CVE-2026-98446

A flaw was found in the Linux kernel's XFS file system. When calculating space reservations for file system metadata, the kernel does not prevent an arithmetic underflow if the available reservable blocks drop below the amount already in use. A local user could exploit this condition during file...

CLSA-2026-1783790425 kernel: Fix of 41 CVEs

ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 - futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - net: bonding: fix use-after-free...

CLSA-2024-1720468480 kernel: Fix of 101 CVEs

kvm: initialize all of the kvmdebugregs structure before sending it to userspace CVE-2023-1513 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - netfilter: nftables: initialize registers in nftdochain...

CVE-2026-98511

A flaw was found in the Linux kernel's Nouveau GPU driver. When attempting to re-pin a memory buffer into an incompatible memory domain, the driver rejects the request but fails to prevent an increment of the buffer's pin count. Because callers do not unpin after an error, this causes an unbalanc...

CVE-2026-98447

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local attacker to cause a Denial of Service DoS or potentially compromise the system through memory corruption. During the formatting of realtime reference count metadata, the kernel incorrectly calculates the...

CLSA-2024-1709204660 kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CLSA-2026-1783338215 Fix of 38 CVEs

CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 CVE-2024-39467 - f2fs: fix to do sanity check on ixattrnid in sanitycheckinode CVE-2024-39467 CVE-2023-52796 - ipvlan: add ipvlanroutev6outbound helper CVE-2023-52796 CVE-2025-37879 - 9p/net: fix...

CLSA-2026-1791796862 kernel: Fix of 32 CVEs

ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 - net: account for encap headers in qdisc pkt len CVE-2026-53091 - kabi: add tcpv4synrecvsock to the x8664 kABI whitelist CVE-2026-43198 - Update to kernel 3.10.0-1160.164.1.el7 - netfilter: ctnetlink: ensure safe...

CLSA-2026-1791730242 kernel: Fix of 32 CVEs

ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 - net: account for encap headers in qdisc pkt len CVE-2026-53091 - kabi: add tcpv4synrecvsock to the x8664 kABI whitelist CVE-2026-43198 - Update to kernel 3.10.0-1160.164.1.el7 - netfilter: ctnetlink: ensure safe...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

kernel: ipv6: validate extension header length before copying to cmsg

A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs when commands sent to the firmware FW are not properly cleared after a chip reset. A local attacker could exploit a race condition during direct memory access DMA unmapping, leading to a kernel panic. This can...

kernel: Fix of 16 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2capsockreadycb CVE-2023-40283 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet CVE-2023-6932 - smb: client: fix OOB in smbCalcSize CVE-2023-6606 - net/sched: schhfsc: Ensure inner classes have fsc curve CVE-2023-4623 - net/sched: clsfw:...

CLSA-2026-1785561693 kernel: Fix of 14 CVEs

scsi: ses: Fix possible addldescptr out-of-bounds accesses - scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess - i40e: increase max descriptors for XL710 - e1000e: fix heap overflow in e1000seteeprom - vsock: avoid to close connected socket after the timeout - ext4: fix use-after-free...

Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4734-1 Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CLSA-2026-1791796397 kernel: Fix of 32 CVEs

ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 - net: account for encap headers in qdisc pkt len CVE-2026-53091 - kabi: add tcpv4synrecvsock to the x8664 kABI whitelist CVE-2026-43198 - Update to kernel 3.10.0-1160.164.1.el7 - netfilter: ctnetlink: ensure safe...