EUVD-2026-48840

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...

CVE-2026-64436 net: af_key: initialize alg_key_len for IPComp states

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

CVE-2026-64360 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when checkandcorrectrequested length corrects the length to zero. Callers suc...

EUVD-2026-48872

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix DMA fence leak In ffsdmabuftransfer, a ffsdmafence object is kmalloc'd, with the underlying dmafence later initialized by dmafenceinit, which sets its kref counter to 1. Then, dmaresvaddfence gets a second...

CVE-2026-64320 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmetexecutediscgetlogpage validates only the dword alignment of the host-supplied Log Page Offset lpo. The 64-bit offset is then added to a small kzalloc'd...

EUVD-2026-49032

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmetexecutediscgetlogpage validates only the dword alignment of the host-supplied Log Page Offset lpo. The 64-bit offset is then added to a small kzalloc'd...

CVE-2026-64299 tracing: Prevent out-of-bounds read in glob matching

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL-terminated, so the filter predicate functions filterpredstring, filterpredstrloc and filterpredstrrelloc pass the field length to th...

CVE-2026-64292

CVE-2026-64292 : In the Linux kernel, the iommufd component is vulnerable due to veventq memory allocation happening inside a spinlock, enabling a local user to exhaust atomic memory reserves by creating large queues and trigger a DoS. The fix moves the veventq memory allocation outside the spinl...

CVE-2026-64291 iommufd: Set veventq_depth upper bound

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventqdepth upper bound iommufdveventqalloc accepts any !0 veventqdepth from userspace, with an upper bound at U32MAX. This leaves a vulnerability where userspace can allocate excessively large queues to exhaust...

CVE-2026-64496: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...

Linux Distros Unpatched Vulnerability : CVE-2026-64317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length componen...

Linux Distros Unpatched Vulnerability : CVE-2026-64496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file...

CVE-2026-64317: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

CVE-2026-64242 usb: gadget: net2280: Fix double free in probe error path

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

The vulnerability of the kmalloc_reserve() function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the kmallocreserve function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-64014

A flaw was found in the Linux kernel's usbtouchscreen driver. A local attacker with a specially crafted USB touch screen device could exploit this vulnerability by sending a malicious interrupt packet with an oversized length field. This improper handling of input lengths can lead to an...

CVE-2026-63936

A flaw was found in the Linux kernel's MediaTek MT6359 Analog-to-Digital Converter ADC driver. The mt6358readimp function does not properly check the return value of a read operation. If the read fails, an uninitialized variable is used, which can lead to the leakage of sensitive information from...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules...

SUSE CVE-2026-64139

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in setposixaclentriesdacl on overflow Commit 299f962c0b02 "ksmbd: use checkaddoverflow to prevent u16 DACL size overflow" added checkaddoverflow guards that break out of the ACE-building loops in...