CVE-2026-64000

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR module. This vulnerability allows an attacker to cause an out-of-bounds OOB access by sending a specially crafted, truncated supervision frame. The issue arises because the system does not ensure the entire TLV...

CVE-2026-63910

A flaw was found in the Linux kernel's dma-buf Direct Memory Access buffer subsystem. A race condition in the dmabuffd tracepoint can lead to a Use-After-Free UAF vulnerability. A local attacker could exploit this by closing a file descriptor fd prematurely, causing the dmabuf to be freed while t...

CVE-2026-63929

A flaw was found in the Linux kernel's Industrial I/O iio buffer component. The iiobufferenqueuedmabuf function, responsible for managing Direct Memory Access DMA buffers, fails to properly release a memory reference. This oversight results in a continuous memory leak, where small blocks of memor...

CVE-2026-64019

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express PCI Peripheral Component Interconnect driver. This vulnerability occurs due to a leak in the Direct Memory Access DMA mapping during data setup operations. Specifically, the system fails to properly unmap DMA resources when...

SUSE CVE-2026-63883

In the Linux kernel, the following vulnerability has been resolved: serial: qcomgeni: fix kfifo underflow when flush precedes DMA completion IRQ When uartflushbuffer runs before the DMA completion IRQ is delivered, the following race can occur all steps serialized by uartportlock: 1. DMA starts:...

SUSE CVE-2026-64168

In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe...

SUSE CVE-2026-64170

In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer...

CVE-2026-64608

The Apache Fory C++ implementation is vulnerable to heap type confusion and out-of-bounds read/write (CVE-2026-64608). The root cause lies in the deserialization process when operating in compatible mode , where field-skip paths fail to properly validate declared field types against the actual da...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

CVE-2026-63827

A flaw was found in the Linux kernel's AppArmor security module. A use-after-free vulnerability exists in the aareplaceprofiles function due to an issue with reference counting during policy data deduplication. This flaw occurs when the system attempts to access memory that has already been freed...

CVE-2026-64167

A flaw was found in the Linux kernel's kexechandover KHO mechanism. This vulnerability occurs because the khofillkimage function unconditionally populates the kimage with KHO metadata, even when processing a crash kernel. When a crash kernel attempts to initialize KHO memory, it can try to access...

CVE-2026-64151

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit page table driver. This vulnerability involves a missing check for the system's fundamental memory page size PAGESIZE within the pgsizebitmap data structure. While an IOMMU configuration with this missing check would...

CVE-2026-64124

A flaw was found in the Linux kernel's network device memory net: devmem component. This vulnerability allows an attacker to trigger an out-of-bounds read by providing specially crafted Direct Memory Access DMA buffers with non-page-aligned sizes or Scatter-Gather SG list lengths. This could lead...

CVE-2026-64169

A flaw was found in the Linux kernel's spi: ep93xx driver. This vulnerability occurs when the driver fails to properly clear Direct Memory Access DMA channel pointers after a DMA setup failure during probe. An attacker could potentially trigger a system crash, leading to a Denial of Service DoS...

CVE-2026-64102

A flaw was found in the Linux kernel's Soft-iWARP siw component for Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted iWARP Fast Path Data Unit FPDU with a manipulated length field. This manipulation causes an integer underflow, leading to a use-after-free...

Hikvision DS-2 series camera information leakage vulnerability

Hikvision DS-2 series cameras are part of the Hikvision camera lineup. The Hikvision DS-2 series cameras have a vulnerability where information can be leaked. Attackers can exploit this vulnerability to access certain information stored in the device’s memory...

CVE-2026-47714: Integer Overflow or Wraparound

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

PT-2026-61853

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

EulerOS Virtualization 2.10.1 : mesa (EulerOS-SA-2026-2829)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...