CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

CVE-2026-98557

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. This vulnerability may allow a local attacker to cause a Denial of Service DoS by transmitting network traffic that uses User Datagram Protocol UDP Generic Segmentation Offload GSO. Because the driver improperly...

CVE-2026-98558

A flaw was found in the Linux kernel's networking subsystem. When a central processing unit CPU is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or administrative action offlining a CPU during network device...

CVE-2026-98553

A flaw was found in the Linux kernel's automount file system autofs. A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file references. Repeated exploitation can permanently leak syst...

CVE-2026-98552

A flaw was found in the Linux kernel's Performance Counters for Linux perf subsystem. A race condition during the attachment of performance monitoring context data can cause the kernel to fail to update tracking flags, resulting in a reference count leak. A local attacker could exploit this...

CVE-2026-98554

A flaw was found in the Linux kernel's virtual local area network VLAN driver. When processing network packets that lack sufficient reserved buffer space headroom before network headers are appended, the system triggers a panic condition. An attacker could exploit this vulnerability to cause a...

CVE-2026-98551

A flaw was found in the Linux kernel's Performance Events perf subsystem on ARM64 architectures. This flaw allows a local user to cause an information disclosure of sensitive kernel memory. The issue occurs because certain branch tracking data structures are not properly cleared, allowing an...

SUSE-SU-2026:4748-1 Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98549

A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue. This issue may allow an attacker on the network to obtai...

CVE-2026-98550

A flaw was found in the TIPC Transparent Inter-Process Communication subsystem of the Linux kernel. This flaw allows an attacker to cause a Denial of Service DoS by sending unexpected or duplicate group acknowledgment messages. Due to improper validation of incoming protocol messages, an internal...

CVE-2026-98548

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service DoS or memory corruption by sending specially crafted packets containing bundled error and data chunks. This issue...

ALSA-2026:85773 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-53196 kernel: sctp: keep chunk-transport in...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1791949745)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1791949745 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buff...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46163)

In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlled key index in b43legacyrx can exceed dev-maxnrkeys. The existing B43legacyWARNON is non-enforcing in production builds...

Siemens SIMATIC S7-1500 TM MFP Access of Uninitialized Pointer (CVE-2026-23367)

In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the radiotap namespace not with vendor namespaces, but if the undefined field 18 is used, the alignment/size is unknown as well. In...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31624)

In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp reportsize in s32ton to avoid undefined shift s32ton shifts by n-1 where n is the field's reportsize, a value that comes directly from a HID device. The HID parser bounds reportsize only to 32 clamp to the functi...

Siemens SIMATIC S7-1500 TM MFP Out-of-bounds Read (CVE-2026-43112)

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath When cifssanitizeprepath is called with an empty string or a string containing only delimiters e.g., '/', the current logic attempts to check cursor2 - 1 before cursor2...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53242)

In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in sndpcmdrain on linked streams sndpcmdrain uses initwaitqueueentry which does not clear entry.prev/next, and addwaitqueue with a conditional removewaitqueue that is skipped when tocheck...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46307)

In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: The ath5k driver seems to do an array-index-out-of-bounds access as shown by the UBSAN kernel message: UBSAN: array-index-out-of-bounds in...

Siemens SIMATIC S7-1500 TM MFP Out-of-bounds Write (CVE-2026-46331)

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...