Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux net/smc/af_smc Heap Buffer Overflow DoS

The vulnerability of the smcskinit function in the net/smc/afsmc.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux F2FS Heap Buffer Overflow DoS

The vulnerability of the submitdiscardcmd function in the fs/f2fs/segment.c file of the Linux kernel’s File System F2FS module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel DMA driver Heap Buffer Overflow DoS

The vulnerability of the function ofk3udmaglueparsechnbyid in the drivers/dma/ti/k3-udma-glue.c file of the DMA driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 8 : kernel-4.18.0-553.115.1.el8_10 (AXSA:2026-389:23)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-389:23 advisory. kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in macvlancommonnewlink...

DEBIAN-CVE-2026-23417

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBEMEM32 stores BPFST | BPFPROBEMEM32 immediate stores are not handled by bpfjitblindinsn, allowing user-controlled 32-bit immediates to survive unblinded into JIT-compiled native code when...

PT-2026-35011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv tt prepare tvlv global data function calculates the allocation length for a global TT response using 16-bit temporaries. If a...

Linux USB DoS

The vulnerability of the usbhsrza1hardwareinit function in the drivers/usb/renesasusbhs/rza.c driver for Linux USB device controllers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux netlink_ack() Buffer Overflow DoS

The vulnerability of the netlinkack function in the net/netlink/afnetlink.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against overwriting a shadow-present SPTE with a another...

arm64 kernel Heap Buffer Overflow DoS

The vulnerability of the emulationprochandler function in the arch/arm64/kernel/armv8deprecated.c module of the ARM 64-bit kernel support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ubuntu: Security Advisory (USN-8142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2026-23402

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against overwriting a shadow-present SPTE with a another SPTE with a different target PFN to only apply to direct MMUs, i.e. on...

UBUNTU-CVE-2026-23401

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so after dropping/zapping the existing SPTE if it's shadow-present. While commit a54aa15c6bda3 was right about...

CVE-2026-23407 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verifydfa The verifydfa function only checks DEFAULTTABLE bounds when the state is not differentially encoded. When the verification loop traverses the differential encoding...

CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so after dropping/zapping the existing SPTE if it's shadow-present. While commit a54aa15c6bda3 was right about...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Linux kernel Bluetooth hci_cs_disconnect() Buffer Overflow

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

riscv_kvm_exit Heap Buffer Overflow DoS

The vulnerability of the riscvkvmexit function in the arch/riscv/kvm/main.c module, which supports processors with the RISCV architecture in the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...