VYPR
patchPublished Aug 6, 2026· Updated Aug 8, 2026· 1 source

Linux Kernel: 25 Vulnerabilities Disclosed in Batch Affecting x86, KVM, USB, and Networking

Key findings • 25 Linux kernel vulnerabilities disclosed in a single batch on August 5-6, 2026. • Flaws span multiple subsystems including x86, KVM, USB, networking, and file systems. • V…

Key findings

  • 25 Linux kernel vulnerabilities disclosed in a single batch on August 5-6, 2026.
  • Flaws span multiple subsystems including x86, KVM, USB, networking, and file systems.
  • Vulnerabilities address data leakage, race conditions, memory corruption, and resource handling issues.
  • Fixes are available through kernel updates, emphasizing the need for timely patching.
  • The batch includes issues related to speculative execution mitigations and driver robustness.

On August 5-6, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel, spanning various subsystems including x86, KVM, HID, USB, networking, and file systems. These disclosures highlight potential issues ranging from data leakage and race conditions to memory corruption and improper resource handling. The vulnerabilities were addressed through code fixes and updates to kernel modules.

Several vulnerabilities relate to memory management and data integrity. CVE-2026-68480 addresses a flaw in the x86 Safe-RET mitigation that could allow data leakage through speculative execution if interrupts are injected during its operation. CVE-2026-64602 in the spear_adc driver and CVE-2026-64594 in the f_fs USB gadget driver involve issues with interrupt handling and work item initialization, respectively, potentially leading to race conditions or improper cleanup. CVE-2026-64593 addresses an unconditional sfence.vma instruction for spurious faults in the RISC-V architecture, ensuring memory coherency.

Networking and storage subsystems also saw multiple disclosures. CVE-2026-64597 and CVE-2026-64598 in the SMB client component address error code handling and potential double-free issues during SMB2 operations. CVE-2026-64595 in the hid-lenovo-go driver and CVE-2026-64584 in the bdc UDC driver involve proper cancellation of work items and IRQ handling during device removal or teardown to prevent resource leaks or use-after-free bugs. The fuse-uring component is affected by CVE-2026-64587, which fixes data races on the ring->ready flag, crucial for preventing requests from being dispatched through stale ring states on weakly-ordered architectures.

File system integrity and security were also touched upon. CVE-2026-64596 in libfs ensures that SB_I_NOEXEC and SB_I_NODEV are set by default in init_pseudo(), enhancing security for anonymous inodes. CVE-2026-64592 in the Btrfs file system prevents trimming of non-writable devices, resolving a NULL pointer dereference bug. Additionally, CVE-2026-64580 in xfrm6 ensures the device pointer is cleared on error to prevent double netdev_put calls.

Other vulnerabilities include CVE-2026-64604 in KVM, which ensures vmcs12 is correctly handled during CR8 interception updates, and CVE-2026-64603 in intel-hid, which protects the ACPI notify handler against recursion. CVE-2026-64599 in the amlogic crypto driver and CVE-2026-64589 in the brcmfmac Wi-Fi driver address double cleanup and draining of bus reset work, respectively. CVE-2026-64590 in udmabuf skips redundant CPU sync operations to fix cacheline warnings, and CVE-2026-64588 in the i2c core fixes a NULL-dereference on adapter registration failure. CVE-2026-64585 in f_midi and CVE-2026-64581 in xfrm address use-after-free and double-free issues, respectively.

The fixes for these 25 vulnerabilities were integrated into the Linux kernel, with users advised to update to patched versions to mitigate the identified risks. The broad range of affected subsystems underscores the importance of regular kernel updates and security audits.

Key areas addressed include:

Users of the Linux kernel are strongly encouraged to apply the relevant security patches as soon as possible. The comprehensive nature of this batch of disclosures highlights the ongoing efforts to secure the kernel across its diverse components.

CVEs addressed in this batch include: CVE-2026-68480, CVE-2026-64604, CVE-2026-64603, CVE-2026-64602, CVE-2026-64601, CVE-2026-64599, CVE-2026-64598, CVE-2026-64597, CVE-2026-64596, CVE-2026-64595, CVE-2026-64594, CVE-2026-64593, CVE-2026-64592, CVE-2026-64591, CVE-2026-64590, CVE-2026-64589, CVE-2026-64588, CVE-2026-64587, CVE-2026-64586, CVE-2026-64585, CVE-2026-64584, CVE-2026-64583, CVE-2026-64582, CVE-2026-64581, CVE-2026-64580.

Synthesized by Vypr AI