PT-2026-135515

In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named keyring lookup Named keyring lookup must keep the storage containing the owner UID alive through the namespace mapping check. find keyring by name reads keyring-user-uid under...

PT-2026-135521

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the tracing/syscalls component where the syscall copy user array function uses copy from user to copy buffer arguments of faultable syscalls, such as write and pwrite6...

PT-2026-135514

In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while search process keyrings rcu searches the requestor's keyrings. The function validates th...

PT-2026-135528

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.273 Linux kernel versions prior to 5.15.224 Description A race condition exists in the Bluetooth L2CAP channel setup. A local user can trigger a Time-of-Check to Time-of-Use TOCTOU race by racing socket bind...

PT-2026-135507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the coredump thread handling. The coredump finish function releases parked threads by clearing the -task in their core thread entry and calling wake u...

Alibaba Cloud Linux 3 : 0333: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2026:0333)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0333 advisory. Package updates are available for Alibaba Cloud Linux 3 Pro that fix the following vulnerabilities: CVE-2026-98432: In the Linux kernel, the...

vmwgfx Module Privilege Escalation

The vmwgfx module vulnerability in the Linux kernel is related to out-of-bounds memory writes. Exploitation of this vulnerability may allow an attacker to escalate their privileges...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from a race condition between fallocate and mmap read operations in NTFS. Under standard allocation mode, an invalidatelock is not held; as a result, new clusters are mapped prior to being cleared. This allows concurrent mmap...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from ntfsfilemappagemkwrite failing to hold a mapping-invalidatelock; this may lead to race conditions with concurrent truncate or fallocate operations, resulting in page cache invalidation and data inconsistency during runlist...

PT-2026-135519

In the Linux kernel, the following vulnerability has been resolved: io uring/cmd: don't leave list poison in -hash node io uring cmd del cancelable uses hlist del to take a command off -cancelable uring cmd, which leaves LIST POISON1/2 behind in -hash node. Requests are recycled through the reque...

Linux kernel Btrfs DoS

The vulnerability in the fs/btrfs/volumes.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel devcom buffer overflow DoS

The vulnerability in the mlx5devcomregisterdevice function within the drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c file of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to...

Security Advisory 0203

Security Advisory 0203 PDF Date: November 2, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 2, 2026 | Initial release 1.1 | November 3, 2026 | Remove Wifi-AP from affected products to unaffected products. Move additional products from under triage to unaffected products. 1.2 | November...

PT-2026-135508

In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print rec print rec leaves 'modname' and 'offset' uninitialized and kallsyms lookup only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modnam...

PT-2026-135517

In the Linux kernel, the following vulnerability has been resolved: io uring/io-wq: don't lose the signal that ends work When a thread exits, only its tracked requests are cancelled. Then its io-wq is torn down. io wq exit workers signals every worker, to get it out of an interruptible sleep, and...

PT-2026-135524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tracing histogram field variables. The create field var hist function incorrectly saves a pointer to a compatible histogram instead of the event file...

PT-2026-135530

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate lock in ntfs filemap page mkwrite ntfs filemap page mkwrite calls iomap page mkwrite without holding mapping-invalidate lock, so a concurrent truncate or fallocate can be in the middle of invalidating...

PT-2026-135527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tracing module notifier. The trace module record function iterates through ftrace trace arrays without holding the trace types lock. If a concurrent...

PT-2026-135509

In the Linux kernel, the following vulnerability has been resolved: asymmetric keys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asym key ids payload slot empty. key or keyring common unconditionally dereferences that slot when a PKCS8 key is supplied to a key or keyrin...

PT-2026-135510

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the keys/trusted keys component where the trusted tpm unseal function fails to return immediately after a TPM unseal operation failure. Instead, it proceeds to call...