CVE-2026-80702 drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guestmemorydirty bitfield clobbered as size Two sites in vmwgfxresource.c assign boolean literals to res-guestmemorysize, which is an unsigned long allocation-size field; the intended target is the adjacent...

CVE-2026-80693 idpf: bound interrupt-vector register fill to the allocated array

In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpfgetregintrvecs fills the caller-allocated regvals array from the VIRTCHNL2OPALLOCVECTORS reply in adapter-reqvecchunks, bounding its inner loop only by the...

CVE-2026-80684 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80684 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

EUVD-2026-67560

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80684

CVE-2026-80684 is a NULL pointer dereference in the Linux kernel's KVM s390 PCI subsystem. The function airq_iv_create() can return NULL on failure, but the return value was never checked. When it fails, zdev->aibv remains NULL and is subsequently dereferenced in kvm_zpci_set_airq(), causing a...

CVE-2026-80617 net: airoha: fix foe_check_time allocation size

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617

CVE-2026-80617 is a heap buffer overflow in the Linux kernel's airoha PPE (Packet Processing Engine) network driver. The foe_check_time buffer is declared as a u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry(...

CVE-2026-80617 net: airoha: fix foe_check_time allocation size

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

EUVD-2026-67493

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80616

CVE-2026-80616 affects the Linux kernel ieee802154 subsystem. The issue occurs in cfg802154_switch_netns() , where calling WARN_ON() on -ENOMEM returned by dev_change_net_namespace() and device_rename() produces spurious kernel splats when deliberate fault injections are active. This is a low-imp...

CVE-2026-80616 ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80616 ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80610 net: enetc: fix potential divide-by-zero when num_vsi is zero

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

CVE-2026-80610 net: enetc: fix potential divide-by-zero when num_vsi is zero

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

CVE-2026-80610

This Linux kernel vulnerability affects the enetc network driver on i.MX94 series SoCs. In standalone ENETC configurations where SR-IOV is not supported, pf->caps.num_vsi is zero, causing a divide-by-zero in enetc4_default_rings_allocation() when distributing rings between the physical functio...

SUSE CVE-2026-14456

Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the serve...

SUSE CVE-2026-15310

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...