SUSE SLES15 Security Update : kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4538-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4538-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes one security issue: The following security issue was fixed: - CVE-2026-74612:...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_75746)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202675746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

Apple IOKit DriverKit Race Condition

Apple IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The supplied analysis includes a sanitizer-checked proof of concept model of the reported DriverKit RPC state-handling flaw...

PT-2026-107502

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables move hugetlb page tables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

ALSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

ALSA-2026:77690 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...

RHEL 9 : kernel (RHSA-2026:77218)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77218 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: hold dev ref until afte...

RHEL 8 : kernel (RHSA-2026:77217)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77217 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: hold dev ref until afte...

OPENSUSE-SU-2026:12074-1 kernel-devel-7.2.9-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

5.15.0-325.220.5 - octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng Orabug: 39951718 - batman-adv: Remove stale reason member from batadvtpvars Vijayendra Suman Orabug: 39966037 - Revert 'octeontx2-pf: Fix leak of SQ timestamp buffer on teardown' Vijayendra Suman Orabug: 39967930 -...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500377)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500377 advisory. - tcp: fix potential race in tcpv6synrecvsock Eric Dumazet Orabug: 39331624 CVE-2026-43198 - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe Bjoe...

MiracleLinux 8 : kernel-4.18.0-553.168.1.el8_10 (AXSA:2026-1992:93)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1992:93 advisory. kernel: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib CVE-2026-31566 kernel: netfilter: nfqueue: hold bridge skb-dev while queued...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.1 - selftests/mm/khugepaged: include kselftest.h in khugepaged Sherry Yang Orabug: 40099804 6.12.0-207.111.5 - Rename ONOS kernel flavor to OSP for OL9 and OL10 Vijay Kumar Orabug: 40055216 - tcp: Remove hashinfo test for inet6?lookuprunsklookup. Kuniyuki Iwashima Orabug: 4005230...

ios.CVE-2026-84616-84607

AppleAVE2 CVE 研究 — iOS 27.0 !IMPORTANT 本仓库由 AI 智能体辅助研究 !NOTE 开放研究 欢迎贡献 CVE-2026-84607（AVEVideoEncoder 竞态 → 内核权限）：已定位修复 这是什么 iOS 27.0 公告 149034，组件 AVEVideoEncoder ： “沙盒应用可能能够以内核权限执行任意代码”——“通过改进状态管理修复了竞态条件。” 本文说明：修复位于何处以及它做了什么。 答案： com.apple.driver.AppleAVE2 中新增的逐帧状态一致性防护，它将客户端的 eEncType 与会话的...

pedit-cow

CVE-2026-46331 是一个 Linux 内核权限提升漏洞，涉及流量控制子系统和页缓存损坏。 要求： Linux x8664 GCC iproute2 tc 存在漏洞的内核 利用流程： SUID 枚举 ↓ 目标选择 ↓ ELF 分析 ↓ tc / Netlink / pedit ↓ 页缓存损坏 ↓ 损坏验证 ↓ SUID 执行 ↓ 权限提升...

K000163557: Linux kernel vulnerability CVE-2026-43313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpiprocessorerratapiix4 In acpiprocessorerratapiix4, the pointer dev is first assigned an IDE device and then reassigned an ISA device: dev =...

CVE-2026-98170

A flaw was found in the Linux kernel's SMB client. When processing extended file attributes returned by a server, insufficient buffer validation allows the kernel to read data past the allocated boundaries. A malicious or compromised server could exploit this issue by returning a malformed...

CVE-2026-98167

A flaw was found in the Linux kernel's SMB client. When processing compound encrypted Protocol Data Units PDUs, the client incorrectly validates the length of individual messages within the compound frame. A malicious or compromised SMB server can exploit this flaw by returning truncated sub-PDUs...

CVE-2026-98168

A flaw was found in the Linux kernel's Server Message Block SMB client. In the reparse point query handling logic, the client fails to properly validate response buffer boundaries before accessing data structures. A malicious or compromised SMB server can exploit this by returning a crafted...

CVE-2026-98169

A flaw was found in the Linux kernel's Server Message Block SMB client. This issue leads to information disclosure caused by an out-of-bounds memory read during snapshot enumeration. A malicious SMB server can provide an unexpectedly short response, causing the kernel client to read beyond the...