Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from improper handling of SVE features within the VM scope when vCPU initialization fails. As a result, subsequent vCPUs skip SVE settings and use an empty svestate value. This could lead to a null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.6 contains a security vulnerability. This vulnerability arises from the mtkethsoc driver, which allocates a dummy netdev after registering the MAC netdev and adds shared NAPIs. This results in a null pointer derefrence when network devices become visible prematurely,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from passing NULL as a register address during register registration for the divided clock. The Common Clock Framework calls clkdividerrecalcrate, which dereferences that address via readl. As a result, the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.16.8 to 6.17 contain security vulnerabilities. These vulnerabilities arise when user integrity metadata is combined with direct I/O polling. In this scenario, IOCBHASMETADATA reserves iocb-private as uiometa, while iocbbioiopoll treats it as bio. This leads to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from the fact that the datcondsetstoragekey function in KVM s390 does not check the NULL oldkey passed by the caller. As a result, when the pagecondsetstoragekey function is called, a null pointer dereferenci...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.1 contains a security vulnerability. This vulnerability stems from the fact that in the file drivers/net/dsa/mt7530-mdio.c, the function mt7530remove unconditionally disables regulator. However, the core and io power pointers for MT7531 and MT7621 remain NULL. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.10.266 to 5.11, 5.15.217 to 5.16, and 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition between the tbremovework and tbdomainremove functions in the Thunderbolt driver. The tbfreeunpluggedxdomains function is called without checking...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

SUSE-SU-2026:24323-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

cups: Fix of 2 CVEs

CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...

CLSA-2026-1791920953 cups: Fix of 2 CVEs

CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...

CLSA-2026-1791875496 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset when NAT shrinks the packet CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters CVE-2026-100075 In...

Linux Distros Unpatched Vulnerability : CVE-2026-57486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue,...

Linux Distros Unpatched Vulnerability : CVE-2026-95122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4687-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4687-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: -...