kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down

A flaw was found in the Linux kernel's bonding driver, specifically within the Active-Backup Load Balancing ALB receive path. A local attacker can trigger a Use-After-Free UAF vulnerability in the rlbarprecv function by rapidly bringing a bond interface up and down while receiving Address...

COPY-FAIL-CVE-2026-31431

This is a public Proof-of-Concept PoC for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation vulnerability CVSS 7.8 affecting most major distributions since 2017. It corrupts the page cache of a setuid binary like /usr/bin/su using the kernel's AFALG crypto API + splice, allowi...

SUSE CVE-2026-72374

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...

SUSE CVE-2026-72375

In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular -lockwork It seems that initalising afsvnode::lockwork a single time in the slab's init function isn't sufficient for workstructs. This results in the DEBUGOBJECTS debugging...

SUSE CVE-2026-72378

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration...

The vulnerability in the function amdgpu_dm_hpd_init() of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smc: Fix use-after-free in pnetfindbasendev CVE-2025-40064 kernel: Linux kernel: Denial of Service due to memory leak in tpm2loadcmd CVE-2025-71147 kernel: bonding: alb: fix UAF in...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

The vulnerability of the `epf_ntb_init()` function in the `driver/pci/endpoint/functions/pci-epf-ntb.c` driver for Linux system devices allows a hacker to cause a service failure.

The vulnerability of the epfntbinit function in the driver/pci/endpoint/functions/pci-epf-ntb.c driver for Linux system devices related to PCI devices is associated with pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the regulator_resolve_supply() function in the drivers/regulator/core.c file of the Linux kernel’s voltage and current regulator driver module allows a hacker to cause a service failure.

The vulnerability of the regulatorresolvesupply function in the drivers/regulator/core.c file of the Linux kernel’s voltage and current regulators driver module is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pppol2tp_recv() function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pppol2tprecv function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel is related to the use of memory after it is freed, as a result of a pointer being dereferenced that has reached its expiration time. Exploiting this vulnerability could allow an attacker ...

The vulnerability in the net_openvswitch/flow_netlink.c module of the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the netopenvswitch/flownetlink.c module in the Linux operating system is related to errors in processing parameter length settings. Exploiting this vulnerability can allow an attacker to increase their privileges...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-105549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105549 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response...

Linux Distros Unpatched Vulnerability : CVE-2026-78409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That...

USN-8661-4 linux-aws-5.15, linux-gcp-5.15 vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8715-1: Linux kernel (Oracle) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8715-1 linux-oracle-5.4 vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...