CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

EUVD-2026-53707

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-18909

Summary: A stack-based buffer overflow in ELAN Smart-Pad on Windows affects ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys fails to enforce an upper-bound on the hardware-derived report count, allowing an out-of-range value to be passed to ETD.sys, where it is used as a loop ...

SUSE CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

RHEL 8 : kernel (RHSA-2026:50978)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50978 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors: Privilege...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in bpfforeacharrayelem due to missing backport of...

Linux Distros Unpatched Vulnerability : CVE-2026-64593

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not trim a device which is not writeable BUG There is a bug report that btrfs/242 can randomly fail with the following NULL pointer dereference: run...

UBUNTU-CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

UBUNTU-CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

EUVD-2026-53273

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

CVE-2026-64576

CVE-2026-64576 : In the Linux kernel, the vulnerability lies in nh_res_bucket_migrate() where an uninitialized netlink_ext_ack is passed to call_nexthop_res_bucket_notifiers(). If nh_notifier_res_bucket_info_init() fails (e.g., kzalloc returns -ENOMEM), the error path uses an uninitialized extack...

Linux Distros Unpatched Vulnerability : CVE-2026-64582

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the pendingmmaps list and releases pendinglock while the struct's...

CVE-2026-64465

A flaw was found in the Linux kernel's USB xHCI eXtensible Host Controller Interface driver. When a USB device with active stream endpoints is disconnected, the system attempts to free stream resources while holding a lock with interrupts disabled. This can lead to a situation where a function th...

CVE-2026-64458

A flaw was found in the Linux kernel's Data Access MONitor DAMON subsystem. A local user with write permissions to the system file system sysfs can exploit this vulnerability by configuring extreme zero or excessively high monitoring intervals. This improper handling of interval values can lead t...

CVE-2026-64542

A flaw was found in the Linux kernel's IPv6 Neighbor Discovery NDISC component. An unprivileged user, operating within a network namespace, can trigger a null pointer dereference in the acceptuntrackedna function. This occurs due to a race condition where the inet6dev structure is re-fetched...

CVE-2026-64210

A flaw was found in the Linux kernel's mlx5e driver, which manages Mellanox network adapters. This vulnerability occurs during network processing when CPU core assignments change, leading to a race condition where critical data structures ICOSQ - Interrupt Coalescing Send Queue can be updated...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...

UBUNTU-CVE-2026-64235

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIGCALLDEPTHTRACKING enabled on an x86 retbleed-affected platform eg: Skylake, with retbleed=stuff, registering a dynamic ftrace trampoline crashes on...

SUSE CVE-2026-64252

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...