AZL-93665 CVE-2026-64433 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not hcidevlock. It calls hciconnparamslookup and then dereferences the...

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

ROS-20260702-73-0009

The vulnerability of the ksmbdtreeconnlookup function in the fs/ksmbd/mgmt/treeconnect.c module of the SMB-server subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-53255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, neuvector-scanner-fips, packer, kgateway, gitlab-rails-ce-fips, neuvector-fips, syft-fips, datadog-agent-fips, crossplane, kubescape-operator-fips, linkerd2, kargo, cluster-api-helm-controller, k8sgpt, envoy-gateway-fips, xeol,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, neuvector-scanner-fips, packer, kgateway, gitlab-rails-ce-fips, neuvector-fips, syft-fips, datadog-agent-fips, crossplane, kubescape-operator-fips, linkerd2, kargo, cluster-api-helm-controller, k8sgpt, envoy-gateway-fips, xeol,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, neuvector-scanner-fips, packer, kgateway, gitlab-rails-ce-fips, neuvector-fips, syft-fips, datadog-agent-fips, crossplane, kubescape-operator-fips, linkerd2, kargo, cluster-api-helm-controller, k8sgpt, envoy-gateway-fips, xeol,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, neuvector-scanner-fips, packer, kgateway, gitlab-rails-ce-fips, neuvector-fips, syft-fips, datadog-agent-fips, crossplane, kubescape-operator-fips, linkerd2, kargo, cluster-api-helm-controller, k8sgpt, envoy-gateway-fips, xeol,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, neuvector-scanner-fips, packer, kgateway, gitlab-rails-ce-fips, neuvector-fips, syft-fips, datadog-agent-fips, crossplane, kubescape-operator-fips, linkerd2, kargo, cluster-api-helm-controller, k8sgpt, envoy-gateway-fips, xeol,...

RockyLinux 9 : kernel (RLSA-2026:21556)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21556 advisory. kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setti...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the crash that occurs when the vpvdpa device is unplugged suddenly. When the vpvdpa device is unplugged, it triggers a kernel panic. The root cause is that vdpamgmtdevunregister will access modern devices, leadin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fixed a dangling pointer in mgmtaddadvpatternsmonitorcomplete. This fix addresses the issue where, when status != -ECANCELED, mgmtpendingvalid was executed; otherwise, mgmtpendingfreecmd would free the memory, bu...

AZL-89670 CVE-2026-43059 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Commit 302a1f674c00 "Bluetooth: MGMT: Fix possible UAFs" introduced mgmtpendingvalid, which not only validates the pending command but also unlinks it from...

kernel: Bluetooth: MGMT: Fix possible UAFs

A flaw was found in the Linux kernel’s Bluetooth management subsystem net/bluetooth/mgmt.c. The mgmtpending structure may be freed while still being processed, or remain on the pending command list, which allows a use-after-free or double-free scenario. An attacker with local access to the system...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511 Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

RHEL 9 : kernel-rt (RHSA-2026:9512)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9512 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:1132-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1132-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: -...