CVE-2026-23385

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set on flush only Syzbot with fault injection triggered a failing memory allocation with GFPKERNEL which results in a WARN splat: iter.err WARNING: net/netfilter/nftablesapi.c:845 at...

PT-2026-27750

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf tables: clone set on flush only Syzbot with fault injection triggered a failing memory allocation with GFP KERNEL which results in a WARN splat: iter.err WARNING: net/netfilter/nf tables api.c:845 at nft map...

CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged...