SUSE CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

UBUNTU-CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64460

Summary (CVE-2026-64460): Linux kernel vulnerability in PCI/IOV SR-IOV VF Resizable BAR restore. When a device does not respond, PCI config reads may return PCI_ERROR_RESPONSE, causing nbars and bar_idx to evaluate to 7 and an out-of-bounds access on barsz[] (size 6) in sriov_restore_vf_rebar_sta...

CVE-2026-64460 PCI/IOV: Skip VF Resizable BAR restore on read error

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriovrestorevfrebarstate uses the VF Resizable BAR Control register to decide how many VF BARs to restore nbars and which VF BAR each iteration addresses baridx. baridx indexes...

CVE-2026-64438 crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...

CVE-2026-64438

Summary of CVE-2026-64438 : In the Linux kernel’s crypto: qat path, a race during VF2PF teardown could cause use-after-free of per-VF state (vf_info) due to tearing down per-VF locks and state before in-flight VF2PF work completes. The fix introduces a PF-local flag (vf2pf_disabled) that gates wo...

PT-2026-64659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the crypto: qat component due to a race condition during VF2PF work teardown. The adf disable sriov function destroys per-VF mutexes and frees the vf inf...

AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: podman-fips, node-feature-discovery, gpu-operator, rancher, nvidia-container-toolkit-fips, buildah-fips, gpu-operator-fips, cadvisor, prometheus-podman-exporter, prometheus-podman-exporter-fips, k8s-device-plugin, cadvisor-fips, podman, k8s-device-plugin-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: podman-fips, node-feature-discovery, gpu-operator, rancher, nvidia-container-toolkit-fips, buildah-fips, gpu-operator-fips, cadvisor, prometheus-podman-exporter, prometheus-podman-exporter-fips, k8s-device-plugin, cadvisor-fips, podman, k8s-device-plugin-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: falco-no-driver, buildah, podman, node-feature-discovery, sriov-network-device-plugin, k8s-device-plugin, cadvisor, nvidia-container-toolkit...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: falco-no-driver, buildah, podman, node-feature-discovery, sriov-network-device-plugin, k8s-device-plugin, cadvisor, nvidia-container-toolkit...

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-42502 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-27136 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

AZL-88308 CVE-2026-27136 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...