ROS-20261013-73-0403

The vulnerability of the rdsibsendunmapop function in the net/rds/ibsend.c module, which is part of the networking functions in the Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0045

The vulnerability of the vidiconnectionioctl function in the drivers/gpu/drm/exynos/exynosdrmvidi.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability can allow an attacker to access protected...

ROS-20261013-73-0359

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8646-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8646-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

UBUNTU-CVE-2026-98385

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

UBUNTU-CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

UBUNTU-CVE-2026-98379

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6trpfilter: reject routes without inet6dev ip6routelookup can return an error-free route whose rt6iidev is NULL. Lowering an external nexthop device's MTU below IPV6MINMTU tears down its inet6dev while fib6ifdown...

UBUNTU-CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

ROS-20261013-73-0105

The vulnerability of the pepdorcv function in the net/phonet/pep.c module, which is part of the Linux kernel’s networking functions, leads to mutual locking. Exploiting this vulnerability can allow a attacker to cause service failures...

ROS-20261013-73-0203

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

UBUNTU-CVE-2026-98376

In the Linux kernel, the following vulnerability has been resolved: bpf: Use arraymapmetaequal for percpu array inner map replacement percpuarraymapops.mapmetaequal points to the generic bpfmapmetaequal, which does not compare maxentries. When a percpu array serves as an inner map, replacing it...

ROS-20261013-73-0294

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-98380

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcfactiondelete drops the reference held by its lookup before calling tcfidrdeleteindex with the saved action index. An unlocked classifier can remove that action and...

UBUNTU-CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

ROS-20261013-73-0465

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...

UBUNTU-CVE-2026-98378

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...

ROS-20261013-73-0121

The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261013-73-0463

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261013-73-0219

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20261013-73-0144

The vulnerability of the atmelaesbuffinit function in the drivers/crypto/atmel-aes.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...