CVE-2023-7356: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8630-2)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8630-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmhyphandlefpsimd function in the arch/arm64/kvm/hyp/include/hyp/switch.h file of the Linux kernel is related to the implementation of incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel signal exec Trigger DoS

The vulnerability of the exec function in the Linux kernel’s signal component is related to the pointer dereferencing when its validity period has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmvcupIoctlInterrupt function in the arch/loongarch/kvm/vcpu.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the acpidbdisplayobjects function in the drivers/acpi/acpica/dbnames.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvsendttrequest function in the net/batman-adv/translation-table.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the axidmacprepperipheraldmavec function in the drivers/dma/dma-axi-dmac.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rvumboxhandlernixsetrxmode function in the drivers/net/ethernet/marvell/octeontx2/af/rvunix.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-120636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Broken zero extension logic in the BPF verifier affects 32-bit operations on the s390 architecture. The verifier failed to correctly track the liveness of the upper halves of 64-bit...

Linux kernel sm501_register_device Heap Buffer Overflow DoS

The vulnerability of the sm501registerdevice function in the drivers/mfd/sm501.c component of the Linux kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.178 and prior to 6.6.145. This vulnerability stems from the Bluetooth ISO failing to verify whether a service UUID is the Basic Audio Announcement Service UUID; as a result, Periodic Advertisement Report data may be incorrectly...

PT-2026-135938

Уязвимость пакета dnsproxy диспетчера соединений ConnMan ядра операционной системы Linux связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

Linux rpcrdma_xprt_connect DoS

The vulnerability in the rpcrdmaxprtconnect function within the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

SUSE CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

SUSE CVE-2026-98445

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

SUSE CVE-2026-98449

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smbsendrqst kicks off a reconnect. compoundsendrecv still has those mids on pendingmidq, but it unlocks the server without...

SUSE CVE-2026-98451

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finishnoopen for non-regular inodes An OCREAT open can find an existing symlink or another non-regular inode. cifsatomicopen calls finishopen on it and attaches a cifsFileInfo. Symlink inodes have no CIFS release...

SUSE CVE-2026-98456

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in readunconfindexlist readunconfindexlist counts unconfigured controllers before allocating its response, then checks the device flags again while filling it. hcidevlistlock stabilizes list membership,...