USN-9020-1: Linux kernel vulnerabilities

It was discovered that the io_uring subsystem in the Linux kernel contained a memory leak when handling certain asynchronous commands. A local attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2026-80811)

It was discovered that the io_uring subsystem in the Linux kernel did not properly validate the size of certain query requests. A local attacker could possibly use this to cause a denial of service (system hang). (CVE-2026-81009)

It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010)

It was discovered that the io_uring subsystem in the Linux kernel did not properly track buffer consumption when receiving truncated network messages. A remote attacker could possibly use this to corrupt the receive buffers of certain applications, resulting in a denial of service or another unspecified impact. (CVE-2026-97618)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

- USB Gadget drivers;

- Memory management;

- Multiple devices driver;

- ARM64 architecture;

- EROFS file system;

- Network file systems library;

- Networking core;

- eXpress Data Path;

- Stream parser;

- ARM32 architecture;

- M68K architecture;

- MIPS architecture;

- OpenRISC architecture;

- PA-RISC architecture;

- PowerPC architecture;

- RISC-V architecture;

- S390 architecture;

- User-Mode Linux (UML);

- x86 architecture;

- Block layer subsystem;

- Cryptographic API;

- Compute Acceleration Framework;

- Intel NPU Driver;

- Speakup Console Speech Driver;

- ACPI drivers;

- Android drivers;

- Serial ATA and Parallel ATA drivers;

- Auxiliary display drivers;

- Drivers core;

- Micron PCIe SSD driver;

- Null block device driver;

- Ublk userspace block driver;

- Compressed RAM block device driver;

- Bluetooth drivers;

- Bus devices;

- AMD CDX bus driver;

- Hardware random number generator core;

- Character device driver;

- TPM device driver;

- Clock framework and drivers;

- Clocksource drivers;

- CPU frequency scaling framework;

- CPU idle management framework;

- Hardware crypto device drivers;

- CXL (Compute Express Link) drivers;

- DAX dirext access to differentiated memory framework;

- DIBS (Direct Internal Buffer Sharing) drivers;

- Buffer Sharing and Synchronization framework;

- DMA engine subsystem;

- DPLL subsystem;

- EDAC drivers;

- FireWire subsystem;

- ARM SCMI message protocol;

- ARM SCPI message protocol;

- Google firmware drivers;

- Qualcomm firmware drivers;

- FPGA Framework;

- GPIO subsystem;

- GPU drivers;

- HID subsystem;

- HSI subsystem;

- Microsoft Hyper-V drivers;

- Hardware monitoring drivers;

- CoreSight HW tracing drivers;

- I2C subsystem;

- I3C subsystem;

- IIO subsystem;

- IIO ADC drivers;

- InfiniBand drivers;

- Input Device core drivers;

- Input Device (Miscellaneous) drivers;

- Input Device (Mouse) drivers;

- On-Chip Interconnect management framework;

- IOMMU subsystem;

- Industry Pack bus drivers;

- IRQ chip drivers;

- Mailbox framework;

- Media drivers;

- MemoryStick subsystem;

- Multifunction device drivers;

- Analog Devices digital potentiometer driver;

- Broadcom VK accelerator driver;

- Fastrpc Driver;

- Amazon Nitro Secure Module driver;

- SGI GRU driver;

- MMC subsystem;

- MTD block device drivers;

- Network drivers;

- Ethernet bonding driver;

- Mellanox network drivers;

- Microsoft Azure Network Adapter (MANA) driver;

- STMicroelectronics network drivers;

- Texas Instruments network drivers;

- Ethernet team driver;

- MediaTek network drivers;

- Near Field Communication (NFC) drivers;

- NTB driver;

- NVDIMM (Non-Volatile Memory Device) drivers;

- NVME drivers;

- Device tree and open firmware driver;

- Operating Performance Points (OPP) driver;

- PA-RISC drivers;

- PCI subsystem;

- Performance monitor drivers;

- PHY drivers;

- Pin controllers subsystem;

- Chrome hardware platform drivers;

- Mellanox platform drivers;

- Microsoft Surface platform drivers;

- x86 platform drivers;

- MediaTek PM domains;

- Power sequencing drivers;

- Power supply drivers;

- Powercap sysfs driver;

- PTP clock framework;

- PWM drivers;

- RapidIO drivers;

- Voltage and Current Regulator drivers;

- Remote Processor subsystem;

- MPAM driver;

- RPMSG subsystem;

- Real Time Clock drivers;

- S/390 drivers;

- SCSI subsystem;

- ASPEED SoC drivers;

- Samsung SoC drivers;

- SPI subsystem;

- small TFT LCD display modules;

- Greybus lights staging drivers;

- Media staging drivers;

- Realtek RTL8723BS SDIO drivers;

- TCM subsystem;

- Trusted Execution Environment drivers;

- Thermal drivers;

- Thunderbolt and USB4 drivers;

- TTY drivers;

- UFS subsystem;

- Userspace I/O drivers;

- USB DSL drivers;

- Cypress C67X00 USB driver;

- Cadence USB3 driver;

- USB Device Class drivers;

- USB core drivers;

- DesignWare USB2 driver;

- DesignWare USB3 driver;

- USB Host Controller drivers;

- Mustek MDC800 USB digital camera driver;

- Intel La Jolla Cove Adapter USB driver;

- Intel USBIO USB I/O expander driver;

- USB Serial drivers;

- USB Mass Storage drivers;

- USB Type-C support driver;

- USB Type-C Port Controller Manager driver;

- TI TPS6598x USB Power Delivery controller driver;

- USB Type-C Connector System Software Interface driver;

- USB over IP driver;

- vDPA drivers;

- VFIO drivers;

- Virtio Host (VHOST) subsystem;

- Framebuffer layer;

- ACRN Hypervisor Service Module driver;

- Amazon Nitro Enclaves driver;

- Virtual machine generation ID driver;

- Virtio drivers;

- W1 Dallas's 1-wire bus driver;

- Watchdog drivers;

- Xen hypervisor drivers;

- 9P distributed file system;

- File systems infrastructure;

- AFS file system;

- BFS file system;

- BTRFS file system;

- Ceph distributed file system;

- debug file system;

- eCrypt file system;

- EFI Variable file system;

- exFAT file system;

- Ext4 file system;

- F2FS file system;

- FAT file system;

- FUSE (File system in Userspace);

- GFS2 file system;

- HFS+ file system;

- HugeTLB file system;

- Journaling layer for block devices (JBD2);

- JFS file system;

- Network file system (NFS) client;

- Network file system (NFS) server daemon;

- NILFS2 file system;

- File system notification infrastructure;

- NTFS3 file system;

- OCFS2 file system;

- OrangeFS file system;

- Overlay file system;

- SMB network file system;

- SquashFS file system;

- Tracing file system;

- UBI file system;

- UDF file system;

- XFS file system;

- BPF subsystem;

- Tracing infrastructure;

- Kernel futex primitives;

- Memory Management;

- VLANs driver;

- IPv4 networking;

- io_uring subsystem;

- KProbes tracing;

- KVM subsystem;

- Live Update Orchestrator (LUO);

- Netfilter;

- Namespaces infrastructure;

- Perf events;

- Scheduler infrastructure;

- Signal handling mechanism;

- Networking subsytem;

- Slab allocator;

- Sun RPC protocol;

- Vector I/O iterator library;

- Virtio network driver;

- Network traffic control;

- IPv6 networking;

- Bluetooth subsystem;

- IEEE 802.15.4 subsystem;

- IP tunnels definitions;

- MAC80211 subsystem;

- NFC subsystem;

- SCTP protocol;

- Network sockets;

- TCP network protocol;

- User-space API (UAPI);

- Kernel init infrastructure;

- Audit subsystem;

- Control group (cgroup);

- Kernel crash support code;

- DMA mapping infrastructure;

- Kernel exit() syscall;

- Kernel fork() syscall;

- IRQ subsystem;

- KCOV code coverage framework;

- Kexec HandOver (KHO);

- Locking primitives;

- Kernel module support;

- Kernel command line parsing driver;

- PID allocator;

- printk logging mechanism;

- System reboot mechanism;

- Timer subsystem;

- Workqueue subsystem;

- Kernel build system;

- Heterogeneous memory management;

- UCS-2 string library;

- KASAN memory debugging framework;

- 802.1Q VLAN protocol;

- Appletalk network protocol;

- Asynchronous Transfer Mode (ATM) subsystem;

- B.A.T.M.A.N. meshing protocol;

- Ethernet bridge;

- CAN network layer;

- Ceph Core library;

- Devlink API;

- Distributed Switch Architecture;

- HSR network protocol;

- IEEE802154.4 network protocol;

- IFE protocol;

- IUCV driver;

- KCM (Kernel Connection Multiplexor) sockets driver;

- L2TP protocol;

- Logical Link layer;

- Management Component Transport Protocol (MCTP);

- MultiProtocol Label Switching driver;

- Multipath TCP;

- NCSI (Network Controller Sideband Interface) driver;

- Netlink;

- Open vSwitch;

- Packet sockets;

- Phonet protocol;

- PSP security protocol;

- Qualcomm IPC Router (QRTR);

- RDS protocol;

- SMC sockets;

- TIPC protocol;

- TLS protocol;

- Unix domain sockets;

- VMware vSockets driver;

- Wireless networking;

- X.25 network layer;

- XFRM subsystem;

- AppArmor security module;

- Integrity Measurement Architecture(IMA) framework;

- Linux Security Modules (LSM) Framework;

- Key management;

- Landlock security;

- SELinux security module;

- Simplified Mandatory Access Control Kernel framework;

- ALSA framework;

- Generic PCM loopback sound driver;

- Generic sound devices;

- HD-audio driver;

- ESS ES18xx ALSA driver;

- Creative Sound Blaster X-Fi driver;

- ICE1712/ICE1724 (Envy24) ALSA driver;

- Digigram PCXHR ALSA driver;

- AMD SoC Alsa drivers;

- Analog Devices audio codecs;

- Cirrus Logic audio codecs;

- QCOM ASoC drivers;

- Maxim audio codecs;

- Realtek audio codecs;

- Texas InstrumentS Audio (ASoC/HDA) drivers;

- SoC Audio for Freescale CPUs drivers;

- Intel ASoC drivers;

- MediaTek ASoC drivers;

- Amlogic Meson SoC drivers;

- Rockchip ASoC drivers;

- Samsung ASoC drivers;

- SoundWire (SDCA) ASoC drivers;

- SoC audio core drivers;

- SOF drivers;

- Spreadtrum ASoC drivers;

- STI ASoC drivers;

- Xilinx ASoC drivers;

- USB sound devices;

- Virtio sound driver;