VYPR
Published Aug 17, 2026· 1 source

Linux Kernel: 25 Vulnerabilities Disclosed in Coordinated August 2026 Batch

Key findings • 25 Linux kernel vulnerabilities disclosed in a coordinated batch between August 15-17, 2026. • Vulnerabilities span critical subsystems including networking, memory management,…

Key findings

  • 25 Linux kernel vulnerabilities disclosed in a coordinated batch between August 15-17, 2026.
  • Vulnerabilities span critical subsystems including networking, memory management, and I/O.
  • Multiple critical severity flaws (CVSSv3 9.0+) were patched, including in NTFS, netfilter, and KVM.
  • 18 of the disclosed vulnerabilities were patched on the same day as their disclosure.
  • Key affected areas include netfilter, btrfs, SCSI, and XDP.

On August 15, 2026, a coordinated disclosure event revealed 25 vulnerabilities in the Linux kernel, impacting various subsystems including networking, memory management, I/O, and filesystems. The vulnerabilities, disclosed between August 15 and August 17, 2026, range in severity from High to Critical.

Several vulnerabilities were identified within the networking stack:

  • CVE-2026-74577 (Critical, 9.3) involves the iommu/arm-smmu-v3-iommufd component, requiring exactly one Stream ID for a vDEVICE.
  • CVE-2026-74570 (Critical, 9.8) in the ntfs subsystem addresses harden runlist realloc size calculations with overflow checks.
  • CVE-26-74569 (Critical, 9.8) in netfilter: nf_conntrack_sip widens the NAT rewrite delta to s32 to prevent overflows.
  • CVE-2026-74568 (Critical, 9.3) in KVM: arm64: vgic fixes a race condition between LPI release and re-registration.
  • CVE-2026-74565 (High, 7.8) in netfilter: nf_tables makes the nft_object rhltable per table to prevent access to dismantled objects.
  • CVE-2026-74564 (High, 7.1) in netfilter: xt_hashlimit validates that the hashtable supports XT_HASHLIMIT_RATE_MATCH.
  • CVE-2026-74563 (High, 7.1) in rds: tcp ensures the RCU lock is held across ipv6_chk_addr() in rds_tcp_laddr_check().
  • CVE-2026-74579 addresses a mask build fix for partial field offload in netfilter: nft_payload.
  • CVE-2026-74577 involves net: mpls initializing rtm_tos in mpls_getroute().
  • CVE-2026-74560, CVE-2026-74571, and CVE-2026-74559 relate to xsk (eXpress Data Path) and address buffer leaks, draining continuation descriptors after overflow, and reclaiming invalid Tx descriptors.

Memory management and filesystem vulnerabilities were also prominent:

  • CVE-2026-74576 (High, 7.5) in mm/slab prevents unbounded recursion in the free path with new kmalloc types.
  • CVE-2026-74572 (High, 7.5) in btrfs: zoned fixes a deadlock between metadata writeback and transaction commit.
  • CVE-2026-74571 in btrfs skips global block reserve accounting for rescue mounts, preventing a NULL pointer dereference.

Other notable vulnerabilities include:

  • CVE-2026-74575 (High, 8.8) in thunderbolt prevents a use-after-free on disconnect for XDomain delayed work.
  • CVE-2026-74574 (High, 7.8) in dmaengine: idxd fixes cleanup for fdev setup failures.
  • CVE-2026-74567 (High, 7.1) in keys fixes an out-of-bounds read in keyring_get_key_chunk().
  • CVE-2026-74566 in keys ensures keyring key-chunk byte order agrees with keyring_diff_objects().
  • CVE-2026-74562 (High, 8.8) and CVE-2026-74561 (High, 8.8) in nexthop address unlocked list walks during nexthop replace and flush operations.
  • CVE-2026-74557 (High, 7.5) in scsi: libiscsi fixes a stale-data leak into the SCSI sense buffer.
  • CVE-2026-74556 (Critical, 9.8) in scsi: libiscsi_tcp bounds the SCSI Response data segment to the connection buffer.
  • CVE-2026-74555 in scsi: libsas fixes an HA resume deadlock and a hisi_sas disk-wake race.
  • CVE-2026-74578 (High, 7.1) in crypto: algif_skcipher forces synchronous processing on trees without ctx->state.

The disclosure event, which occurred on August 15, 2026, saw 18 of these vulnerabilities patched on the same day, according to Vypr Intelligence. Users are advised to update to the latest available Linux kernel versions to mitigate these risks.

This batch of vulnerabilities highlights ongoing challenges in maintaining the security of complex subsystems within the Linux kernel, particularly in areas like networking, memory management, and I/O handling. The coordinated disclosure suggests a proactive approach by security researchers and the Linux kernel development community to address these issues. Continued vigilance and timely patching remain crucial for users of the Linux kernel, especially in security-sensitive environments.

Synthesized by Vypr AI