CVE-2026-97611

The Linux kernel contains a use-after-free vulnerability in the Open vSwitch component involving the flow table mask array. The issue exists in tbl_mask_array_realloc(), where call_rcu() is invoked to retire the old mask_array before it is no longer reachable. Because the pointer swap with rcu_as...

CVE-2026-97611 net: openvswitch: fix use-after-free of the flow table mask array

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old = ovsldereferencetbl-maskarray; if old ... callrcu&old-rcu, maskarrayrcucb;...

CVE-2026-97611

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old = ovsldereferencetbl-maskarray; if old ... callrcu&old-rcu, maskarrayrcucb;...

CVE-2026-97587 perf: RISC-V: store available counter mask as bitmap

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, but iteration uses RISCVMAXCOUNTERS, which is 64. On RV32 that reads past the object. Filling with an unsigned-long bit a...

EUVD-2026-86895

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, but iteration uses RISCVMAXCOUNTERS, which is 64. On RV32 that reads past the object. Filling with an unsigned-long bit a...

CVE-2026-97611: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old = ovsldereferencetbl-maskarray; if old ... callrcu&old-rcu, maskarrayrcucb;...

PT-2026-98551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the OpenvSwitch component of the Linux kernel. The tbl mask array realloc function retires the old mask array before it is no longer reachable. Because...

CVE-2026-97611: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old = ovsldereferencetbl-maskarray; if old ... callrcu&old-rcu, maskarrayrcucb;...

SUSE CVE-2026-93786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and...

CVE-2026-93830 net: stmmac: xgmac2: disable RBUE in default RX interrupt mask

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

CVE-2026-93786 ksmbd: preserve VFS inherited POSIX ACL mask

In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and...

Excluded iPAddress name constraints with an all-zero mask are not applied

An excludedsubtrees iPAddress name constraint with an all-zero mask 0.0.0.0/0 or ::/0 does not restrict iPAddress SANs in certificates issued beneath it. The mask check treated an all-zero mask as matching nothing, when a /0 prefix matches every address of its family, so the exclusion was silentl...

PT-2026-97986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the Virtual File System VFS initializes a child's POSIX Access Control List ACL using the parent's default ACL and the requested creation mode...

CVE-2026-93830

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

CVE-2026-93786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and...

UBUNTU-CVE-2026-88831

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...

CVE-2026-88831

The BusyBox httpd component is vulnerable to a security bypass where IP deny rules with invalid CIDR prefix lengths fail open. The system leaves a parsed IP with a zeroed mask, causing the rule to match no clients and allowing potentially unauthorized access. To mitigate this, users should audit ...

EUVD-2026-85509

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...

CVE-2026-91807

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-91807

Foxit PDF Editor/Reader is susceptible to a heap-based out-of-bounds read vulnerability. The root cause is insufficient validation of the soft-mask data attribute during image parsing, which may lead to an arithmetic underflow . This condition can result in an out-of-bounds read and a subsequent ...