sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler
Newly collected advisory
CVE-2026-99085
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1115 source records · 1002 groupsSecurityscsi: ch: Do not keep references to data transfer element devices
scsi: ch: Do not keep references to data transfer element devices
Newly collected advisory
CVE-2026-99019
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityselinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
Newly collected advisory
CVE-2026-99052
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityserial: 8250_port: recognize UPIO_AU
serial: 8250_port: recognize UPIO_AU
Newly collected advisory
CVE-2026-98883
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityserialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
Newly collected advisory
CVE-2026-115754
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitystatmount: read the parent of an unmounted mount under mount_lock
statmount: read the parent of an unmounted mount under mount_lock
Newly collected advisory
CVE-2026-98994
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitystrparser: make sure __strp_recv isn't running before tearing down the parser
strparser: make sure __strp_recv isn't running before tearing down the parser
Newly collected advisory
CVE-2026-99056
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitytcp: reject net_iov in zerocopy receive mapping hints
tcp: reject net_iov in zerocopy receive mapping hints
Newly collected advisory
CVE-2026-99055
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitythunderbolt: Keep the domain reference while processing hotplug
thunderbolt: Keep the domain reference while processing hotplug
Newly collected advisory
CVE-2026-98896
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitytipc: destroy topsrv workqueues before closing connections
tipc: destroy topsrv workqueues before closing connections
Newly collected advisory
CVE-2026-99054
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitytipc: hold a reference to nodes found by link name
tipc: hold a reference to nodes found by link name
Newly collected advisory
CVE-2026-99053
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityunshare: don't drop active namespace references that were never taken
unshare: don't drop active namespace references that were never taken
Newly collected advisory
CVE-2026-98983
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityusb: hub: use shorter 120ms post resume hold for SS root hubs
usb: hub: use shorter 120ms post resume hold for SS root hubs
Newly collected advisory
CVE-2026-98933
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityvirtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
Newly collected advisory
CVE-2026-115586
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityvsock/virtio: account only unread bytes in read_skb()
vsock/virtio: account only unread bytes in read_skb()
Newly collected advisory
CVE-2026-99062
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityvsock: Fix memory leak in vmci_transport_recv_dgram_cb()
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
Newly collected advisory
CVE-2026-98947
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table() (wasm2…
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table() (wasm2…
Advisory content revised
CVE-2026-90648
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitywifi: ath11k: reset ar->num_stations on hardware start
wifi: ath11k: reset ar->num_stations on hardware start
Newly collected advisory
CVE-2026-98936
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: brcmfmac: fix P2P device removal race in brcmf_detach()
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
Newly collected advisory
CVE-2026-99061
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
Newly collected advisory
CVE-2026-98874
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: iwlwifi: mvm: fix sched scan IE sizing
wifi: iwlwifi: mvm: fix sched scan IE sizing
Newly collected advisory
CVE-2026-98889
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: libertas: reject short monitor TX frames
wifi: libertas: reject short monitor TX frames
Newly collected advisory
CVE-2026-98890
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: mac80211: validate deauth frame length before reason access
wifi: mac80211: validate deauth frame length before reason access
Newly collected advisory
CVE-2026-98891
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitywifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
Newly collected advisory
CVE-2026-98887
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.