Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.178 and prior to 6.6.145. This vulnerability stems from the Bluetooth ISO failing to verify whether a service UUID is the Basic Audio Announcement Service UUID; as a result, Periodic Advertisement Report data may be incorrectly...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

CVE-2023-7356: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmvcupIoctlInterrupt function in the arch/loongarch/kvm/vcpu.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

PT-2026-120626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the content of a Periodic Advertisement Report is copied to BASE without properly verifying if the service UUID matches the Basi...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rvumboxhandlernixsetrxmode function in the drivers/net/ethernet/marvell/octeontx2/af/rvunix.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel sm501_register_device Heap Buffer Overflow DoS

The vulnerability of the sm501registerdevice function in the drivers/mfd/sm501.c component of the Linux kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel signal exec Trigger DoS

The vulnerability of the exec function in the Linux kernel’s signal component is related to the pointer dereferencing when its validity period has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux rpcrdma_xprt_connect DoS

The vulnerability in the rpcrdmaxprtconnect function within the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvsendttrequest function in the net/batman-adv/translation-table.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel futex Heap Buffer Overflow DoS

The vulnerability of the futexhashallocate function in the Linux kernel’s futex component is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel rpcrdma_create_id Heap Buffer Overflow DoS

The vulnerability of the rpcrdmacreateid function in the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the acpidbdisplayobjects function in the drivers/acpi/acpica/dbnames.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the axidmacprepperipheraldmavec function in the drivers/dma/dma-axi-dmac.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmhyphandlefpsimd function in the arch/arm64/kvm/hyp/include/hyp/switch.h file of the Linux kernel is related to the implementation of incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2023:1682705952)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2023:1682705952 advisory. - Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service...

SUSE CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

SUSE CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

SUSE CVE-2026-98445

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

SUSE CVE-2026-98449

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smbsendrqst kicks off a reconnect. compoundsendrecv still has those mids on pendingmidq, but it unlocks the server without...