CVE-2026-64502

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix clearpendingevent for registerless devices adsigmadeltaclearpendingevent falls through to the status register read path for devices with hasregisters = false and no rdygpiod. For such devices,...

CVE-2026-64398

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...

CVE-2026-64427

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

UBUNTU-CVE-2026-64479

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

CVE-2026-64502

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix clearpendingevent for registerless devices adsigmadeltaclearpendingevent falls through to the status register read path for devices with hasregisters = false and no rdygpiod. For such devices,...

CVE-2026-64479 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

CVE-2026-64479

CVE-2026-64479 concerns the Linux kernel ALSA sequencer, where snd_seq_event_dup() can leak 4 bytes of uninitialized kernel heap memory. The issue arises in the UMP-enabled path: when copying an incoming event into a pool cell, the code conditionally zeros cell->ump.raw.extra only if size even...

EUVD-2026-48802

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high monitoring intervals user setup. When the user sets sampling interval zer...

CVE-2026-64458 mm/damon/ops-common: handle extreme intervals in damon_hot_score()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high monitoring intervals user setup. When the user sets sampling interval zer...

CVE-2026-64458 mm/damon/ops-common: handle extreme intervals in damon_hot_score()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high monitoring intervals user setup. When the user sets sampling interval zer...

CVE-2026-64458

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high monitoring intervals user setup. When the user sets sampling interval zer...

CVE-2026-64458

CVE-2026-64458 affects the Linux kernel’s damon subsystem (mm/damon/ops-common). The vulnerability arises from handling extreme monitoring intervals in damon_hot_score(), specifically zero or very high sampling/aggr intervals. Zero sampling interval causes a divide-by-zero in damon_max_nr_accesse...

CVE-2026-64430

CVE-2026-64430 affects the Linux kernel NTB EPF subsystem. ntb_epf_vec_isr previously called pci_irq_vector() in hardirq context, and pci_irq_vector() may call msi_get_virq() which takes a mutex and can trigger scheduling while atomic. The fix caches the Linux IRQ number for vector 0 when vectors...

EUVD-2026-48771

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

CVE-2026-64427

CVE-2026-64427 is a NULL pointer dereference in the Linux kernel's HID Logitech DJ driver (hid_logitech_dj). A specially crafted device descriptor that creates a DJ short output report (report ID 0x20) containing only padding items causes rep->maxfield to remain zero. When the validation error...

CVE-2026-64427 HID: logitech-dj: Fix maxfield check in DJ short report validation

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

CVE-2026-64413

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...

CVE-2026-64398

CVE-2026-64398 affects the Linux kernel ksmbd component. A permission check bypass in FSCTL_SET_ZERO_DATA allows an authenticated SMB client with only FILE_WRITE_ATTRIBUTES to zero out file data via fsctl path, bypassing per-handle checks. The operation uses vfs_fallocate(PUNCH_HOLE/ZERO_RANGE) a...

CVE-2026-64398

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...

CVE-2026-64398 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...