kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

RLSA-2026:90492 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote co...

SUSE-SU-2026:4932-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

SUSE-SU-2026:4929-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote co...

CVE-2026-99168

A flaw was found in the Linux kernel's Microsoft Hyper-V Virtual Trust Level mshvvtl driver. When setting up per-processor register pages, an allocation failure on one CPU leaves its page pointer uninitialized while a global flag is set by another CPU. A local user can exploit this issue by...

CVE-2026-99015

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can exploit this flaw to cause a Denial of Service DoS by crashing the system. Due to missing lock synchronization when rebinding a Host Controller Interface HCI socket after a controller is unregistered, a race conditio...

CVE-2026-99093

A flaw was found in the Linux kernel. A privileged user capable of modifying boot parameters can cause a Denial of Service DoS by enabling early boot function tracing. Under this configuration, the kernel attempts to schedule deferred page table memory cleanup before necessary internal work...

CVE-2026-99199

A flaw was found in the Linux kernel's HiSilicon hip04 Ethernet driver. A local attacker can cause a Denial of Service DoS by triggering device probing under specific network shaping configurations. Due to an improper initialization order, the driver accesses internal network device operations...

CVE-2026-99041

A flaw was found in the Linux kernel. A local user can trigger a null-pointer dereference in the IPv6 Encapsulated Remote Switch Port Analyzer ERSPAN networking module by redirecting traffic with attached tunnel metadata to an ERSPAN device. This flaw leads to a kernel panic, resulting in a syste...

CVE-2026-99008

A flaw was found in the Linux kernel's Bluetooth subsystem. When an RFCOMM Radio Frequency Communication terminal device fails to register properly during initialization, closing the device triggers a null pointer dereference in the shutdown handler. A local attacker could exploit this...

CVE-2026-99209

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could exploit this vulnerability to cause a Denial of Service DoS via a kernel crash. The issue occurs when evicting a graphics buffer object that lacks an assigned memory resource, causing the driver to dereference a NUL...

CVE-2026-99197

A flaw was found in the Linux kernel's Marvell mv643xx Ethernet driver. This flaw can result in a Denial of Service DoS by causing the system to crash during device initialization. The issue occurs because the driver attempts to attach the physical network interface before assigning its internal...

CVE-2026-99175

A flaw was found in the Linux kernel. A race condition in the filesystem notification fsnotify subsystem allows mark additions to occur during connector teardown. A local unprivileged user can exploit this race by modifying inotify watches while reading file descriptor information, triggering a...

CVE-2026-99198

A flaw was found in the Linux kernel's Actions Semi Owl Ethernet driver. When initializing or probing the network device with network traffic shaping enabled, the driver attempts to access network device operations before they are assigned. A local user capable of attaching or probing the device...

CVE-2026-99200

A flaw was found in the Linux kernel's HiSilicon Fast Ethernet MAC hisifemac network driver. This flaw can result in a Denial of Service DoS due to a system crash during device probing. When initializing the network interface, the driver attempts to access network device operations before they ar...

CVE-2026-99179

A flaw was found in the Linux kernel's watch queue subsystem, which can lead to a Denial of Service DoS. A race condition exists between queue resizing and notification delivery due to improper memory access ordering. A local, unprivileged user could exploit this flaw by concurrently resizing a...