CVE-2026-80684: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

PT-2026-82965

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm translate vncr can't resolve PFN kvm handle vncr abort assumes that s1 walk result conveys an abort when kvm translate vncr returns -EFAULT. This is not always the case as it's possible to...

PT-2026-82999

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

The vulnerability of the vcpu_block() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vcpublock function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability could allow an attacker to cause a service...

K000163110: Linux kernel CVE-2026-63806

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUGON in ioeventfd datamatch with getunaligned Drop a BUGON that has been reachable since it was first added, way back in 2009, and instead use getunaligned to perform...

SUSE-SU-2026:3809-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2026-23204: net: add skbheaderpointercareful helper bsc1258340. - CVE-2026-52986: netfilter:...

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments

Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

SUSE CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104616 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098882 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad KVM: x86:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098768 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098759 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098888 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104563 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgicpruneaplist drops bot...

MiracleLinux 9 : kernel-5.14.0-687.24.1.el9_8 (AXSA:2026-1649:67)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1649:67 advisory. kernel: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange CVE-2025-71066 kernel: KVM: x86: Fix shadow paging...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098883 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUGON in ioeventfd datamatch with getunaligned Drop a BUGON that h...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098942 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for...

ROS-20260826-73-0001

The vulnerability of the rmapremove function in the KVM virtualization subsystem of the Linux operating system is related to the use of memory after it is freed, as a result of a pointer being dereferenced that has reached its expiration time. Exploiting this vulnerability can allow an attacker t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098682 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvmarchvcpucreate fails to share the vCPU...

CVE-2026-64562

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested virtualization nVMX feature. This vulnerability occurs because the shadow Virtual Machine Control Structure VMCS is freed prematurely while still being referenced. Due to asynchronous operations, a virtual CPU vCPU mig...