CVE-2026-68083

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...

CVE-2026-59919

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

EUVD-2026-50438

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

CVE-2026-59919 Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

CVE-2026-59919

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

CVE-2026-59919: Improper Neutralization of CRLF Sequences

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio CVE-2026-31451 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache...

SUSE-SU-2026:22835-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

Linux Distros Unpatched Vulnerability : CVE-2026-64109

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on tha...

CVE-2026-64109

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-;skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-53361

A flaw was found in the Linux kernel's afunix component. A race condition exists within the unixgc garbage collection function where the gcinprogress flag may not be correctly set. This could lead to unixpeekfpl misinterpreting garbage collection status when handling MSGPEEK operations, potential...

AZL-92004 CVE-2026-53361 affecting package kernel for versions less than 6.6.144.1-1

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

CVE-2026-53361 af_unix: Set gc_in_progress to true in unix_gc().

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

CVE-2026-53361

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

CVE-2026-53361: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...