kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

PT-2026-85705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab out-of-bounds read exists in the interrupt URB callback of the USB serial option driver. The issue occurs when a USB device declares wMaxPacketSize as 8 on its interrupt IN...

CVE-2026-80855: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setupportinterruptin based on the endpoint's wMaxPacketSize: buffersize = usbendpointmaxpepd; port-interruptinbuffer =...

CVE-2026-80827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setupportinterruptin based on the endpoint's wMaxPacketSize: buffersize = usbendpointmaxpepd; port-interruptinbuffer =...

Linux xhci_irq() Heap Buffer Overflow DoS

The vulnerability of the xhciirq function in the drivers/usb/host/xhci-ring.c file of the Linux USB device driver framework is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unbreakable Enterprise kernel security update

5.4.17-2136.359.3.1 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974845 CVE-2026-80590 5.4.17-2136.359.3 - Partial revert of 'x86/alternatives: Optimize optimizenops' Harshit Mogalapalli Orabug: 39866546 - Revert 'x86/alternatives: Add altinstr.flags' Harsh...

PT-2026-85738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the interrupt and resend processes in the FUSE module. This occurs when request wait answer checks the FR SENT bit in req-flags and finds it true, but fus...

PT-2026-91358

In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setup port interrupt in based on the endpoint's wMaxPacketSize: buffer size = usb endpoint maxpepd; port-interrupt in buffe...

Linux Distros Unpatched Vulnerability : CVE-2026-80860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix race between interrupt and resend After commit f8fce75fedf7 fuse: clear intrentry in fuseresend and fuseremovependingreq the...

Linux Distros Unpatched Vulnerability : CVE-2026-80827

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setupportinterruptin based on the endpoint's...

CVE-2026-80743

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

IBM RSA service processor driver Heap Buffer Overflow DoS

The vulnerability in the ibmasmhandlemouseinterrupt function within the drivers/misc/ibmasm/remote.c file of the IBM RSA service processor driver for the Linux operating system is related to improper validation of a specified index, position, or offset in input data. Exploitation of this...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105426 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500238)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500238 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39784513 CVE-2026-68480 - ocfs2: fix possible deadlock...

SUSE CVE-2026-72409

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)

Summary Vulnerabilities exists in IBM Cloud Pak for Data System CPDS 1.0 addressed in 11.3.1.2-IF1 Vulnerability Details CVEID:CVE-2025-38527 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can...

SUSE CVE-2026-74617

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...