CVE-2026-64350

A flaw was found in the Linux kernel's USB cdnsp driver. The cdnspallocstreaminfo function allocates a stream context array but fails to free it if subsequent allocations or updates fail. This memory leak could lead to a denial of service due to resource exhaustion...

CVE-2026-64512

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI Collaborative Processor Performance Control CPPC module. A field misuse related to register access width can lead to a "shift-out-of-bounds" error. This undefined behavior could potentially cause system...

CVE-2026-64398

A flaw was found in the Linux kernel's ksmbd component. An authenticated Server Message Block SMB client with only FILEWRITEATTRIBUTES permission can bypass a security check in the FSCTLSETZERODATA function. This allows the client to zero out file data, leading to data destruction and a denial of...

CVE-2026-64321

A flaw was found in the NVMe over RDMA nvmetrdma target in the Linux kernel. When a host queue backlog is exceeded during a connection attempt, a reference count kref is not properly released. This oversight can lead to a resource exhaustion vulnerability, potentially allowing a remote attacker t...

CVE-2026-64397

A flaw was found in the Linux kernel's ksmbd kernel Server Message Block daemon component. Concurrent directory query requests using the same file handle can lead to a stack use-after-free vulnerability. This occurs because smb2querydir stores a pointer to stack-allocated data that can be...

CVE-2026-64261

A flaw was found in the Linux kernel's fuse-uring component. This use-after-free vulnerability allows a local attacker to potentially achieve privilege escalation. The issue arises when the fuseuringasyncstopqueues function attempts to access memory that has already been freed, leading to...

CVE-2026-64351

A flaw was found in the Linux kernel's USB Kalmia driver. An attacker with a specially crafted USB device could exploit an out-of-bounds read vulnerability in the kalmiarxfixup function. This occurs due to an incorrect calculation of the USB packet length when processing short bulk-IN frames,...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

CVE-2026-64276

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

CVE-2026-64485

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA compress module. The sndcomprtasknew function, responsible for creating driver tasks, does not properly handle errors during the validation of Direct Memory Access DMA buffers or file descriptor reservation. This...

CVE-2026-64395

A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows an attacker with attribute access to a file to bypass security checks when duplicating file extents. By using the FSCTLDUPLICATEEXTENTSTOFILE function, an attacker can copy the contents of a source file to a...

CVE-2026-64530

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-64490

A flaw was found in the Linux kernel's ALSA virtio sound driver. A malicious or buggy virtio device can provide invalid control metadata, such as an unknown control type or an oversized value count. The driver's control handling trusts this unvalidated metadata, leading to out-of-bounds access wh...

PT-2026-65144

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-65131

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A race condition occurs due to insufficient locking mechanisms. A race condition is a situation where the system's...

PT-2026-65235

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description Improved memory handling addresses a flaw where a remote user could cause unexpected system termination or corrupt kern...

PT-2026-64855

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Open vSwitch stores generated flow actions as nlattrs, which use a nla len field of type u16. A previous change allowed the total sw flow actions stream to exceed 64 KiB but removed the...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2004)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2004 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

Siemens SIMATIC S7-1500 CPU 1518 MFP Divide By Zero (CVE-2025-39681)

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrlcpudetect in bspinit helper Since 923f3a2b48bd x86/resctrl: Query LLC monitoring properties once during boot resctrlcpudetect has been moved from common CPU initialization code to the...