CVE-2026-23436

The CVE-2026-23436 issue affects the Linux kernel's net: shaper component. A race could occur when a netdev is unregistered between taking a reference during Netlink prep and locking/RCU in the callback, potentially leaking the hierarchy after a flush. The fix applies the instance lock in pre- st...

CVE-2026-23436 net: shaper: protect from late creation of hierarchy

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops pre- callbacks and take a ref to it. Then later in the body of the callback we take its lock or RCU which are the actual...

ROS-20260403-73-0013

A vulnerability in the netlink component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

PT-2026-30131

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops pre- callbacks and take a ref to it. Then later in the body of the callback we take its lock or RCU which are the actual...

PT-2026-30132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw where late read accesses to the network device hierarchy were not properly protected. A missing liveness check during the conversion from a reference to...

UBUNTU-CVE-2026-23412

In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when concurrent process is dumping hooks via nfnetlinkhooks: BUG: KASAN: slab-use-after-free in nfnlhookdumpone.isra.0+0xe71/0x10f0 Read...

PT-2026-36452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak occurs in the Linux kernel when building netlink messages. The tc chain fill node function fails to initialize the tcm info field of the struct tcmsg structure. Becau...

nfnetlink_osf: validate individual option lengths in fingerprints

...

EUVD-2026-15351

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

CVE-2026-23368

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

PT-2026-36457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists when processing Router Advertisements with user options. The kernel constructs an 'RTM NEWNDUSEROPT' netlink message using the nduseroptmsg struct, which...

[SECURITY] [DLA 4504-1] libvirt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4504-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 20, 2026 https://wiki.debian.org/LTS -...

mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()

...

The vulnerability of the genl_bind() function in the net/netlink/genetlink.c module, which is part of the NETLINK interface support for Linux kernel monitoring, allows a malicious actor to cause a service failure.

The vulnerability of the genlbind function in the net/netlink/genetlink.c module, which is part of the NETLINK interface support for Linux kernel monitoring, is related to incorrect handling of permissions. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLED15 / SLES15 Security Update : smc-tools (SUSE-SU-2026:0765-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0765-1 advisory. Update to version 1.8.7 jscPED-14601. Security issues fixed: - VUL-1: smc-tools: predictable /tmp file allows for local...

NewStart CGSL MAIN 6.06 (SP) : libnl3 Vulnerability (NS-SA-2026-0018)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libnl3 packages installed that are affected by a vulnerability: - An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005491 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may crash when deleting a genetlink family if ther...

SUSE CVE-2026-23184

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in bindernetlinkreport Oneway transactions sent to frozen targets via binderproctransaction return a BRTRANSACTIONPENDINGFROZEN error but they are still treated as successful since the target is expected to thaw a...

SUSE CVE-2026-23203

In the Linux kernel, the following vulnerability has been resolved: net: cpswnew: Execute ndosetrxmode callback in a work queue Commit 1767bb2d47b7 "ipv6: mcast: Don't hold RTNL for IPV6ADDMEMBERSHIP and MCASTJOINGROUP." removed the RTNL lock for IPV6ADDMEMBERSHIP and MCASTJOINGROUP operations...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition ('Infinite Loop') (CVE-2025-38727)

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlinkunicast netlinkattachskb checks for the socket's read memory allocation constraints. Firstly, it has: rmem skrcvbuf to check if the just increased rmem value fits into the socket's...