ROS-20261013-73-0485

The vulnerability of the hashdigestkey function in the drivers/crypto/caam/caamalgqi2.c file of the Linux kernel cryptographic accelerator driver is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261013-73-0169

The vulnerability of the icmpgluebits function in the net/ipv4/icmp.c module of the Linux operating system is related to the incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow an attacker to gain access to protected informatio...

ROS-20261013-73-0060

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8629-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8629-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

ROS-20261013-73-0004

The vulnerability of the powerpc/eeh component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0097

The vulnerability of the ipcimeminit function in the drivers/net/wwan/iosm/iosmipcimem.c file of the Linux kernel’s network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

UBUNTU-CVE-2026-98385

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

ROS-20261013-73-0164

The vulnerability of the aeadrecvmsg function in the crypto/algifaead.c module of the Linux kernel’s cryptographic subsystem is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261013-73-0078

The vulnerability of the dosyscall function in the arch/loongarch/kernel/syscall.c module, which is part of the LoongArch architecture support for Linux operating systems, stems from an improper check of the specified index, position, or offset in input data. Exploiting this vulnerability could...

ROS-20261013-73-0320

The vulnerability of the authgss module in the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261013-73-0359

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261013-73-0391

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0057

The vulnerability of the drivers/hid/hid-playstation.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2026-98380

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcfactiondelete drops the reference held by its lookup before calling tcfidrdeleteindex with the saved action index. An unlocked classifier can remove that action and...

UBUNTU-CVE-2026-98378

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...

UBUNTU-CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

UBUNTU-CVE-2026-98381

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize vethsetchannels tears down XDP resources for removed RX queues without clearing rq-xdpprog. If the program is then detached or replaced, those queues keep the old pointer...

UBUNTU-CVE-2026-98379

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6trpfilter: reject routes without inet6dev ip6routelookup can return an error-free route whose rt6iidev is NULL. Lowering an external nexthop device's MTU below IPV6MINMTU tears down its inet6dev while fib6ifdown...

ROS-20261013-73-0494

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c driver for AMD GPU cores in Linux operating systems is related to improper resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261013-73-0157

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module, which is part of the networking functions in the Linux kernel, is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...