USN-8816-4 linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

kernel: s390/pkey: Check length in pkey_pckmo handler implementation

A flaw was found in the Linux kernel, specifically within the s390/pkey component. This vulnerability occurs because the pkeypckmo handler function does not explicitly check the length of the target buffer. If the generated output data exceeds the provided buffer's length, the handler function...

SUSE CVE-2026-97526

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for tha...

USN-8816-3: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

CVE-2026-97980

A flaw was found in the Linux kernel's s390 architecture debug component. A missing validation check in the debug level configuration interface allows an uninitialized or invalid debug handle to be dereferenced. A local user could exploit this flaw to crash the system, resulting in a Denial of...

SUSE CVE-2026-97591

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

CVE-2026-97593

A flaw was found in the Linux kernel's s390 IOMMU Input-Output Memory Management Unit driver. When performing address translation for an unmapped I/O virtual address on systems configured with five-level translation tables, the driver fails to verify whether a region table pointer is valid before...

CVE-2026-97592

A flaw was found in the Linux kernel. During Advanced Encryption Standard AES cryptographic operations on s390 architectures, temporary memory buffers and parameter blocks are not properly cleared after use or during certain error paths. A local attacker could exploit this flaw to access residual...

CVE-2026-97590

A flaw was found in the Linux kernel. This vulnerability leads to information disclosure during protected Advanced Encryption Standard PAES operations on s390 architectures. Because the kernel fails to clear temporary memory buffers after cryptographic processing, a local attacker could access...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

CVE-2026-97588

A flaw was found in the Linux kernel's s390 cryptographic subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by executing cryptographic operations when underlying hardware repeatedly reports a busy state. Because the subsystem fails to properly translate persistent...

CVE-2026-97589

A flaw was found in the Linux kernel's s390 cryptographic drivers. When handling asynchronous cryptographic operations, certain request callbacks incorrectly propagate error codes back to the crypto engine after already completing a request. This causes the crypto engine to mistakenly perform a...

USN-8816-2 linux-gcp, linux-gcp-7.0, linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

USN-8816-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

SUSE CVE-2026-97593

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iovatophys with ZPCITABLETYPERFX When using a 5-level translation table via ZPCITABLETYPERFX getrsofromiova returns NULL when the region-first entry is invalid. Yet in getrtofromiova the...

CVE-2026-97526

A flaw was found in the Linux kernel's s390 Processor Activity Instrumentation PAI performance monitoring unit. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. When a CPU is dynamically added hotplugged during an active performance...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-57849 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling...

DEBIAN-CVE-2026-98024

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

AZL-104307 CVE-2026-98024 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

DEBIAN-CVE-2026-97980

In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debugsetlevel Commit a2cec6863709 "s390/debug: Add s390dbf kernel parameter" incorrectly removed a null-id check from debugsetlevel, introducing a possible NULL pointer dereference for...