Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel: bonding: alb: fix UAF in rlbarprecv during...

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...

PT-2026-85126

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

PT-2026-85215

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

The vulnerability of the btf_func_proto_check() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the specified data type for input parameters. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the acpi_ecremove_query_handlers() function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the acpiecremovequeryhandlers function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system is related to the race condition that occurs when a common resource is used. Exploiting this...

The vulnerability of the tlmi_analyze() function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tlmianalyze function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failur...

The vulnerability of the nested_vmcb02_prepare_control() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability...

The vulnerability of the virtio_transport_recv_listen() function in the net/vmw_vsock/virtio_transport_common.c file, a part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the virtiotransportrecvlisten function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the networking functions of the Linux kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the tty_driver_lookup_tty() function in the drivers/tty/tty_io.c file of the console TTY driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ttydriverlookuptty function in the drivers/tty/ttyio.c file of the TTY console driver in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the ttm_bo_evict() function in the drivers/gpu/drm/ttm/ttm_bo.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ttmboevict function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability...

The vulnerability of the _smbd_get_connection() function in the fs/cifs/smbdirect.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the smbdgetconnection function in the fs/cifs/smbdirect.c module of the Linux kernel file system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `cgroup_storage_get_next_key()` function in the kernel/bpf/local_storage.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cgroupstoragegetnextkey function in the kernel/bpf/localstorage.c module, which is part of the Linux operating system’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the amdgpu_ttm_init_on_chip() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c driver for AMD GPU cores in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper resource release. Exploiting this vulnerability may allow a remote...

The vulnerability of the `blk_mq_realloc_tag_set_tags()` function in the `block/blk-mq.c` module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkmqrealloctagsettags function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the cifs_oplock_break() function in the fs/smb/client/file.c module of the SMB client support library in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cifsoplockbreak function in the fs/smb/client/file.c module of the SMB client support library in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the invlpga_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the invlpgainterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to error handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ucan_probe() function in the drivers/net/can/usb/ucan.c module of the Linux network device driver stack allows a attacker to cause a service failure.

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the usblp_cache_device_id_string() function in the drivers/usb/class/usblp.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the vsock_update_buffer_size() function in the net/vmw_vsock/af_vsock.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vsockupdatebuffersize function in the net/vmwvsock/afvsock.c module, which is part of the Linux kernel’s networking functions, is related to the incorrect order of operation of the input data validation mechanism. Exploiting this vulnerability could allow an attacker to...