Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_49871)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202649871 advisory. kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 kernel: procfs: avoid fetching build ID whil...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2025_21232)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521232 advisory. runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 runc: container escape with malicious config due to /dev/consol...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_1068)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251068 advisory. kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.2:CLSA-2025:1764692266)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764692266 advisory. - runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an...

DEBIAN-CVE-2026-97503

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

AZL-103544 CVE-2026-97503 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

CVE-2026-97503

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

UBUNTU-CVE-2026-97503

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

DEBIAN-CVE-2026-93206

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

AZL-103940 CVE-2026-93206 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-93206

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

UBUNTU-CVE-2026-93206

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

CVE-2026-97503

The Linux kernel contains a vulnerability where the /proc/irq// directory names are built using a char name[10] buffer with sprintf(name, "%u", irq). Because sparse-IRQ configurations allow interrupt numbers in the ten-digit range, these numbers require 11 bytes including the trailing NUL, leadin...

EUVD-2026-86101

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

Linux Distros Unpatched Vulnerability : CVE-2026-97503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, %u, ir...

CVE-2026-97503: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq/ / directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the...

CVE-2026-93206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...