ipv4: stop route notification sizing when nexthop group shrinks
Newly collected advisory
CVE-2026-99072
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1115 source records · 1002 groupsSecurityipv4: udp: Create exceptions before socket matching
ipv4: udp: Create exceptions before socket matching
Newly collected advisory
CVE-2026-99077
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityipv6: do not warn on route notification size race
ipv6: do not warn on route notification size race
Newly collected advisory
CVE-2026-99070
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
Newly collected advisory
CVE-2026-98934
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityipv6: udp: Create exceptions before socket matching
ipv6: udp: Create exceptions before socket matching
Newly collected advisory
CVE-2026-99076
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityirqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
Newly collected advisory
CVE-2026-98877
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityirqchip/gic-v5: Immediately exec priority drop following activate
irqchip/gic-v5: Immediately exec priority drop following activate
Newly collected advisory
CVE-2026-98878
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityisofs: handle set_blocksize failures
isofs: handle set_blocksize failures
Newly collected advisory
CVE-2026-98879
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityksmbd: don't hold ci->m_lock while waiting for a lease break ack
ksmbd: don't hold ci->m_lock while waiting for a lease break ack
Newly collected advisory
CVE-2026-98897
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityksmbd: fix heap out-of-bounds write in krb5_authenticate()
ksmbd: fix heap out-of-bounds write in krb5_authenticate()
Newly collected advisory
CVE-2026-99083
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityksmbd: fix lease break and ack state handling
ksmbd: fix lease break and ack state handling
Newly collected advisory
CVE-2026-98901
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityksmbd: remove stale channels from all sessions on teardown
ksmbd: remove stale channels from all sessions on teardown
Newly collected advisory
CVE-2026-98870
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymacsec: initialize SecY before registering the netdevice
macsec: initialize SecY before registering the netdevice
Newly collected advisory
CVE-2026-98929
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymailbox: imx: Add a channel shutdown field
mailbox: imx: Add a channel shutdown field
Newly collected advisory
CVE-2026-98903
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymailbox: imx: Use devm_pm_runtime_enable()
mailbox: imx: Use devm_pm_runtime_enable()
Newly collected advisory
CVE-2026-98904
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
Newly collected advisory
CVE-2026-115751
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
Newly collected advisory
CVE-2026-115750
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymd/raid5: let stripe batch bm_seq comparison wrap-safe
md/raid5: let stripe batch bm_seq comparison wrap-safe
Newly collected advisory
CVE-2026-98902
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymedia: chips-media: wave5: Add range checks for dec_output_info
media: chips-media: wave5: Add range checks for dec_output_info
Newly collected advisory
CVE-2026-98882
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymedia: video-i2c: use vb2_video_unregister_device on driver removal
media: video-i2c: use vb2_video_unregister_device on driver removal
Newly collected advisory
CVE-2026-98915
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymemstick: core: wait for request completion before freeing card
memstick: core: wait for request completion before freeing card
Newly collected advisory
CVE-2026-99039
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymemstick: rtsx_usb_ms: complete requests after eject instead of dropping them
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
Newly collected advisory
CVE-2026-99038
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
Newly collected advisory
CVE-2026-98948
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitymm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
Newly collected advisory
CVE-2026-98918
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.