CVE-2026-45876 arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in archsetshadowstackstatus allocgcs returns an error-encoded pointer on failure, which comes from dommap, not NULL. The current NULL check fails to detect errors, which could lead to using an invali...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: virtiopci: Fixed the cleanup of admin vq resources by using the correct info pointer. In vpmodernavqcleanup and vpdelvqs, the info pointer for admin vq resources is cleaned up using the virtiopcivqinfo pointer. However, the in...

EUVD-2026-28778

In the Linux kernel, the following vulnerability has been resolved: unshare: fix unsharefs handling There's an unpleasant corner case in unshare2, when we have a CLONENEWNS in flags and current-fs hadn't been shared at all; in that case copymntns gets passed current-fs instead of a private copy,...

CVE-2026-43027 netfilter: nf_conntrack_helper: pass helper to expect cleanup

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackhelper: pass helper to expect cleanup nfconntrackhelperunregister calls nfctexpectiteratedestroy to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the help...

Linux kernel HID PIDFF Buffer Overflow DoS

The vulnerability of the pidffreset function in the drivers/hid/usbhid/hid-pidff.c module of the Linux kernel’s user interface device subsystem driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote...

Linux kernel media driver Heap Buffer Overflow DoS

The vulnerability of the irtoyprobe function in the drivers/media/rc/irtoy.c module of the Linux kernel-based multimedia device driver framework is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

lib/test_firmware.c Heap Buffer Overflow DoS

The vulnerability of the testfirmwareinit function in the lib/testfirmware.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-23352

In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efifreebootservices frees memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issue with that: memblockfreelate should be used for...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel binder_alloc_set_vma binder_alloc_init Buffer Overflow DoS

The vulnerabilities of the binderallocsetvma and binderallocinit functions in the drivers/android/binderalloc.c file of the Linux kernel’s communication driver with Android cores are related to improper initialization. Exploiting these vulnerabilities can allow a remote attacker to compromise the...

device_pm_check_callbacks() function in the DoS

The vulnerability of the devicepmcheckcallbacks function in the drivers/base/power/main.c file of the Linux kernel’s bus driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-23159

In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new isusertask helper In order to do a user space stacktrace the current task needs to be a user task that has executed in user space. It use to be possible to test if a task is a user task or not...

CVE-2026-23124

CVE-2026-23124 is a Linux kernel IPv6 data-race issue in ndisc_router_discovery() where reads/writes to in6_dev->ra_mtu occur without proper synchronization. The race can occur during router advertisement MTU handling (mtu checks are noted but not yet enforced); the fix adds READ_ONCE()/WRITE_...

Linux TCM Driver Heap Buffer Overflow DoS

The vulnerability of the liotargetnaclinfoshow function in the drivers/target/iscsi/iscsitargetconfigfs.c file of the Linux kernel’s TCM driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000589 advisory. Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000895 advisory. Buffer overflow in the ozcdevwrite function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause a denial of service or...

SUSE CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001876 advisory. The roserecvmsg function in net/rose/afrose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain...

CVE-2025-71098

In the Linux kernel, the following vulnerability has been resolved: ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in ip6greheader 1. This involves team or bonding drivers ability to dynamically change their dev-neededheadroom and/or dev-hardheaderlen ...

ROS-20260112-7359

A vulnerability in the dfxregsuninit function of the drivers/crypto/hisilicon/debugfs.c driver of the Linux kernel is related to the re-release of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...