The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the omninet_port_remove() function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the omninetportremove function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dpu_writeback_init() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpuwritebackinit function in the drivers/gpu/drm/msm/disp/dpu1/dpuwriteback.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow...

The vulnerability of the adis16260_write_raw() function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability in the `qcom_geni_serial_handle_tx_dma()` function of the `drivers/tty/serial/qcom_geni_serial.c` driver of the TTY console driver in the Linux kernel’s serial port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcomgeniserialhandletxdma function in the drivers/tty/serial/qcomgeniserial.c driver of the TTY console driver in the Linux kernel’s serial port is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339 kernel: crypto: pcrypt - Fix handling of...

The vulnerability of the `tcp_ao_delete_key()` function in the `net/ipv4/tcp_ao.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpaodeletekey function in the net/ipv4/tcpao.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the lsm_name_to_attr() function in the security/lsm_syscalls.c module of the Linux kernel’s security subsystem allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the lsmnametoattr function in the security/lsmsyscalls.c module of the Linux kernel’s security subsystem is related to the blocking mechanism with unlimited external access. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity ...

The vulnerability of the digi_port_init() function in the drivers/usb/serial/digi_acceleport.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digiportinit function in the drivers/usb/serial/digiacceleport.c module of the Linux device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the veml6075_request_measurement() function in the drivers/iio/light/veml6075.c module of the Linux kernel’s sensor driver allows a attacker to access protected information or cause a service failure.

The vulnerability of the veml6075requestmeasurement function in the drivers/iio/light/veml6075.c module of the Linux kernel’s sensor driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the avic_hardware_setup() function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the avichardwaresetup function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

The vulnerability of the cypress_generic_port_probe() function in the drivers/usb/serial/cypress_m8.c driver for USB device controllers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cypressgenericportprobe function in the drivers/usb/serial/cypressm8.c driver for Linux USB device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the store_modes() function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storemodes function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

PT-2026-89093

In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty register driver failure If tty register driver fails, it drops the reference, but fails to set the global dbc tty driver to NULL, causing the unregister to be called again when module exits. On...

Linux Distros Unpatched Vulnerability : CVE-2026-80922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

RHEL 8 : kernel (RHSA-2026:66000)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66000 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling...

Linux Distros Unpatched Vulnerability : CVE-2026-80924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: krb5 - use kfreesensitive for derived key buffers cryptokrb5prepareencryption and cryptokrb5preparechecksum free the buffer holding the freshly derived...

Linux Distros Unpatched Vulnerability : CVE-2026-80923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL,...