Linux Kernel: 19 Vulnerabilities Across Subsystems Disclosed Together on July 26, 2026
Key findings • 19 Linux kernel vulnerabilities disclosed together on July 26, 2026, affecting diverse subsystems. • Issues span memory management, networking, USB, and cryptography, requiring…
Key findings
- 19 Linux kernel vulnerabilities disclosed together on July 26, 2026, affecting diverse subsystems.
- Issues span memory management, networking, USB, and cryptography, requiring prompt updates.
- Vulnerabilities include resource leaks, improper access controls, and potential denial-of-service vectors.
- All disclosed vulnerabilities were fixed in a single, unified kernel update (version 6.9.3).
- Coordinated disclosure highlights ongoing security efforts in the Linux kernel community.
On July 26, 2026, a coordinated disclosure event brought to light 19 vulnerabilities within the Linux kernel, affecting a wide array of subsystems. These issues, spanning memory management, networking, USB, and more, were all patched in a single, unified kernel update, underscoring the ongoing security efforts within the Linux kernel community. The vulnerabilities include resource leaks, improper access controls, potential denial-of-service vectors, use-after-free errors, and path traversal flaws.
Several vulnerabilities were identified in the networking stack. CVE-2026-64423 addresses a flaw in the ipv4: igmp subsystem related to multicast group handling during device destruction. CVE-2026-64394 patches a check in ksmbd for SMB2 SET_INFO SECURITY operations to prevent permission bypass. CVE-2026-64448 restricts an implied bcc[0] exemption in smb: client responses to those without a data area.
The USB subsystem was also impacted, with CVE-2026-64338 fixing a parport unregistration issue on probe failure in the uss720 driver. CVE-2026-64332 resolves a memory leak on registration failure within the ulpi subsystem. CVE-2026-64503 addresses a runtime PM imbalance on error in the kxsd9 accelerometer driver.
Memory management and error handling were central to several other disclosures. CVE-2026-64509 fixes GenDisk cleanup paths in the rust subsystem to prevent leaks. CVE-2026-64353 ensures dynamic inner array lookups in the bpf subsystem remain nullable. CVE-2026-64301 corrects an of_node refcount leak in the scmi regulator driver. CVE-2026-64297 adds a check for the return value of module_extend_max_pages() to handle allocation failures. CVE-2026-64356 fixes a memory leak in xfs_dqinode_metadir_create(). CVE-2026-64447 resolves double-free and use-after-free issues in the ipu7 driver's error paths. CVE-2026-64514 gates the must_wait writability check on pte_present() in userfaultfd. CVE-2026-64429 uses raw_spinlock_t in the gpio: eic-sprd irq startup path. CVE-2026-64477 prevents out-of-bounds access when offlining CPUs with SNC enabled in x86, fs/resctrl. CVE-2026-64222 avoids a double free of pool->stack on AQ init failure in octeontx2-pf.
Other vulnerabilities include CVE-2026-64265, which clears intr_entry in fuse_resend and fuse_remove_pending_req, and CVE-2026-64469, which fixes a use-after-free error in binder_thread_release(). CVE-2026-64310 prevents the initialization of SNP for SEV ioctls under specific error conditions.
All 19 vulnerabilities were addressed in a coordinated release, with fixes available in kernel version 6.9.3. Users are strongly urged to update to the latest kernel version to mitigate these risks. The timely patching and coordinated disclosure highlight the robust security maintenance practices within the Linux kernel development process.
This batch of vulnerabilities, disclosed on July 26, 2026, impacts various subsystems of the Linux kernel, including networking, USB, and memory management. The prompt release of patches for all 19 CVEs in a single update demonstrates the community's commitment to security. Users should prioritize updating their systems to the latest kernel version to protect against potential exploitation of these flaws. The breadth of affected subsystems underscores the importance of regular kernel updates for maintaining a secure operating environment.