VYPR
Published Sep 25, 2026· Updated Sep 26, 2026· 1 source

Linux Kernel: 25 Vulnerabilities Disclosed Together on September 25, 2026

Key findings • 25 Linux kernel vulnerabilities disclosed on September 25, 2026, affecting diverse subsystems. • Critical (CVSSv3 9.8) and High severity flaws found in RDMA, BPF, and graphics …

Key findings

  • 25 Linux kernel vulnerabilities disclosed on September 25, 2026, affecting diverse subsystems.
  • Critical (CVSSv3 9.8) and High severity flaws found in RDMA, BPF, and graphics components.
  • Fixes address memory leaks, race conditions, incorrect resource handling, and data integrity issues.
  • Vulnerabilities span networking, storage, BPF, graphics, and driver components.
  • All disclosed issues have been resolved, emphasizing the need for timely kernel updates.

On September 25, 2026, a batch of 25 vulnerabilities affecting the Linux kernel was disclosed, spanning various subsystems including networking, storage, and graphics. These issues, all resolved on the same day, highlight the ongoing need for diligent security patching in the widely used operating system. The vulnerabilities range in severity, with some potentially allowing for critical or high-impact exploits if left unaddressed.

Several vulnerabilities were found in networking components. CVE-2026-98162 addresses a tree connection leak in the SMB server's smb2_tree_connect() function, which could lead to resource exhaustion. CVE-2026-100070 fixes an issue in nf_nat_sip where the offset was not correctly rewound when NAT operations shrunk a packet, potentially leading to incorrect packet handling. CVE-2026-100071 resolves a memory leak in the hsr (High-Speed Redundancy) module when device setup fails after RX handlers are registered. Additionally, CVE-2026-98158 corrects how errored frames are handled in ppp_async, preventing a full reset when a frame should simply be dropped.

Storage and RDMA subsystems also saw multiple fixes. CVE-2026-98161 improves data integrity in nvdimm by ensuring PREFLUSH operations precede data writes. CVE-2026-100073 addresses a transaction overflow in the ext4 filesystem during writeback operations. In the RDMA realm, CVE-2026-100075, a critical vulnerability (CVSSv3 9.8), involves an unwind counter issue in srpt that could lead to resource corruption. CVE-2026-98154 and CVE-2026-98152 address cleanup order issues and queue leaks, respectively, in nvme-rdma and nvmet-rdma when errors occur or backlog limits are exceeded. CVE-2026-98153 tackles a race condition in the nvme driver related to the FDP placement ID array.

The bpf (Berkeley Packet Filter) subsystem had several issues addressed. CVE-2026-100074 marks the bpf_refcount field as unique, a fix for an oversight in its definition. CVE-2026-98150 and CVE-2026-98149 correct indexing and update logic for per-CPU maps, especially with sparse CPU IDs. CVE-2026-98150 also addresses a REG INVARIANTS VIOLATION on speculative pointer arithmetic, while CVE-2026-98150 fixes BPF_F_CPU validation for sparse CPU IDs.

Graphics and driver-related vulnerabilities were also part of this batch. CVE-2026-100076 aims to recover hardware correctly before retiring hung submits in drm/msm to prevent GPU page faults. CVE-2026-100079 ensures debugfs entries are unregistered on teardown in the usb: typec: ucsi component. CVE-2026-98156, a high-severity vulnerability (CVSSv3 7.8), involves using the DMA API for resource backing on Xen in drm/virtio. CVE-2026-98148 validates GUD_ROTATION_0 in supported rotations for drm/gud.

Other fixes include memory management issues in staging: rtl8723bs (CVE-2026-98160, CVE-2026-100076), ACPI-related fixes (CVE-2026-100072), and issues in accel/qaic (CVE-2026-98155) and EDAC/device_sysfs (CVE-2026-98157).

The timely disclosure and resolution of these 25 vulnerabilities underscore the dynamic nature of kernel security. Users and administrators of Linux systems are advised to apply the latest kernel updates to mitigate these risks. The broad range of affected subsystems indicates that a comprehensive security strategy, including regular patching, is crucial for maintaining the integrity of Linux environments.

CVE-2026-98162, CVE-2026-98161, CVE-2026-98160, CVE-2026-100079, CVE-2026-100078, CVE-2026-100077, CVE-2026-100076, CVE-2026-100075, CVE-2026-100074, CVE-2026-100073, CVE-2026-100072, CVE-2026-100071, CVE-2026-100070, CVE-2026-98159, CVE-2026-98158, CVE-2026-98157, CVE-2026-98156, CVE-2026-98155, CVE-2026-98154, CVE-2026-98153, CVE-2026-98152, CVE-2026-98151, CVE-2026-98150, CVE-2026-98149, CVE-2026-98148

Synthesized by Vypr AI