PT-2026-122041

In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso v4 skbuff delattr removes the CIPSO bytes but does not adjust cached offsets for options that follow them. For example, with a valid 10-byte CIPSO option followed by a...

PT-2026-121899

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nested virtualization implementation regarding the life cycle of the nested mmus array, which stores shadow page tables used during nested contexts. When...

PT-2026-122042

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Handle cpu hotplug race in guarantee active cpus With commit 2125c0034c5d "cgroup/cpuset: Make cpuset hotplug processing synchronous", the cpuset hotplug operation becomes synchronous. That commit also removes the...

Linux kernel Bluetooth mgmt_add_adv_patterns_monitorComplete msft_le_monitor_advertisementCB Do

The vulnerability of the mgmtaddadvpatternsmonitorComplete function in the net/bluetooth/mgmt.c component and the msftlemonitoradvertisementcb function in the net/bluetooth/msft.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerabili...

Linux kernel Resource Control Compromise

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources during its existence. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel batadv_interface_rx() Buffer Overflow

The vulnerability of the batadvinterfacerx function in the net/batman-adv/soft-interface.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility ...

PT-2026-122039

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read skb After a partial stream receive, rx bytes tracks the unread suffix while buf used and peer credit still cover the whole packet. virtio transport read skb dequeues that packet but...

PT-2026-121848

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority drop following activate With GICv5 an interrupt of equal or lower priority cannot be signalled until there has been a priority drop. This is done via the GIC CDEOI system instruction. Onc...

PT-2026-121870

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc ioctl alloc allocates the grant-id array before checking whether the requested count fits within the global grant limit. Counts above that limit cannot succeed, so...

Rocky Linux 8.10 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_1687)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261687 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ Core 8.10. It addresses 2 CVEs: CVE-2026-43499, CVE-2026-53163. Tenable has extracted...

Linux kernel DoS

The vulnerability of the r8712initxmitpriv function in the drivers/staging/rtl8712/rtl871xxmit.c file and the r8712xmitresourcealloc function in the drivers/staging/rtl8712/xmitlinux.c file of the Linux kernel is related to insufficient resource management during its existence. Exploiting this...

PT-2026-122025

In the Linux kernel, the following vulnerability has been resolved: gve: fix napi disable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napi disable and napi enable. However, the netdev lock has already been acquired before ndo bpf is...

PT-2026-122023

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf state and its attached buffer should be freed. In the case of AF XDP ZC, the XSK buffer was not freed, leading to a...

PT-2026-121875

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfd queue acquire buffers was split off from set queue properties from user, set queue properties from criu was missed. Thus, set queue properties from criu is not...

PT-2026-121975

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520 hdmi in platform drvdata, but th1520 dw hdmi remove was reading it back as struct dw hdmi and passing it to dw hdmi remove, so teardown runs on the...

PT-2026-121859

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled scan built the probe request before iwl mvm scan fits, so oversized IEs could be copied into the fixed preq buffer before length validation. Move iwl mvm build scan probe aft...

PT-2026-121865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 HWS component where deleting a table that has a miss table created via the mlx5hws table set default miss function does not properly remove the table from...

PT-2026-121851

In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu barrier in br multicast dev del This rcu barrier came from a time call rcu calls were used in net/bridge/br multicast.c. Now kfree rcu is there, we can remove this problematic rcu barrier which cause...