CVE-2026-64561

CVE-2026-64561 is a Linux kernel vulnerability in KVM/x86 shadow MMU where, after reclaiming shadow MMU pages, an invalid/obsolete root could be created and then mapped. If a stale root is zapped and a child shadow page inherits that role, new child pages can be created as invalid, violating KVM’...

cam-hunter

📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

CVE-2022-4994

CVE-2022-4994 concerns a Linux kernel KVM/x86 issue where the fast IN path for in-kernel PIO was adjusted. The change routes fast PIO through __emulator_pio_in() directly instead of bouncing via emulator_pio_in(), since __emulator_pio_in() now fills the required value and vcpu->arch.pio.count ...

CVE-2022-4994

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulatorpioin Use emulatorpioin directly for fast PIO instead of bouncing through emulatorpioin now that emulatorpioin fills "val" when handling in-kernel PIO. vcpu-arch.pio.count is guaranteed to be...

SUSE-SU-2026:22981-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. - CVE-2026-53366: ipv4: account for fraggap on the paged...

CVE-2026-64286

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architecture. The flushhypvcpu function, responsible for copying the host virtual CPU vCPU context, does not properly clear a specific internal pointer hyprunningvcpu. This oversight allows a host to provide a value...

PT-2026-66444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 module where the emulator pio in function was used as a bounce for fast PIO. The fix involves using emulator pio in directly for fast PIO, as emulator pio ...

The vulnerability of the `init_amd_zen1()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

CVE-2026-64484

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture es1938 sound driver. This vulnerability arises when a memory allocation failure causes the sndctlnew1 function to return a null value. The sndes1938mixer function then attempts to use this null value without proper...

CVE-2026-64559

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

CVE-2026-64558

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkeypckmo handler implementation Explicitly check the length of the target buffer in the pkeypckmo implementation of the keytoprotkey handler function. The handler function fails, if the generated outpu...

GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

CVE-2026-64287

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

CVE-2026-64559

The CVE-2026-64559 entry concerns the Linux kernel s390/pkey module, where a missing buffer length check in the PKEY_VERIFYPROTK ioctl allowed a local attacker to provide a request length that exceeded the allocated buffer. The available documents confirm the root cause is a length verification o...

CVE-2026-64559 s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

EUVD-2026-50406

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

CVE-2026-64558

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkeypckmo handler implementation Explicitly check the length of the target buffer in the pkeypckmo implementation of the keytoprotkey handler function. The handler function fails, if the generated outpu...

EUVD-2026-50405

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkeypckmo handler implementation Explicitly check the length of the target buffer in the pkeypckmo implementation of the keytoprotkey handler function. The handler function fails, if the generated outpu...

CVE-2026-64288

A flaw was found in the kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. A race condition can occur during the invalidation of the virtual Nested Translation Cache VNCR pseudo-TLB when a virtual CPU vcpu is being brought online or offline. This can lead to a null point...