USN-8645-1: Linux kernel (Oracle) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8645-1 linux-oracle vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8644-1 linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-fips, linux-hwe, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...

USN-8644-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...

USN-8643-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...

USN-8643-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gkeop, linux-oracle, linux-realtime, linux-realtime-6.8, linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...

CVE-2026-17045

creationtimestamp| type| source ---|---|--- 2026-08-18 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtesntcrf224...

CVE-2026-72255

A flaw was found in the Linux kernel's netfilter component, specifically within the nfqueue functionality. When a bridged packet is queued to NFQUEUE, it can retain a reference to a bridge's private fake destination 'dst' even after the bridge teardown has begun. This can lead to a use-after-free...

CVE-2026-72253

A flaw was found in the Linux kernel's Netfilter Session Initiation Protocol SIP connection tracking helper. This vulnerability occurs when network traffic control tc ingress or Open vSwitch openvswitch subsystems are active, and a specific media handling feature sipexternalmedia is enabled. The...

CVE-2026-72252

A flaw was found in the Linux kernel. A memory allocation failure during network filter operations can lead to an inconsistent state within the netfilter: nftsetpipapo module. This inconsistency can result in out-of-bounds writes, which may allow a local attacker to cause a system crash denial of...

CVE-2026-72250

A flaw was found in the Linux kernel's nfconntrackreasm module, specifically within the IPv6 defragmentation process. An attacker could exploit this by sending specially crafted IPv6 fragmented packets. The nfctfrag6reasm function incorrectly adjusts the macheader offset, causing the system to...

CVE-2026-72249

A flaw was found in the Linux kernel's netfilter flowtable. When processing the IP-in-IP IPIP header, the system incorrectly uses routing information from the opposite direction to calculate packet headroom and fragmentation flags. This can lead to incorrect packet handling and potentially affect...

CVE-2026-72246

A flaw was found in the Linux kernel's netfilter flowtable component. This vulnerability arises from an error in how the system sets up tunnel routes, specifically in handling network packet encapsulation and tunnel information. An attacker could potentially exploit this to cause incorrect networ...

CVE-2026-72243

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

CVE-2026-72241

A flaw was found in the kernel. In the leds: uleds module, a buffer overread can occur because the name string provided by userspace is not guaranteed to be null-terminated. This can lead to a local attacker potentially reading sensitive information from adjacent memory or causing a denial of...

CVE-2026-72239

A flaw was found in the Linux kernel, specifically within the Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP feature. This vulnerability involves a timing issue, or race condition, during the process of clearing processor caches. If not handled correctly, this can lead to a situatio...

CVE-2026-72235

A flaw was found in the Linux kernel batman-adv component. The batadvinterfacerx function, responsible for handling network packets, can reallocate its internal buffer. However, a pointer to the ethernet header is not correctly updated after this reallocation. This oversight leads to a...

CVE-2026-72234

A flaw was found in the Linux kernel's batman-adv module. When the pskbmaypull function is called by batadvgetvid, it can reallocate a buffer. However, a pointer to the old buffer, specifically unicastpacket, was not correctly reassigned, leading to a use-after-free condition. This memory...

CVE-2026-72233

A flaw was found in the batman-adv component of the Linux kernel. This vulnerability occurs when a buffer is reallocated, but existing pointers are not updated, leading to a use-after-free condition. A local attacker could potentially exploit this to cause a system crash denial of service or, in...

CVE-2026-72232

A flaw was found in the batman-adv component of the Linux kernel. A local user with extended Berkeley Packet Filter eBPF traffic control TC hook access could exploit this by attaching a TC filter that truncates a packet and redirects it to a batman-adv interface. The batadvinterfacetx function th...