CVE-2026-89863

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability, a NULL pointer dereference, occurs when the system attempts to process a SCSI command that has already been completed or aborted by the firmware. This can lead to a system crash, resulting in a Denial of Service DoS f...

CVE-2026-89845

A flaw was found in the qla2xxx SCSI driver in the Linux kernel. This vulnerability occurs due to a double-read operation on a request queue map entry during error handling. If the entry is cleared between these two reads, it can lead to a null pointer dereference, potentially causing a system...

CVE-2026-89856

A flaw was found in the Linux kernel's scsi: qla2xxx component. A misconfigured or malicious hot-plugged device could provide specific Message Signaled Interrupts MSI-X vector counts, causing an internal queue count to become zero due to truncation. This leads to an attempt to access an invalid...

CVE-2026-89835

A flaw was found in the Linux kernel's f2fs filesystem. This vulnerability occurs when the checkpointmerge feature is enabled without an active checkpoint merge thread, such as during a read-only mount. A local attacker with write access to ckptthreadioprio through sysfs could trigger a null...

CVE-2026-89807

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with CAPCHECKPOINTRESTORE capabilities could trigger a kernel NULL pointer dereference by issuing a crafted queue restore object during a CRIU Checkpoint/Restore in User-space operation. This vulnerability could lead to a...

CVE-2026-89798

A flaw was found in the rpcrdma component of the Linux kernel. A race condition can occur during the registration and removal of Remote Direct Memory Access RDMA notifications. If a device removal operation races with a new notification registration, it can lead to a NULL pointer dereference. Thi...

CVE-2026-89802

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When unwinding an OPMAPSPARSE operation, a NULL pointer dereference can occur if a subsequent operation in the same job fails. This vulnerability can be exploited by a local attacker with access to a render-node file descriptor,...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

EUVD-2026-66564

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRY...

CVE-2026-98709

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...

CVE-2026-98670

A flaw was found in the Linux kernel's Xilinx XADC driver. During device unbinding, an improper cleanup order allows interrupt requests IRQs to remain active after delayed work has been cancelled. A local user capable of detaching the device can cause an interrupt to schedule work that executes...

CVE-2026-98734

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS via a system crash or potentially escalate privileges. The vulnerability occurs due to improper synchronization between packet transmission scheduling and connecti...

CVE-2026-98632

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can trigger a use-after-free condition by cancelling a pending Bluetooth mesh transmission while it remains queued for processing. When the system later attempts to handle the queued transmission using the already freed...

DEBIAN-CVE-2026-98869

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

CVE-2026-98869

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

DEBIAN-CVE-2023-7356

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

CVE-2023-7356

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

CVE-2023-7356

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

CVE-2026-98869

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...