UBUNTU-CVE-2026-72425

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

PT-2026-72613

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice reset all vfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice vf ctrl vsi release instead of ic...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, buildah, kubernetes, grafana-alloy, podman, nvidia-container-toolkit, node-feature-discovery...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, buildah, k8s-device-plugin, cadvisor, nvidia-container-toolkit, podman, node-feature-discovery...

Linux Distros Unpatched Vulnerability : CVE-2026-68305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed...

CVE-2026-64438

A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...

SUSE CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

UBUNTU-CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64460

Summary (CVE-2026-64460): Linux kernel vulnerability in PCI/IOV SR-IOV VF Resizable BAR restore. When a device does not respond, PCI config reads may return PCI_ERROR_RESPONSE, causing nbars and bar_idx to evaluate to 7 and an out-of-bounds access on barsz[] (size 6) in sriov_restore_vf_rebar_sta...

CVE-2026-64460 PCI/IOV: Skip VF Resizable BAR restore on read error

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriovrestorevfrebarstate uses the VF Resizable BAR Control register to decide how many VF BARs to restore nbars and which VF BAR each iteration addresses baridx. baridx indexes...

CVE-2026-64438 crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64438

Summary of CVE-2026-64438 : In the Linux kernel’s crypto: qat path, a race during VF2PF teardown could cause use-after-free of per-VF state (vf_info) due to tearing down per-VF locks and state before in-flight VF2PF work completes. The fix introduces a PF-local flag (vf2pf_disabled) that gates wo...

PT-2026-64659

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf disable sriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adf accel vf info. Currently, adf disable sriov destroys...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, podman, cadvisor-fips, node-feature-discovery-fips, rancher, gpu-operator, buildah-fips, rancher-agent, gpu-operator-fips, sriov-network-device-plugin, k8s-device-plugin, cadvisor, nvidia-container-toolkit-fips, nvidia-container-toolkit,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, podman, cadvisor-fips, node-feature-discovery-fips, rancher, gpu-operator, buildah-fips, rancher-agent, gpu-operator-fips, sriov-network-device-plugin, k8s-device-plugin, cadvisor, nvidia-container-toolkit-fips, nvidia-container-toolkit,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, buildah, k8s-device-plugin, cadvisor, nvidia-container-toolkit, podman, node-feature-discovery...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, buildah, k8s-device-plugin, cadvisor, nvidia-container-toolkit, podman, node-feature-discovery...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre – fixed a resource leak in the remove process. In hpreremove, when the disable operation of qm sriov fails, the following logic should continue to be executed to release the remaining resources that have be...

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...