CVE-2026-64562

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested virtualization nVMX feature. This vulnerability occurs because the shadow Virtual Machine Control Structure VMCS is freed prematurely while still being referenced. Due to asynchronous operations, a virtual CPU vCPU mig...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...

Exploit for Use After Free in Linux Linux_Kernel

pixel-ksu-root An adb-driven tool that turns a stock, locked-...

CVE-2026-74728

A flaw was found in the Linux kernel's XFS filesystem. When the system attempts to allocate memory for an XFS buffer and that allocation fails, the xfsbuffree function is called with a null buffer address. This leads to a null pointer dereference, causing the kernel to crash. This vulnerability c...

CVE-2026-74678

A flaw was found in the Linux kernel's ax88179178a USB network driver. When the network interface has scatter-gather SG enabled and a packet linearization operation fails, the system fails to free the associated memory buffer. This oversight leads to a memory leak, which could be exploited by an...

CVE-2026-74676

A flaw was found in the Linux kernel. A missing permission check in the KDSKBMETA ioctl input/output control allows a local process to modify the keyboard meta mode on a non-controlling console without proper authorization. This could enable an attacker to make unauthorized changes to system...

CVE-2026-74653

A flaw was found in the Linux kernel's 8250of serial driver, specifically affecting NXP LPC32xx UARTs. A local user could repeatedly open a specific serial port, triggering a stuck RX character-timeout interrupt. This leads to an interrupt storm that can livelock the CPU, resulting in a Denial of...

CVE-2026-74633

A flaw was found in the Linux kernel's tracing module. A local user can trigger a NULL pointer dereference by attempting to remove a specific event filter for an unloaded module. This vulnerability arises when a module-only event filter is cached with a null match, and a subsequent write operatio...

CVE-2026-74622

A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...

CVE-2026-74708

A flaw was found in the Linux kernel's xsk AFXDP socket component. This vulnerability arises from improper validation of launch-time metadata size, where the metadata can extend beyond its allocated structure. This could lead to inconsistent decisions if user space concurrently changes flags,...

CVE-2026-74601

A flaw was found in the Linux kernel's ring-buffer component. A race condition exists within the ringbufferswapcpu function, where a committing counter can temporarily drop to zero during a write operation. This allows a buffer swap to occur while a write is still in progress, resulting in an...

CVE-2026-74718

A flaw was found in the devlink component of the Linux kernel. When the devlinknlreloaddoit function is called, it may fail to release a network namespace reference under specific error conditions. This oversight occurs when the requested network namespace differs from the current one and the...

CVE-2026-74698

A flaw was found in the Linux kernel's net/mlx5e driver. When a Send Queue SQ is re-activated, the Byte Queue Limits BQL counters are incorrectly reset even if there are still network transmissions in progress. This can lead to an inconsistent state, causing the kernel to trigger an error and...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

CVE-2026-74680

A flaw was found in the Linux kernel's cxacru USB ATM driver. When the cxacrucm function encounters an error, it fails to properly terminate an already submitted receive USB Request Block URB. This oversight can lead to the driver attempting to resubmit an active URB, which triggers a warning in...

CVE-2026-74654

A flaw was found in the Linux kernel's 8250dma serial driver. When a serial port is closed while an RX receive transfer is active, a stale state can persist where the rxrunning flag remains set even though the receive channel is no longer available. If the port is subsequently reopened, a specifi...

SUSE-SU-2026:3781-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3780-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...