USN-8658-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-64531...

CVE-2026-19783

CVE-2026-19783 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with a crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads due to insufficient validation , causing kernel memory corruption. The impact ranges from a system crash (deni...

CVE-2026-19783 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

CVE-2026-19448

CVE-2026-19448 is a stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler , affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can corrupt kernel stack state and trigger a system crash , resulting in denial of service . NVD assigns a CVSS 3.1 ...

CVE-2026-19448 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

CVE-2026-19442 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-19442

CVE-2026-19442 is a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can lead to denial of service , privilege escalation , or full compromise of the client LPAR kernel . The CVSS 3.1 score is 8....

CVE-2026-17060

CVE-2026-17060 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a kernel heap over-read allows a remote attacker to obtain sensitive information and cause a denial of service . The NVD rates this CVSS 9.1 (CRITICAL) with a network vector and no privileges required, while IBM's own scorin...

CVE-2026-16973

CVE-2026-16973 is an out-of-bounds read vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to disclose sensitive kernel memory . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector and no user interaction required. CISA SSVC asses...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

USN-8643-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...

USN-8656-1: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

USN-8656-1 linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

CVE-2026-74558

A flaw was found in the Linux kernel's zero-copy ZC transmit Tx batch path. When processing network packets, the system can fail to properly reclaim memory UMEM frames if it encounters invalid or oversized packet descriptors. This can lead to resource exhaustion, where memory is not returned to...

CVE-2026-74379

A flaw was found in the Linux kernel's dax/kmem module. This vulnerability occurs when the system attempts to remove a memory resource that was not fully initialized, leading to an attempt to access a null pointer. A local attacker could potentially trigger this condition, causing the system to...

CVE-2026-74359

A flaw was found in the Linux kernel's configfs component. This vulnerability occurs because a memory pointer is not properly cleared after a failure, leading to a 'use-after-free' condition. A local attacker could exploit this by interacting with the affected directory, which could cause memory...

CVE-2026-74345

A flaw was found in the Linux kernel's Soft iWARP siw component, which handles high-performance data transfer. This vulnerability occurs when the system processes a specially crafted connection request, leading to a 'use-after-free' error. An attacker could exploit this to cause a denial of servi...

CVE-2026-53424

creationtimestamp| type| source ---|---|--- 2026-08-20 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjx4cg2wl2j 2026-08-20 20:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2d66bz72e...

CVE-2026-72844

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

CVE-2026-74340

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. The driver uses a firmware-controlled count to access a memory buffer without proper validation of the count's value. A malicious or malformed firmware response could provide an excessive count, leading to an out-of-bounds read from the...