Linux Distros Unpatched Vulnerability : CVE-2026-64224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before...

SUSE CVE-2026-64222

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

SUSE CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64225

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check and...

DEBIAN-CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64222

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

DEBIAN-CVE-2026-64222

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

CVE-2026-64225

Linux kernel CVE-2026-64225 affects octeontx2-af CGX: cgx_speed_mbps has 13 elements, but RESP_LINKSTAT_SPEED can yield 0–15, leading to out-of-bounds access and potential memory corruption/System crash. The fix adds a bounds check and defaults the speed to 0 when index is out of range. Affected ...

CVE-2026-64225

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check and...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48630

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

CVE-2026-64222

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

CVE-2026-64222

CVE-2026-64222 affects the Linux kernel on OcteonTX2/CN20K: a double-free in pool->stack during AQ pool init cleanup. The otx2_pool_aq_init() path frees pool->stack on mailbox sync/retry failure but doesn’t null the pointer, causing otx2_sq_aura_pool_init() cleanup (via otx2_aura_pool_free(...

CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

PT-2026-64340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the octeontx2-af driver. The cgx speed mbps array contains 13 elements, but the RESP LINKSTAT SPEED value can range from 0 to 15. When RESP LINKST...

SUSE-SU-2026:22810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...

CVE-2026-63923

A flaw was found in the Linux kernel's octeontx2-af driver. A malicious Virtual Function VF attached to a Physical Function PF in switchdev representor mode can send a specially crafted REPEVENTNOTIFY message. This message contains an unvalidated pcifunc field, which can lead to an out-of-bounds...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules...