kernel: netfilter: nf_tables: release flowtable after rcu grace period on error

A flaw was found in the Linux kernel's netfilter component, specifically within the nftables subsystem. An error in releasing a flowtable after an RCU Read-Copy-Update grace period could lead to a use-after-free vulnerability. This issue could expose the flowtable to the packet path and...

PT-2026-47364

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpd dev pm attach by id, genpd calls pm runtime enable for the corresponding virtual device that it registers. Whi...

PT-2026-47352

In the Linux kernel, the following vulnerability has been resolved: lib: test hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm test fixes and cleanups". Two bugfixes a cleanup for the HMM kernel selftests. These were mostly reported by Zenghui Yu with special...

PT-2026-47359

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver called phylink connect phy during probe and phylink disconnect phy during remove. It caused an RTNL assertion warning in...

PT-2026-47360

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of unittest changeset The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device node. The call to of node putnchangeset c...

PT-2026-47365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the mpfs-ccc clock driver during the registration of the last two outputs. This happens because the hws array is allocated space for two PLLs and their...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1816)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1816 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault CVE-2026-31456 In the Linux kernel, the following vulnerability h...

PT-2026-47373

In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The...

Important: nvidia-fabricmanager

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Important: nvlink5-580

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

PT-2026-47374

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock continue reads rs-cont extent verbatim from the Rock Ridge CE record and passes it to sb bread without checking that the block number is within the mounte...

PT-2026-47356

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to huget...

ROS-20260608-73-0001

The vulnerability of the cifsgetspnegokey function in the cifs.upcall tool of the cifs-utils package in Linux kernel systems is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute...

PT-2026-47378

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds access exists in the ath5k WiFi driver. The issue occurs within the ath5k tasklet tx function in the drivers/net/wireless/ath/ath5k/base.c file. Specifically...

PT-2026-47361

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract kvec to sg Patch series "Fix bugs in extract iter to sg", v3. Fix bugs in the kvec and user variants of extract iter to sg. This series is growing due to useful remarks made by...

PT-2026-47326

In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io wq remove pending io wq remove pending needs to fix up wq-hash tail if the cancelled work was the tail of its hash bucket. When doing this, it checks whether the preceding entry i...

PT-2026-47350

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace mask Fix invalid data access by passing right data for debugfs entry. 171.549793 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 171.559248 M...

PT-2026-47349

In the Linux kernel, the following vulnerability has been resolved: mm/zone device: do not touch device folio after calling -folio free The contents of a device folio can immediately change after calling -folio free, as the folio may be reallocated by a driver with a different order. Instead of...

PT-2026-47369

In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request irq for VF misc interrupt Currently, request threaded irq is used with a primary handler but a NULL threaded handler, while also setting the IRQF ONESHOT flag. This specific combination triggers a WARNING...

Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2026-294)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-294 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successfu...