CVE-2026-53402

A flaw was found in the Linux kernel's framebuffer console fbcon component. When the fbcondosetfont function fails, the system's error handling does not correctly restore the font state, leading to a desynchronized terminal. A local user can exploit this by providing character indices that cause ...

CVE-2026-53400

A flaw was found in the Linux kernel, specifically within its I2C Inter-Integrated Circuit core component. This vulnerability arises from a timing issue during the registration of I2C adapters, where an adapter could be accessed before it is fully prepared. This premature access to uninitialized...

CVE-2026-64112

A flaw was found in the Linux kernel's Rados Block Device RBD module. A race condition exists in the lockdwork draining mechanism during the unmapping of an image. This allows the lockdwork to be re-queued after it is expected to be finalized, potentially leading to rbdacquirelock executing on...

CVE-2026-53397

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

USN-8567-1 linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8567-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

CVE-2026-53394

A flaw was found in the Linux kernel's Network File System NFS version 4.0 NFSv4.0 OPEN implementation. A race condition can occur when two NFSv4.0 OPEN threads with the same owner string attempt to open a file, and a concurrent thread inserts a new unconfirmed owner. This can lead to a memory le...

CVE-2026-53395

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote attacker can exploit this vulnerability by sending specially crafted NFS CREATE requests that include conflicting Access Control List ACL attributes. This leads to a memory leak, where the system fails to release...

USN-8566-1 linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

CVE-2026-63797

A flaw was found in the Linux kernel's rpmsg character device. This vulnerability, a use-after-free, occurs during the probe process when an internal pointer to a device endpoint eptdev is prematurely stored. If an error occurs during the device's addition, the eptdev memory is freed, but the...

CVE-2026-64113

A flaw was found in the Linux kernel's ixgbevf network driver. This vulnerability, a use-after-free, occurs when the driver attempts to process network packets for a specific multicast workaround. An attacker could potentially exploit this by sending specially crafted network traffic, which may...

CVE-2026-63795

A flaw was found in the Linux kernel's 9p filesystem client. A reference counting error in the p9clientwalk function can lead to a use-after-free or reference count underflow. This vulnerability may allow a local attacker to cause a system crash, resulting in a Denial of Service, or potentially...

CVE-2026-63794

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM module, specifically within the Secure Virtual Machine SVM component. The sevdbgcrypt function, when handling encryption, incorrectly calculates the transfer length, leading to a page overflow. This memory corruption can resu...

CVE-2026-53399

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When a setlease operation fails, the system prematurely releases a layout state identifier. An attacker could exploit this by triggering the failure, leading to a use-after-free vulnerability. This could result in a system...

CVE-2026-53393

A flaw was found in the Linux kernel's Network File System NFS daemon. This vulnerability occurs when the NFS daemon fails to reset the write verifier during deferred writeback errors for UNSTABLE writes. A remote attacker, acting as an NFS client, could exploit this by performing operations that...

CVE-2026-53398

A flaw was found in the Linux kernel's Network File System Daemon NFSD. The nfsd4decodesecinfononame function does not properly initialize a pointer sinexp before processing an incoming data stream. If the data stream is malformed or truncated, the uninitialized pointer can retain stale data from...

CVE-2026-53396

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd within the nfsd4createfile function. This vulnerability allows a remote attacker to cause a denial of service DoS by repeatedly triggering a memory leak of posixacl allocations. The leak occurs when a client attempts to...

CVE-2026-53392

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

CVE-2026-53391

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

CVE-2026-64042

A flaw was found in the Linux kernel's vfio/pci subsystem. This vulnerability occurs because the Direct Memory Access Buffer DMABUF export mechanism does not adequately verify if Base Address Register BAR resources are properly reserved before allowing access. A local attacker could exploit this ...