CVE-2026-68415

CVE-2026-68415 affects the Linux kernel xfrm subsystem, specifically when IPTFS mode setup fails. The root cause is that xfrm_state_gc_task can run long after a failed IPTFS state setup because x->mode_cbs remains cached in __xfrm_init_state() and is not cleared when mode initialization or clo...

EUVD-2026-55601

In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...

EUVD-2026-42053

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...