Linux Kernel: 25 Vulnerabilities Disclosed Together on September 17, 2026
Key findings • 25 vulnerabilities disclosed in the Linux kernel on September 17, 2026. • Issues span multiple subsystems including networking, graphics, and storage. • Vulnerabilities inc…
Key findings
- 25 vulnerabilities disclosed in the Linux kernel on September 17, 2026.
- Issues span multiple subsystems including networking, graphics, and storage.
- Vulnerabilities include race conditions, use-after-free bugs, and improper locking.
- Fixes are available in updated Linux kernel releases.
- No active exploitation or specific threat actors were mentioned in the disclosure.
On September 17, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel. These vulnerabilities span various subsystems including networking, storage, graphics, and input devices, indicating a broad range of potential impacts. The disclosures highlight issues such as race conditions, use-after-free bugs, improper locking, and validation errors, underscoring the complexity and interconnectedness of the kernel's components.
Several vulnerabilities were identified within the batman-adv (Broadband Mobile Ad-hoc Networking Advanced) module, specifically concerning the atomic update of MAC addresses (CVE-2026-93204) and the prevention of CRC corruption during claim additions (CVE-2026-93203). These issues could potentially affect the integrity and reliability of ad-hoc network communications.
The i3c (Improved Inter-Integrated Circuit) master driver is affected by multiple vulnerabilities. CVE-2026-93202 addresses a recursive locking issue during device registration, while CVE-2026-93200 fixes a use-after-free bug related to the master's sysfs attribute callbacks. Additionally, CVE-2026-93199 prevents the master device from being incorrectly treated as a duplicate target.
The Direct Rendering Manager (DRM) subsystem, responsible for graphics, is also impacted. CVE-2026-93190 and CVE-2026-93191 relate to the Synopsys DisplayPort (dw-dp) driver, addressing resource leaks and use-after-free vulnerabilities by ensuring proper unregistration of AUX channels and core resources. CVE-2026-93193 fixes an OF node reference leak in the Analogix DisplayPort driver, and CVE-2026-93192 resolves an issue where a failed fence creation could leave an active job assigned. The Panthor driver has a NULL pointer dereference fix for partial unmaps of evicted buffers (CVE-2026-93180), and the Lima driver has a fix for drm_mm_init() with invalid allocation ranges (CVE-2026-93183).
Storage-related vulnerabilities include CVE-2026-93201 and CVE-2026-93198 in the dm-pcache (Device Mapper Persistent Cache) component, which involve validating segment IDs and the persisted dirty tail chain at load time to prevent data corruption. CVE-2026-93196 in the nvdimm (Non-Volatile Memory Device) driver addresses a KASAN-reported slab-use-after-free.
Input device handling is affected by issues in the HID (Human Interface Device) subsystem. CVE-2026-93186 addresses a potential use-after-free in hid_hw_stop() by quiescing input, and CVE-2026-93187 fixes an out-of-bounds read in the Roccat driver due to an unchecked device-supplied profile index.
Other notable vulnerabilities include a fix for incorrect task context checking in the smack (Simplified Mandatory Access Control Kernel) module for message queue operations (CVE-2026-93191), a fix for an overflow in update_tg_cfs_runnable() within the scheduler (CVE-2026-93182), and a fix for uncore reference/unreference ordering in the perf subsystem for Intel uncore devices (CVE-2026-93181).
The fixes for these vulnerabilities have been integrated into the Linux kernel. Users are advised to update to the latest kernel versions to incorporate these security patches. The broad nature of these disclosures suggests ongoing vigilance in kernel security auditing and development.
The vulnerabilities were disclosed on September 17, 2026. No specific exploitation in the wild or threat actor attribution was mentioned in the provided details. The fixes are expected to be available in subsequent kernel releases.
This extensive batch of disclosures highlights the continuous effort required to maintain the security and stability of the Linux kernel, touching upon critical areas like networking, graphics, and system management. Users should prioritize applying these updates to mitigate potential risks.