Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvsendttrequest function in the net/batman-adv/translation-table.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmhyphandlefpsimd function in the arch/arm64/kvm/hyp/include/hyp/switch.h file of the Linux kernel is related to the implementation of incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmvcupIoctlInterrupt function in the arch/loongarch/kvm/vcpu.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the acpidbdisplayobjects function in the drivers/acpi/acpica/dbnames.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-135938

Уязвимость пакета dnsproxy диспетчера соединений ConnMan ядра операционной системы Linux связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-120636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Broken zero extension logic in the BPF verifier affects 32-bit operations on the s390 architecture. The verifier failed to correctly track the liveness of the upper halves of 64-bit...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.178 and prior to 6.6.145. This vulnerability stems from the Bluetooth ISO failing to verify whether a service UUID is the Basic Audio Announcement Service UUID; as a result, Periodic Advertisement Report data may be incorrectly...

Linux rpcrdma_xprt_connect DoS

The vulnerability in the rpcrdmaxprtconnect function within the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rvumboxhandlernixsetrxmode function in the drivers/net/ethernet/marvell/octeontx2/af/rvunix.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel sm501_register_device Heap Buffer Overflow DoS

The vulnerability of the sm501registerdevice function in the drivers/mfd/sm501.c component of the Linux kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the axidmacprepperipheraldmavec function in the drivers/dma/dma-axi-dmac.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

SUSE CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

SUSE CVE-2026-98445

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

SUSE CVE-2026-98449

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smbsendrqst kicks off a reconnect. compoundsendrecv still has those mids on pendingmidq, but it unlocks the server without...

SUSE CVE-2026-98451

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finishnoopen for non-regular inodes An OCREAT open can find an existing symlink or another non-regular inode. cifsatomicopen calls finishopen on it and attaches a cifsFileInfo. Symlink inodes have no CIFS release...

SUSE CVE-2026-98456

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in readunconfindexlist readunconfindexlist counts unconfigured controllers before allocating its response, then checks the device flags again while filling it. hcidevlistlock stabilizes list membership,...

SUSE CVE-2026-98462

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

SUSE CVE-2026-98465

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapshot the physical CPU and HGEI of an IMSIC VS-file before a concurrent...

SUSE CVE-2026-98472

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free haveruncpus during VM destruction even if VM is no longer SEV Unconditionally free SEV's "have run CPUs" cpumask in the VM destroy path, i.e. even for what appear to be non-SEV VMs, as an SEV VM becomes a non-SEV V...