Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.14. It arises because pkvminitfeaturesfromhost retrieves KVMARCHFLAGGUESTHASSVE and KVMARMVCPUSVE from the host respectively; meanwhile, pkvmvcpuinitsve checks these feature bits while vcpuhassve reads the corresponding flags. As a result,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 3.8.6 and 3.9, as well as in version 3.9. It stems from improper handling of mount locking during automatic mounting; when mounts are propagated across user namespaces, a copy of the mount in the parent namespace gets locked...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.18. It stems from the namei subsystem’s failure to validate directory entries after stepinto during refwalk; this may expose underlying entries that have been overwritten when unmounting mount points, potentially leading to information...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.20. It arises because bpfflowdissect fails to enforce hlen to U16MAX prior to clamping it when processing offsets returned by BPF programs. If hlen exceeds 65535, it is truncated to U16MAX, causing nhoff and thoff to be forced to zero. Thi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 6.6.28 up to and including 6.6.160, as well as in version 6.8.7 through 6.9. This vulnerability stems from improper handling of the lifecycle of command SKBs during Bluetooth HCI synchronization. In hcilesetextscanparamsync, the addres...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.16. It stems from gve calling unlocked versions of napidisable and napienable when disabling XSK pools; this allows threads to repeatedly acquire held locks, potentially leading to deadlocks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from an improper read of the platform drvdata pointer within the remove callback of the th1520-dw-hdmi driver. This causes the struct th1520hdmi to be passed to dwhdmiremove as if it were a struct dwhdmi , resulting in cleanup...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from an incorrect call to dpaa2switchfreefd for releasing FDs used in Tx frame descriptors within a faulty path of dpaa2switchrx. It is possible that a val...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel; it arises when reading the write-only HRST and CLIRQ registers triggers a command, causing a dump of regular registers to result in a reset of the development board...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability stems from multiple issues related to locking behavior, including RCU access being unprotected by locks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the btrfs sbwritepointer function reads superblock data from block device page cache using readcachepagegfp, but fails to obtain a mapping...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 6.19 through 7.2. It stems from ext4’s failure to disable large folios on encrypted inodes; enabling the encrypt feature after mounting can bypass this check. Writing encrypted data may result in a null pointer dereference and a kernel cras...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.12. It stems from improper handling of expired locks in namespaces, potentially exposing files and directories whose underlying structure has been overwritten...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from an error in attachrecursivemnt that causes the MNTLOCKED lock attribute to be transferred incorrectly, allowing a user namespace owner to replace their locked /proc or root directory. This may lead to the leakage of...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It arises when the XSK buffer is not freed after an error bit in a descriptor is set by RX, potentially leading to a buffer leak...

PT-2026-121897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF sockmap component where a BPF stream verdict program performing a self-redirect with BPF F INGRESS causes the copied seq variable to be double-counted. This...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises when using writelrelaxed to update hardware doorbells without ensuring that ordinary memory writes and MMIO register writes are processed in a consistent order. This results in a race condition between updates to DQL queue...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.18. It arises because when nand-no-ecc-engine is set, nanddevgeteccengine fails to initialize ecc.engine; as a result, SPI-NAND code continues to unreferelessly, potentially leading to null pointer dereferencing and device crashes...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.10. It arises when, during cleanup by ebrelocateparseslow, a post-increment buffercount is used to release relocation pointers within the exec array; this may lead to out-of-bounds access and the deallocation of entries outside the origina...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792762308)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792762308 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for...