CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

...

CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

...

CVE-2025-71067

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

CVE-2025-71067

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

UBUNTU-CVE-2025-71067

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

January 13, 2026—KB5073699 (Security-only update)

None None...

January 13, 2026—KB5073697 (Monthly Rollup)

None None...

January 13, 2026—KB5073696 (Monthly Rollup)

None None...

January 13, 2026—KB5073695 (Monthly Rollup)

None None...

Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...

January 13, 2026—KB5073698 (Monthly Rollup)

None None...

January 13, 2026—KB5073724 (OS Builds 19045.6809 and 19044.6809)

None None...

January 13, 2026—KB5073455 (OS Build 22631.6491)

None None...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

January 13, 2026—KB5073723 (OS Build 17763.8276)

None None...

January 13, 2026—KB5073722 (OS Build 14393.8783)

None None...

January 13, 2026—KB5073700 (Security-only update)

None None...

January 13, 2026—KB5073450 (OS Build 25398.2092)

None None...

CVE-2025-71067 ntfs: set dummy blocksize to read boot_block when mounting

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

CVE-2025-71067

The CVE-2025-71067 vulnerability affects the Linux kernel NTFS mounting path where sb->s_blocksize can remain zero when the block size of the block device exceeds PAGE_SIZE, causing ntfs_init_from_boot() to read the boot_block with an undefined/zero blocksize. The issue is triggered during mou...