SUSE CVE-2026-52863

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...

SUSE CVE-2026-64308

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...

SUSE CVE-2026-64354

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

SUSE CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64354

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

CVE-2026-64308

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...

UBUNTU-CVE-2026-64369

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...

CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

UBUNTU-CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

UBUNTU-CVE-2026-64354

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

UBUNTU-CVE-2026-64308

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...

CVE-2026-64481 ALSA: hda/cs35l41: Fix firmware load work teardown

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64481

The CVE-2026-64481 vulnerability affects the Linux kernel ALSA subsystem for the cs35l41 HDA driver. The issue arises because ALSA controls created by cs35l41_hda can reference the cs35l41_hda object and queue firmware load work (fw_load_work). If the component/device is unbound or removed before...

EUVD-2026-48825

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64481 ALSA: hda/cs35l41: Fix firmware load work teardown

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

CVE-2026-64369 s390: Revert support for DCACHE_WORD_ACCESS

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...

CVE-2026-64369 s390: Revert support for DCACHE_WORD_ACCESS

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...