VYPR
Published Oct 14, 2026· Updated Oct 15, 2026· 1 source

Linux Kernel: 25 Vulnerabilities Disclosed in RDMA, Wi-Fi, and Other Subsystems

Key findings • 25 Linux kernel vulnerabilities disclosed on October 14, 2026, affecting diverse subsystems. • Fixes address critical areas including RDMA, Wi-Fi drivers, memory safety, and po…

Key findings

  • 25 Linux kernel vulnerabilities disclosed on October 14, 2026, affecting diverse subsystems.
  • Fixes address critical areas including RDMA, Wi-Fi drivers, memory safety, and power management.
  • Vulnerabilities include race conditions, NULL pointer dereferences, and out-of-bounds writes.
  • The batch highlights ongoing maintenance and security hardening of the Linux kernel.
  • All disclosed issues have been resolved in subsequent kernel releases.

On October 14, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel, affecting various subsystems including RDMA, Wi-Fi, networking, and watchdog timers. These disclosures highlight ongoing efforts to address memory management, resource handling, and driver-specific issues within the kernel.

Several vulnerabilities stem from improper resource management and locking mechanisms. CVE-2026-98431 addresses a circular dependency in the RDMA subsystem related to mmap locking and disassociation. CVE-2026-98430 and CVE-2026-98429 focus on the RDMA/efa driver, ensuring that administrative and completion queues remain alive during IRQ handling to prevent race conditions. In the Wi-Fi stack, CVE-2026-98426 reveals an IRQ leak in the mwifiex driver's error path, while CVE-2026-98422 corrects a tailroom counter issue in the mac80211 driver's AP_VLAN implementation. Additionally, CVE-2026-98424 in cfg80211 addresses a network namespace switch failure during wiphy renaming.

Memory corruption and out-of-bounds writes are also present in this batch. CVE-2026-98428 in the ALSA USB 6fire driver aims to fix a potential use-after-free by avoiding embedded URBs. CVE-2026-98413 describes an out-of-bounds write in the drop_monitor module's reset_per_cpu_data function. CVE-2026-98407, affecting the wifi: rsi driver, corrects a heap out-of-bounds write during key removal. Furthermore, CVE-2026-98416 in the dmaengine subsystem addresses a NULL dereference in the k3_udma_glue_release_rx_chn() function due to a failed memory allocation. CVE-2026-98417 in net: xfrm rejects unrepresentable ESP-in-TCP transport headers to prevent potential issues after stream parsing.

Several issues relate to power management and system sequencing. CVE-2026-98412 and CVE-2026-98411 both address NULL-pointer dereferences in the power sequencing components, specifically in pwrseq_unit_new() and pwrseq_device_register() respectively, during error handling. CVE-2026-98417 in the soc: samsung: exynos-pmu driver fixes a use-after-free vulnerability concerning interrupt generator nodes.

Other notable fixes include CVE-2026-98425, which bounds the dropping loop per dequeue call in the net/sched: codel component to prevent excessive drops with small intervals. CVE-2026-98414 resolves a false migration warning in sched/core for proxy donors. CVE-2026-98419 in selinux ensures the AVC decision is always filled in avc_has_perm_noaudit(). The ksmbd subsystem is addressed by CVE-2026-98420, which corrects SMB2 session expiration semantics. Watchdog timer issues are covered by CVE-2026-98410, CVE-2026-98409, and CVE-2026-98408, fixing suspend/resume handling and division-by-zero errors in different watchdog drivers.

These fixes collectively enhance the stability and security of the Linux kernel across a wide range of hardware and networking functionalities. Users are advised to update to patched kernel versions to mitigate these vulnerabilities.

The disclosures were made on October 14, 2026. All identified vulnerabilities have been resolved in subsequent kernel releases.

Key areas addressed include:

  • RDMA and networking stack stability.
  • Wi-Fi driver robustness and resource management.
  • Memory safety, including use-after-free and out-of-bounds writes.
  • Power management and system sequencing error handling.
  • Watchdog timer reliability.

The Linux kernel is a foundational component of many operating systems, and timely patching of these vulnerabilities is crucial for maintaining system integrity and security.

CVE-2026-98431, CVE-2026-98430, CVE-2026-98429, CVE-2026-98428, CVE-2026-98427, CVE-2026-98426, CVE-2026-98425, CVE-2026-98424, CVE-2026-98423, CVE-2026-98422, CVE-2026-98421, CVE-2026-98420, CVE-2026-98419, CVE-2026-98418, CVE-2026-98417, CVE-2026-98416, CVE-2026-98415, CVE-2026-98414, CVE-2026-98413, CVE-2026-98412, CVE-2026-98410, CVE-2026-98409, CVE-2026-98408, CVE-2026-98407.

Synthesized by Vypr AI