PT-2026-43788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the mtd parser tplink safeloader parse function. The function allocates a buffer buf using mtd parser tplink safeloader read table. If the allocation for...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37787)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37787 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58237)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58237 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidat...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46821)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46821 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index rea...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35810)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35810 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26939)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26939 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42314)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42314 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free whe...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56769)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56769 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27433)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27433 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37952)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37952 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in closefiletableids A...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56665)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56665 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access i...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37947)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-54683)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54683 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: IDLETIMER: Fix for possible...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27005)

"The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27005 advisory. - In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access...

CVE-2026-22976 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...

PT-2026-43751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the aa get buffer function unconditionally decrements the cache-hold variable when pulling from the per-cpu list. If hold reaches 0 while cou...

SUSE CVE-2025-68821

In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 "fuse: allocate ff-releaseargs only if release is needed" skips allocating ff-releaseargs if the server does not implement open. However in doing so, fusepreparerelease now...

SUSE CVE-2025-71134

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to matc...

SUSE CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

SUSE CVE-2025-71129

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new...