EUVD-2026-59327

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

CVE-2026-72428

Summary: This CVE concerns the Linux kernel’s BPF Spectre v4 sanitization logic. The root cause is in check_stack_write_fixed_off(), which computes the byte slot incorrectly (-off - 1) and records writes in slot_type[] using (slot - i) % BPF_REG_SIZE. The sanitization pre-check used slot_type[i],...

CVE-2026-72428 bpf: Fix stack slot index in nospec checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

CVE-2026-72428 bpf: Fix stack slot index in nospec checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

EUVD-2026-59135

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

CVE-2026-72236 s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

CVE-2026-72236

CVE-2026-72236 concerns the Linux kernel: on s390 architecture, in the perf_cpum_cf path, __hw_perf_event_init() was missing an array_index_nospec() barrier. The ev variable, controlled by userspace via event->attr.config, could be used as an array index after bounds checks without speculative...

CVE-2026-72428: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

PT-2026-72424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hw perf event init function where the ev variable, which is controlled by userspace via event-attr.config, is used as an array index. Although bounds checking is...

PT-2026-72616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check stack write fixed off function incorrectly calculates the byte slot for fixed-offset stack writes. While the write path records bytes...

SUSE CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

Characterizing the Variance Envelope: A Multi-Dimensional Analysis of Spectre Telemetry across Architectures and Workloads

Hardware attacks like Spectre exploit built-in processor vulnerabilities, leaving anomalous footprints in Hardware Performance Counter HPC metrics. While machine learning can detect these footprints in controlled settings, static models fail in the real world when confronted with background syste...

CVE-2026-68269

A flaw was found in the Linux kernel, specifically within the drm/i915/gem component. A local user could exploit a missing Spectre mitigation on a userspace-controlled parallel submission slot. This vulnerability allows for a side-channel attack, which could lead to the unauthorized disclosure of...

DEBIAN-CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

UBUNTU-CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

EUVD-2026-55370

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

CVE-2026-68269 drm/i915/gem: Add missing nospec on parallel submit slot

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

CVE-2026-68269

The CVE concerns the Linux kernel component drm/i915/gem where a missing nospec mitigation existed in the parallel submit slot. The vulnerability, resolved by adding the Spectre mitigation for the userspace-controlled parallel submission slot, was identified via AI-assisted static analysis and co...