CVE-2026-68480

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data...

CVE-2026-68480

The CVE-2026-68480 entry describes a Linux kernel issue where an attacker could inject interrupts during Safe-RET mitigation execution on SRSO-enabled systems, potentially causing data leakage via speculative execution. The root cause is that the interrupt could disrupt the Safe-RET sequence; the...

[SECURITY] Fedora 44 Update: freeipa-4.13.2-1.fc44

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

[SECURITY] Fedora 44 Update: samba-4.24.5-1.fc44

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

Moderate: Red Hat Security Advisory: systemd security, bug fix, and enhancement update

An update for systemd is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT...

Important: Red Hat Security Advisory: gpsd security update

An update for gpsd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2026-64570

A flaw was found in the Linux kernel's Wi-Fi subsystem mac80211. A double-free vulnerability exists in the handling of FILS Fast Initial Link Setup Discovery frames. When an allocation failure occurs during the update of a FILS Discovery template, the same memory region can be freed twice. This c...

CVE-2026-64582

A flaw was found in the Linux kernel's RDMA/rxe component. A race condition in the rxemmap function, which manages memory for Remote Direct Memory Access RDMA operations, can lead to a use-after-free vulnerability. A local attacker could exploit this timing issue to cause a system crash, resultin...

CVE-2026-64576

A flaw was found in the Linux kernel. During nexthop resolution, an uninitialized variable is used if a memory allocation fails. This can lead to the system attempting to access uninitialized stack memory, causing a general protection fault and a kernel panic. This vulnerability results in a Deni...

CVE-2026-64573

A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the qca driver. A local attacker could exploit an integer underflow vulnerability in the NVM tag length parser by providing specially crafted firmware data. This could lead to an out-of-bounds memory write, potentiall...

CVE-2026-64577

A flaw was found in the Linux kernel's GPRS Tunnelling Protocol GTP module. This vulnerability occurs because the gtp1usendechoresp function does not properly check the return value when processing certain echo requests. A remote attacker could send a specially crafted echo request, causing the...

Malicious code in streak-cache-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c390b9379b870b37038a8ad8f52b179d2fce3aa38fc15e5d1c9dc3f0ece135 The package advertises itself as a dependency-free calendar-day bucketing / streak math library, but its main module dist/index.mjs contains a...

MAL-2026-13403 Malicious code in streak-cache-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c390b9379b870b37038a8ad8f52b179d2fce3aa38fc15e5d1c9dc3f0ece135 The package advertises itself as a dependency-free calendar-day bucketing / streak math library, but its main module dist/index.mjs contains a...

CVE-2026-64575

A flaw was found in the Linux kernel. A double release of socket resources can occur during batch reallocation in the BPF Berkeley Packet Filter TCP iterator. A local attacker could exploit this vulnerability to trigger a kernel panic. This leads to a system crash, resulting in a Denial of Servic...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

A flaw was found in the Linux kernel. A timing issue, known as a race condition, exists within the futex subsystem. This vulnerability could allow a local attacker to access memory after it has been freed, leading to a system crash denial of service or potentially the disclosure of sensitive...

CVE-2026-64572

A flaw was found in the Linux kernel's IPv4 forwarding information base FIB component. A local attacker with administrative network capabilities CAPNETADMIN could exploit a timing issue during route insertion and lookup operations. This could lead to a "use-after-free" vulnerability, where the...