PT-2026-135513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the kernel's key management system. A race condition occurs when a request to describe a key is processed simultaneously with the unloading of a networki...

PT-2026-135512

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel addresses KEYCTL READ returns the serial numbers in a keyring in associative-array traversal order. The first word of the index is a public, deterministic hash of the type pointer,...

PT-2026-135525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory access exists in the tracing filter parser. A local user with perf access can read and corrupt kernel memory by providing a crafted tracepoint filter expression...

PT-2026-135511

In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type removal keyctl read key checks key-type-read without holding key-sem. A reference keeps the key alive, but does not pin the module containing its type. A surviving RxRPC key can...

CVE-2026-99235: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the…

In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the compatible histogram createfieldvarhist creates a histogram on the matched event to supply a field variable, and records it on the target so it can be torn down later: histdata =...

ALSA-2026:93436 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922 kernel: afunix: Fix UAF read of tail-len in...

Linux kernel DoS

The vulnerability in the vmcihostpoll function within the drivers/misc/vmwvmci/vmcihost.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel DoS

The vulnerability in the drivers/net/ethernet/freescale/enetc/enetc.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux kernel NVME Host Component Data Compromise

The vulnerability in the drivers/nvme/host/core.c and drivers/nvme/host/pci.c components of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

ksmbd module Code Execution

The vulnerability in the ksmbd module of the SMB server implementation in Linux kernel is related to race conditions. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-135531

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidate lock for punch hole, collapse range, and insert range operations. For standard allocation modes mode == 0, FALLOC FL KEEP SIZE, th...

PT-2026-135526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ftrace boot data handling. The update last data if empty function is called from tracing open with O TRUNC, tracing read pipe, and tracing buffers read...

PT-2026-135523

In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when the command fails An action that names a field on another event needs that field as a variable, so create field var hist registers a second hist trigger on that event to provide...

PT-2026-135506

In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after sched cancel fork Reorder copy process cleanup so sched fork taking scx fork rwsem scx pre fork is safe and isn't held around exiting files. Right now, a fork that fails while anothe...

CVE-2026-99230: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in…

In the Linux kernel, the following vulnerability has been resolved: iouring/cmd: don't leave list poison in -hashnode iouringcmddelcancelable uses hlistdel to take a command off -cancelableuringcmd, which leaves LISTPOISON1/2 behind in -hashnode. Requests are recycled through the request cache...

CVE-2026-99223: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel…

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel addresses KEYCTLREAD returns the serial numbers in a keyring in associative-array traversal order. The first word of the index is a public, deterministic hash of the type pointer,...

Alibaba Cloud Linux 3 : 0334: kernel (ALINUX3-SA-2026:0334)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0334 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-98432: In the Linux kernel, the following...

Linux kernel RCE CVE-2026-98432

CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922 kernel: afunix: Fix UAF read of tail-len in...

kernel: mptcp: options: reset DSS fields in case of unexpected size

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...