CVE-2026-99133

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...

CVE-2026-99133 net/iucv: fix the recvmsg window update

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...

CVE-2026-99133

The Linux kernel contains a vulnerability in the net/iucv component related to how iucv_sock_recvmsg() handles the AF_IUCV_FLAG_WIN flag. On classic z/VM sockets, the function fails to test the transport, causing iucv_send_ctrl() to size the skb through a NULL iucv->hs_dev. This allows an unpr...

EUVD-2026-111885

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...

PT-2026-128126

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucv sock recvmsg sends the HiperSockets-only AF IUCV FLAG WIN without testing the transport, so on a classic z/VM socket iucv send ctrl sizes the skb through a NULL iucv-hs dev. SO MSGLIMI...