New Linux Kernel Vulnerabilities Cause Deadlocks, Livelocks, and NULL Pointer Crashes

The Linux kernel team disclosed a set of CVEs (July 19–20, 2026) that affect XFS log recovery, Bluetooth L2CAP, net/sched dualpi2, network team code, Qualcomm rmnet, netfilter ipset, BPF LSM, and various drivers, causing deadlocks, livelocks, NULL dereferences, use-after-free and race conditions; fixes have been merged upstream and administrators—especially of network-facing and storage-critical systems—are advised to track and apply the stable patches promptly.