Linux Kernel Security Vulnerabilities

The Linux kernel versions from 4.19.49 to 4.20 and 5.0 contain security vulnerabilities. This vulnerability arises from addchangesetproperty, which links properties to the deadprops list before changeset is successfully added. When the addition fails, the property is released but the pointer that...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.17 to 5.16, 5.16.3 to 5.17, and 5.17 itself. These vulnerabilities stem from the iio trigger not canceling reenablework before releasing the trigger. The worker that was last started via an ongoing IRQ can continue to run after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...

CLSA-2026-1792243729 kernel: Fix of 53 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 - afunix: Fix UAF read of tail-len in unixstreamdatawait CVE-2026-64109 - tipc: fix slab-use-after-free Read in tipcaeaddecryptdone...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

CLSA-2026-1792247642 kernel: Fix of 50 CVEs

ALSA: usx2y: bound the hwdep mmap fault offset CVE-2026-74641 - ALSA: usx2y: Fix potential leaks of uninitialized memory CVE-2026-74641 - net/packet: reset the MAC header on the packet-socket transmit path CVE-2026-74667 - drm/amd/display: Bound VBIOS record-chain walk loops CVE-2026-53138 -...

CLSA-2026-1792244181 Fix of 78 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2026-64015 - security/keys: fix missed RCU read section on lookup CVE-2026-64015 CVE-2023-53282 - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write CVE-2023-53282 CVE-2026-43250 -...

CLSA-2026-1792243434 kernel: Fix of 123 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - slip: remove sliphangup to fix use-after-free in slipreceivebuf CVE-2026-90057 - mm/hugetlb: fix list corruption in allocatefileregionentries CVE-2026-74518 - mm/pagereporting: use systemfreezablewq to fix UAF during suspend...

CLSA-2026-1792242681 Fix of 79 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2026-43250 - usb: chipidea: udc: fix DMA and SG cleanup in epnuke CVE-2026-43250 CVE-2026-43281 - mailbox: Prevent out-of-bounds access in fwmboxindexxlate CVE-2026-43281 CVE-2025-38595 - xen: fix UAF in...

CLSA-2026-1791949745 kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

Exploit for CVE-2026-64560

CVE-2026-64560 — realme RMX6699 Android 17 / COOS17 !andr...

CLSA-2026-1792240507 Fix of 81 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2025-39945 - cnic: Fix use-after-free bugs in cnicdeletetask CVE-2025-39945 CVE-2022-50315 - ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS CVE-2022-50315 CVE-2025-38459 - atm: clip: Fix infinite recursi...

CLSA-2026-1792234299 kernel: Fix of 76 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - xen/netfront: drop RX packets...

Exploit for CVE-2026-64560

Prague-KSU On the REDMI K90 Max codename prague, OS4.0.0...

CLSA-2026-1792236273 kernel: Fix of 76 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - xen/netfront: drop RX packets...

SUSE CVE-2025-38596

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...

Exploit for CVE-2026-64560

OPPO Find X10 Pro Max PMX110 / OP659FL1 · CVE-2026-64560 Res...

MGASA-2026-0515 Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...