USN-8959-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

USN-8968-1: Linux kernel vulnerabilities

It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-3640 Several security issues were discovered in the Linux kernel. An...

USN-8960-1 linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

USN-8962-1: Linux kernel (Azure CVM) vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-1205 Several security issues were discovered in t...

Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow bsc1280728...

SUSE-SU-2026:5084-1 Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period

A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol TCP connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could explo...

K000164083: Linux kernel vulnerability CVE-2026-53071

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2capecredreconfrsp l2capecredreconfrsp calls l2capchandel without holding l2capchanlock. Every other l2capchandel caller in the file acquires the lock firs...

SUSE-SU-2026:5059-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

CVE-2026-89787

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker could craft a directory entry that, when processed during a directory search, leads to an out-of-bounds read. This vulnerability can result in a use-after-free condition, potentially causing a denial of service or informatio...

CVE-2026-89827

A flaw was found in the Linux kernel's drm/amdgpu component. The uvdv70swinit function, responsible for initializing the UVD Unified Video Decoder ring, does not properly set up the decode ring for an SR-IOV Single Root I/O Virtualization Virtual Function VF. This can lead to the amdgpuuvdresume...

CVE-2026-89914

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for ARM64 architectures. An omission in the decoderangetlbi helper, responsible for managing the Translation Lookaside Buffer TLB, failed to correctly extend virtual addresses VA during certain invalidation...

CVE-2026-98077

A flaw was found in the Linux kernel's Session Initiation Protocol SIP netfilter connection tracking module. When processing incoming SIP headers, the parser fails to properly detect the end of the network packet buffer when trailing whitespace is present without a header delimiter, resulting in ...

K000164081: Linux kernel vulnerability CVE-2026-53177

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The...