CVE-2026-97417

The Linux kernel contains a vulnerability in the netfilter: nf_conntrack component. Specifically, the tcp_sack() function's timestamp-only fast path incorrectly dereferences the option stream as *(__be32 *)ptr, which assumes a 4-byte alignment that the TCP option stream does not guarantee. This c...

CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: use getunalignedbe32 in tcpsack The timestamp-only fast path dereferences the option stream as be32 ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use getunalignedbe32...

SUSE CVE-2026-72244

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

CVE-2026-80682

A flaw was found in the Linux kernel's RISC-V memory management component. An incorrect calculation for memory alignment during system initialization could lead to a kernel warning. This issue arises when the physical memory base address is not properly aligned, potentially causing system...

CVE-2026-72244

A flaw was found in the Linux kernel's gpu/buddy subsystem. The tryharder memory allocation fallback mechanism could return a memory range whose starting offset did not match the required minimum block size. This incorrect memory alignment could lead to improper memory handling within the kernel,...

Linux Distros Unpatched Vulnerability : CVE-2026-72244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the...

CVE-2026-72244

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

CVE-2026-72169

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

CVE-2026-72244

CVE-2026-72244 concerns the Linux kernel gpu/buddy allocator. The bug in try_harder contiguous fallback could return a range whose start offset didn’t match the caller’s min_block_size. The fix realigns misaligned candidates by freeing the misaligned run and reallocating exactly @size at the next...

CVE-2026-72244 gpu/buddy: bail out of try_harder when alignment cannot be honoured

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

CVE-2026-72169 kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

PT-2026-72357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kho component where scratch sizes specified via the command line are not rounded up to CMA MIN ALIGNMENT BYTES. While this rounding occurs when using scratch scale...

PT-2026-72432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gpu/buddy allocator where the try harder contiguous fallback may return a memory range with a start offset that does not align with the caller's min block size. Th...

CVE-2026-72169: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

SUSE CVE-2026-64516

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access...

CVE-2026-64516 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access...

CVE-2026-64516 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access...

PT-2026-64737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/vce1 component where the VCPU BO Buffer Object size did not account for the offset of the actual firmware. This discrepancy could lead to out-of-bounds...

CVE-2026-64039

A flaw was found in the Linux kernel's display snapshotting component. The system's snapshotting code incorrectly handles memory alignment for display data, leading to a significant memory overallocation. This vulnerability could allow a local attacker to cause a denial of service DoS by consumin...

SUSE CVE-2026-53206

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory...