ROS-20261013-73-0436

The vulnerability of the targettgptgpmembersshow function in the drivers/target/targetcoreconfigfs.c driver of the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can...

ROS-20261013-73-0053

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0346

The vulnerability of the handleFlags function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver lies in the absence of any restrictions or controls over resource allocation. Exploiting this vulnerability allows a remote attacker to cause service...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

ROS-20261013-73-0219

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20261013-73-0037

The vulnerability of the tpmi2cinfineon.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0063

The vulnerability of the greybus/light.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0006

The vulnerability in the net/ipv4/icmp.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows: CVE-2026-70027: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96309: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0241

The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...

ROS-20261013-73-0417

The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...

UBUNTU-CVE-2026-98377

In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in vlaninsertinnertag vlaninsertinnertag only guarantees head room via skbcowhead, never that maclen bytes of MAC header are present. Its ETHHLEN wrappers - vlaninserttag under...

ROS-20261013-73-0115

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20261013-73-0082

The vulnerability of the spiimxremove function in the drivers/spi/spi-imx.c module of the Linux operating system’s SPI device driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261013-73-0329

The vulnerability of the invlpgainterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to error handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0073

The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can...

ROS-20261013-73-0315

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261013-73-0162

The vulnerability of the smcclcwaitmsg function in the net/smc/smcclc.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability allows a remote attacker to...

ROS-20261013-73-0386

The vulnerability of the rtnlfillvfinfo function in the net/core/rtnetlink.c module, which is part of Linux’s kernel network functions, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...