CVE-2026-63990

A flaw was found in the Linux kernel's bonding driver. This vulnerability allows a local user to cause a kernel crash, leading to a Denial of Service DoS, by attempting to enslave a virtual Controller Area Network CAN device to a bonding master. The bonding driver, designed for Ethernet-like...

SUSE-SU-2026:22769-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

CVE-2026-64075

A flaw was found in the Linux kernel's fprobe mechanism. The 'unregisterfprobe' function did not properly wait for the RCU Read-Copy-Update grace period, which is a synchronization mechanism. This oversight could lead to a use-after-free vulnerability, where memory is deallocated while still bein...

CVE-2026-64076

A flaw was found in the Linux kernel's Netfilter ebtables module. A race condition during the module's initialization allows sockopts to be exposed globally before they are fully registered. This could potentially lead to unexpected behavior or security vulnerabilities if exploited by a local...

CVE-2026-64064

A flaw was found in the Linux kernel's netfs component. When a streaming write operation is performed, a memory page folio can remain marked as 'dirty' even after the associated data is removed by a file truncation. If this dirty page is subsequently accessed through a memory-mapped file mmap, th...

CVE-2026-64039

A flaw was found in the Linux kernel's display snapshotting component. The system's snapshotting code incorrectly handles memory alignment for display data, leading to a significant memory overallocation. This vulnerability could allow a local attacker to cause a denial of service DoS by consumin...

CVE-2026-64143

A flaw was found in the Linux kernel's Uniwill laptop driver. This vulnerability allows a local user to potentially cause permanent damage to the battery on certain older Uniwill laptop models. The issue arises when the battery charging limit feature is enabled through a 'force' module parameter,...

CVE-2026-64103

A flaw was found in the Linux kernel's ISCI IntelR C600 Series Chipset Storage Control Unit SCSI driver. This vulnerability occurs during device removal, where a timing issue can allow the system to attempt to use memory that has already been released. This 'use-after-free' condition could be...

CVE-2026-64036

A flaw was found in the Linux kernel. A local attacker with specific system privileges could exploit a vulnerability in the cgroup/rstat component. By manipulating a function that processes CPU Central Processing Unit statistics, an attacker could cause an out-of-bounds write. This could lead to ...

CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

DEBIAN-CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

UBUNTU-CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

CVE-2026-64081

A flaw was found in the Linux kernel's ARM Firmware Framework for Arm armffa component. This vulnerability arises from insufficient validation of framework notification message layouts. A local attacker, by providing specially crafted firmware data in the shared RX buffer, could trigger an...

CVE-2026-63854

A flaw was found in the Linux kernel's AMDGPU driver, specifically within the Video Core Next VCN version 3.0 encoder and decoder rings. These rings do not support 64-bit user fence writes. A local user could trigger this by attempting to submit commands with 64-bit user fences, which would resul...

CVE-2026-63844

A flaw was found in the drm/amdgpu/jpeg module of the Linux kernel. A local user could trigger a Denial of Service DoS by submitting commands with 64-bit user fences to the JPEG rings, which do not support such operations. This could lead to system instability or a crash. The vulnerability has be...

CVE-2026-63828

A flaw was found in the Linux kernel's AppArmor security module. A local user, confined by an AppArmor profile that grants send permission but denies connect permission, can bypass the intended security mediation. This bypass occurs when using sendmsg or sendto with the MSGFASTOPEN flag, allowing...

CVE-2026-63827

A flaw was found in the Linux kernel's AppArmor security module. A use-after-free vulnerability exists in the aareplaceprofiles function due to an issue with reference counting during policy data deduplication. This flaw occurs when the system attempts to access memory that has already been freed...

CVE-2026-63819

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...

CVE-2026-63814

A flaw was found in the Linux kernel's Flash-Friendly File System f2fs. A local attacker could exploit improper validation of Access Control List ACL entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system t...

CVE-2026-63810

A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS, by attempting to mount the internal bdev pseudo-filesystem. This action triggers a null pointer dereference within the kernel, which could also potentially be...