CVE-2026-64439

CVE-2026-64439: In the Linux kernel, the krb5 AEAD path could free a buffer while an async AEAD worker still held a pointer, causing a use-after-free (KASAN). The fix filters out async AEAD implementations at allocation time in krb5_aead_encrypt()/krb5_aead_decrypt() and corresponding rfc3961_sim...

CVE-2026-64429

CVE-2026-64429 affects the Spreadtrum EIC GPIO IRQ controller driver in the Linux kernel. The root cause is that sprd_eic_irq_unmask() calls sprd_eic_update(), which acquires a lock via spin_lock_irqsave(). On PREEMPT_RT kernels, a regular spinlock_t becomes a sleeping lock, but the code path is ...

CVE-2026-64426 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE

In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...

CVE-2026-64426 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE

In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...

CVE-2026-64426

A file reference leak in the Linux kernel's io_uring/nop component occurs when a NOP request is submitted with IOSQE_FIXED_FILE set but without IORING_NOP_FIXED_FILE . The io_nop() handler takes the normal file-acquisition path and grabs a real file reference via io_file_get_normal() , but on com...

EUVD-2026-48770

In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...

CVE-2026-64409 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdiotxrxwork Every once in a while we see a hung btmtksdioflush task: INFO: task kworker/u17:0:189 blocked for more than 122 seconds. cancelworktimer+0x3f4/0x460...

EUVD-2026-48936

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or durable handle teardown, where no request work is available. Both the base-file unlink and the ADS xattr removal consequently run...

CVE-2026-64374 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

CVE-2026-64374

CVE-2026-64374 concerns the Linux kernel’s RT scheduling path. The vulnerability stems from making RT_PUSH_IPI default off for non-PREEMPT_RT configurations, which could affect RT migration when high-priority RT tasks are scheduled across CPUs. The mechanism normally pulls RT tasks between CPUs u...

EUVD-2026-48918

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

CVE-2026-64374

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit

C...

GHSA-3R53-75J5-3G7J

creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...

SUSE CVE-2026-64223

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211tidtolinkmapsizeok validates negotiated TTLM elements against the number of link-map entries indicated by linkmappresence. ieee80211parsenegttlm must consume the...

PT-2026-64649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the GPIO SCH controller where the sch irq unmask function enables the GPIO IRQ and updates the controller state via sch irq mask unmask. This process utilizes sch-lock...

Linux Distros Unpatched Vulnerability : CVE-2026-64374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priori...

Linux Distros Unpatched Vulnerability : CVE-2026-42955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found ...

PT-2026-64595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the real-time RT task migration logic where the RT PUSH IPI mechanism, designed to reduce latency for PREEMPT RT, can cause a live lock on systems where PREEMPT RT is...

CVE-2026-15425: Improper Neutralization of Input During Web Page Generation

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...