CVE-2026-68458

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

DEBIAN-CVE-2025-22110

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: Initialize ctx to avoid memory allocation error It is possible that ctx in nfqnlbuildpacketmessage could be used before it is properly initialize, which is only initialized by nfqnlgetsksecctx. This pat...

CVE-2025-22110

Summary: CVE-2025-22110 affects the Linux kernel’s netfilter nfnetlink_queue component. The root cause is use of an uninitialized context variable (ctx/lsmctx) in nfqnl_build_packet_message(), which could be used before safe initialization; the patch initializes the lsmctx to a safe value at decl...