CVE-2026-68315: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a peer, sctpprocessstrresetinreq derives the stream count from the parameter length but does not check whether the resulting...

PT-2026-69723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the TIPC UDP bearer replicast list updates. The functions tipc udp rcast add and cleanup bearer both update the ub-rcast.list using list add rcu and list del r...

PT-2026-69715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq derives the stream count from the parameter length without verifying if the...

PT-2026-69533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel BUG occurs during driver unload due to an invalid state transition in the ice driver. When a Physical Function PF reset happens while the Precision Time Protocol PTP state is IC...

PT-2026-69594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the RX worker when handling PKT TYPE TXRX NOTIFY events on non-mmio buses, such as USB and SDIO. The functions mt7921 rx check and mt7921 queue rx sk...

CVE-2026-68315: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a peer, sctpprocessstrresetinreq derives the stream count from the parameter length but does not check whether the resulting...

RLSA-2026:50978 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in bpfforeacharrayelem due to missing backport of...

EUVD-2026-53786

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...

CVE-2026-64593 btrfs: do not trim a device which is not writeable

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable BUG There is a bug report that btrfs/242 can randomly fail with the following NULL pointer dereference: run fstests btrfs/242 at 2026-06-01 10:25:08 BTRFS: device fsid...

EUVD-2026-53780

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable BUG There is a bug report that btrfs/242 can randomly fail with the following NULL pointer dereference: run fstests btrfs/242 at 2026-06-01 10:25:08 BTRFS: device fsid...

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

AZL-93912 CVE-2026-64465 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...

AZL-93945 CVE-2026-64378 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the following BUGON is occasionally triggered: ================================================================== VFS: Busy inodes after...

UBUNTU-CVE-2026-64356

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfsdqinodemetadircreate If xfsmetadircreate fails in xfsdqinodemetadircreate, the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails, the...

CVE-2026-64457

The CVE-2026-64457 issue affects the Linux kernel’s virtio_pci subsystem. When unbinding a virtio balloon device (e.g., echo virtio0 > /sys/bus/virtio/drivers/virtio_balloon/unbind), a NULL pointer dereference can occur due to a mismatch between sparse queue indices and dense queue indices (ho...

CVE-2026-64378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the following BUGON is occasionally triggered: ================================================================== VFS: Busy inodes after...

Linux Distros Unpatched Vulnerability : CVE-2026-64271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: touchwin - reset the packet index on every complete packet twinterrupt accumulates each non-zero serial byte into a fixed three-byte buffer with a runnin...

Linux Distros Unpatched Vulnerability : CVE-2026-64366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls...

kernel: drm/xe/dma-buf: fix UAF with retry loop

A flaw was found in the Linux kernel, specifically within the drm/xe/dma-buf component. This Use-After-Free UAF vulnerability occurs due to an issue in a retry loop, where a buffer object is prematurely freed on error. An attacker could potentially exploit this to cause memory corruption, leading...

Linux Distros Unpatched Vulnerability : CVE-2026-63917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add vti6test type vti6 remote ::1 local ::2 key 7 ip -n ns1 link se...