namei: don't reveal overmounted entries in refwalk
Advisory content revised
CVE-2026-98980
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecuritynamespace: don't inherit MNT_UMOUNT in clone_mnt()
namespace: don't inherit MNT_UMOUNT in clone_mnt()
Advisory content revised
CVE-2026-98993
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: don't let a pseudo dentry become the root of a mount
namespace: don't let a pseudo dentry become the root of a mount
Advisory content revised
CVE-2026-98982
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
Advisory content revised
CVE-2026-98988
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: keep the lock on a mount that a propagated copy is moved beneath
namespace: keep the lock on a mount that a propagated copy is moved beneath
Advisory content revised
CVE-2026-98976
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: never expire a locked mount
namespace: never expire a locked mount
Advisory content revised
CVE-2026-98978
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: queue a mount only once for mount notifications
namespace: queue a mount only once for mount notifications
Advisory content revised
CVE-2026-98991
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: reset the old parent's ->overmount in mnt_change_mountpoint()
namespace: reset the old parent's ->overmount in mnt_change_mountpoint()
Advisory content revised
CVE-2026-98995
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynamespace: unhash a dentry before detaching the mounts on it
namespace: unhash a dentry before detaching the mounts on it
Advisory content revised
CVE-2026-98981
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5: HWS, Handle destroying table that has a miss table
net/mlx5: HWS, Handle destroying table that has a miss table
Advisory content revised
CVE-2026-98895
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5e: fix swapped IPv6 IPsec policy masks
net/mlx5e: fix swapped IPv6 IPsec policy masks
Advisory content revised
CVE-2026-98497
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet/sched: act_ct: avoid modifying shared unconfirmed ct entry
net/sched: act_ct: avoid modifying shared unconfirmed ct entry
Advisory content revised
CVE-2026-98441
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet/sched: act_ct: fix helper UAF due to extensions realloc
net/sched: act_ct: fix helper UAF due to extensions realloc
Advisory content revised
CVE-2026-98442
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet/smc: protect clcsock lifetime in smc_getname
net/smc: protect clcsock lifetime in smc_getname
Advisory content revised
CVE-2026-99032
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet: bridge: mdb: restart port group walk after deletion
net: bridge: mdb: restart port group walk after deletion
Advisory content revised
CVE-2026-98487
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet: iptunnel: fix stale transport header during tunnel decapsulation
net: iptunnel: fix stale transport header during tunnel decapsulation
Advisory content revised
CVE-2026-98401
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
Advisory content revised
CVE-2026-98491
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynet: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
Advisory content revised
CVE-2026-99030
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynetfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
Advisory content revised
CVE-2026-98485
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynetfilter: ipset: mark the rcu locked areas properly
netfilter: ipset: mark the rcu locked areas properly
Advisory content revised
CVE-2026-98899
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitynvmet: use the local P2P device on metadata allocation failure
nvmet: use the local P2P device on metadata allocation failure
Advisory content revised
CVE-2026-98964
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitypfcp: make sure the SEID is linear before reading it
pfcp: make sure the SEID is linear before reading it
Advisory content revised
CVE-2026-98952
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityrds: ib: Clear the sg list when mapping an MR fails
rds: ib: Clear the sg list when mapping an MR fails
Advisory content revised
CVE-2026-98524
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityriscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
Advisory content revised
CVE-2026-99018
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.