PT-2026-94841

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF interpreter where it fails to recognize the BPF JMP|BPF JA|BPF X instruction used for insn array maps. This failure leads to a kernel BUG triggered by the BUG ...

PT-2026-94686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amba-pl011 serial driver where the pl011 console write atomic function is called from an atomic context that prohibits sleeping. The function invokes clk enable,...

CVE-2026-93183: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drmmminit with a valid allocation range limavmcreate is currently run before vastart and vaend are set up, meaning they are both 0. limavmcreate runs drmmminit with them as arguments for the allocator, and if...

PT-2026-94647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to distinguish between kernel functions and BPF programs when checking for sleepable tracing or LSM...

CVE-2026-90299: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.161.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: bind: bind-9.20.29-0.1.hum1 aarch64, x8664 bind-chroot-9.20.29-0.1.hum1 aarch64, x8664 bind-devel-9.20.29-0.1.hum1 aarch64, x8664 bind-dnssec-utils-9.20.29-0.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-0.161.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.26-0.1.hum1 noarch tomcat11-admin-webapps-11.0.26-0.1.hum1 noarch tomcat11-common-11.0.26-0.1.hum1 noarch tomcat11-docs-webapp-11.0.26-0.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.60-0.1.hum1 noarch tomcat10-admin-webapps-10.1.60-0.1.hum1 noarch tomcat10-common-10.1.60-0.1.hum1 noarch tomcat10-docs-webapp-10.1.60-0.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.14: nats-server2.14-2.14.7-0.1.hum1 aarch64, x8664 nats-server2.14-2.14.7-0.1.hum1.src src...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.5-4.hum1 aarch64, x8664 nginx-all-modules-1.30.5-4.hum1 noarch nginx-core-1.30.5-4.hum1 aarch64, x8664 nginx-filesystem-1.30.5-4.hum1 noarch nginx-mod-devel-1.30.5-4.hum1 aarch6...

CVE-2026-89950

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...

CVE-2026-89885

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the SCP platform device with getpdevbyid and then reads its driver data. T...

EUVD-2026-80550

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...

CVE-2026-89950 batman-adv: mcast: linearize skbuff for packet generation

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...

CVE-2026-89950

In the Linux kernel batman-adv module, multicast packet generation functions batadv_mcast_forw_packet() and batadv_mcast_forw_scrape() can be reached via the batadv_mcast_forw_mcsend() call path, where the socket buffer is unshared but not linearized . Unlike the batadv_recv_mcast_packet() handle...

CVE-2026-89950 batman-adv: mcast: linearize skbuff for packet generation

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...

CVE-2026-79993

The "deleteContainer" opcode 0x14/20 is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree regardless of the ACL restrictions on the znode or its parent. This opcode is considered internal-only and the official...

PT-2026-93609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet-tcp module where the nvmet tcp handle h2c data pdu function accepts an H2CData PDU without verifying if the target solicited the data by sending an R2T. A...