AZL-104235 CVE-2026-97905 affecting package kernel for versions less than 6.6.158.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

CVE-2022-48764

The Linux kernel 's KVM virtualization subsystem is vulnerable to a memory leak in the x86 architecture. The issue stems from the kvm_set_cpuid() function in arch/x86/kvm/cpuid.c , which fails to free the struct kvm_cpuid_entry2 array upon successful completion of a post-KVM_RUN KVM_SET_CPUID{,2}...