CVE-2026-64124

In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length netdevmembinddmabuf trusts dmabuf-size and sgdmalen to be PAGESIZE multiples without checking: - txvec is sized dmabuf-size / PAGESIZE, and netdevmemgetniov...

Medium: php8.2

Issue Overview: PHP: ext/openssl: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 Affected Packages: php8.2 Issue Correction: Run dnf update php8.2 --releasever 2023.12.20260720 or dnf update --advisory ALAS2023-2026-1958 --releasever 2023.12.20260720 to...

CVE-2026-64169

In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error...

CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

CVE-2026-63967

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack with aligned8 but no initializer, but there is a hole in the structure, which will then leak to userspace as...

CVE-2026-63974

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Set HCICMDDRAINWORKQUEUE during device close Since hcidevclosesync can now be called during the reset path, we should also set HCICMDDRAINWORKQUEUE. This avoids queuing timeouts while the hdev workqueue is bei...

UBUNTU-CVE-2026-64181

In the Linux kernel, the following vulnerability has been resolved: mm: fix vmnormalpage to handle missing support for pmdspecial/pudspecial On x86 32-bit with THP enabled, zaphugepmd is seen to generate a "WARNING: mm/memory.c:735 at vmnormalpage+0x6a/0x7d", from the VMWARNONONCEiszeropfnpfn ||...

UBUNTU-CVE-2026-63838

In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of componentdais componentdaisRSNDMAXCOMPONENT is initially zero-initialized and later populated in rsnddaiofnode. However, the existing boundary check: if i = RSNDMAXCOMPONENT does...

UBUNTU-CVE-2026-64121

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

UBUNTU-CVE-2026-64145

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

UBUNTU-CVE-2026-64122

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5etxreportertimeoutrecover mlx5etxreportertimeoutrecover accesses sq-netdev after mlx5esafereopenchannels has torn down and freed the channel and its embedded SQs. Replace the three sq-netdev...

UBUNTU-CVE-2026-63975

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2capecredconnrsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2capchandel may invalidate the tmp cursor...

UBUNTU-CVE-2026-64084

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 cap PDIO scan in getmultiple at ADM1266PDIONR adm1266gpiogetmultiple iterates the PDIO portion of the caller-supplied mask using foreachsetbitfromgpionr, mask, ADM1266GPIONR + ADM1266PDIOSTATUS ... where...

UBUNTU-CVE-2026-64185

In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...

UBUNTU-CVE-2026-64076

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

Linux Distros Unpatched Vulnerability : CVE-2026-64192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled...

Linux Distros Unpatched Vulnerability : CVE-2026-64126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the...

UBUNTU-CVE-2026-64155

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11kwmicmdsend.... Because we did not check the return value, we also did not free the skb in the error...

UBUNTU-CVE-2026-63848

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143...

UBUNTU-CVE-2026-63865

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop tasktoinode and inetconnestablished from lsm sleepable hooks bpflsmtasktoinode is called under rcureadlock and bpflsminetconnestablished is called from softirq context, so neither hook can be used by sleepable LSM...