CLSA-2026-1789117244 microcode_ctl: Fix of CVE-2025-35973

Update Intel CPU microcode to 20260812 release, addresses CVE-2025-35973 INTEL-SA-01428; the release also carries INTEL-SA-01379, -01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the 06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 cpuid:A06A4 gets 0x28: - Addition of...

CLSA-2026-1789116898 microcode_ctl: Fix of CVE-2025-35973

Update Intel CPU microcode to 20260812 release, addresses CVE-2025-35973 INTEL-SA-01428; the release also carries INTEL-SA-01379, -01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the 06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 cpuid:A06A4 gets 0x28: - Addition of...

CLSA-2026-1789116715 microcode_ctl: Fix of CVE-2025-35973

Update Intel CPU microcode to 20260812 release, addresses CVE-2025-35973 INTEL-SA-01428; the release also carries INTEL-SA-01379, -01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the 06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 cpuid:A06A4 gets 0x28: - Addition of...

CVE-2026-89695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

PT-2026-96448

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc pool for cpu svc set num threads spreads the requested threads evenly across the service's pools base = nrservs / sv nrpools. When a service runs fewer threads than it has pools -- e.g. an...

PT-2026-96490

In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...

CVE-2026-89647: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

CVE-2026-89581: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

CVE-2026-89460: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpucfevents at first event...

CVE-2026-89459: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...

CVE-2026-80963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

PT-2026-90176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 CPUMF facility where the kernel can crash when CPUs are hotplug added during the execution of a command such as perf stat -e cycles -- . The root cause is the...

PT-2026-96532

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

PT-2026-96387

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph trim dentries if no progress possible ceph cap reclaim work re-queues itself for as long as ceph trim dentries returns -EAGAIN, which happens whenever a lease walk exhausts its nr to scan budget. This...

Linux Distros Unpatched Vulnerability : CVE-2026-45759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Surica...

CVE-2026-80963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

PT-2026-96391

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph parse deleg inos ceph parse deleg inos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

PT-2026-90363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy loop occurs in the Ceph component of the Linux kernel when ceph cap reclaim work repeatedly re-queues itself because ceph trim dentries returns -EAGAIN. This happens when a lease...

PT-2026-90297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A per-CPU address resolution flaw exists in the x86 BPF JIT compiler. The issue occurs when the destination of a per-CPU address MOV is an extended register R5 through R9. Due to an...

PT-2026-90296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the bpf get stack function. In preemptible BPF programs running on a PREEMPT kernel, a task can be scheduled out after obtaining a per-CPU perf callchain...