-filtering framework that underpins nftables, conntrack, NAT, and many Linux firewall deployments. The bug is a use-after-free in the nftables connection-tracking timeout object destruction path, where the...

CVE-2026-31638 is a newly published Linux kernel vulnerability in the RxRPC networking subsystem. The issue was published by NVD on April 24, 2026, with kernel.org as the source, and Microsoft has also added it to the Microsoft Security Response Center Security Update Guide. At the time of...

CVE-2026-31622 is not a noisy internet-facing vulnerability, but it is exactly the kind of low-level kernel flaw that deserves attention from Windows, Linux, and mixed-fleet administrators alike. The issue sits in the Linux kernel NFC digital stack, where a malicious NFC peer can reportedly...

CVE-2026-31674 is the kind of Linux kernel flaw that looks modest at first glance but deserves careful attention from anyone responsible for Linux firewalls, container hosts, routers, appliances, or mixed Windows-Linux infrastructure. The issue sits in netfilter, specifically the IPv6 ip6t_rt...

CVE-2026-31682 is a newly published Linux kernel vulnerability that lands in an unusually important corner of modern infrastructure: the bridge networking path used by virtualization hosts, containers, appliances, and cloud platforms. The flaw sits in br_nd_send(), where Linux bridge code parsed...

A newly published Linux kernel vulnerability, CVE-2026-31680, highlights a familiar but consequential class of networking bugs: a lifetime mismatch in code protected by RCU, Linux’s high-performance read-side synchronization model. The flaw sits in the IPv6 flow label implementation, where a...

CVE-2026-31685 is a newly published Linux kernel vulnerability that turns a tiny netfilter guard condition into a useful reminder about how fragile packet parsing can be at kernel speed. The flaw sits in ip6t_eui64, an IPv6 iptables match module that compares an Ethernet-derived EUI-64...

CVE-2026-31639 is a small-looking Linux kernel fix with the kind of operational footprint that administrators should not ignore: an rxrpc key reference count leak tied to client call teardown. The issue, published on April 24, 2026 and still awaiting full NVD enrichment, centers on a missing...

CVE-2026-31560 is a small Linux kernel fix with an outsized lesson: sometimes the crash is not in the failed hardware transaction, but in the error log that tries to describe it. The flaw sits in the DesignWare SPI DMA path, where a timeout or error could leave the driver without a current SPI...

A small Linux kernel bounds-check fix has become a useful case study in how modern vulnerability management treats even niche hardware paths as security-relevant. CVE-2026-31627 addresses an SMBus block-read length validation flaw in the Linux kernel’s Samsung s3c24xx I2C host driver, where the...

CVE-2026-23420 is not the kind of Linux kernel vulnerability that produces instant panic, but it is exactly the kind that separates mature patch management from checkbox security. The issue sits in the wlcore Wi-Fi driver, where a mutex could be unlocked without first being locked, creating an...

CVE-2026-31570: Linux Kernel CAN Gateway Heap Out-of-Bounds Access in cgw_csum_crc8_rel() Short version: CVE-2026-31570 is a Linux kernel vulnerability in the SocketCAN CAN gateway code, specifically in the CRC8 checksum handling path in net/can/gw.c. The bug can cause out-of-bounds heap reads...

Overview CVE-2026-31637 is a Linux kernel vulnerability in the RxRPC security path, specifically in the rxkad authentication code. The issue is small at the code level but important in principle: the kernel attempted to decrypt an RxKAD response ticket, then continued parsing the ticket buffer...