CVE-2026-53228

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

SUSE CVE-2026-52975

In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port-aggregator syzbot found a data-race in bond3adgetactiveagginfo / bond3adstatemachinehandler 1 which hints at lack of proper RCU implementation. Add rcu qualifier to port-aggregato...

SUSE CVE-2026-52983

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalance in airohadevxmit, where inflight packets are accounted only for the AIROHANUMTXRING netdev TX queues. The queue index is computed as: qid =...

SUSE CVE-2026-53068

In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size validation calculates the minimum required buffer size by adding the AFBC payload size to the framebuffer offset. This addition is performe...

The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the ksz_setup() function in the drivers/net/dsa/microchip/ksz_common.c file of the DSA kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kszsetup function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the alps_disconnect() function in the drivers/input/mouse/alps.c module of the Linux kernel mouse driver allows a hacker to cause a service failure.

The vulnerability of the alpsdisconnect function in the drivers/input/mouse/alps.c module of the Linux kernel operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the asdpciRemove() function in the drivers/scsi/aic94xx/aic94xx_init.c driver for Linux SCSI device drivers allows a hacker to cause a service failure.

The vulnerability of the asdpciRemove function in the drivers/scsi/aic94xx/aic94xxinit.c driver for Linux SCSI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the iommu_sva_bind_device() function in the drivers/iommu/iommu-sva.c module of the Linux operating system’s IOMMU driver allows a hacker to cause a service failure.

The vulnerability of the iommusvabinddevice function in the drivers/iommu/iommu-sva.c file of the Linux IOMMU driver relates to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the veth_poll() function in the drivers/net/veth.c module of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vethpoll function in the drivers/net/veth.c file of the network device driver for Linux operating systems is due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ttm_bo_access() function in the drivers/gpu/drm/ttm/ttm_bo_vm.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ttmboaccess function in the drivers/gpu/drm/ttm/ttmbovm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kuma, flux-image-automation-controller, kubernetes, gitlab-rails-ce-fips, gitlab-kas, omnictl-multiarch, vault-fips, knative-serving-fips, prometheus-mongodb-exporter, traefik-fips, flux-source-controller, helm, cilium, argo-workflows, argo-cd, opentelemetry-collecto...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: policy-controller, kaf, kargo, spire-server, docker-machine-driver-harvester, trivy-operator, age, vault-benchmark, kine, crossplane-provider-azure-sql, flux-kustomize-controller, argocd-image-updater, loki, crossplane-provider-azure-managedidentity, cilium, gitea,...

DEBIAN-CVE-2026-53308

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating workqueue to fix two bugs at the same time: 1. Driver leaks the memory on remove, because the workqueue is not destroyed. 2...

CVE-2026-53313

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths In dcdmubsrvlogdiagnosticdata and dcdmubsrvenabledpiatrace. Both functions check: if !dcdmubsrv || !dcdmubsrv-dmub and then call DCLOGERROR inside that block...

DEBIAN-CVE-2026-53316

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in rascorerasinterruptdetected Fixes a NULL pointer dereference when rascore is NULL and rascore-dev is accessed in the error path. Reported by: Dan Carpenter...

DEBIAN-CVE-2026-53304

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter defreservedsize defines the default buffer size reserved for each Sgfd and should be restricted to a range between 0 and 1,048,576 see...

CVE-2026-53306

In the Linux kernel, the following vulnerability has been resolved: tty: hvciucv: fix off-by-one in number of supported devices MAXHVCIUCVLINES == HVCALLOCTTYADAPTERS == 8. This is the number of entries in: static struct hvciucvprivate hvciucvtableMAXHVCIUCVLINES; Sometimes hvciucvtable is limite...

CVE-2026-53300

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review reported a potential DMA use-after-free issue 1. If netcxmitntmpcmd times out and returns an error, the pending command is not explicitly aborted, while...

CVE-2026-53298

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airohaqdmainitrxqueue If queue entry or DMA descriptor list allocation fails in airohaqdmainitrxqueue routine, airohaqdmacleanup will trigger a NULL pointer dereference running...