SUSE CVE-2025-68755

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...

AlmaLinux 10 : kernel (ALSA-2025:23279)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23279 advisory. kernel: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 kernel: net: tun: Update napi-skb after XDP process...

AZL-73406 CVE-2025-68759 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...

AZL-73394 CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

CVE-2025-68765

The CVE-2025-68765 issue is in the Linux kernel’s mt7615 driver: in mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated and, if mt76_connac_mcu_alloc_wtbl_req() fails, it is not freed, causing a memory leak. The published fix ensures sskb is freed via dev_kfree_skb() in the error path. Affected c...

CVE-2025-68763

CVE-2025-68763 affects the Linux kernel crypto/starfive path. The bug arises from sg_nents_for_len return value being assigned to an unsigned long in starfive_hash_digest, which can convert negative error codes into large positives, risking a buffer overflow. The fix adds error checking for sg_ne...

CVE-2025-68756

CVE-2025-68756 affects the Linux kernel block layer where blk_mq_[un]quiesce_tagset() and related tag-set management functions can deadlock when NVMe timeout handling and tagset changes interact on shared tagsets. The vulnerability arises because quiescing tagsets and freezing queues previously-r...

PT-2026-1252

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to Network File System NFS automounting. Specifically, automounted filesystems do not consistently inherit superblock mount options like read-on...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000001 advisory. In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking...

PT-2026-8212

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the networking scheduler cls u32 where the skb header pointer function does not fully validate negative offset values. This can lead to...

PT-2026-27712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to USB communication with the f81604 CAN controller. Specifically, the issue concerns the incorrect anchoring of URB USB Request Block structure...

PT-2026-27746

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's bridge networking component. When the system boots with IPv6 disabled 'ipv6.disable=1', the neighbor discovery table nd tbl is not initialized...

PT-2026-26046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s RDMA/umad component where a negative data len value can occur in the ib umad write function. This happens when there is a mismatch between the...

PT-2026-8189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's btrfs file system related to block size synchronization during mount operations. Specifically, when a btrfs file system is mounted, the block device m...

PT-2026-6133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the uacce subsystem and safe queue release. Directly calling the put queue function poses a risk because it does not guarantee that resource...

PT-2026-26129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the AppArmor subsystem related to the handling of Deterministic Finite Automata DFA start states during policy unpacking. Specifically, the unpack...

PT-2026-4671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the xhci sideband endpoint removal process. Specifically, the xhci sideband remove endpoint function incorrectly assumes the endpoint is running a...

PT-2026-27696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s UDP handling. Specifically, when a UDP socket is bound to a wildcard address with a non-zero port, connected to an address, and then disconnected, the...

PT-2026-27734

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-611.5.1.el9 7 Description The Linux kernel contained an issue where multiple udev threads could collect i801 device information concurrently during boot. This could lead to a kernel panic because the i801...

PT-2026-4493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the idpf driver related to RSS LUT handling after a soft reset. Specifically, a NULL pointer dereference can occur if an ethtool command accessing...