CVE-2026-74574

A flaw was found in the Linux kernel's dmaengine IDXD subsystem. A race condition during file-device setup failure cleanup in the idxdcdevopen function could lead to a deadlock, causing a denial of service. Furthermore, incorrect cleanup paths could result in operations on a freed memory context,...

CVE-2026-74566

A flaw was found in the Linux kernel's keys subsystem. An inconsistency in how key descriptions are processed by the keyringgetkeychunk and keyringdiffobjects functions could allow a local attacker to create specially crafted key descriptions. These crafted descriptions might collide, potentially...

CVE-2026-74496

A flaw was found in the Linux kernel's Foo Over UDP FOU tunnel driver. An ordering issue in the foucreate function can lead to a use-after-free vulnerability. This occurs when a struct fou object is published before being fully added to the system's list. If the addition fails, the object can be...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

CVE-2026-74510

A flaw was found in the Linux kernel's Bluetooth management mgmt component. A race condition exists during the cancellation of a pairing command and the handling of pairing completion or authentication failure callbacks. This race condition can lead to a use-after-free vulnerability, which may...

CVE-2026-74504

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer component. An unprivileged local user with access to ALSA timer and sequencer devices can trigger a division-by-zero error. This occurs by manipulating the ALSA timer's hardware resolution, leading to an integ...

CVE-2026-74530

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, occurs when a connection is prematurely released while a related synchronization task in hciconnectbigsync is still running. This theoretical flaw could allow an attacker to cause a system crash...

CVE-2026-74509

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...

CVE-2026-74476

A flaw was found in the veth component of the Linux kernel. This vulnerability occurs when a specially crafted network packet, known as a fraglist skb socket buffer, is processed by the veth driver. An attacker could potentially send such a packet, causing the system to misinterpret fragment...

CVE-2026-74531

A flaw was found in the Bluetooth hciconn component of the Linux kernel. A theoretical Use-After-Free UAF vulnerability exists if a connection conn is prematurely freed while the hcisync task is still active. This could potentially allow an attacker to cause a system crash or execute arbitrary co...

CVE-2026-74446

A flaw was found in the drm/amdkfd component of the Linux kernel. A race condition exists in the kfdcriucheckpointevents function where a mutex is not consistently held during event checkpointing. This allows a local attacker to cause memory corruption, potentially leading to privilege escalation...

Ubuntu-0day

Ubuntu16.04-0day Ambito della vulnerabilità: tutte le istanze Ubuntu AWS 4.4 sono vulnerabili Jann Horn ha scoperto che, in alcuni casi, il Berkeley Packet Filter BPF nel kernel Linux esegue in modo errato l'estensione del segno in checkaluop. Un attaccante locale può utilizzarlo per elevare i...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:57252 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: fix OOB read in decodechoice CVE-2026-43233 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

ROOT-OS-UBUNTU-2204-CVE-2026-64405 CVE-2026-64405 in linux - Patched by Root

Root has patched CVE-2026-64405 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...

CVE-2026-17145

creationtimestamp| type| source ---|---|--- 2026-08-21 00:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhsnypuq2j 2026-08-21 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtkhuodsl52e 2026-08-26 07:07:07+00:00| seen|...

PT-2026-79403

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard header len in non-ring send paths packet snd reads dev-hard header len multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example...

Linux Distros Unpatched Vulnerability : CVE-2026-74582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device...