PT-2026-35140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IPv6 flowlabel implementation. The function ip6fl seq show iterates through the global flowlabel hash under a seq-file RCU read-side lock and accesse...

Linux Distros Unpatched Vulnerability : CVE-2026-23288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a memory leak that can occur in the nftdynset error path, involving state expression memory leaks...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handleauthsessionkey bsc1255378. CVE-2025-68285: libceph: fix potential use-after-free in...

The vulnerability of the bcm_qspi_probe() function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nested_vmcb02_prepare_control() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an uncontrolled exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the stm32_dmamux_route_allocate() function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stm32dmamuxrouteallocate function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to compromise th...

The vulnerability of the rpi_firmware_probe() function in the drivers/firmware/raspberrypi.c module of the Linux kernel’s firmware driver allows a hacker to cause a system failure.

The vulnerability of the rpifirmwareprobe function in the drivers/firmware/raspberrypi.c file of the Linux kernel’s firmware driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the btrfs_read_locked inode() function in the fs/btrfs/inode.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the btrfs_can_activate_zone() function in the fs/btrfs/zoned.c module of the Linux kernel file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfscanactivatezone function in the fs/btrfs/zoned.c module of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

RockyLinux 10 : kernel (RLSA-2026:4723)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4723 advisory. kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service CVE-2026-23010 Tenable has extracted the preceding description bloc...

XNUTest

xnutesting Research & Education Only — Proof-of-concept...

EUVD-2026-16154

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

UBUNTU-CVE-2026-23398

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...

CVE-2026-23398

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...

EUVD-2026-16132

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

CVE-2026-4747 Remote code execution via RPCSEC_GSS packet validation

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

The vulnerability in the definition of the structure loongson2_clk_type{} in the driver drivers/clk/clk-loongson2.c of the Linux kernel’s software synchronization driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in determining the structure of loongson2clktype in the drivers/clk/clk-loongson2.c file of the Linux kernel synchronization driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dmi_sysfs_register_handle() function in the drivers/firmware/dmi-sysfs.c module of the Linux kernel’s driver framework allows a attacker to cause a service failure.

The vulnerability of the dmisysfsregisterhandle function in the drivers/firmware/dmi-sysfs.c module of the Linux kernel’s firmware driver lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the `btrfs_clear_buffer_dirty()` function in the `fs/btrfs/extent_io.c` module of the btrfs file system support module in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...