AZL-104658 CVE-2026-97599 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

DEBIAN-CVE-2026-97599

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

EUVD-2026-86730

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

CVE-2026-97599

The Linux kernel contains a vulnerability in the ieee802154: hwsim component where a double-free condition can occur. The root cause is an unserialized read-swap-free of phy->pib within the hwsim_update_pib() function. Because the mac802154 scan worker can update channels without holding the R...

CVE-2026-97599 ieee802154: hwsim: serialize pib updates to fix double-free

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

CVE-2026-97599

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

UBUNTU-CVE-2026-97599

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211-hwsim: fixed the handling of late beacon hrtimer events. Thomas explained in https://lore.kernel.org/r/87mtoeb4hb.ffs@tglx that our current handling of hrtimer events is incorrect. If the timer fires late—for example, du...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: wwanhwsim: Fixed a possible memory leak in wwanhwsimdevnew. When a fault is injected while probing a module, if deviceregister fails, and the refcount of the kobject is not decreased to 0, the name allocated in devsetname may ...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Driver Core: Fixed a resource leak in deviceadd. When kobjectadd fails in deviceadd, it will call cleanupgluedir to free resources. However, in kobjectadd, dev-kobj.parent has been set to NULL. This will cause a resource leak. Th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: Fixed possible NULL dereferencing. In the call to mac80211hwsimselecttxlink, the sta pointer might be NULL. Therefore, it is necessary to check that it is not NULL before accessing it...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “wifi: mac80211: fix memory leak in ieee80211ifadd” This resolution involves committing change 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. The function ieee80211iffree is already called from freenetdevndev, because...

CVE-2026-68411

The CVE affects the Linux kernel’s wifi/mac80211_hwsim path. In hwsim_virtio_rx_work(), the virtqueue used-ring length reported by the device could be passed directly to skb_put() on a fixed-size receive skb, allowing skb_over_panic() and a host-triggerable guest panic (DoS) when length exceeds t...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021535 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will...

kernel: wifi: mac80211_hwsim: fix typo in frequency notification

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in...

ALSA-2026:18587 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: bonding: check xdp prog when set bond mode CVE-2025-22105 kernel: block: fix resource leak in blkregisterqueue error path CVE-2025-37980 kernel: dmaengine: idxd: fix memory leak in error...

ROS-20260414-73-0030

A vulnerability in the mac80211hwsimselecttxlink function of the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux kernel wireless adapter driver is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the wwan_hwsim_dev_new() function in the drivers/net/wwan/wwan_hwsim.c module of the Linux kernel’s network device driver allows a hacker to cause a service failure.

The vulnerability of the wwanhwsimdevnew function in the drivers/net/wwan/wwanhwsim.c module of the Linux kernel’s network device driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hwsim_cloned_frame_received_nl() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel’s wireless adapter driver allows a attacker to access protected information or cause a service failure.

The vulnerability of the hwsimclonedframereceivednl function in the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux kernel wireless adapter driver is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow an attacker to acce...

SUSE SLES15 Security Update : kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:0565-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0565-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: ...