ALSA-2026:3963 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-71085 kernel: macvlan: fix possible UAF in macvlanforwardsource CVE-2026-23001 For more details about the security...

Oracle Linux 9 : kernel (ELSA-2026-3488)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3488 advisory. - migrate: correct lock ordering for hugetlb file folios Luiz Capitulino RHEL-147266 CVE-2026-23097 - ipv6: BUG in pskbexpandhead as part of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001601 advisory. The ocfs2setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service deadlock via DIO requests. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000802 advisory. The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attribute...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004325 advisory. In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003937 advisory. In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003660 advisory. An issue was discovered in xfssetattrnonsize in fs/xfs/xfsiops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002281 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003356 advisory. The ocfs2setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service deadlock via DIO requests. Tenable has...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002065 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002433 advisory. The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attribute...

SUSE CVE-2025-71085

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001088 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...

AZL-74297 CVE-2025-68803 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...

UBUNTU-CVE-2025-71085

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...

CVE-2025-71085 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...

CVE-2025-71085 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...

PT-2026-2606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the IPv6 implementation, specifically in the pskb expand head function as part of calipso skbuff setattr. This issue can lead to a kernel oops...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in calipsoskbuffsetattr, which could cause the kernel to crash...

ROS-20260113-7321

A vulnerability in the f2fssetattr function of the fs/f2fs/file.c module of the Linux kernel's F2FS file system support is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow a remote intruder to affect the integrity of protected...