cipso: adjust cached option offsets when removing CIPSO
Advisory content revised
CVE-2026-99064
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecuritydpaa2-switch: fix the error path in dpaa2_switch_rx()
dpaa2-switch: fix the error path in dpaa2_switch_rx()
Advisory content revised
CVE-2026-98911
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping
drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping
Advisory content revised
CVE-2026-98520
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/i915/gem: Prevent overstepping exec array boundary
drm/i915/gem: Prevent overstepping exec array boundary
Advisory content revised
CVE-2026-99006
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/nouveau/dmem: pin VRAM for the whole registered range
drm/nouveau/dmem: pin VRAM for the whole registered range
Advisory content revised
CVE-2026-98518
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
Advisory content revised
CVE-2026-98517
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/nouveau: RCU-free the scheduler-containing nouveau_sched
drm/nouveau: RCU-free the scheduler-containing nouveau_sched
Advisory content revised
CVE-2026-98512
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/nouveau: fix double-free in nvif_vmm_dtor
drm/nouveau: fix double-free in nvif_vmm_dtor
Advisory content revised
CVE-2026-98515
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/vmwgfx: validate pitch coming from userspace
drm/vmwgfx: validate pitch coming from userspace
Advisory content revised
CVE-2026-99002
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/xe/vm: nuke PTs only after unlinking contested VMAs
drm/xe/vm: nuke PTs only after unlinking contested VMAs
Advisory content revised
CVE-2026-98510
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
Advisory content revised
CVE-2026-98999
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitydrop_monitor: fix out-of-bounds write in reset_per_cpu_data()
drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
Advisory content revised
CVE-2026-98419
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityext4: don't enable large folios on encrypted inodes
ext4: don't enable large folios on encrypted inodes
Advisory content revised
CVE-2026-98941
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityfsverity: RCU-delay the freeing of struct fsverity_info
fsverity: RCU-delay the freeing of struct fsverity_info
Advisory content revised
CVE-2026-99051
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitygpio: mpsse: fix race when arming the IRQ poll worker
gpio: mpsse: fix race when arming the IRQ poll worker
Advisory content revised
CVE-2026-99050
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitygve: fix XSK buffer leak on error descriptor
gve: fix XSK buffer leak on error descriptor
Advisory content revised
CVE-2026-99046
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityice: Restore Ordered MMIO Writes for Tx Doorbells
ice: Restore Ordered MMIO Writes for Tx Doorbells
Advisory content revised
CVE-2026-98965
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityio_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6
io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6
Advisory content revised
CVE-2026-99042
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityipv4: udp: Create exceptions before socket matching
ipv4: udp: Create exceptions before socket matching
Advisory content revised
CVE-2026-99077
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityipv6: do not let ipv6_find_hdr() return an offset past the packet end
ipv6: do not let ipv6_find_hdr() return an offset past the packet end
Advisory content revised
CVE-2026-98532
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityksmbd: fix heap out-of-bounds write in krb5_authenticate()
ksmbd: fix heap out-of-bounds write in krb5_authenticate()
Advisory content revised
CVE-2026-99083
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityksmbd: remove stale channels from all sessions on teardown
ksmbd: remove stale channels from all sessions on teardown
Advisory content revised
CVE-2026-98870
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityllc: fix skb UAF and leaks on llc_mac_hdr_init() failure
llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
Advisory content revised
CVE-2026-98555
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitymm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
Advisory content revised
CVE-2026-98507
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.