CVE-2026-64442

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issueassocreq and joincmdhdl Two IE parsing loops are missing the header bounds checks before they dereference pIE-length: - issueassocreq walks pmlmeinfo-network.ies to build the...

CVE-2026-64430 NTB: epf: Avoid calling pci_irq_vector() from hardirq context

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pciirqvector from hardirq context ntbepfvecisr calls pciirqvector in hardirq context to derive the vector number. pciirqvector calls msigetvirq that takes a mutex and can therefore trigger "scheduling whil...

CVE-2026-64378 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the following BUGON is occasionally triggered: ================================================================== VFS: Busy inodes after...

CVE-2026-64340 USB: legousbtower: fix use-after-free on disconnect race

In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutexunlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 U...

CVE-2026-64335 USB: serial: digi_acceleport: fix broken rx after throttle

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix broken rx after throttle If the port is closed while throttled, the read urb is never resubmitted and the port will not receive any further data until the device is reconnected or the driver is...

EUVD-2026-48879

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix broken rx after throttle If the port is closed while throttled, the read urb is never resubmitted and the port will not receive any further data until the device is reconnected or the driver is...

CVE-2026-64333

The CVE-2026-64333 issue affects the Linux kernel USB serial driver digi_acceleport. The vulnerability was caused by digi_write_inb_command() not properly handling timeouts: it could update the transfer buffer and resubmit the URB on timeout, and for break-control type commands with no timeout it...

CVE-2026-64311

The CVE concerns the Linux kernel: crypto: loongson - Remove broken and unused loongson-rng. The loongson-rng rng_alg reportedly has forward-security issues and a use-after-free bug linked to wait_for_completion_interruptible(), and the rng_alg framework is largely unused in-kernel. The advisory ...

CVE-2026-64305

CVE-2026-64305 is a race condition in the Linux kernel's Intel QAT crypto driver (crypto/qat). The service_table list is protected by service_lock when entries are added or removed, but several functions (adf_dev_init, adf_dev_start, adf_dev_stop, adf_dev_shutdown, and notifier callbacks) iterate...

CVE-2026-64301

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...

Librest: weak random number generation in pkce implementation

...

SUSE-SU-2026:3248-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. - CVE-2026-53366: ipv4: account for fraggap on the paged...

CVE-2026-16796

creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...

Linux Distros Unpatched Vulnerability : CVE-2026-16399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16399 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-15791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete...

Linux Distros Unpatched Vulnerability : CVE-2026-64426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses...

Linux Distros Unpatched Vulnerability : CVE-2026-16375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Linux Distros Unpatched Vulnerability : CVE-2026-16363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-64322

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst +...

CVE-2026-64472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...