VYPR
Published Aug 10, 2026· Updated Aug 11, 2026· 1 source

Linux Kernel: 25 Vulnerabilities Patched in Single August 10th Disclosure

Key findings • 25 Linux kernel vulnerabilities disclosed on August 10, 2026, patched same day. • Batch includes use-after-free, memory leaks, and data handling flaws across KVM, GPU, networki…

Key findings

  • 25 Linux kernel vulnerabilities disclosed on August 10, 2026, patched same day.
  • Batch includes use-after-free, memory leaks, and data handling flaws across KVM, GPU, networking, and Wi-Fi.
  • Key affected subsystems: KVM, MTD, RDMA, xfrm, and various Wi-Fi drivers.
  • All vulnerabilities addressed in a single, coordinated disclosure and patching event.
  • Users urged to update to the latest kernel versions to mitigate risks.

On August 10, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel, affecting various subsystems including KVM, GPU drivers, networking, and Wi-Fi components. These vulnerabilities, all patched on the same day, primarily involve use-after-free errors, memory leaks, and incorrect handling of network buffers and data structures. The timely patching of these issues by the Linux kernel developers is crucial for maintaining system stability and security.

Several vulnerabilities stem from use-after-free errors. CVE-2026-68428 in KVM's x86 MMU component could allow a use-after-free on vendor module reload due to improper pointer management after cache destruction. Similarly, CVE-2026-68427 in the gpu: host1x subsystem has a use-after-free in host1x_bo_clear_cached_mappings where a freed mapping is dereferenced. The virt_concat driver in the mtd subsystem is affected by two use-after-free vulnerabilities: CVE-2026-68425 and CVE-2026-68426, both stemming from incorrect handling of memory after freeing the concat structure. CVE-2026-68422 in btrfs addresses a root leak that occurs if a relocation root is unexpected during the merge_reloc_roots operation, by adding a missing reference put.

Networking components also saw several fixes. CVE-2026-68423 in xfrm addresses a stale skb->prev pointer after asynchronous crypto operations steal a GSO segment, which could violate invariants relied upon by validation functions. CVE-2026-68420 and CVE-2026-68415 in xfrm also involve policy and template handling, with the former rejecting optional IPTFS templates in outbound policies to prevent out-of-bounds reads, and the latter clearing mode callbacks after failed mode setup to prevent issues with the xfrm_state_gc_task. The IB/mad subsystem has CVE-2026-68424, which drops unmatched RMPP responses before reassembly to prevent issues with response matching.

The RDMA subsystem is affected by three vulnerabilities. CVE-2026-68419 in irdma prevents reregistering memory regions for non-memory regions. CVE-2026-68418 in irdma prevents a user-triggered null dereference during QP creation by ensuring a buffer is populated before it's unconditionally used. CVE-2026-68417 in siw addresses a race condition where a QP could be published before its initialization was complete, potentially leading to lookups of incompletely constructed QPs.

The mtd subsystem has CVE-2026-68416, which fixes a double free and WARN_ON in error paths within add_mtd_device, ensuring proper error handling during device registration and NVMe memory addition.

Several vulnerabilities were disclosed in the Wi-Fi components of the Linux kernel. CVE-2026-68414 in cfg80211 cancels scheduled scan results work on unregister to prevent issues when a driver reports results during an ongoing scan. CVE-2026-68413 in ipw2100 fixes a potential memory leak in the initialization path. CVE-2026-68412 in cfg80211 fixes an error handling path in cfg80211_wext_siwscan to prevent memory leaks. CVE-2026-68411 in mac80211_hwsim clamps the virtio RX length before skb_put to prevent buffer overflows. CVE-2026-68410 in libertas fixes a memory leak in the firmware callback. CVE-2026-68409 in mac80211 defers percpu free of link RX stats to RCU. CVE-2026-68408 in cfg80211 converts pmsr_free_wk to wiphy_work to fix a deadlock. CVE-2026-68407 in nl80211 frees RNR data on MBSSID mismatch. CVE-2026-68406 in cfg80211 validates the PMSR FTM preamble range. CVE-2026-68405 in mac80211 frees AP_VLAN bc_buf SKBs outside the IRQ lock. Finally, CVE-2026-68404 in cfg80211 uses wiphy work for socket owner autodisconnect to prevent issues during netlink socket release.

The broad range of affected subsystems highlights the complexity of the Linux kernel and the importance of continuous security auditing. Users of the Linux kernel are advised to update to the latest patched versions to mitigate these vulnerabilities. The timely disclosure and patching of these issues demonstrate the robustness of the Linux kernel development and security process.

Key findings include a significant number of use-after-free vulnerabilities across different kernel modules, particularly in KVM, GPU drivers, and MTD. Several networking and Wi-Fi components were also affected by memory management and data handling issues. All disclosed vulnerabilities were patched on the same day, August 10, 2026, indicating a coordinated and rapid response from the Linux kernel development team. The vulnerabilities span diverse areas, emphasizing the need for comprehensive security practices across all kernel subsystems.

The vulnerabilities addressed include:

All these issues were resolved and patched on August 10, 2026. Users are strongly encouraged to update their Linux kernel to the latest available version to incorporate these security fixes. The breadth of these vulnerabilities underscores the ongoing need for diligent security auditing and rapid patching within the Linux kernel development process.

Synthesized by Vypr AI