CVE-2026-53255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, beats-fips, helm-operator-fips, packer, zot, k8sgpt, kargo, kube-arangodb-fips, zarf, docker-cli-buildx, gitlab-rails-ce-fips, xeol, k9s-fips, docker-compose-fips, google-osconfig-agent, newrelic-infrastructure-agent, rancher, kaniko, manifest-too...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, beats-fips, helm-operator-fips, packer, zot, k8sgpt, kargo, kube-arangodb-fips, zarf, docker-cli-buildx, gitlab-rails-ce-fips, xeol, k9s-fips, docker-compose-fips, google-osconfig-agent, newrelic-infrastructure-agent, rancher, kaniko, manifest-too...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, beats-fips, helm-operator-fips, packer, zot, k8sgpt, kargo, kube-arangodb-fips, zarf, docker-cli-buildx, gitlab-rails-ce-fips, xeol, k9s-fips, docker-compose-fips, google-osconfig-agent, newrelic-infrastructure-agent, rancher, kaniko, manifest-too...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, beats-fips, helm-operator-fips, packer, zot, k8sgpt, kargo, kube-arangodb-fips, zarf, docker-cli-buildx, gitlab-rails-ce-fips, xeol, k9s-fips, docker-compose-fips, google-osconfig-agent, newrelic-infrastructure-agent, rancher, kaniko, manifest-too...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, helm-operator-fips, packer, zot, k8sgpt, kargo, kube-arangodb-fips, zarf, docker-cli-buildx, gitlab-rails-ce-fips, xeol, k9s-fips, docker-compose-fips, google-osconfig-agent, newrelic-infrastructure-agent, rancher, kaniko, manifest-tool,...

RockyLinux 9 : kernel (RLSA-2026:21556)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21556 advisory. kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setti...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the crash that occurs when the vpvdpa device is unplugged suddenly. When the vpvdpa device is unplugged, it triggers a kernel panic. The root cause is that vdpamgmtdevunregister will access modern devices, leadin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fixed a dangling pointer in mgmtaddadvpatternsmonitorcomplete. This fix addresses the issue where, when status != -ECANCELED, mgmtpendingvalid was executed; otherwise, mgmtpendingfreecmd would free the memory, bu...

AZL-89670 CVE-2026-43059 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Commit 302a1f674c00 "Bluetooth: MGMT: Fix possible UAFs" introduced mgmtpendingvalid, which not only validates the pending command but also unlinks it from...

kernel: Bluetooth: MGMT: Fix possible UAFs

A flaw was found in the Linux kernel’s Bluetooth management subsystem net/bluetooth/mgmt.c. The mgmtpending structure may be freed while still being processed, or remain on the pending command list, which allows a use-after-free or double-free scenario. An attacker with local access to the system...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511 Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

RHEL 9 : kernel-rt (RHSA-2026:9512)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9512 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:1132-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1132-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: -...

EUVD-2026-15261

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76connac2macwritetxwi80211 Check frame length before accessing the mgmt fields in mt76connac2macwritetxwi80211 in order to avoid a possible oob access. fix check to also cover...

EUVD-2026-15284

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmtchann mgmtchann may be set to NULL if the firmware returns an unexpected error in aie2sendmgmtmsgwait. This can later lead to a NULL pointer dereference in aie2hwstop. Fix this b...

CVE-2026-23315

The CVE affects the Linux kernel mt76 wifi driver (mt76_connac2_mac_write_txwi_80211). The root cause is that the function could perform an out-of-bounds access by not validating the frame length before accessing management fields, including mgmt->u.action.u.addba_req.capab. This could enable ...