CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...

PT-2026-70127

Name of the Vulnerable Software and Affected Versions Dub versions prior to 2026-07-10 Description An unauthenticated remote attacker can induce the server to issue HTTP requests to arbitrary internal or external hosts. This occurs via the 'metatags edge' endpoint, which fetches any caller-suppli...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-qemu-melange...

CVE-2026-68414

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68412

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211wextsiwscan If the test against IEEE80211MAXSSIDLEN fails, then 'creq' leaks. Use the existing error handling path to fix it...

CVE-2026-68414

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68126

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

DEBIAN-CVE-2026-68126

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

EUVD-2026-55600

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68414

CVE-2026-68414 affects the Linux kernel cfg80211 Wi‑Fi subsystem. When unregistering a wiphy, a queued or running cfg80211_sched_scan_results_wk can reference freed rdev state because sched_scan_res_wk is not drained during unregister. This allows a use-after-free scenario as the worker crosses t...

CVE-2026-68414 wifi: cfg80211: cancel sched scan results work on unregister

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68414 wifi: cfg80211: cancel sched scan results work on unregister

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68412

The CVE-2026-68412 affects the Linux kernel’s wireless subsystem, specifically the cfg80211_wext_siwscan() error path. If the IEEE80211_MAX_SSID_LEN test fails, the request (creq) could leak due to improper error handling. The fix uses the existing error handling path to prevent the leak. No expl...

EUVD-2026-55507

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

CVE-2026-68126 mac802154: hold an interface reference across the scan worker

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

CVE-2026-68126

The CVE-2026-68126 vulnerability affects the Linux kernel mac802154 path by dereferencing the scanned sub-interface (sdata->dev) after the RCU read unlock and after the rtnl is dropped, leading to a use-after-free when DEL_INTERFACE or PHY removal unregisters the interface. The root cause is t...

CVE-2026-68126 mac802154: hold an interface reference across the scan worker

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: The delay module was unloaded while the fabric scan was in progress. This led to a system crash during the load/unload test. 105954.384919 RBP: ffff914589838dc0 R08: 0000000000000000 R09: 0000000000000086...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-multipath: fixed the lockdep warning due to the partition scan operation. The test cases nvme/014, 057, and 058 occasionally fail due to the lockdep warning. As reported in the Closes tag URL, this warning indicates that ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries than are present in the FIFO. The interrupt handler reads FIFO entries in batches of N samples, where N is the number of scan elements that have been enabled. However, the sensor...