CVE-2026-64189 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64264 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64293 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64207 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-GR72-P8G3-6GPC vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64263 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64292 vulnerabilities

Vulnerabilities for packages: linux-gcp...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-64192 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp...

GHSA-3HVR-PHFH-X26G vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp...

CVE-2026-68451

A flaw was found in the Linux kernel's s390 zcrypt module. The ccaecc2protkey function, responsible for handling Common Cryptographic Architecture CCA Elliptic Curve Cryptography ECC private key requests, does not properly validate the length of the key token. This allows a local attacker to...

CVE-2026-68454

A flaw was found in the KVM Kernel-based Virtual Machine subsystem of the Linux kernel, affecting the s390 PCI implementation. When a guest operating system registers interrupt requests IRQs without a specific summary bit, the system incorrectly stores an invalid memory address. This improper...

CVE-2026-68452

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of the length of CCA AES cipher key requests. A local attacker could exploit this by providing a specially crafted key token, which may lead to a buffer overflow. This could result...

CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

K000162904: Linux kernel vulnerability CVE-2022-50053

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavfclose in iavfresettask error handling. Doing so can lead to double call of napidisable, which can lead to deadlock there. Removing VF would lead to...

CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

CVE-2026-68451

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...

K000162910: Linux kernel vulnerability CVE-2026-53208

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2capcore.c:l2capsigchannel accepts BR/EDR signaling packets up to the channel MTU and dispatches each command without...

CVE-2026-53799

rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent aclsetfile or...

CVE-2026-68454

In the Linux kernel KVM s390 PCI implementation, CVE-2026-68454 arises from improper handling when a guest registers IRQs without a summary bit: the GAITE stores a invalid address (virt_to_phys(page_address(NULL))) instead of 0 for the guest AISB. Root cause is memory address handling in this pat...