CVE-2026-64497

A flaw was found in the Linux kernel's iio: chemical: scd30 driver, which manages a specific type of sensor. This vulnerability involves an error in how the driver processes numerical data, specifically a 'sign-extension bug' that can corrupt a part of a floating-point number called the exponent...

CVE-2026-64317

A flaw was found in the Linux kernel's ISO 9660 file system isofs component. A remote attacker could exploit this vulnerability by providing a specially crafted ISO 9660 image containing a malformed Rock Ridge symbolic link record. This flaw allows for an out-of-bounds read, leading to the...

CVE-2026-64484

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture es1938 sound driver. This vulnerability arises when a memory allocation failure causes the sndctlnew1 function to return a null value. The sndes1938mixer function then attempts to use this null value without proper...

CVE-2026-64560

CVE-2026-64560 : In the Linux kernel, a race involving non-leader exec() can cause a use-after-free in posix-cpu-timers when a TGID-timed timer is armed and then a process exits or execs. The issue arises during sys_timer_delete() -> posix_cpu_timer_del() observing an old leader, leading to te...

CVE-2026-64559

CVE-2026-64559 affects the Linux kernel’s s390/pkey path, where the vulnerability stemmed from an inadequate length check in the PKEY_VERIFYPROTK ioctl. The resolved description indicates that the kernel now explicitly checks the user-space request buffer length and returns a failure if it exceed...

EUVD-2026-50406

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

CVE-2026-64558

The CVE-2026-64558 entry concerns the Linux kernel, specifically the s390/pkey pkey_pckmo handler in key_to_protkey(). The vulnerability was resolved by explicitly checking the length of the target buffer to ensure the generated output data does not exceed the provided space. Practical impact is ...

EUVD-2026-50405

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkeypckmo handler implementation Explicitly check the length of the target buffer in the pkeypckmo implementation of the keytoprotkey handler function. The handler function fails, if the generated outpu...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: net: sched: act_csum: validate nested VLAN headers

A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-64338

A flaw was found in the Linux kernel's uss720 driver. When the uss720probe function attempts to initialize a USB parallel port parport device, it registers the parport but may fail to unregister it if a subsequent hardware register read operation fails. This improper resource management leaves a...

CVE-2026-64298

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

CVE-2026-64423

A flaw was found in the Linux kernel's Internet Group Management Protocol IGMP multicast group handling. When a network device is destroyed, its associated multicast groups are not properly removed from the device's hash table before their memory is reclaimed. This creates a race condition where ...

CVE-2026-64511

A flaw was found in the Linux kernel's ACPI NFIT core component. This vulnerability allows a local attacker to cause a system crash by triggering a specific notification related to Non-Volatile Memory NVM before the NVM table is fully set up. This improper handling of NVM notifications can lead t...

CVE-2026-64478

A flaw was found in the Linux kernel's ALSA USB audio driver, specifically affecting DualSense controllers. A local attacker with physical access to a DualSense controller could exploit this by rapidly disconnecting and reconnecting the device due to a weak physical connection. This action can...

CVE-2026-64372

A flaw was found in the Linux kernel's cpufreq subsystem. This vulnerability, a use-after-free and double-free error, occurs during the two-phase OSC negotiation in the pcccpufreqdoosc function. A local attacker could exploit this memory corruption to cause a denial of service DoS or potentially...

CVE-2026-64495

A flaw was found in the Linux kernel's bmg160 gyroscope driver. An out-of-bounds read vulnerability exists when handling specific bandwidth or filter values provided by userspace through the sysfs interface. A local user can exploit this by supplying a malformed value, leading to a read past the...

CVE-2026-64415

A flaw was found in the Linux kernel's memory management mm/swap component. Under heavy memory and swap stress, a local attacker could trigger a softlockup during large swap cluster reclaim operations. This vulnerability can lead to a Denial of Service DoS, making the system unresponsive...