CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

DEBIAN-CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

CVE-2026-98088

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information for the PCI device, such as single-socket boards that don't expose...

CVE-2026-98061 bpf: Reject tail calls directly from callback frames

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

CVE-2026-98061

The Linux kernel contains a vulnerability in the BPF verifier where tail calls made directly from synchronous callback frames trigger a verifier bug. The root cause is that prepare_func_exit() marks register R0 as precise for callbacks, but the tail-call path synthesizes R0 instead of deriving it...

CVE-2026-98019

The Linux kernel contains a vulnerability in the BPF subsystem where certain functions failed to mark underlying scalar registers as precise . Specifically, check_func_arg() allowed bpf_register_is_null() for nullable arguments without marking the register as precise, and check_helper_call() enfo...

CVE-2026-98075: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8813-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8813-1 advisory. It was discovered that Expat did not correctly handle certain integer arithmetic...

CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

PT-2026-98724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where tail calls made directly from callback frames are not properly handled. When a tail call occurs from a non-zero frame, t...

UBUNTU-CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-19492

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-19492 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

EUVD-2026-86007

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-19492

The IBM PowerVM Hypervisor is affected by a vulnerability in a hypervisor call interface, classified as CWE-457: Use of Uninitialized Variable . An attacker with root access to a guest partition can read a limited amount of hypervisor memory, which may expose sensitive data belonging to the hyper...

CVE-2026-19492 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

USN-8813-1: Expat vulnerabilities

It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 It was discovered that Expat did not correctly track handler cal...

USN-8813-1 expat vulnerabilities

It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 It was discovered that Expat did not correctly track handler cal...

CVE-2026-19492: Use of Uninitialized Variable

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...