The vulnerabilities of the functions nft_rbtree_gc_elem() and __nft_rbtree_insert() in the module net/netfilter/nft_set_rbtree.c of the netfilter component of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions nftrbtreegcelem and nftrbtreeinsert in the net/netfilter/nftsetrbtree.c module of the netfilter component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerabilities of the functions hisi_sas_slot_task_free(), hisi_sas_release_task() in the module drivers/scsi/hisi_sas/hisi_sas_main.c, and dereg_device_v3_hw() in the module drivers/scsi/hisi_sas/hisi_sas_v3_hw.c of the Linux operating system allow a attacker to compromise the integrity of protected information or cause service failures.

The vulnerabilities of the functions hisisasslottaskfree, hisisasreleasetask in the module drivers/scsi/hisisas/hisisasmain.c, and deregdevicev3HW in the module drivers/scsi/hisisas/hisisasv3HW.c of the Linux kernel are related to synchronization errors when using shared resources. Exploiting the...

The vulnerability of the xe_config_device_release() function in the drivers/gpu/drm/xe/xe_configfs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the xeconfigdevicerelease function in the drivers/gpu/drm/xe/xeconfigfs.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the __do_syscall() function in the arch/s390/kernel/syscall.c module of the S390 platform support module for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dosyscall function in the arch/s390/kernel/syscall.c module of the S390 platform support for the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cgwb_release_workfn() function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cgwbreleaseworkfn function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the lookup_extent_data_ref() function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lookupextentdataref function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system is related to the return of incorrect code states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the sk_diag_dump_name() function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skdiagdumpname function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, stems from the lack of protection for service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the validate_set() function in the net_openvswitch/flow_netlink.c module, which supports Open vSwitch routers in Linux operating systems, allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the validateset function in the netopenvswitch/flownetlink.c module, which supports Open vSwitch routers in Linux operating systems, relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the io_poll_check_events() function in the io_uring/poll.c module of the Linux kernel’s asynchronous I/O interface allows a attacker to cause a service failure.

The vulnerability of the iopollcheckevents function in the iouring/poll.c module of the Linux kernel’s asynchronous I/O interface involves executing a loop with an unconditionally exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the idxd_device_evl_free() function in the drivers/dma/idxd/device.c module of the Intel Data Accelerator driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the idxddeviceevlfree function in the drivers/dma/idxd/device.c module of the Intel Data Accelerator driver for the Linux operating system is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mgmt_add_adv_patterns_monitorComplete() function in the net/bluetooth/mgmt.c module of the Bluetooth subsystem of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mgmtaddadvpatternsmonitorComplete function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the em28xx_v4l2_open() function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the em28xxv4l2open function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the apple_report_fixup() function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem allows a hacker to cause a service failure.

The vulnerability of the applereportfixup function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem driver relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the efa_com_cmd_exec() function in the drivers/infiniband/hw/efa/efa_com.c driver of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efacomcmdexec function in the drivers/infiniband/hw/efa/efacom.c driver of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-113 (ALASKERNEL-5.15-2026-113)

The version of kernel installed on the remote host is prior to 5.15.213-150.251. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-113 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

The vulnerability of the `mana_hwcDestroyChannel()` function in the `drivers/net/ethernet/microsoft/mana/hw_channel.c` file of the Ethernet network adapter driver in Microsoft’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the irdma_create_user_ah() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

The vulnerability of the pm_runtime_reinit() function in the drivers/base/power/runtime.c file of the Linux kernel’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.

The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...