kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...

avicii-ghostlock

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2026-73264

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100339 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix use after free bug in qediremove In qediprobe we call qediprobe which initializes...

The vulnerability in the driver/media/PCI/CX25821/CX25821-core.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/pci/cx25821/cx25821-core.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the component drivers/media/usb/pvrusb2/pvrusb2-hdw.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/usb/pvrusb2/pvrusb2-hdw.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ab8500_charger.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ab8500charger.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/client/smb2file.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/client/smb2file.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100560 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: crypto: ccp -...

The vulnerability of the auth_gss.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the authgss.c component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099895 advisory. In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-d...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect CVE-2026-64342 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100765 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc: limit nextid allocation to the valid ID range The checkpoint/restore sysctl path can request...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...