kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

SUSE CVE-2026-93164

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Move optimized uprobe from nop5 to nop10 Andrii reported an issue with optimized uprobes 1 that can clobber redzone area with call instruction storing return address on stack where user code may keep temporary data...

kernel: fs/resctrl: Fix use-after-free during unmount

A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...

kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers

A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...

kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

kernel: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

A flaw was found in the Linux kernel. A race condition exists between the cgroupwritebackumount and inodeswitchwbs functions when a container exits. This race can lead to a kernel panic, resulting in a denial of service. This vulnerability could be triggered by a local user by exiting a container...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)

"The remote Ubuntu 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8959-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793866396)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793866396 advisory. - In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors...

Security update for the Linux Kernel (Live Patch 60 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.243 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:5107-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686...

CVE-2026-99256

A flaw was found in the Linux kernel's Device Mapper cache dm-cache subsystem. Improper lock ownership handling in the background work locking mechanism allows a lock to be released by a different process than the one that acquired it when suspending and resuming a cache device. A local user with...

CVE-2026-99255

A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS by executing chained asynchronous operations before terminating a task. Due to a race condition in the asynchronous work queue cleanup handler, an exiting process can overlook ...

CVE-2026-99254

A flaw was found in the Linux kernel's iouring subsystem. An unprivileged local user could cause a Denial of Service DoS by creating multiple interdependent asynchronous I/O rings and initiating task termination or cancellation. During cleanup, the kernel repeatedly floods the cancelling process...

CVE-2026-99253

A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS due to a race condition in the request cancellation mechanism. When a process terminates or executes a new program, a wake-up notification can be missed before the task enters ...

CVE-2026-99252

A flaw was found in the Linux kernel's iouring subsystem. A local user can trigger a Denial of Service DoS condition due to missing preemption protection during internal queue updates. When a lower-priority task updating a queue is interrupted by a higher-priority task on the same processor core,...

CVE-2026-99245

A flaw was found in the Linux kernel. A local user could bypass keyring link restrictions due to a race condition in the kernel's key management subsystem. This issue occurs when the kernel checks link restrictions before acquiring the necessary lock during key linking operations, racing against...

CVE-2026-80899

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System fscache backend. This component, which provided image lazy pulling functionality, contained implementation issues that led to its deprecation and subsequent removal. While the specific impact of these issues is not...

CVE-2026-80835

A flaw was found in the Linux kernel's qcom-rng driver. This driver, responsible for generating random numbers, allowed two of its interfaces to operate simultaneously without proper synchronization. This oversight could lead to the generation of predictable or non-random values, potentially...

CVE-2026-99244

A flaw was found in the Linux kernel's process ID PID namespace subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through excessive CPU consumption. During namespace cleanup, repeated internal signal notifications can prevent the process reaper from entering a sle...