CVE-2026-93058

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

CVE-2026-93058 drm/msm: Only fini scheduler after successful init

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211 – Rejects TDLS operations when the station is not associated. The syzbot triggered a WARN in the ieee80211tdlsoper function by sending NL80211TDLSENABLELINK immediately after NL80211CMDCONNECT, before association i...

SUSE CVE-2026-72345

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized stat...

CVE-2026-72345

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized stat...

CVE-2026-72345 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized stat...

CVE-2026-72345

CVE-2026-72345 affects the Linux kernel mlx5 LAG handling. The vulnerability arises in the single-FDB error rollback: on failure at index i, the reverse cleanup loop in mlx5_lag_create_single_fdb() starts from i, risking rollback of the failed index or double-tearing down a rule already self-roll...

PT-2026-72533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the single-FDB error rollback mechanism within the LAG component. When a failure occurs at index i, the reverse cleanup loop in the mlx5 lag create single f...

CVE-2026-68133

A flaw was found in the Linux kernel's ice driver. A local attacker, by triggering a Physical Function PF reset while the Precision Time Protocol PTP state is uninitialized, could cause an invalid state transition. This could lead to a kernel bug and a system crash, resulting in a Denial of Servi...

CVE-2026-68133 ice: fix PTP Call Trace during PTP release

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

CVE-2026-68133

The CVE concerns the Linux kernel ice driver’s PTP handling. A PF reset when PTP state is ICE_PTP_UNINIT could cause ice_ptp_rebuild() to set the state to ICE_PTP_ERROR, producing a PTP release call trace during driver unload (ice_ptp_release -> ice_deinit_features.part.0 -> ice_remove). Th...

UBUNTU-CVE-2026-64309

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCOMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

CVE-2026-64309

CVE-2026-64309 is a Linux kernel vulnerability in the crypto: ccp (SEV-SNP) subsystem. The SNP_COMMIT ioctl would perform SNP initialization even when the component was previously uninitialized. Since the SNP_COMMIT command is valid in the UNINIT firmware state, this could cause side effects: if ...

PT-2026-64530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: ccp component where the SNP COMMIT command could trigger the initialization of SNP even if it was previously uninitialized. If SEV initialization fails whi...

CVE-2026-45612 rz-libdemangle: Out of bound read in rust demangler

rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rustv0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3...

CVE-2026-58208

A flaw was found in NATS Server. An unauthenticated client with access to the WebSocket listener could exploit a vulnerability where requests for the MQTT-over-WebSocket path were incorrectly routed into MQTT handling, even when MQTT was not configured. This allowed the client to access...

CVE-2026-58208

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with...

CVE-2026-58208

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with...

CVE-2026-58208 NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with...

CVE-2026-58208

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with...