RHEL 8 : kernel (RHSA-2026:61973)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61973 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after...

CVE-2026-80641

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. An incorrect firmware version check for Integrity Group Temporal Key IGTK causes the number of available ciphers to continuously decrease on systems using older firmware, particularly affecting wl12xx chips. This issue leads to repeated...

CVE-2026-80692

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability, a Use-After-Free UAF, could allow a local attacker to potentially cause a system crash or execute unauthorized code. This occurs if a connection object is released from memory while the hcisync task is...

CVE-2026-80651

A flaw was found in the Linux kernel's crypto: ccp/sev-dev-tsm module. The dsmcreate function fails to properly validate the pdev-bus pointer, leading to a null pointer dereference. A local attacker could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Service DoS...

CVE-2026-80615

A flaw was found in the Linux kernel's dstmetadata component. When copying tunnel information and options within the tundstunclone function, a compiler warning for a potential memory buffer overflow is triggered. This warning is a false positive, as memory is correctly allocated, but it can lead ...

SUSE CVE-2026-72262

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get The ipccontroldata buffer is allocated as kzallocmaxsize, where maxsize covers the entire struct sofipcctrldata including its flexible array payload. However, the...

SUSE CVE-2026-72341

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv-channelstats mlx5echannelstatsalloc publishes a new entry to priv-channelstats and then increments priv-statsnch as a publication token, but neither store carries any memory barrier:...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

kernel: netfilter: nf_tables: don't skip expired elements during walk

A flaw was found in the Linux kernel. Improper management of the lifecycle of some nftables objects could result in consumption of all system memory. An attacker who can create nftables rules could use this to effect a Denial of Service...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: netfilter: ctnetlink: ensure safe access to master conntrack

A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...

CVE-2026-80713

A flaw was found in the Linux kernel's iouring subsystem. When a task that has used iouring performs an exec call, its per-task restrictions are not properly preserved. This oversight allows a subsequent iouring ring created by the task to operate without the intended security restrictions,...

CVE-2026-80663

A flaw was found in the Linux kernel's Intel Speed Select daemon. A local unprivileged user can exploit a symlink vulnerability in the daemon's pidfile handling. By pre-creating a symbolic link at the fixed pidfile path under /tmp, the attacker can cause the root-run daemon instance to write into...

CVE-2026-80701

A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker with DRM master privileges could exploit this by providing oversized cursor dimensions through the DRMIOCTLMODECURSOR2 interface. This improper input validation can lead to a kernel crash, resulting in a Denial of Servi...

CVE-2026-80660

A flaw was found in the Linux kernel's hwmon occ component. This vulnerability occurs when occactivefalse or occshutdown attempt to unregister sysfs devices while holding the occ-lock. During this process, sysfs callbacks can re-enter the OCC update path and try to acquire the occ-lock again,...

CVE-2026-80627

A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...

CVE-2026-80623

A flaw was found in the Coresight Embedded Trace Extension ETE component of the Linux kernel. This vulnerability arises because the system register states for Embedded Trace Macrocells ETMs and ETE are not consistently preserved when the CPU powers down. A local attacker could potentially trigger...

CVE-2026-80596

A flaw was found in the Linux kernel's ims-pcu driver. This vulnerability occurs because sysfs attributes, intended only for the control interface, are improperly exposed on all interfaces. A local user could exploit this by accessing these attributes on data interfaces, leading to unexpected...

SUSE-SU-2026:23382-1 Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...