CVE-2026-72088

A flaw was found in the Linux kernel's hpsa SCSI driver. When a physical disk is in a reset state, the driver fails to properly unmap Direct Memory Access DMA resources. This oversight can lead to a DMA mapping leak, potentially causing resource exhaustion over time...

CVE-2026-74491

A flaw was found in the Linux kernel. A null pointer dereference vulnerability exists within the ofpcirangeparserone function. This occurs when ofmatchbus returns a null value for nodes with specific range properties, which is then improperly dereferenced. An attacker could potentially exploit th...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: iommu: disable SVA when CONFIG_X86 is set

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing SVA implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100732 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099962 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes = 4G When the iommu is used the linearization of the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099964 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099721 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100493 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengineprepslavesg fai...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100705 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099700 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100130 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

SUSE CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

SUSE CVE-2026-74491

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...

SUSE CVE-2026-74495

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

SUSE CVE-2026-74498

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fillmax is set When a USB audio endpoint requests full packet transfers via the fillmax descriptor flag, dataepsetparams promotes ep-curpacksize to ep-maxpacksize. However,...

SUSE CVE-2026-74545

In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all fragments, the error path clears the fragment descriptors with...

SUSE CVE-2026-74551

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...

UBUNTU-CVE-2026-74551

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...

CVE-2026-74551

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...