Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS scor...

PT-2026-69695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch JIT Just-In-Time compiler within the BPF Berkeley Packet Filter subsystem. ALU32 operations are expected to write a 32-bit result and leave the upper 32...

PT-2026-69497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A recursive locking deadlock occurs in the audit subsystem when duplicating executable-related rules. When a file is moved, the VFS layer locks the parent directory, which triggers an...

PT-2026-69545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the iomap subsystem when handling zero-length ranges. The functions ifs set range dirty and ifs set range uptodate calculate the last blk value using a...

PT-2026-69799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the BPF subsystem during socket cloning. The sk clone function performs a shallow copy of the sk bpf storage field via sock copy for a cloned socket...

PT-2026-69576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the mmiotrace component of the tracing subsystem. When the mmio pipe open function fails to locate a PCI device, the hiter-dev variable is assigned a...

PT-2026-69509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma7.1 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the rtl2832 sdr driver within the media subsystem. The vb2 framework provides buffers to the driver via buf queue before calling start streaming. If the rtl2832 s...

The vulnerability of the digital_in_recv_sdd_res() function in the net/nfc/digital_technology.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digitalinrecvsddres function in the net/nfc/digitaltechnology.c module of the NFC subsystem of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to influence the...

The vulnerability of the maybe_fork_scalars() function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maybeforkscalars function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

Linux Distros Unpatched Vulnerability : CVE-2026-68412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: Fix an error handling path in cfg80211wextsiwscan If the test against IEEE80211MAXSSIDLEN fails, then 'creq' leaks. Use the existing error...

Linux Distros Unpatched Vulnerability : CVE-2026-68096

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: fix recursive locking deadlock in auditdupeexe A deadlock occurs in the audit subsystem when duplicating executable-related rules. When a file is moved...

Linux Distros Unpatched Vulnerability : CVE-2026-68338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: avoid fanout hook re-registration after unregister packetsetring temporarily detaches a socket from packet delivery while reconfiguring its ring. It...

Linux Distros Unpatched Vulnerability : CVE-2026-68205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev,...

Linux Distros Unpatched Vulnerability : CVE-2026-68212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it...

RHEL 8 : kernel-rt (RHSA-2026:52761)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52761 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

Linux Distros Unpatched Vulnerability : CVE-2026-68132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen...

PT-2026-69998

Name of the Vulnerable Software and Affected Versions UpdateHub affected versions not specified Description The UpdateHub management subsystem contains a race condition in the subsys/mgmt/updatehub/updatehub.c file. The subsystem uses a single file-scope ctx structure to manage update operations,...

PT-2026-69737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the bpf redirect helpers and skb do redirect function obtain per-task bpf redirect info via bpf net ctx get ri. This process unconditionally...

Linux Distros Unpatched Vulnerability : CVE-2026-68222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: msi2500: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...