CVE-2026-68286

A flaw was found in the Linux kernel's dropmonitor component. On 32-bit architectures, a race condition can occur during the update of 64-bit statistics. If a nested interrupt happens on the same CPU while these statistics are being updated, it can lead to the corruption of internal sequence...

CVE-2026-68287

A flaw was found in the Linux kernel's dropmonitor feature. Incorrect size calculations for 64-bit attributes on 32-bit architectures without efficient unaligned access support can lead to an under-estimation of internal buffer SKB size. This under-estimation may cause a kernel panic, resulting i...

CVE-2026-68288

A flaw was found in the Linux kernel's dropmonitor module. This vulnerability allows for information disclosure due to uninitialized padding bytes in the NETDMATTRPAYLOAD attribute. When the packet payload length is not a multiple of four, these uninitialized bytes are leaked to user space. A loc...

DEBIAN-CVE-2026-68286

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

UBUNTU-CVE-2026-68286

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

UBUNTU-CVE-2026-68288

In the Linux kernel, the following vulnerability has been resolved: net: dropmonitor: fix info leak in NETDMATTRPAYLOAD netdmpacketreportfill and netdmhwpacketreportfill open code the NETDMATTRPAYLOAD attribute to avoid zeroing the packet payload before overwriting it with skbcopybits. skbput...

UBUNTU-CVE-2026-68287

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes NETDMATTRPC and NETDMATTRTIMESTAMP. On 32-bit architectures without...

CVE-2026-68288 net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD

In the Linux kernel, the following vulnerability has been resolved: net: dropmonitor: fix info leak in NETDMATTRPAYLOAD netdmpacketreportfill and netdmhwpacketreportfill open code the NETDMATTRPAYLOAD attribute to avoid zeroing the packet payload before overwriting it with skbcopybits. skbput...

CVE-2026-68287

The CVE-2026-68287 issue affects the Linux kernel’s drop_monitor feature. On 32-bit architectures without CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS, 64-bit attributes (PC and TIMESTAMP) appended via nla_put_u64_64bit() may cause a 64-bit alignment pad, and net_dm_packet_report_size()/net_dm_hw_packe...

CVE-2026-68287 drop_monitor: fix size calculations for 64-bit attributes

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes NETDMATTRPC and NETDMATTRTIMESTAMP. On 32-bit architectures without...

CVE-2026-68286 drop_monitor: perform u64_stats updates under IRQ-disabled section

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

CVE-2026-68286 drop_monitor: perform u64_stats updates under IRQ-disabled section

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

CVE-2026-68286

CVE-2026-68286 affects the Linux kernel’s drop_monitor code. The vulnerability arises because 64-bit per-CPU stats updates (u64_stats_update_begin/Inc/update_end) were performed after releasing drop_queue.lock (spin_unlock_irqrestore), i.e., after local IRQs had been re-enabled, in the functions ...

Linux Distros Unpatched Vulnerability : CVE-2026-68286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc /...

Linux Distros Unpatched Vulnerability : CVE-2026-68287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes...

Linux Distros Unpatched Vulnerability : CVE-2026-68288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dropmonitor: fix info leak in NETDMATTRPAYLOAD netdmpacketreportfill and netdmhwpacketreportfill open code the NETDMATTRPAYLOAD attribute to avoid zeroing...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990225 advisory. In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled,...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40980)

dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled, and it acquires a spinlock. This is problematic for RT kernels because spinlocks are sleeping locks in this configuration, which causes the following splat. This plugin only works with Tenable.ot...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: dropmonitor: corrected the incorrect initialization order. Syzkaller reports the following bug: BUG: spinlock magic values are incorrect on CPU1, syz-executor.0/7995. Lock value: 0xffff88805303f3e0, .magic: 00000000, .owner:...

CVE-2025-21862 drop_monitor: fix incorrect initialization order

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock bad magic on CPU1, syz-executor.0/7995 lock: 0xffff88805303f3e0, .magic: 00000000, .owner: /-1, .ownercpu: 0 CPU: 1 PID: 7995 Comm...