EUVD-2026-53266

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...

CVE-2026-64561

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

UBUNTU-CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

EUVD-2026-52602

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-64561

CVE-2026-64561 is a Linux kernel vulnerability in KVM/x86 shadow MMU where, after reclaiming shadow MMU pages, an invalid/obsolete root could be created and then mapped. If a stale root is zapped and a child shadow page inherits that role, new child pages can be created as invalid, violating KVM’...

CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

Flattening of vulnerability handling in SQLite through the SQLite Consortium

The SQLite Consortium has identified a vulnerability in SQLite version 3.41. This vulnerability relates to the expression evaluation logic of SQLite. An attacker can exploit this vulnerability remotely by submitting specially crafted malicious SQL statements. Exploitation may result in the...

RLSA-2026:49211 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: isofs: validate Rock Ridge CE continuation extent against volume size CVE-2026-46303 kernel:...

kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

CVE-2026-64416

A flaw was found in the Linux kernel's memory management subsystem, specifically within the swap cgroup functionality. When a system is configured without swap, a corrupted page table entry PTE can lead to a null pointer dereference during process exit. This vulnerability allows a local attacker ...

CVE-2026-64282

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. A race condition between the kvmtranslatevncr function and an MMU Memory Management Unit notifier can lead to a Page Frame Number PFN leak. This occurs because an early return in kvmtranslatevncr fail...

CVE-2026-64419

A flaw was found in the Linux kernel. A local user could trigger a system crash by reading a specific debugfs "count" file related to memory management. This issue arises because a function attempts to perform an operation that can cause it to pause sleep while holding a critical system lock, whi...

CVE-2026-64295

A flaw was found in the Linux kernel's memory management mm component, specifically within the pageext iteration application programming interface API. When memory is dynamically added to the system a process known as 'hotplugging', the API does not properly validate memory page frame numbers PFN...

kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

CVE-2026-64415

A flaw was found in the Linux kernel's memory management mm/swap component. Under heavy memory and swap stress, a local attacker could trigger a softlockup during large swap cluster reclaim operations. This vulnerability can lead to a Denial of Service DoS, making the system unresponsive...

CVE-2026-64514

A flaw was found in the Linux kernel's userfaultfd mechanism. This vulnerability occurs when the userfaultfdmustwait and userfaultfdhugemustwait functions incorrectly read Page Table Entries PTEs without proper locking during memory operations. This can lead to an undefined state if a page is bei...

CVE-2026-64294

A flaw was found in the Linux kernel's memory management subsystem. This vulnerability arises from incorrect handling of file ownership checks within idmapped mounts, a feature that allows remapping user and group IDs. When certain memory operations are performed on files in an idmapped mount, th...