This security update addresses multiple critical vulnerabilities (CVE-2026-43083 CVSS 9.1, CVE-2026-43197 CVSS 9.1, CVE-2026-43198 CVSS 9.8) in the Linux kernel affecting subsystems including x86 architecture, network drivers, IPv4/IPv6 networking, and file systems. Affected versions are broadly defined, with specific examples including kernels from 5.17 to below 6.18.24 and from 6.19 to below 6.19.14 for CVE-2026-43083. The fixes are provided in kernel versions 6.18.24, 6.19.14, 6.18.16, and 6.19.6, depending on the specific CVE and kernel branch.
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructure; - IPv4 networking; - Network traffic control; - TCP network protocol; - B.A.T.M.A.N. meshing protocol; - IPv6 networking; - Multipath TCP; - Netfilter; - RxRPC session sockets; - SCTP protocol; - SMC sockets; (CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43465, CVE-2026-46242, CVE-2026-46325, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-53151, CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359)