CLSA-2025-1736783731 kernel: Fix of 10 CVEs

media: edia: dvbdev: fix a use-after-free CVE-2024-27043 - vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans CVE-2024-50264 - net/sched: stop qdisctreereducebacklog on TCHROOT CVE-2024-53057 - bpf: Fix out-of-bounds write in triegetnextkey CVE-2024-50262 - KVM: nSVM:...

CLSA-2024-1722977984 kernel: Fix of 17 CVEs

ima: Fix use-after-free on a dentry's dname.name CVE-2024-39494 - ima: define imamaxdigestdata struct without a flexible array variable - ima: detect changes to the backing overlay file - tcp: Use refcountincnotzero in tcptwskunique. CVE-2024-36904 - afunix: Fix garbage collector racing against...

CLSA-2026-1770032032 kernel: Fix of 63 CVEs

mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CVE-2025-39883 - comedi: aioiiro16: Fix bit shift out of bounds CVE-2025-38529 - comedi: das6402: Fix bit shift out of bounds CVE-2025-38482 - comedi: pcl812: Fix bit shift out of bounds CVE-2025-38530 - comedi: das16m1: Fix...

PT-2026-116917

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload fils encrypt assoc req accepts a ReAssociation Request frame whose last element is the FILS Session element. crypt len is then zero and aes siv encrypt is called with ...

Linux Distros Unpatched Vulnerability : CVE-2026-98698

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session...

CVE-2026-98787: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in rhtabmaplookupanddeletebatch bpfmemcachefreercu uses thiscpuptr which requires migration to be disabled. All callers of rhtabdeleteelem disable migration except rhtabmaplookupanddeletebatc...

PT-2026-117087

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache replay, the writeback worker and the GC worker read a kset of get kset onmedia size bytes and advance the position by it. A forged key num makes that size exceed the...

CVE-2026-98698: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...

PT-2026-116948

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va align to hugetlb mappings on AMD F15h get align mask returns huge page mask align for hugetlbfs, but get align bits adds va align.bits regardless, so vm unmapped area returns an address off the huge page...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability stems from the lack of migration protection in rhtabmaplookupanddeletebatch. Under CONFIGPREEMPTRCU, only rcureadlock is used without disabling migration. Tasks involved in the deletion process can be migrated...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.12.25 to 6.12.112 and from 6.14.4 to 6.15 contain security vulnerabilities. The vulnerability arises from the function initel2fgt2, which writes the same mask to HDFGRTR2EL2 and HDFGWTR2EL2. However, PMZREL0 is only write-only, and its trap bit nPMZREL0 exists...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.99.1-1.1.hum1 aarch64, s390x, x8664 clippy-1.99.1-1.1.hum1 aarch64, s390x, x8664 rust-1.99.1-1.1.hum1 aarch64, s390x, x8664 rust-analyzer-1.99.1-1.1.hum1 aarch64, s390x, x8664...

OESA-2026-4364 httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version...

SUSE CVE-2026-86563

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

Important: Red Hat Security Advisory: MTV RHEL9 Images

Updated Release packages that fix several bugs and add various enhancements are now available. Migration Toolkit for Virtualization Images...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9380: Backport to odf-4.17.z Backport CA related fixes for NooBaa DFBUGS-7336: Backport to odf-4.17.z 5.2...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9792: Use Azure Storage Account GPv2 DFBUGS-9382: Backport to odf-4.16.z Backport to 4.22 Backport CA...

Astra Linux – Vulnerability in Qemu

A issue was discovered in QEMU through version 5.1.0. An out-of-bounds memory access was identified in the ATI VGA device implementation. This flaw occurs in the ati2dblt routine in hw/display/ati2d.c, during handling of MMIO write operations via the atimmwrite callback. A malicious guest could...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: riscv: The issue with the handling of SRSPIE set/clear operations during uprobe has been fixed. In riscv, the process of uprobe involves clearing spie before executing the origin insn, and setting spie after that. However, whe...