CVE-2026-68285

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the LoongArch architecture. When JIT compilation fails for a subprogram, the bpfjitfree function does not properly release the memory allocated for the JIT context offsets array. This oversight leads t...

UBUNTU-CVE-2026-68295

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

CVE-2026-68295 LoongArch: BPF: Zero-extend signed ALU32 div/mod results

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

Linux Distros Unpatched Vulnerability : CVE-2026-68295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The...

CVE-2026-64508

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF Just-In-Time JIT compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to...

CVE-2026-64507

CVE-2026-64507 : In the Linux kernel, a hardening tied to Spectre-v2 mitigations enables an IBPB flush during BPF JIT allocation/memory reuse when BPF-JIT is in use. The change guards the IBPB enabling under CONFIG_BPF_JIT, and skips enabling if the BPF dispatcher already uses a retpoline sequenc...

SUSE CVE-2026-53094

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stale offload-prog pointer after constant blinding When a dev-bound-only BPF program BPFFXDPDEVBOUNDONLY undergoes JIT compilation with constant blinding enabled bpfjitharden = 2, bpfjitblindconstants clones the program...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006669 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpfjitlimit. While reading bpfjitlimit, it can be changed concurrentl...

EUVD-2026-15378

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpfplt contains a u64 target field. Currently, the BPF JIT allocator requests an alignment of 4 bytes sizeofu32 for the JIT buffer. Because the ba...

CVE-2026-23383

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpfplt contains a u64 target field. Currently, the BPF JIT allocator requests an alignment of 4 bytes sizeofu32 for the JIT buffer. Because the ba...

Linux Distros Unpatched Vulnerability : CVE-2026-23383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpfplt contains a u64 target field. Currently, the BPF JIT allocator requests...

The vulnerability of the build_prologue() function in the arch/loongarch/net/bpf_jit.c module of the LoongArch architecture support for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the buildprologue function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42067)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42067 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from setmemoryrox into...

CLSA-2026-1768663754 kernel: Fix of 38 CVEs

ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 CVE-2025-38249 - drm/i915/gt: Fix timeline left held on VMA alloc error CVE-2025-38389 - md/raid1: Fix stack memory use after return in raid1reshape CVE-2025-38445 - atm: clip: Fix infinite recursive call of clippush...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000965 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002119 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...

bpf: Fix a data-race around bpf_jit_limit.

...

EUVD-2022-54887

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Clear prog-jitedlen along prog-jited syzbot reported an illegal copytouser attempt from bpfproggetinfobyfd 1 There was no repro yet on this bug, but I think that commit 0aef499f3172 "mm/usercopy: Detect vmalloc...

EUVD-2014-2912

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987044 advisory. In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpfjitbinaryfree function requires a non-NULL...