CVE-2026-63822

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash,...

CVE-2026-64099

A flaw was found in the Linux kernel's drm/v3d graphics driver. This vulnerability, a use-after-free error, occurs in the CPU job input/output control ioctl error path. When an error is encountered, the system attempts to access memory that has already been freed, which can lead to system...

CVE-2026-39879

CVE-2026-39879 affects syslog-ng before version 4.12, where a missing sanitization in afsql_dd_run_query can allow SQL injection from an untrusted source when using the SQL destination driver (not enabled by default). The issue lies in the afsql.c component (afsql_dd_run_query) and is exploitable...

CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CVE-2026-64191 i2c: stub: Reject I2C block transfers with invalid length

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...

CVE-2026-64191

The CVE-2026-64191 issue affects the Linux kernel i2c-stub driver (CONFIG_I2C_STUB=m) where I2C_SMBUS_I2C_BLOCK_DATA did not validate data->block[0] against I2C_SMBUS_BLOCK_MAX, allowing out-of-bounds access when an I2C_SMBUS_IOCTL with a block length > 32 is issued. The bug contrasts with ...

CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

CVE-2026-64168

A flaw was found in the Linux kernel's spi-sprd driver. This vulnerability occurs when the driver attempts to release Direct Memory Access DMA channels after a DMA setup failure during the probe phase. Without properly checking if DMA is enabled, the driver may try to dereference an invalid point...

CVE-2026-64113

A flaw was found in the Linux kernel's ixgbevf network driver. This vulnerability, a use-after-free, occurs when the driver attempts to process network packets for a specific multicast workaround. An attacker could potentially exploit this by sending specially crafted network traffic, which may...

CVE-2026-53387

A flaw was found in the Linux kernel's veml6075 light sensor driver. The driver performs an out-of-bounds array access when processing certain index values from the VEML6075CONFIT register. This issue could potentially lead to system instability or a denial of service if triggered by a faulty...

CVE-2026-53384

A flaw was found in the Linux kernel's 8250dw serial driver. When the clknotifierregister function fails during the probe process, the 8250 port is not properly unregistered. This oversight can lead to a use-after-free vulnerability, where previously freed memory is still referenced. An attacker...

CVE-2026-64118

A flaw was found in the Linux kernel's qed driver. This vulnerability involves a double free error in the qedcxttablesalloc function, where memory is deallocated twice if a Connection ID CID bitmap allocation fails. This can lead to memory corruption, potentially allowing a local attacker to caus...

CVE-2026-53371

A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...

CVE-2026-64145

A flaw was found in the Linux kernel's wilc1000 Wi-Fi driver. This vulnerability occurs during the firmware download process when the system fails to properly acquire the bus. An error in the code's cleanup path causes a Direct Memory Access DMA buffer to not be released, resulting in a memory...

CVE-2026-64122

A flaw was found in the Linux kernel's mlx5e network driver. The mlx5etxreportertimeoutrecover function attempts to access network device resources after they have been deallocated, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service system...

CVE-2026-64038

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem. A timing issue in the lm90 driver can cause the system to attempt to access freed memory during module cleanup. This use-after-free vulnerability could lead to system instability and a Denial of Service DoS...

CVE-2026-64051

A flaw was found in the Linux kernel's accel/qaic driver. This vulnerability allows for memory to be mapped beyond its intended boundaries during certain memory allocation operations. A local attacker could exploit this flaw, leading to a use-after-free condition. This could potentially result in...

SUSE-SU-2026:22759-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats...

CVE-2026-64125

A flaw was found in the Linux kernel's bcmgenet network driver. When Energy Efficient Ethernet EEE is active on GENET hardware, a misconfiguration in the receive buffer RBUF can cause network traffic to stop flowing. This leads to a denial of service for network communications and may result in...