EUVD-2026-108730

In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipsov4skbuffdelattr removes the CIPSO bytes but does not adjust cached offsets for options that follow them. For example, with a valid 10-byte CIPSO option followed by a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143048 advisory. In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access i...

CLSA-2026-1787293393 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...

CLSA-2026-1773872435 Fix of 137 CVEs

Miscellaneous Ubuntu changes - update-from-bionic-master repo has been updated Miscellaneous upstream changes - debian: add control and changeg files Ubuntu: 4.15.0-254.265 CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in...

Siemens SIMATIC S7-1500 TM MFP Detection of Error Condition Without Action (CVE-2026-23317)

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmwtranslateptr functions Before the referenced fixes these functions used a lookup function that returned a pointer. This was changed to another lookup function that returned an error code...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23315)

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76connac2macwritetxwi80211 Check frame length before accessing the mgmt fields in mt76connac2macwritetxwi80211 in order to avoid a possible oob access. fix check to also cover...

CLSA-2026-1787303413 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 5.4.0-236...

CLSA-2026-1787293144 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...

UBUNTU-CVE-2026-98599

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-negative offsets in stackslotobjgetspi bpfgetspi computes -off - 1 / BPFREGSIZE using C division, which truncates toward zero. For off == 0, this produces spi 0, the same index used by the valid stack slot at fp-8...

CLSA-2023-1683146027 kernel: Fix of 24 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131787 advisory. In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: Fixed the condition in ‘nandselecttarget’. ‘cs’ here must be within the range 0:nanddevntargets...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi – Check card index validity at probe The virmidi driver blindly trusts that the given devptr-id value is within the appropriate card index range during the probe phase. It’s fine for the devices created by the drive...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten the checks for cgroup storage cookies for prog arrays The fix contained in commit abad3d0bad72 “bpf: Fix oob access in cgroup local storage” is still incomplete. The compatibility check for prog arrays treats a progr...

Exploit for CVE-2025-12433

CVE-2025-12433 PoC - Write-up: https://jamezx32.github.i...

SUSE CVE-2026-98291

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix off-by-one bounds check in RX submit btintelpciesubmitrx used frbdindex rxq-count to guard the FRBD array access, allowing frbdindex == rxq-count to pass through and index one element past the end of t...

SUSE SLES16 Security Update : kernel (Live Patch 15 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24016-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24016-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:4540-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4540-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_92-default / etc (SUSE-SU-2026:4518-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4518-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.92 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4537-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4537-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: -...