CVE-2026-58847

In kvmvfiopviommuattach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix race conditions in bitfields and improve struct layout Bitfield operations are not atomic; they follow a read-modify-write pattern. Therefore, we must be cautious not to pack bitfields that can be concurrently...

PT-2026-135709

In kvm vfio pviommu attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-93238

A flaw was found in the Linux kernel's s390 VFIO-AP Virtual Function I/O Adjunct Processor device driver. During certain device hot-plug configuration updates, the driver fails to initialize a memory structure before processing it. A local privileged user could trigger this issue to cause the...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-abi-stablelists / kernel-core / kernel-debug / etc Multiple Vulnerabilities (crxsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit bsc1264267...

SUSE-SU-2026:4935-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit bsc1264267. -...

RHEL 9 : kernel (RHSA-2026:90365)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90365 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: udp: Deal with race between U...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

Oracle Linux 9 : kernel (ELSA-2026-90365)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90365 advisory. - netfilter: flowtable: hold reference on ct until flow is released CKI Backport Bot RHEL-280075 CVE-2026-98320 - vfio/pci: clear vdev-msiperm after...

ALSA-2026:91565 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: net: shaper: rework the VALID marking agai...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

CVE-2026-89959

A flaw was found in the Linux kernel's s390/vfio-ap component. An incorrect function was used during the removal of control domains, specifically bitmapandnot instead of bitmapand. This error prevents explicitly unplugged control domains from being properly removed from a Kernel-based Virtual...

CVE-2026-89956

A flaw was found in the Linux kernel's s390/vfio-ap component. Two functions, vfioapmdevprobe and vfioapmdevforqueue, access a list of apmatrixmdev objects without holding the required mutex. This concurrency issue could allow an attacker to cause kernel memory corruption or a use-after-free...

RLSA-2026:87375 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the security issues, including the impact, a CVSS score,...

kernel security update

4.18.0-553.177.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...