EUVD-2026-124813

splitimagecheck in boot/bootutil/src/loader.c declares a fixed uint8t loaderhash32 buffer and passes it as the outhash out-parameter to bootutilimgvalidate. That routine copies IMAGEHASHSIZE bytes into outhash memcpyouthash, hash, IMAGEHASHSIZE in boot/bootutil/src/imagevalidate.c, where...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam. When both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y are enabled, disabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

DEBIAN-CVE-2026-99097

In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in teedynshmallochelper teedynshmallochelper derives nrpages from a caller-supplied size and passes it to allocpagesexact without checking it. For size == 0 nrpages is 0, and allocpagesexac...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: rust: arm64: set uwtable llvm module flag for CONFIGUNWINDTABLES Due to a rustc bug 1, the -Cforce-unwind-tables-y flag only emits the uwtable annotation for functions, but not for the module. As a result, compiler-generated...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/i8259: The legacy PIC interrupts have been marked with IRQLEVEL. Baoquan reported that after triggering a crash, the subsequent boot process fails about half of the time. This occurs due to a NULL pointer dereference in the...

AlmaLinux 9.6 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.6:CLSA-2026:1787152228)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787152228 advisory. - A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook...

EUVD-2026-85889

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter...

PT-2026-97946

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In CONFIG PPC KERNEL PCREL mode, the r2 register is available as a caller-saved register. The functions call do irq and call do softirq use inline assembly to call functions with stack...

PT-2026-97808

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

Ubuntu 26.04 LTS : dracut vulnerability (USN-8758-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8758-1 advisory. It was discovered that dracut did not properly shell-quote messages written by the die function to the emergency hook directory. An attacker on the adjacent netwo...

USN-8758-1: dracut vulnerability

It was discovered that dracut did not properly shell-quote messages written by the die function to the emergency hook directory. An attacker on the adjacent network controlling a rogue DHCP server could use this issue to inject commands that execute as root during boot-failure handling...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

Unity Linux 20.1050a Security Update: dracut (UTSA-2026-102611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102611 advisory. A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly...

CVE-2026-68185

A flaw was found in the Linux kernel, specifically within the LoongArch architecture. When memory allocation profiling is enabled and then subsequently disabled via a boot parameter, an incorrect order of initialization for jumplabelinit and parseearlyparam can occur. This can lead to early...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

AZL-94962 CVE-2026-68185 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

UBUNTU-CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

EUVD-2026-55286

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

CVE-2026-68185

CVE-2026-68185 (LoongArch, Linux kernel): A boot-time failure occurs when CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y because jump_label_init() is invoked after parse_early_param(), allowing early-param handlers to modify static keys. The fix moves jump_label_...