PT-2026-61226

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb check perm dacl ACE-walk loops Commit d07b26f39246 "ksmbd: require minimum ACE size in smb check perm dacl" introduced a transposed bounds check: if offsetofstruct smb ace, sid + aces size size...

PT-2026-61341

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp tw isn leak enabling ISN prediction Blamed commit moved the TIME WAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcp conn request for th...

PT-2026-61221

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual length for interrupt-IN notifications USBTMC devices can use an optional interrupt endpoint for notification messages. These typically contain two-byte headers indicating the payload format, but the...

PT-2026-61126

In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace cannot even attempt to mount it...

PT-2026-61429

In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock dwork draining on unmap Given how rbd lock add request and rbd img exclusive lock are written, lock dwork may be requeued more than it's actually needed: for example in case a new I/O request comes i...

PT-2026-61499

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk nr poison inc and memblk nr poison sub look up a memory block via find memory block by id, which acquires a reference to the memory block device. Bo...

PT-2026-61497

In the Linux kernel, the following vulnerability has been resolved: mm/memory hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and locking", v2. This series fixes two memory block device reference leaks and one locking issue around the per-memory block...

PT-2026-61403

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbus block xfer read buffer adm1266 pmbus block xfer sets up the read transaction with .buf = data-read buf, .len = ADM1266 PMBUS BLOCK MAX + 2, but read buf in struct adm1266 data is...

PT-2026-61118

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in blkcg rstat flush When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's blkcg rstat flush removes another blkg's iostat entries via...

PT-2026-61334

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops it, the plug flushes and calls blk mq free plug rqs, freeing the cached rqs...

PT-2026-61370

In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip vcnt in bio integrity copy user bio integrity add page already sets bip vcnt to 1 for the bounce segment. Overwriting it with nr vecs breaks bip vcnt = bip max vcnt on WRITE bip max vcnt is 1, so the...

PT-2026-61434

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb-cb ieee80211 invoke fast rx reads RX status through IEEE80211 SKB RXCBskb, which aliases the same skb-cb storage that ieee80211 rx mesh data reuses as IEEE80211 TX INFO...

PT-2026-61071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the udf read tagged function where CRC verification is skipped if the descCRCLength plus the size of the tag structure exceeds the block size. A specially crafted UDF...

SUSE CVE-2026-57077

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator or bounds check. During block-scalar...

USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8490-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

CVE-2026-57077

A flaw was found in YAML::Syck. An out-of-bounds read vulnerability exists due to an unbounded newline scan during block-scalar lexing. A remote attacker could exploit this by providing a specially crafted YAML document, leading to potential information disclosure. This issue is an incomplete fix...

Linux Distros Unpatched Vulnerability : CVE-2026-57077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewlin...