CVE-2026-64393 ksmbd: run set info with opener credentials

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

CVE-2026-64393

The CVE-2026-64393 issue affects the Linux kernel ksmbd component. SMB2 SET_INFO handlers performed path-based VFS checks using the current ksmbd worker credentials rather than the credentials that opened the handle, potentially bypassing security checks. The fix captures the opener credentials a...

EUVD-2026-48937

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

CVE-2026-64386

CVE-2026-64386 : In the Linux kernel SMB client, a replayable error could free the prior response buffer when SMB2_query_info_init() fails before the next send, causing a double-free. The fix resets response bookkeeping before each attempt to prevent stale frees. Affected component is the SMB cli...

CVE-2026-64386 smb: client: fix query_info() replay double-free

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

CVE-2026-64386

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

EUVD-2026-48930

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

CVE-2026-64355 bpf: Reject fragmented frames in devmap

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...

EUVD-2026-48894

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo allocates streaminfo-streamctxarray with cdnspallocstreamctx. If a later stream ring allocation or stream mapping update fails, the error path...

JLSEC-2026-796 XSS via unescaped code-fence language in default code block renderer

Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block renderer wrote the Markdown code-fence language or info-string into the code class="language-…" data-lang="…" wrapper without HTML escaping. A fence info-string containing a quote and a script payload breaks out...

PT-2026-64678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue in the virtio pci component can lead to a NULL pointer dereference when unbinding a virtio balloon device. This occurs due to an indexing mismatch in how virtual queue vq info...

PT-2026-64523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 memory management where PMD-sized vmemmap pages are not freed correctly. The pagetable free function is used to free vmemmap pages, but since these are not...

PT-2026-64607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. A response-bearing attempt can return a replayable error and free its response buffer. If the SMB2 query info init function fails before the...

Linux Distros Unpatched Vulnerability : CVE-2026-64457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: ech...

PT-2026-64639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the memory management shrinker component. The expand shrinker info function iterates through visible memory control groups memcgs using the shrinker mutex...

PT-2026-64741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where the register-based PARTITION INFO GET path trusts indices provided by the firmware when copying partition descriptors into the...

PT-2026-64686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB xHCI driver where the xhci free streams function is called to free stream resources when a USB device with active stream endpoints is disconnected. The functio...

PT-2026-64615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the ksmbd module contains a permission bypass. The smb2 set info sec function calls set info sec without performing a per-handle access check. This allows a client t...

Linux Distros Unpatched Vulnerability : CVE-2026-64520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition...

Linux Distros Unpatched Vulnerability : CVE-2026-64394

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 ksmbd: fix FSCTL permission bypass by adding a permission check for...