EUVD-2026-59070

In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: reject re-registration of an already-bound ops ioinstallbpf only rejects a second registration on the ctx side ctx-bpfops and sets the per-map back-pointer ops-priv unconditionally. The structops link path never...

CVE-2026-72112

CVE-2026-72112 concerns the Linux kernel io_uring/bpf-ops path where a second registration of BPF ops could be bound to the same ring due to not advancing past BPF_STRUCT_OPS_STATE_READY, allowing bpf_io_reg() to re-resolve the target ring and potentially bind the same io_uring_bpf_ops map to dif...

CVE-2026-74392: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...

CVE-2026-72112: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: reject re-registration of an already-bound ops ioinstallbpf only rejects a second registration on the ctx side ctx-bpfops and sets the per-map back-pointer ops-priv unconditionally. The structops link path never...

PT-2026-72301

In the Linux kernel, the following vulnerability has been resolved: io uring/bpf-ops: reject re-registration of an already-bound ops io install bpf only rejects a second registration on the ctx side ctx-bpf ops and sets the per-map back-pointer ops-priv unconditionally. The struct ops link path...

openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21555-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259:...

OPENSUSE-SU-2026:21555-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

Linux Distros Unpatched Vulnerability : CVE-2026-68095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: -...

SUSE-SU-2026:23237-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

SUSE-SU-2026:23068-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

SUSE-SU-2026:23221-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

SUSE-SU-2026:23066-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

AZL-95199 CVE-2026-68289 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen; buflen is sizet but mintint, ... casts it to int. When buflen exceeds INTMAX e.g...

CVE-2026-68289 tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()

In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen; buflen is sizet but mintint, ... casts it to int. When buflen exceeds INTMAX e.g...

Linux Distros Unpatched Vulnerability : CVE-2026-68289

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen %NASLMINLEVE...

ROS-20260803-73-0015

The vulnerability of the ioinitreq function in the iouring/iouring.c module of the Linux kernel’s asynchronous input/output interface relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-64426

A flaw was found in the Linux kernel's iouring/nop component. A local user could exploit this by submitting a specially crafted no-operation NOP request. This could lead to a file reference not being properly released, resulting in a memory leak. Over time, this memory leak could impact system...

CVE-2026-64262

A flaw was found in the fuse-uring component of the Linux kernel. When iouring task work is canceled, the system fails to properly end a fusereq FUSE request. This can cause the originating system call thread to block indefinitely, leading to a Denial of Service DoS for the affected system...

CVE-2026-64425

A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows linked work items to continue executing even after a system exit process has begun. This can lead to a denial of service by prolonging the exit sequence and potentially consuming system resources unexpectedly...

Linux kernel io_uring Buffer Overflow DoS

The vulnerability of the iosendmsgzc function in the iouring/net.c module of the Linux kernel’s asynchronous input/output interface is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...