USN-8145-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...

USN-8145-1 linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...

The vulnerability of the emulation_proc_handler() function in the arch/arm64/kernel/armv8_deprecated.c module, which is part of the ARM 64-bit kernel support for the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the emulationprochandler function in the arch/arm64/kernel/armv8deprecated.c module of the ARM 64-bit kernel support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Architectural Implications of the UK Cyber Security and Resilience Bill

The UK Cyber Security and Resilience CS&R Bill represents the most significant reform of UK cyber legislation since the Network and Information Systems NIS Regulations 2018. While existing analysis has addressed the Bill's regulatory requirements, there is a critical gap in guidance on the...

DEBIAN-CVE-2026-34872

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values lack of contributor...

CVE-2026-23401

CVE-2026-23401: In the Linux kernel KVM x86/mmu, a race allowed installing an MMIO SPTE without first zapping an existing shadow-present SPTE when guest memory writes occurred outside KVM’s scope. This could enable a guest‑memory–related fault to leave a shadow SPTE intact when an MMIO SPTE is in...

The vulnerability of the __bad_page_fault() function in the arch/powerpc/mm/fault.c module of the PowerPC platform’s Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the badpagefault function in the arch/powerpc/mm/fault.c module of the PowerPC platform support for the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __hw_perf_event_init() function in the arch/s390/kernel/perf_cpum_sf.c module, which is part of the S390 platform support for the Linux operating system, allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the hwperfeventinit function in the arch/s390/kernel/perfcpumsf.c module, which is part of the S390 platform support for the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to access...

PT-2026-29636

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.0.0 Description The application does not immediately revoke active user sessions when an account is deactivated. This is due to a logic flaw where account state changes are only enforced during login, not for...

The vulnerability of the zpci_get_iommu_ctrs() function in the drivers/iommu/s390-iommu.c file of the Linux operating system’s IOMMU driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcigetiommuctrs function in the drivers/iommu/s390-iommu.c module of the Linux operating system’s IOMMU driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Agentic-Security-Code-Review

🔍 Agentic Security Code Review !Claude Codehttps://img.sh...

Empowering Mobile Networks Security Resilience by Using Post-Quantum Cryptography

The transition to a cloud-native 5G Service-Based Architecture SBA improves scalability but exposes control-plane signaling to emerging quantum threats, including Harvest-Now, Decrypt-Later HNDL attacks. While NIST has standardized post-quantum cryptography PQC, practical, deployable integration ...

Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities: Resource Estimates and Mitigations

This whitepaper seeks to elucidate implications that the capabilities of developing quantum architectures have on blockchain vulnerabilities and mitigation strategies. First, we provide new resource estimates for breaking the 256-bit Elliptic Curve Discrete Logarithm Problem, the core of modern...

Exploit for Code Injection in Apple Securerom

🔐 iOS Security Research Deep-dive notes on iOS security inter...

CVE-2026-23301

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip SDCA SoundWire Digital Control Adapter component. The findsdcaentityiot function fails to check for successful memory allocation when assigning an entity name. This vulnerability could allow a local...

The vulnerability of the kvm_arch_vcpu_ioctl() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `ftrace_make_nop()` function in the `arch/arm64/kernel/ftrace.c` module, which is part of the Linux operating system’s ARM 64-bit kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ftracemakenop function in the arch/arm64/kernel/ftrace.c module, which is part of the Linux operating system’s ARM 64-bit kernel support, is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-006315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006315 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cau...

EUVD-2026-16038

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored cross-site scripting vulnerability in the CCDA document preview allows an attacker who can upload or send a CCDA document to execute arbitrary JavaScript in ...

SUSE CVE-2026-23316

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipath hash seed struct sysctlfibmultipathhashseed contains two u32 fields userseed and mpseed, making it an 8-byte structure with a 4-byte alignment requirement. In...