182 matches found
CVE-2026-99133
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...
EUVD-2026-111885
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...
CVE-2026-99133
The Linux kernel contains a vulnerability in the net/iucv component related to how iucv_sock_recvmsg() handles the AF_IUCV_FLAG_WIN flag. On classic z/VM sockets, the function fails to test the transport, causing iucv_send_ctrl() to size the skb through a NULL iucv->hs_dev. This allows an unpr...
CVE-2026-99133 net/iucv: fix the recvmsg window update
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...
UBUNTU-CVE-2026-99133
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...
PT-2026-128126
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucv sock recvmsg sends the HiperSockets-only AF IUCV FLAG WIN without testing the transport, so on a classic z/VM socket iucv send ctrl sizes the skb through a NULL iucv-hs dev. SO MSGLIMI...
RLSA-2026:89082 Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146286)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146286 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucvhsrcv afiucvhsrcv looks up the destinatio...
AlmaLinux 8 : kernel (ALSA-2026:89083)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:89083 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...
kernel: net/iucv: fix use-after-free of a severed iucv_path
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...
kernel: net/iucv: fix use-after-free of a severed iucv_path
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: writeback: fix race between...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142738)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142738 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucvpath afiucv queues not-yet-received message...
CLSA-2024-1727817133 Fix of 73 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26752 - l2tp: pass correct message length to ip6appenddata CVE-url: https://ubuntu.com/security/CVE-2021-47188 - scsi: ufs: core: Improve SCSI abort handling CVE-url: https://ubuntu.com/security/CVE-2024-26677 - rxrpc: Fix delayed ACKs to not set the...
Oracle Linux 9 : kernel (ELSA-2026-83156)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fixed the locking mechanism in .getsockopt. The functions iucvsocksetsockopt and iucvsocksetsobrowsable were mirrored, and the entire switch statement was wrapped within locksock/releasesock. The existing lock that only...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit allocation of the cpumask variable on the stack. For the CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of the cpumask variable on the stack is not recommended, as it may cause a potential stack...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net/iucv: Filtering frames in afiucvhsrcv, based on the ingress device afiucvhsrcv selects a socket from iucvsklist by matching four 8-byte name fields in the transport header alone. No check is made to determine which netdevi...
kernel: net/iucv: fix use-after-free of a severed iucv_path
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...
kernel: net/iucv: fix use-after-free of a severed iucv_path
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...