Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed and Patched Together
25 Linux kernel vulnerabilities affecting networking, USB, and memory management were disclosed and patched on July 26, 2026.
Key findings
- 25 Linux kernel vulnerabilities disclosed on July 26, 2026, affecting diverse subsystems.
- Patches released same-day address issues in networking, USB, memory management, and more.
- Vulnerabilities include memory leaks, use-after-free errors, and path traversal flaws.
- Coordinated disclosure highlights ongoing security efforts in the Linux kernel community.
- Users are urged to update to the latest kernel version to mitigate risks.
On July 26, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel, affecting various subsystems including networking, USB, and memory management. These vulnerabilities, all patched on the same day, range in severity and could potentially lead to system instability, information disclosure, or denial-of-service conditions.
Several vulnerabilities were found in the SMB client implementation. CVE-2026-64448 restricts an implied bcc[0] exemption to responses without a data area, addressing a potential length discrepancy. CVE-2026-64381 fixes a buffer leak in receive_encrypted_standard(), and CVE-2026-64380 hardens POSIX SID length parsing to prevent out-of-bounds reads. Additionally, CVE-2026-64392 uses opener credentials for delete-on-close operations, and CVE-2026-64400 prevents path traversal bypass by restricting caseless retries.
The USB subsystem also saw multiple disclosures. CVE-2026-64332 resolves a memory leak on registration failure in the ULPI driver. CVE-2026-64331 fixes a NULL dereference in usbip: vudc's vep_dequeue() function. CVE-2026-64329 addresses a use-after-free of ucsi on remove in the usb: typec: ucsi: ccg driver, and CVE-2026-64340 fixes a use-after-free on disconnect race in legousbtower. CVE-2026-64421 patches a use-after-free on remove in the media: nxp: imx8-isi driver.
Memory management and process handling were also impacted. CVE-2026-64497 cleans up initializations and fixes a sign-extension bug in the iio: chemical: scd30 driver. CVE-2026-64371 protects ptrace_may_access() with exec_update_lock to prevent race conditions. CVE-2026-64425 re-checks IO_WQ_BIT_EXIT for each linked work item in io_uring/io-wq. CVE-2026-64492 uses devm_iio_trigger_register in the tmp006 driver to prevent resource leaks. CVE-2026-64521 fixes a deadlock issue in the pinctrl: meson: amlogic-a4 driver. CVE-2026-64312 restores the callback for non-parallel fallback in crypto: pcrypt. CVE-2026-64504 clamps the device-reported FIFO frame count in iio: accel: bmc150. CVE-2026-64464 fixes a ring SG table pages leak in xhci: sideband. CVE-2026-64476 latches disable_idle_d3 per device in vfio/pci. CVE-2026-64402 fixes an out-of-bounds write in coresight: ultrasoc-smb. CVE-2026-64472 addresses racy bitfields and tightens struct layout in vfio/mlx5.
Other vulnerabilities include CVE-2026-64353 in bpf, which keeps dynamic inner array lookups nullable. CVE-2026-64429 uses raw_spinlock_t in the gpio: eic-sprd irq startup path. CVE-2026-64436 initializes alg_key_len for IPComp states in net: af_key.
All these vulnerabilities were addressed in patches released on the same day, July 26, 2026. Users are advised to update their Linux kernel to the latest version to mitigate these security risks.
The coordinated disclosure of these 25 vulnerabilities highlights the ongoing security efforts within the Linux kernel development community. While many of these issues are specific to certain subsystems, their simultaneous release underscores the importance of timely patching and regular security audits for all components of the kernel. Users should ensure they are applying updates promptly to maintain the integrity and security of their systems.
The breadth of affected subsystems, from networking to hardware interfaces, indicates the complexity of modern operating system kernels and the continuous need for vigilance against potential security flaws. The fixes provided aim to enhance robustness and prevent potential exploits that could compromise system stability or data confidentiality.
This batch of fixes demonstrates the proactive approach taken by kernel maintainers to address reported issues. By resolving these vulnerabilities in a single disclosure event, the development team provides a clear signal to users about the current security posture and the necessary actions to take.
The impact of these vulnerabilities varies, with some potentially leading to denial-of-service conditions and others to more subtle information leaks or memory corruption. The specific nature of each fix addresses a unique flaw, contributing to the overall security hardening of the Linux kernel.
Users are encouraged to consult their distribution's specific advisories for detailed information on affected versions and recommended update procedures. Staying informed about kernel security updates is crucial for maintaining a secure computing environment.
The Linux kernel's modular design means that vulnerabilities can exist in numerous independent components. This coordinated release helps manage the flow of security information and ensures that users can address a significant number of potential risks simultaneously.
The fixes provided cover a range of bug classes, including memory leaks, use-after-free errors, race conditions, and improper input validation. Each fix contributes to the overall stability and security of the kernel, preventing potential exploitation by malicious actors.
The rapid patching of these issues reflects the active maintenance and security responsiveness of the Linux kernel community. Promptly applying these updates is essential for all users to safeguard their systems against known vulnerabilities.
The diverse nature of these vulnerabilities, touching upon areas like BPF, USB, SMB, and various hardware drivers, emphasizes the extensive attack surface of the Linux kernel. The comprehensive nature of this patch batch suggests a thorough review and remediation process.
The resolution of these issues is critical for maintaining the security and reliability of systems running the Linux kernel. Users should prioritize applying these updates to protect against potential exploits and ensure the continued integrity of their operations.