CVE-2026-68175 tracing: Fix resource leak on mmiotrace trace_pipe close

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be freed because there was not pipeclose function pointer of the tracer...

CVE-2026-68174

The vulnerability CVE-2026-68174 affects the Linux kernel tracing subsystem. In struct trace_event_call, the module pointer and the refcnt atomic share a union, so for dynamic events (kprobe, uprobe, fprobe, eprobe, wprobe) the refcnt may be non-zero and cause call->module to appear as a small...

EUVD-2026-55275

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct traceeventcall', the 'module' pointer and the 'refcnt' atomic variable share the same memory space in a union. For dynamic events, the union member i...

EUVD-2026-55546

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it unconditionally to build a fake end pointer snaptrace + snaptracelen that ...

CVE-2026-68160

Summary: CVE-2026-68160 is a pre-auth, out-of-bounds read vulnerability in the Linux kernel’s Ceph code path (ceph_handle_caps) caused by using attacker-controlled snap_trace_len to compute an end pointer without proper bounds checks. The issue can lead to out-of-bounds reads of encoded snap data...

CVE-2026-68146

The CVE-2026-68146 entry documents a Linux kernel ftrace vulnerability where the trace_parser state (idx, cont, buffer) could race when multiple threads share an open trace file descriptor and perform concurrent writes or releases. The fix introduces a global mutex (parser_lock) to serialize all ...

CVE-2026-68146 ftrace: Add global mutex to serialize trace_parser access

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...

EUVD-2026-55530

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...

CVE-2026-68133 ice: fix PTP Call Trace during PTP release

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

CVE-2026-68133 ice: fix PTP Call Trace during PTP release

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

PT-2026-69704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the brcmfmac WiFi driver where a call trace warning occurs when the wpa auth is in 1x 256 mode. This happens because the use fwsup variable is not correctly set to BRC...

CVE-2026-68304: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, need to set up "usefwsup" with BRCMFPROFILEFWSUP1X. Or it will happen trace warning when call brcmfcfg80211setpmk. 4481.831101 ------------ cut...

CVE-2026-68133: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

Linux Distros Unpatched Vulnerability : CVE-2026-68175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be...

PT-2026-69546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In ftrace, the trace parser structure is initialized when a trace file is opened and used across write and release handlers to parse user input. A race condition occurs if a trace file...

Linux Distros Unpatched Vulnerability : CVE-2026-68304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, need to set up usefwsup with BRCMFPROFILEFWSUP1X. Or it will happen trace...

RockyLinux 10 : kernel (RLSA-2026:51295)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:51295 advisory. kernel: ipv6: ioam: fix heap buffer overflow in ioam6filltracedata CVE-2026-43186 Bug Fixes and Enhancements: kernel panics caused by NULL pointer dereferences...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

SUSE SLES15 Security Update : nodejs22 (SUSE-SU-2026:3521-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3521-1 advisory. Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM functionality. A remote attacker can send a specially crafted packet that manipulates the nodelen field while processing trace data. This manipulation leads to a heap buffer overflow, causing...