RHEL 8 : kernel (RHSA-2026:57253)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57253 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: ieee802154: do not leave...

ALSA-2026:57251 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 CVE-2026-4323...

PT-2026-79074

Name of the Vulnerable Software and Affected Versions Lean 4 affected versions not specified Description The kernel fails to verify that the structure named in a projection expression matches the type of the value being projected. Additionally, the environment::add inductive function in...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in...

The vulnerability of the xe_reg_sr_add() function in the drivers/gpu/drm/xe/xe_reg_sr.c file of the DRI driver infrastructure of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xeregsradd function in the drivers/gpu/drm/xe/xeregsr.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failur...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drivers/md components of the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 9 : kernel (RHSA-2026:57252)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57252 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: f...

CVE-2026-12633

The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...

CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement

The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...

CVE-2026-12633

CVE-2026-12633 is an out-of-bounds write in the Zephyr RTOS IPv6 neighbor-discovery code (subsys/net/ip/ipv6_nbr.c). The function handle_ra_6co() processes the 6LoWPAN Context Option (RFC 6775) from ICMPv6 Router Advertisements without bounding the 8-bit context_len field to the RFC maximum of 12...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: dapr, loki, hubble, kyverno, minio, rancher-support-bundle-kit, cilium, reports-server, external-dns, cert-manager, kots, kube-conformance, kubernetes, multicluster-controlplane, cilium-cli, kine, milvus, multicluster-controlplane-fips...

CVE-2026-16833

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

CVE-2026-74265

A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA GDMA queue, the queue-id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting th...

CVE-2026-74263

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN t7xx driver. The t7xxportctrltx function, which handles control transmissions, fails to validate the return value of skbclone. An attacker with local access could exploit this by triggering a scenario where skbclone returns a...

CVE-2026-74539

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A missing lock in a critical function allows for concurrent access to internal data structures without proper synchronization. This concurrency issue could lead to system instability or a denial of service, impacting the availability...

CVE-2026-74522

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs when a ksmbd file object is prematurely freed while another session still holds a reference to it. This can lead to the system attempting to access freed memory, potentially causing a system crash...

CVE-2026-74520

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit and IOMMUFD IOMMU File Descriptor components. This vulnerability is a Use-After-Free UAF, which means the system attempts to use memory that has already been released. Specifically, during device detachment or hardwa...

CVE-2026-74485

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local user, operating within a user namespace, could exploit this vulnerability. By registering a binfmtmisc string where the chosen delimiter character is also a flag character, the system's flag field parser can...