CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

CVE-2026-68127

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

UBUNTU-CVE-2026-68127

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

CVE-2026-68127

The CVE describes a slab-use-after-free in the Linux kernel’s ila_update_ipv6_locator() triggered by a non-linear skb and pskb_may_pull() in the csum_adjust_transport path. The root cause is that ila_csum_adjust_transport() caches ip6h = ipv6_hdr(skb) before pskb_may_pull(), and __pskb_pull_tail(...

CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005194 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992629 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an...

OESA-2025-2803 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990783 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990336 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput As explained in commit 1378817486d6 tipc: block BH before using...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989573 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput As explained in commit 1378817486d6 tipc: block BH before using...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990146 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput As explained in commit 1378817486d6 tipc: block BH before using...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-393292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393292 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Malicious code in @zalastax/nolb-ila (npm)

The package @zalastax/nolb-ila was found to contain malicious code...

MAL-2025-11982 Malicious code in @zalastax/nolb-ila (npm)

The package @zalastax/nolb-ila was found to contain malicious code...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when index is 0 CVE-2023-53075 In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode CVE-2023-53089 In the...

CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...

UBUNTU-CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...

CVE-2023-53141 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...