Linux Distros Unpatched Vulnerability : CVE-2026-80726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its pare...

Governing Bring Your Own AI: A Parameterized Maturity Model

Employees are increasingly using personally owned generative AI tools such as ChatGPT, Gemini, and Claude for their daily work. This practice is known as Bring Your Own AI BYOAI, which is a distinct form of Shadow AI in which employee-authenticated personal accounts are used outside of enterprise...

SUSE CVE-2026-80726

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a “stale” page fault, i.e., an invalid and/or obsolete root. This occurs after making MMU pages available for the shadow MMU. If reclaiming shad...

AZL-99062 CVE-2026-80726 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2026-80726

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-80726

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-80726

CVE-2026-80726 describes a vulnerability in the KVM virtualization module where a warning is issued and the role.invalid field is cleared when creating a child shadow page on x86 architectures. This issue is part of the Unbreakable Enterprise kernel (ELSA-2026-500385/500395/500398) security updat...

EUVD-2026-70330

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726

...

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726: Undefined Security Weakness

Bulletin has no description...

PT-2026-90890

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

PT-2026-84924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 MMU where the role.invalid flag is not explicitly cleared when creating a child shadow page from its parent. This failure to maintain the invariant that...

arch/arm64/mm/gcs.c Heap Buffer Overflow DoS

The vulnerability of the archsetshadowstackstatus function in the arch/arm64/mm/gcs.c module of the Linux operating system’s ARM 64-bit kernel support is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation

A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...