EUVD-2026-59262

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio needs to be redirtied and unlocked before the terminal writebackiter...

CVE-2026-72364

The CVE-2026-72364 pertains to the Linux kernel netfs writeback path. Affected component: writeback_iter() in netfs. Root cause: error handling in the writeback loop did not properly unwind state after an error. As documented, when an error occurs, writeback_iter() must be called again with the e...

CVE-2026-72284 KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

CVE-2026-72284 KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

EUVD-2026-59183

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

CVE-2026-72284

CVE-2026-72284 affects the Linux kernel KVM on x86, where a logic error in arch/x86/kvm/lapic.c (line ~3338) caused PV EOIs to be ignored if the vCPU later disables PV EOIs, potentially triggering a kernel oops (invalid opcode) during KVM vCPU ioctls. The vulnerability is locally exploitable as p...

EUVD-2026-58927

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

CVE-2026-72153 irqchip/crossbar: Use correct index in crossbar_domain_free()

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

EUVD-2026-59059

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it...

CVE-2026-72099

Summary (CVE-2026-72099) In the Linux kernel, the dm-integrity component had an issue where hash_offset could be incremented twice; the loop already increments hash_offset, so a second increment was unnecessary. The vulnerability was resolved by correcting this behavior in the relevant code path ...

CVE-2026-72062 gpio: mt7621: avoid corruption of shared interrupt trigger state

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire...

CVE-2026-72041 espintcp: use sk_msg_free_partial to fix partial send

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

MINI-6GJV-PJWJ-H5X8

Bulletin has no description...

MINI-C5FQ-MPRX-VVMP

Bulletin has no description...

MINI-842P-X4XF-W4C8

Bulletin has no description...

MINI-PG84-FPQ2-F3PG

Bulletin has no description...

MINI-QXMG-8GGC-VM67

Bulletin has no description...

MINI-23FP-8QM7-CQJF

Bulletin has no description...

MINI-84PF-8W69-M5G4

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.11-1.hum1 aarch64, x8664...