USN-8574-1: Linux kernel (GCP FIPS) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64134

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Pulse Code Modulation PCM subsystem. During PCM data transfer, an incorrect setup of the ioviter for silencing when data is null could lead to a NULL pointer dereference. This vulnerability can be triggered by a local...

CVE-2026-64091

A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced component. A time-of-check to time-of-use TOCTOU race condition exists when processing reported VLANs. This occurs because the buffer size for VLAN entries is calculated before the entries are...

PT-2026-62834

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.14 through 12.2.15 Description An issue exists in the Pricing Installation component of Oracle Advanced Pricing within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

PT-2026-63161

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description A flaw in the Internal Operations component of Oracle Advanced Benefits allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-62907

Name of the Vulnerable Software and Affected Versions Oracle Advanced Collections versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Collections product within Oracle E-Business Suite. A low privileged attacker with network acce...

PT-2026-63160

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Benefits product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can exploit th...

PT-2026-63026

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Advanced Benefits versions 12.2.7 through 12.2.15 Description A flaw in the Affordable Care Act component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62833

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description A flaw in the Pricing Installation component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-63162

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Benefits product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can compromis...

PT-2026-62831

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description An issue exists in the Pricing Installation component of the Oracle Advanced Pricing product within Oracle E-Business Suite. A low privileged attacker with network access via...

PT-2026-62809

Name of the Vulnerable Software and Affected Versions Oracle Advanced Outbound Telephony versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Outbound Telephony product. A low privileged attacker with network access via HTTP can...

PT-2026-63225

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self Service Benefits. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

PT-2026-63213

Name of the Vulnerable Software and Affected Versions Oracle Advanced Planning Command Center versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a high privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-62835

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.3 through 12.2.15 Description A flaw in the Pricing Installation component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to...

CVE-2026-63845

A flaw was found in the Linux kernel, specifically within the AMD GPU's JPEG Joint Photographic Experts Group ring component. This vulnerability occurs because the JPEG v4.0 rings do not support 64-bit user fence writes. This can lead to the system rejecting command submissions that utilize user...

USN-8569-1: Linux kernel (HWE) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

CVE-2026-64093

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...

CVE-2026-64134 ALSA: pcm: Don't setup bogus iov_iter for silencing

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus ioviter for silencing At transition to the ioviter for PCM data transfer, we blindly applied the ioviter setup also for silencing i.e. data = NULL, and it leads to a calculation of bogus ioviter...