kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

RLSA-2026:21557 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 kernel: mm: thp: deny...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE-SU-2026:0496-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255594. - CVE-2023-54142: gtp: Fix use-after-free in gtpencapdestroy bsc1256095. -...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255594. CVE-2023-54142: gtp: Fix use-after-free in gtpencapdestroy bsc1256095...

CVE-2025-68183

CVE-2025-68183 is a Linux kernel vulnerability affecting IMA_DIGSIG handling when setting/removing non-IMA xattrs. If both IMA and EVM are in fix mode, IMA signatures can be replaced by IMA hashes on file close, or when security xattrs change (e.g., security.selinux). The issue is fixed by not cl...

CVE-2025-68183 ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability that could result in the loading of unsigned firmware on boot. An authenticated attacker could exploit this flaw to load malicious firmware onto the device. cisco-sa-20190925-iosxe-digsig-bypass TRUSTED...

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux is related to errors that cause significant time delays when opening a folder with the ELF filter enabled. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability in the implementation of the mpi_alloc function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpialloc function in the loaded module of the digsig/digsigverif.ko kernel of the Linux operating system is related to the assignment of the null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure when there is a memory shortage in th...

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system allows a perpetrator to compromise the integrity of protected data.

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system is related to an error that causes incorrect calculation of the digital signature for hidden files. Exploiting this vulnerability could allow a attacker to compromise the integrity of protected data...