Oracle Linux 10 : kernel (ELSA-2026-38492)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38492 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

CVE-2026-72339

A flaw was found in the Linux kernel's qede component, which handles network device operations. Under specific memory pressure conditions, an error in how network buffer descriptors BDs are managed can lead to an off-by-one issue. This desynchronizes the BD ring, potentially corrupting memory and...

CVE-2026-72338

A flaw was found in the Linux kernel's net/sched: actpedit component. A Time-of-check to time-of-use TOCTOU race condition exists when sizing and filling a flowrule buffer. This vulnerability allows a local attacker with CAPNETADMIN capabilities to perform a heap out-of-bounds write with controll...

CVE-2026-72337

A flaw was found in the Linux kernel's Bluetooth 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks component. This vulnerability occurs due to a race condition during the module's exit process, where a scheduled task attempts to access memory that has already been released. A local...

CVE-2026-72336

A flaw was found in the Linux kernel's Bluetooth 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks component. A race condition exists where an L2CAP Logical Link Control and Adaptation Protocol connection is accessed after its protection is dropped, allowing it to be deallocated...

CVE-2026-72335

A flaw was found in the Linux kernel's Bluetooth Management MGMT component. A use-after-free vulnerability exists in the advertisement monitor add failure cleanup process. This occurs because an advertisement monitor object is prematurely freed while a subsequent management routine attempts to...

CVE-2026-72334

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream handling. A remote attacker, by sending specially crafted malformed Bluetooth ISO packets, could trigger a kernel panic, leading to a denial of service. Additionally, this vulnerability could result in a memory leak within th...

CVE-2026-72333

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol implementation. A remote attacker, by continuously streaming data to a host, can trigger an identifier ident leak. This occurs because identifiers for certain commands, such as L2CAPLECREDITS, are...

CVE-2026-72330

A flaw was found in the Linux kernel's TLS Transport Layer Security implementation. A remote attacker could send specially crafted zero-length TLS application data records. This could cause the system to repeatedly process these empty records, blocking all subsequent legitimate data on the...

CVE-2026-72329

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

CVE-2026-72328

A flaw was found in the Linux kernel's accel/amdxdna component. A race condition exists where the aie2populaterange function can attempt to use an amdxdnaumap object that is simultaneously being released. This concurrent access may lead to a use-after-free vulnerability, which could result in...

CVE-2026-72325

A flaw was found in the Linux kernel's performance monitoring unit PMU for AMD processors. When Secure Virtual Machine SVM is toggled on a CPU with active Last Branch Record LBR events, the system incorrectly attempts to enable Branch Sampling BRS on hardware that does not support it. This...

CVE-2026-72324

A flaw was found in the Linux kernel's Marvell EBU mvebu General Purpose Input/Output GPIO driver. The driver fails to properly free allocated generic chip data when an interrupt domain is removed during the unbind process. This oversight can lead to a resource leak, which may impact system...

CVE-2026-72322

A flaw was found in the Linux kernel's IPv6 multicast mcast component. A race condition exists during the teardown of a network device and the processing of incoming Multicast Listener Discovery MLD queries. This can lead to a Use-After-Free UAF vulnerability, where memory is accessed after it ha...

CVE-2026-70921

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfas4vv4m2c 2026-08-18 22:23:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaxqzrld2b 2026-08-19 17:51:55+00:00| seen|...

CVE-2026-72317

A flaw was found in the Linux kernel's SUN Remote Procedure Call SUNRPC implementation. A use-after-free vulnerability exists in the Transport Layer Security TLS connection path. When a TLS handshake fails, the client resource can be prematurely freed, leading to a subsequent attempt to access th...

CVE-2026-72312

A flaw was found in the Linux kernel's octeontx2-af driver. A Virtual Function VF, which is a virtualized network interface, can inadvertently disable the promiscuous and all-multicast allmulti modes of the Physical Function PF network interface. This occurs because the underlying application...

CVE-2026-72311

A flaw was found in the Linux kernel's drm/xe driver. A local user could trigger a memory leak by repeatedly making ioctl calls that fail the L2 flush validation. This improper memory management can lead to a Denial of Service DoS due to resource exhaustion...

CVE-2026-72304

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Sound Open Firmware SOF ipc4-control component of the Linux kernel. This Time-of-check to time-of-use TOCTOU vulnerability occurs in the sofipc4bytesput function, where the copy size is incorrectly derived from old...

CVE-2026-72323

A flaw was found in the Linux kernel. A race condition exists between network device teardown and Internet Group Management Protocol IGMP query processing. This can lead to a Use-After-Free UAF vulnerability in the igmpgqstarttimer function, which could allow an attacker to trigger a kernel panic...