EUVD-2026-59641

In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b "mm/slab: avoid allocating slabobjext array from its own slab" avoided recursive allocation of objexts from kmalloc caches of the same...

CVE-2026-72139

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

Linux Distros Unpatched Vulnerability : CVE-2026-72390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schteql: Introduce slaveslock to avoid race condition and UAF The teql master-slaves singly linked list is not protected against multiple writes. It...

PT-2026-73028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the slab memory allocator where cycles can form between kmalloc caches of different sizes when allocating obj exts arrays used for memory allocation profiling and memc...

Oracle Linux 9 : kernel (ELSA-2026-53329)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53329 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223404 CVE-2026-64368 - net: openvswitch: reject...

RockyLinux 9 : kernel (RLSA-2026:53329)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:53329 advisory. kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CP...

SUSE CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...

RHEL 9 : kernel (RHSA-2026:53329)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53329 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free ...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...

ALSA-2026:53329 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...

PT-2026-69526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the mac802154 scan worker function. The function captures the scanning sub-interface under RCU but continues to dereference sdata-dev after rcu read...

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

...

AZL-93467 CVE-2026-64368 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

UBUNTU-CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

CVE-2026-64368 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

CVE-2026-64368

The CVE-2026-64368 issue affects the Linux kernel’s slab allocator: when red zoning is enabled, zeroing was overly broad and could affect krealloc()’s __GFP_ZERO contract. The root cause is an imprecise check for the tracked requested size; fixes switch to slub_debug_orig_size() to determine if t...

EUVD-2026-48912

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...