Linux Kernel: 25 Vulnerabilities Patched in Same-Day Disclosure Batch
Key findings • 25 Linux kernel vulnerabilities disclosed on September 3, 2026, affecting diverse subsystems. • Fixes address SELinux, input devices, power management, graphics, and networking…
Key findings
- 25 Linux kernel vulnerabilities disclosed on September 3, 2026, affecting diverse subsystems.
- Fixes address SELinux, input devices, power management, graphics, and networking components.
- Vulnerabilities include improper permission validation, NULL pointer dereferences, and out-of-bounds reads.
- All 25 CVEs were patched and disclosed on the same day, indicating a coordinated fix.
- Users are urged to update their Linux kernel to the latest available versions.
On September 3, 2026, a significant batch of 25 vulnerabilities was disclosed in the Linux kernel, affecting various subsystems and components. These vulnerabilities, all patched on the same day, range in severity and impact, highlighting the ongoing need for diligent security maintenance in the widely used operating system. The disclosures touch upon areas including security enhancements (SELinux), input device handling, power management, graphics drivers, networking, and file systems.
Several vulnerabilities were identified within the SELinux (Security-Enhanced Linux) subsystem. CVE-2026-80757 and CVE-2026-80755 address issues where permission values and class permissions were not correctly validated, potentially leading to improper access control. CVE-2026-80756 resolves a problem where a policy conversion could be incorrectly canceled, impacting the integrity of SELinux policy loading.
The input device handling in the Linux kernel was also affected. CVE-2026-80754 corrects a typo in the synaptics-rmi4 driver that led to an incorrect transmitter electrode count. CVE-2026-80752 fixes a NULL pointer dereference in the psxpad-spi driver during the suspend process by ensuring driver data is set before use.
Power management and graphics-related components saw several fixes. CVE-2026-80753 moves deferred work in the ovpn module to a dedicated workqueue to ensure proper module uninitialization. CVE-2026-80751 addresses an uninitialized variable in the mediatek pmdomain driver, preventing potential issues during device attachment. CVE-2026-80750 fixes an issue in the mediatek pmdomain driver where device nodes were put before checking for regmap lookup failures. CVE-2026-80749 resolves an out-of-bounds memory read in the HDMI connector component related to audio infoframe copying. CVE-2026-80747 adds a bounds check for CRAT subtype length in the amdkfd driver to prevent out-of-bounds reads from malformed CRAT tables. CVE-2026-80746 fixes a clock stall issue in the dispcc-eliza driver on the Eliza EVK. CVE-2026-80743 ensures that interrupt handlers in the xilinx formatter_pcm driver receive the correct driver data. CVE-2026-80741 and CVE-2026-80740 address out-of-bounds reads and potential infinite loops in the DRM logging component, respectively, related to message lengths and scaling. CVE-2026-80736 fixes indexing issues in the thunderbolt bandwidth group reservation.
Networking stack vulnerabilities were also part of this disclosure. CVE-2026-80746 addresses a clock stall in the dispcc-eliza driver. CVE-2026-80744 suppresses a WARN_ON_ONCE for ENOMEM in the netfilter nf_tables_offload abort path, as memory allocation failures are expected. CVE-2026-80743 ensures proper initialization of interrupt handlers in the xilinx formatter_pcm driver. CVE-2026-80742 prevents sending zero-byte data in tpacket_snd() to avoid skb_assert_len warnings. CVE-2026-80739 adds a check in the mlx5e driver to acquire the devcom lock only if the flow is PEER. CVE-2026-80738 adds a check for sk_state before sk_protocol in bpf TCP syncookie functions. CVE-2026-80733 removes a WARN_ON_ONCE() from sk_mc_loop() for non-IP sockets.
Other components addressed include: CVE-2026-80748, which fixes an SG iteration issue in the loongson2 MMC driver; CVE-2026-80745, which corrects the voltage selector table in the fp9931 regulator driver; CVE-2026-80737, which synchronizes DMA teardown in the amba-pl011 serial driver; and CVE-2026-80734, which initializes inode mapping flags for cached inodes in the btrfs file system.
These vulnerabilities were all resolved in the same disclosure event on September 3, 2026. Users of the Linux kernel are advised to update to the latest versions to incorporate these security fixes. The wide range of affected subsystems underscores the complexity of the kernel and the importance of continuous security auditing and timely patching.
The timely patching of these 25 vulnerabilities demonstrates the Linux kernel development community's commitment to security. While no specific exploitation in the wild was mentioned for this batch, the nature of these flaws, particularly those in SELinux and networking, could have significant security implications if left unaddressed. Users should prioritize applying the updates to mitigate potential risks.
The fixes for these vulnerabilities are available in subsequent kernel releases. Specific version numbers for the patches are not detailed in the provided information, but users should consult their distribution's kernel update channels for the most current and secure versions.
This coordinated disclosure of 25 vulnerabilities highlights the importance of a robust security process within the Linux kernel development ecosystem. By addressing these issues promptly, the community helps maintain the integrity and security of a foundational piece of modern computing infrastructure. Continued vigilance and prompt application of updates remain crucial for all users.