Bugs fixes in "linux-hwe-7.0"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-46140 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtk_usb_ | 2026-07-16 |
| CVE | CVE-2026-46111 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in create_big_sync Add hci_conn_valid() | 2026-07-16 |
| CVE | CVE-2026-46138 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_comple | 2026-07-16 |
| CVE | CVE-2026-45835 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the | 2026-07-16 |
| CVE | CVE-2026-45834 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the sa | 2026-07-16 |
| CVE | CVE-2026-45836 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the sa | 2026-07-16 |
| CVE | CVE-2026-46150 | In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may | 2026-07-16 |
| CVE | CVE-2026-46190 | In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() Sashiko | 2026-07-16 |
| CVE | CVE-2026-46132 | In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfin | 2026-07-16 |
| CVE | CVE-2026-43498 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-exporting of | 2026-07-16 |
| CVE | CVE-2026-46184 | In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrC | 2026-07-16 |
| CVE | CVE-2026-46182 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr vari | 2026-07-16 |
| CVE | CVE-2026-46118 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle() comm | 2026-07-16 |
| CVE | CVE-2026-46142 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF rest | 2026-07-16 |
| CVE | CVE-2026-46120 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(). After commit 5e72ce3e3980 | 2026-07-16 |
| CVE | CVE-2026-43502 | In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy s | 2026-07-16 |
| CVE | CVE-2026-43495 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_ms | 2026-07-16 |
| CVE | CVE-2026-46134 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration cros_typ | 2026-07-16 |
| CVE | CVE-2026-46191 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if | 2026-07-16 |
| CVE | CVE-2026-46273 | In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power | 2026-07-16 |
About
-
Send Feedback to @ubuntu_updates
