Linux Distros Unpatched Vulnerability : CVE-2026-89568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '...

CVE-2026-89568

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

CVE-2026-89568

In the Linux kernel , the function kho_preserved_memory_reserve() contains a size-calculation bug. It computes the size of a memory preservation using 1 <

CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve()

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

EUVD-2026-76479

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

PT-2026-90284

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho preserved memory reserve kho preserved memory reserve calculates the size of a preservation by doing 1 order + PAGE SHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is,...

CVE-2026-72169

A flaw was found in the Linux kernel's 'kho' component, responsible for memory management. When a user specifies fixed scratch sizes via the command line, these sizes are not consistently aligned to 'CMAMINALIGNMENTBYTES'. This can result in the kernel releasing a pageblock that is only partially...

Linux Distros Unpatched Vulnerability : CVE-2026-72169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since th...

CVE-2026-72169

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

UBUNTU-CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

CVE-2026-72169 kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

EUVD-2026-58927

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

CVE-2026-72169

The CVE-2026-72169 entry concerns the Linux kernel. A vulnerability arose from not always aligning scratch sizes to CMA_MIN_ALIGNMENT_BYTES when using scratch_scale, potentially causing a released pageblock to be only partially scratch. The fix, as documented, is to perform the rounding up for bo...

PT-2026-72167

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVE FD is only applicable to outgoing sessions. RETRIEVE FD and FINISH are only valid for incoming...

Linux Distros Unpatched Vulnerability : CVE-2026-64167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO...

CVE-2026-64167

In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO metadata for every kexec image type. When the image is a crash kernel, this can be problematic as the crash kernel can run in a small...

CVE-2026-64167 kho: skip KHO for crash kernel

In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO metadata for every kexec image type. When the image is a crash kernel, this can be problematic as the crash kernel can run in a small...

CVE-2026-64167

CVE-2026-64167 affects the Linux kernel. The issue arises because kho_fill_kimage() unconditionally populates KHO metadata for all kexec image types, including crash kernels that run in a small reserved region. This can cause the crash kernel to fault during kho_memory_init() when it accesses a K...

CVE-2026-64167

In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO metadata for every kexec image type. When the image is a crash kernel, this can be problematic as the crash kernel can run in a small...

CVE-2026-43489 liveupdate: luo_file: remember retrieve() status

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luofile: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...