CVE-2026-64234

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...

DEBIAN-CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

A flaw was found in the Linux kernel. Specifically, within the drm/xe graphics driver, two error handling issues in the xeexecqueuecreateioctl function could lead to memory corruption. This could result in a dangling pointer or a use-after-free vulnerability. A local attacker could potentially...

EUVD-2026-48654

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64234 tty: serial: pch_uart: add check for dma_alloc_coherent()

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

SUSE CVE-2026-63859

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring ...

SUSE CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

PT-2026-64339

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the octeontx2-pf driver. The function rvu rep rsrc init allocates queue memory before calling otx2 init hw resources. If the hardware resource setup fails, otx2...

ALSA-2026:45192 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount overflow CVE-2026-53059 kernel: drm/xe: Fix...

RLSA-2026:42919 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in tpm2loadcmd CVE-2025-71147 kernel:...

kernel security update

6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

RockyLinux 10 : kernel (RLSA-2026:42919)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

GO-2026-6021 File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup in github.com/filebrowser/filebrowser

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup in github.com/filebrowser/filebrowser...

CVE-2026-44621

With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...

EUVD-2026-47667

With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...

CVE-2026-44621

With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...

CVE-2026-44621 Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated

With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...

CVE-2026-44621

The CVE describes a vulnerability in NLnet Labs Unbound up to version 1.25.1 where applications using libunbound and configuring the unwanted-reply-threshold (non-zero) can trigger a fatal exit of libunbound when threshold is exceeded and libworker_alloc_cleanup is not on the function-call allow ...