CVE-2026-68296 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

Linux Distros Unpatched Vulnerability : CVE-2026-68202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-70638

CVE-2026-70638 affects the llama.cpp project, specifically the LLaMA-Android JNI wrapper. Versions b1886–b7445 are vulnerable due to an integer overflow in new_1batch(), which multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max without overflow validation, causing the heap allocat...

CVE-2026-64479

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer. This vulnerability allows an unprivileged local user to trigger a heap information leak in the sndseqeventdup function. By reading from /dev/snd/seq, an attacker can obtain 4 bytes of uninitialized kernel hea...

Linux Distros Unpatched Vulnerability : CVE-2026-64251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the...

EUVD-2026-48823

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

SUSE CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-64251 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-59144

Data::RingBuffer::Shared prior to v0.04 for Perl has a stack-buffer overflow: ring_read_seq copies elem_size bytes into an 8-byte destination without capping elem_size, allowing a file-writable header to cause overflow and stack corruption. The attach-time header validation does not cap elem_size...

CVE-2026-64074

In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmountmntidmap statmountmntidmap writes one mapping with seqprintf and then manually advances seq-count to include the NUL separator. If seqprintf overflows, seqsetoverflow sets...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fixed a mismatch in the function prototype in sndseqexpandvarevent. With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Do not access current-memsallowedseq if !allowspin Lockdep reports a problem when the getfromanypartial function is called in an NMI context, because current-memsallowedseq is of type seqcountspinlockt, which is not...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

Astra Linux – Vulnerability in Linux

The fs/seqfile.c file in the Linux kernel versions 3.16 through 5.13.x, prior to 5.13.4, does not properly restrict seq buffer allocations. This results in an integer overflow, an Out-of-bounds Write, and an escalation of privileges to the root user by an unprivileged user, identified as...

SUSE CVE-2026-43285

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current-memsallowedseq if !allowspin Lockdep complains when getfromanypartial is called in an NMI context, because current-memsallowedseq is seqcountspinlockt and not NMI-safe:...

EUVD-2026-28555

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current-memsallowedseq if !allowspin Lockdep complains when getfromanypartial is called in an NMI context, because current-memsallowedseq is seqcountspinlockt and not NMI-safe:...

CVE-2026-43285

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current-memsallowedseq if !allowspin Lockdep complains when getfromanypartial is called in an NMI context, because current-memsallowedseq is seqcountspinlockt and not NMI-safe:...

UBUNTU-CVE-2026-43285

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current-memsallowedseq if !allowspin Lockdep complains when getfromanypartial is called in an NMI context, because current-memsallowedseq is seqcountspinlockt and not NMI-safe:...