CVE-2026-68264

The CVE-2026-68264 entry describes a Linux kernel issue in the drm/xe/pt module where xe_pt_update_ops_init() fails to reset current_op (and related flags) during retry paths in vm_bind, causing repeated increments of current_op. After multiple retries, current_op can exceed the allocated xe_vma_...

EUVD-2026-55365

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset currentop in xeptupdateopsinit xeptupdateopsinit fails to reset currentop to 0. On the vmbind path, opsexecute calls xeptupdateopsprepare inside the xevalidationguard / drmexecuntilalllocked loop. When that loop...

CVE-2026-68246 drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit daa62107452d2451787c4248ca38fa2d1a0cbefd...

CVE-2026-68204 media: vivid: check for vb2_is_busy() when toggling caps

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

EUVD-2026-55305

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

EUVD-2026-55275

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct traceeventcall', the 'module' pointer and the 'refcnt' atomic variable share the same memory space in a union. For dynamic events, the union member i...

EUVD-2026-55512

In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a positive result code indicates a data payload, which is not allowed for writes. While rbdosdreqcallback already resets a...

CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path

In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a positive result code indicates a data payload, which is not allowed for writes. While rbdosdreqcallback already resets a...

CVE-2026-68126 mac802154: hold an interface reference across the scan worker

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

CVE-2026-61550

GHSA-vj39-ww8j-vvx5: Improper access control for JSON-RPC update certificate messages...

CLSA-2026-1786362389 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 46 io.netty packages to address 1 CVE. Fixed in 4.1.82.Final-tuxcare.5...

CLSA-2026-1786361876 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 0.2.5-tuxcare.1...

CLSA-2026-1786361581 TuxCare security update for jsonwebtoken (2 CVEs)

TuxCare rebuilt jsonwebtoken to address 2 CVEs. Fixed in 0.3.0-tuxcare.2...

CLSA-2026-1786361523 TuxCare security update for jquery (1 CVE)

TuxCare rebuilt jquery to address 1 CVE. Fixed in 3.3.1-tuxcare.2...

CLSA-2026-1786361253 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 2 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.3...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.0.2-2.2.hum1 aarch64, x8664 podman-docker-6.0.2-2.2.hum1 noarch podman-machine-6.0.2-2.2.hum1 aarch64, x8664 podman-remote-6.0.2-2.2.hum1 aarch64, x8664 podmansh-6.0.2-2.2.hum1...

CLSA-2026-1786360302 TuxCare security update for twisted (3 CVEs)

TuxCare rebuilt twisted to address 3 CVEs. Fixed in 20.3.0.post5+tuxcare...

CLSA-2026-1786360051 TuxCare security update for 13 packages (13 CVEs)

TuxCare rebuilt 13 packages to address 13 CVEs. Fixed in 13.5.11-tuxcare.14...

Important: Red Hat Security Advisory: perl-DBI:1.641 security update

An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EUVD-2026-55221

An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points receivers without the required alert.notifications.receivers.protected:write permission...