CVE-2026-68199

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. This vulnerability allows a local attacker to cause an out-of-bounds memory access. The flaw occurs when the firmware provides an invalid window size during an ADDBA Add Block Ack request, leading to incorrect memory allocation. This can...

CVE-2026-68151

A flaw was found in the Linux kernel's binfmtelffdpic component. This component, which handles FDPIC ELF binaries, does not correctly process multiple PTINTERP program headers. An unprivileged local attacker can exploit this by crafting a malicious binary with more than one PTINTERP header...

CVE-2026-68419

A flaw was found in the Linux kernel's RDMA/irdma component. A local user could exploit this by attempting to re-register specific memory regions Queue Pair, Completion Queue, or Shared Receive Queue objects that are not intended for re-registration. This could lead to an invalid operation being...

CVE-2026-68411

A flaw was found in the Linux kernel's mac80211hwsim component. A malicious backend device could report an oversized receive length to the hwsimvirtiorxwork function. This could cause the system to write past the end of a buffer, leading to a kernel panic and a denial of service DoS for the guest...

CVE-2026-68355

A flaw was found in the ath11k component of the Linux kernel. When processing Wi-Fi wireless fidelity data, a specific function can attempt to access memory outside of its allocated buffer. This buffer underflow occurs if the first entry in a data structure has a zero buffer address, leading to a...

CVE-2026-68315

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. When processing a Stream Reset Incoming Request RESETINREQUEST from a peer, the kernel does not properly validate the stream count. This can lead to an integer overflow when calculating the size for t...

CVE-2026-68239

A flaw was found in the Linux kernel's Direct Rendering Manager drm/ttm component. A local attacker could trigger a null pointer dereference by manipulating memory pages in ttmpoolbackup. This vulnerability occurs because the system attempts to process or free memory pages that are either empty...

CVE-2026-68426

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability arises when asynchronous cryptographic operations incorrectly handle network packet segments, leaving a pointer to memory that has already been released. An attacker could potentially exploit this use-after-free condition t...

CVE-2026-68201

A flaw was found in the ALSA Advanced Linux Sound Architecture timer component of the Linux kernel. When a master timer instance is closed, it does not properly ensure that all associated slave timer callbacks have finished executing before detaching them. This oversight can lead to a...

Linux Distros Unpatched Vulnerability : CVE-2026-68296

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed netdevfeatures: convert NETIFFLLTX to dev-lltx, NETIFFLLTX was set...

ALSA-2026:53329 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...

Linux Distros Unpatched Vulnerability : CVE-2026-68307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. Afte...

Linux Distros Unpatched Vulnerability : CVE-2026-68092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has a long boot delay, which was bisected to the recent enhancements to th...

Linux Distros Unpatched Vulnerability : CVE-2026-68298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882 drm/xe/userptr: replace xehmm with gpusvm made xesvminit unconditional in...

Linux Distros Unpatched Vulnerability : CVE-2026-68394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: revalidate LOADCONNPARAM queued update MGMTOPLOADCONNPARAM queues connupdatesync when a single parameter update changes an existing LE central...

Linux Distros Unpatched Vulnerability : CVE-2026-68416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling...

Linux Distros Unpatched Vulnerability : CVE-2026-68281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencie...

Linux Distros Unpatched Vulnerability : CVE-2026-68239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NULL or backup handles ttmbackuppageptrishandle, neither of which can ...

Linux Distros Unpatched Vulnerability : CVE-2026-68265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...