CVE-2026-90107: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: free pending qentry in smcllcflowstop before memset smcllcflowstop resets a flow struct with a blind memset: spinlockbh&lgr-llcflowlock; memsetflow, 0, sizeofflow; flow-type = SMCLLCFLOWNONE; spinunlockbh&lgr-llcflowlock...

CVE-2026-90063: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

CVE-2026-90056: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fecptpinit is only called when fep-bufdescex is available. However, fecprobe unconditionally calls fecptpstop on the failedinit path, and fecdrvremove unconditionally calls fecptpstop...

CVE-2026-90055: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

PT-2026-94413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/smc component where IPPROTO SMC sockets fail to release an internal TCP sock, referred to as clcsock, when socket creation fails after the proto-init hook has...

PT-2026-94422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow occurs in the fq pie init function when the default quantum is set using psched mtu without clamping. On devices with an exceptionally large Maximum Transmission Unit...

PT-2026-94667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rapidio component where rio alloc net stores a newly allocated rio net in mport-net before the device is registered. If rio add net fails, the device reference is...

CVE-2026-90099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier change paths filter objects, per-CPU counters, and per-filter aux data use plain GFPKERNEL without GFPACCOUNT, allowing unprivileged users...

CVE-2026-90050: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: clamp quantum and initialquantum in change path The fq change path accepts TCAFQQUANTUM in 1, INTMAX and TCAFQINITIALQUANTUM up to INTMAX, while fqinit already clamps to 1, 120. A user can override the init clamp v...

PT-2026-94490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio net driver where the virtnet rx resize function fails to resize the rq-xsk buffs XSK buffer array when an AF XDP socket is attached. If the ring size...

.NET 10.0 security, bug fix, and enhancement update

10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315...

.NET 8.0 security, bug fix, and enhancement update

8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244...

ALSA-2026:68787 Important: perl-Net-DNS security update

The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of the gethostbyname and gethostbyaddr routines. Security Fixes: perl-Net-DNS: Net::DNS: Denial of Service...

PT-2026-94549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the net: page pool component. The problem occurs due to a race condition during xa cmpxchg when page pool destroy executes page pool scrub concurrent...

CVE-2026-90076: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fqinit computes quantum = 2 pschedmtu and initialquantum = 10 pschedmtu with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU...

CVE-2026-90071: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

CVE-2026-90073: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes weight...

PT-2026-94421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...

PT-2026-94411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio-net component where a user can specify an arbitrary gso size in a packet crafted with an AF PACKET PACKET VNET HDR socket. If the gso size is set to a value...

CVE-2026-90108: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: free stashed qentry before overwrite in REQADDLINK to ADDLINK transition When smcllceventhandler transitions the local LLC flow from SMCLLCFLOWREQADDLINK to SMCLLCFLOWADDLINK on arrival of an ADDLINK request, it calls...