CVE-2026-97951

A flaw was found in the Linux kernel's iSCSI Internet Small Computer Systems Interface target subsystem. A remote client can trigger a Denial of Service DoS by sending remaining data packets for a write request that was aborted by a device reset command. Because the subsystem fails to signal...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1710164161)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1710164161 advisory. - A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1780662711)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780662711 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2026:1780947657)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780947657 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

CentOS Linux 8.4 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.4:CLSA-2026:1780478501)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1780478501 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

The vulnerability of the _aead_recvmsg() function in the crypto/algif_aead.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the aeadrecvmsg function in the crypto/algifaead.c module of the Linux kernel’s cryptographic subsystem is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8842-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8842-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783791447)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783791447 advisory. - In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDI...

CVE-2026-97940

A flaw was found in the Linux kernel's IPv6 routing subsystem. A race condition during route iteration termination can allow an internal routing table walker structure to remain on an active list after its associated memory is released. A local user could exploit this flaw during concurrent route...

CVE-2026-97492

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When reconfiguration of a Neighbor Awareness Networking NAN interface fails, the error path prematurely marks active interfaces as absent from the driver before completing state cleanup. This improper handling leaves wireless...

CVE-2026-97938

A flaw was found in the Linux kernel. A race condition in the reboot management subsystem allows a process identifier reference to be released while still being accessed by concurrent operations. A local attacker could exploit this use-after-free flaw to cause a Denial of Service DoS via a system...

CVE-2026-97936

A flaw was found in the Linux kernel's tracing subsystem. A local user with permissions to configure event triggers could cause a Denial of Service DoS or memory corruption by applying a stacktrace modifier to an unsupported field. Because the kernel fails to validate the field type, it performs ...

CVE-2026-97935

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to configure event triggers can trigger a use-after-free condition, leading to a system crash, Denial of Service DoS, or potential privilege escalation. This issue occurs when registering a named histogram trigger...

CVE-2026-97934

A flaw was found in the Linux kernel. An unbounded memory copy vulnerability exists in the tracing subsystem when processing event histogram keys like STACKTRACE due to improper field pointer handling. A local user with access to the kernel tracing interface can exploit this flaw by setting a...

CVE-2026-97933

A flaw was found in the Linux kernel's tracing subsystem. A race condition can occur when opening a tracer option file while the corresponding trace instance is being removed, causing the kernel to access memory that has already been released. A local user could exploit this use-after-free...

CVE-2026-97932

A flaw was found in the Linux kernel's tracing subsystem. A use-after-free vulnerability occurs when an event trigger performs deferred cleanup while a tracing instance is removed, leading to the access of already freed memory. A local user could exploit this flaw to cause memory corruption,...

CVE-2026-97483

A flaw was found in the Linux kernel. During error recovery or reset operations for USB storage devices connected to a root hub, the USB subsystem fails to respect memory allocation constraints during control transfers. A local user triggering device error recovery under memory pressure can cause...

CVE-2026-97923

A flaw was found in the Linux kernel's tracing subsystem. When initialization of a histogram variable reference fails during trace event configuration, the allocated memory is not properly released. A local user with administrative or tracing privileges can exploit this vulnerability by repeatedl...

CVE-2026-97924

A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...

CVE-2026-97922

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...