CVE-2026-64021 drm/xe/oa: Fix exec_queue leak on width check in stream open

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when param.execq-width 1 the function returns -EOPNOTSUPP directly, skipping the existing errexecq cleanup path. The execqueue reference obtained...

CVE-2026-63960 usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pdmessage in wcovereadrxbuffer wcovereadrxbuffer copies the PD RX FIFO into the caller's struct pdmessage with for i = 0; i regmap, USBCRXDATA + i, msg + i; which has two problems:...

The vulnerability of the `init_amd_bd()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ib_nl_handle_ip_res_resp() function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver allows a attacker to cause a service failure.

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-53361 af_unix: Set gc_in_progress to true in unix_gc().

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

Linux Distros Unpatched Vulnerability : CVE-2026-53197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: iptfs: fix ABBA deadlock in iptfsdestroystate iptfsdestroystate calls hrtimercancel while holding a spinlock that the timer callback also acquires, leadin...

The vulnerability of the tpm2_load_cmd() function in the security/keys/trusted-keys/trusted_tpm2.c module of the Linux kernel’s key management component allows a hacker to trigger a service failure.

The vulnerability of the tpm2loadcmd function in the security/keys/trusted-keys/trustedtpm2.c module of the Linux kernel’s key management component is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerabilities of the functions binder_alloc_set_vma() and binder_alloc_get_vma() in the driver/android/binder_alloc.c module of the Linux kernel communication driver with the Android kernel allow a attacker to cause a service failure.

The vulnerability of the binderallocsetvma and binderallocgetvma functions in the drivers/android/binderalloc.c module of the Linux kernel’s communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

CVE-2026-53197 xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfsdestroystate iptfsdestroystate calls hrtimercancel while holding a spinlock that the timer callback also acquires, leading to an ABBA deadlock on SMP systems. For the output timer iptfstimer...

EUVD-2026-38730

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compatmtwfromuser Luxiao Xu says: The function compatmtwfromuser converts ebtables extensions from 32-bit user structures to kernel native structures. However, it lacks proper validation of th...

CVE-2026-46183

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree with damonsysfslock damonsysfsquotgoal-path can be read and written by users, via DAMON sysfs 'path' file. It can also be indirectly read, for the parameters on,offline committing to...

UBUNTU-CVE-2026-45915

In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir Corrupted FAT images can leave a directory inode with an incorrect inlink e.g. 2 even though subdirectories exist. rmdir then unconditionally calls dropnlinkdir and can drive inlink...

CVE-2026-45876 arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in archsetshadowstackstatus allocgcs returns an error-encoded pointer on failure, which comes from dommap, not NULL. The current NULL check fails to detect errors, which could lead to using an invali...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: virtiopci: Fixed the cleanup of admin vq resources by using the correct info pointer. In vpmodernavqcleanup and vpdelvqs, the info pointer for admin vq resources is cleaned up using the virtiopcivqinfo pointer. However, the in...

EUVD-2026-28778

In the Linux kernel, the following vulnerability has been resolved: unshare: fix unsharefs handling There's an unpleasant corner case in unshare2, when we have a CLONENEWNS in flags and current-fs hadn't been shared at all; in that case copymntns gets passed current-fs instead of a private copy,...

CVE-2026-43027 netfilter: nf_conntrack_helper: pass helper to expect cleanup

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackhelper: pass helper to expect cleanup nfconntrackhelperunregister calls nfctexpectiteratedestroy to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the help...

The vulnerability of the pidff_reset() function in the drivers/hid/usbhid/hid-pidff.c module of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.

The vulnerability of the pidffreset function in the drivers/hid/usbhid/hid-pidff.c module of the Linux kernel’s user interface device subsystem driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote...

The vulnerability of the irtoy_probe() function in the drivers/media/rc/ir_toy.c module of the Linux kernel-based multimedia device driver support module allows a attacker to cause a service failure.

The vulnerability of the irtoyprobe function in the drivers/media/rc/irtoy.c module of the Linux kernel-based multimedia device driver framework is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the test_firmware_init() function in the lib/test_firmware.c module of the Linux kernel allows a hacker to cause a system failure.

The vulnerability of the testfirmwareinit function in the lib/testfirmware.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-23352

In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efifreebootservices frees memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issue with that: memblockfreelate should be used for...