CVE-2026-64543

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. A use-after-free vulnerability exists in the tipcdiscrcv function, where the discoverer object can be prematurely freed while still being referenced. An unprivileged local user can exploit this flaw by...

CVE-2026-64545

A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...

CVE-2026-64553

A flaw was found in the Linux kernel's packet sampling psample network module. This vulnerability, specifically within the PSAMPLEATTRDATA attribute handling, occurs because the nlaput function does not properly clear padding bytes. When the data length is not a multiple of four bytes,...

CVE-2026-64552

A flaw was found in the Linux kernel's virtio-net component. A malicious virtio backend can exploit an insufficient length check in the receivebig function, leading to an out-of-bounds write. This vulnerability can result in a denial of service DoS due to system instability or crashes...

CVE-2026-64547

A flaw was found in the Linux kernel's net1080 USB network adapter driver. A malicious NetChip 1080 device could send a specially crafted network frame with an invalid packet length. This could lead to an out-of-bounds read when processing the packet, causing a system crash and resulting in a...

CVE-2026-64555

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architecture, specifically affecting nested virtualization. The kvmhyphandlemops function, responsible for handling certain virtualization operations, incorrectly restored the SPSREL2 register. This occurred because...

CVE-2026-64540

A flaw was found in the Linux kernel's GeneLink GL620A USB network driver. A malicious GeneLink device can send specially crafted Universal Serial Bus USB packets that cause an out-of-bounds read vulnerability. This can lead to the disclosure of sensitive kernel memory, potentially revealing...

CVE-2026-64551

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. This vulnerability allows a remote attacker or a local unprivileged user to potentially access and disclose sensitive information. By sending a malformed error message, the system can be tricked into reading and the...

CVE-2026-64542

A flaw was found in the Linux kernel's IPv6 Neighbor Discovery NDISC component. An unprivileged user, operating within a network namespace, can trigger a null pointer dereference in the acceptuntrackedna function. This occurs due to a race condition where the inet6dev structure is re-fetched...

CVE-2026-64546

A flaw was found in the Linux kernel. A specially crafted Extended Display Identification Data EDID, which describes display capabilities, can cause a heap out-of-bounds read in the drmparsetiledblock function within the drm/edid component. This vulnerability could lead to system instability or t...

PT-2026-65849

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY VERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

PT-2026-65848

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey pckmo handler implementation Explicitly check the length of the target buffer in the pkey pckmo implementation of the key to protkey handler function. The handler function fails, if the generated...

Linux Distros Unpatched Vulnerability : CVE-2026-64556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the...

PT-2026-65734

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove on exec perf event remove on exec removes events by calling perf event exit event. For top-level events, this removes the event from the context with DETACH EXIT only. This can leave...

The vulnerability of the ipv4 component in the Linux operating system’s kernel allows attackers to increase their privileges and cause service interruptions.

The vulnerability of the ipv4 component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

PT-2026-65857

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.41 Linux kernel versions prior to 6.12.100 Linux kernel versions prior to 6.6.147 Linux kernel versions prior to 6.1.180 Linux kernel versions prior to 5.15.213 Linux kernel versions prior to 5.10.262...

Linux Distros Unpatched Vulnerability : CVE-2026-64557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: Fix use-after-free in l2capsocknewconnectioncb l2capsocknewconnectioncb returned l2cappisk-chan after releasesockparent. Once the parent lock ...

PT-2026-65735

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap sock new connection cb l2cap sock new connection cb returned l2cap pisk-chan after release sockparent. Once the parent lock is dropped the newly enqueued child socket sk is reachable...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...