Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_50978)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202650978 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2023_5244)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235244 advisory. kernel: ipvlan: out-of-bounds write caused by unclear skb-cb CVE-2023-3090 kernel: UAF in nftables when nftsetlookupglobal triggered after handling named a...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_53330)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202653330 advisory. kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc (crlsa-2026_50979)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202650979 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in...

SUSE CVE-2026-98003

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 "iommu/amd: Simplify and Consolidate Virtual APIC AVIC Enablement" moved the GA log allocation from iommuinitpci to enableiommusvapic, which is called on...

CVE-2026-97495

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could exploit this vulnerability to cause a Denial of Service DoS or kernel memory corruption by supplying an out-of-bounds doorbell identifier during queue allocation. The issue occurs because the doorbell allocation...

CVE-2026-97496

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local attacker can trigger this vulnerability during process restoration by supplying manipulated queue descriptor values that lack proper boundary validation. This issue results in an out-of-bounds memory read, potentially exposing...

CVE-2026-97494

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to validate the size of firmware images before copying them into the Platform Security Processor PSP private buffer. A local user could exploit this vulnerability by loading an oversized or malformed firmware image, triggerin...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786761805)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786761805 advisory. - A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown ...

RCCL Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43598| Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1728297353)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1728297353 advisory. - The kernelwait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, migh...

amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmallocmemoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the copying of buffers without checking the size of the...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779375889)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779375889 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-97431

A flaw was found in the Linux kernel's AMD display driver. When updating display streams, the driver improperly handles phantom streams that have already been destroyed, triggering a null pointer dereference. A local attacker can trigger this issue during display power management operations,...

CVE-2026-97429

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver subsystem. A race condition occurs during queue destruction when internal locks are released while waiting for a queue to resume, allowing a concurrent destroy operation to prematurely free the queue object. A local user could...

CVE-2026-97427

A flaw was found in the Linux kernel's AMD GPU power management driver. A local user with write access to the powerplay sysfs interface could trigger a heap-based buffer overflow by providing input data exceeding the allocated buffer size. This issue can lead to memory corruption, resulting in a...

USN-8728-3 linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8728-3: Linux kernel (Oracle) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

ROS-20260929-73-0035

The vulnerability of the dcstreamgetscanoutpos function in the drivers/gpu/drm/amd/display/dc/core/dcstream.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a...