SUSE CVE-2026-72385

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

CVE-2026-47844

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-47844 Reactor Netty HTTP Server Leaks Exception Details

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

EUVD-2026-66679

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-47844 Reactor Netty HTTP Server Leaks Exception Details

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-47844

Reactor Netty HTTP Server may leak exception details across unrelated requests when the server is configured with Brave Tracing . Affected versions are 1.3.0–1.3.6 , 1.1.0–1.2.18 , and 1.0.52 and earlier . The CVSS 3.1 score is 5.3 (Medium) , with low integrity impact and no confidentiality or av...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098890 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily...

PT-2026-82248

Name of the Vulnerable Software and Affected Versions Reactor Netty versions 1.3.0 through 1.3.6 Reactor Netty versions 1.1.0 through 1.2.18 Reactor Netty versions 1.0.52 and earlier Description The Reactor Netty HTTP Server may leak exception details across unrelated requests. This issue occurs...

The vulnerability of the bpf_kprobe_multi_link_attach() function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to trigger a system failure.

The vulnerability of the bpfkprobemultilinkattach function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-47844: Undefined Security Weakness

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-74633

A flaw was found in the Linux kernel's tracing module. A local user can trigger a NULL pointer dereference by attempting to remove a specific event filter for an unloaded module. This vulnerability arises when a module-only event filter is cached with a null match, and a subsequent write operatio...

The vulnerabilities of the functions etm_event_start() (drivers/hwtracing/coresight/coresight-etm-perf.c) and tmc_etr_get_buffer() (drivers/hwtracing/coresight/coresight-tmc-etr.c) in the Linux operating system’s hardware tracing driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions etmeventstart drivers/hwtracing/coresight/coresight-etm-perf.c and tmcetrgetbuffer drivers/hwtracing/coresight/coresight-tmc-etr.c in the Linux kernel’s hardware tracing driver are related to improper compliance with the specifications of the calling side...

The vulnerability in the kernel/trace/traceeventshist.c module, which supports Linux operating system kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to errors in calculating buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of the functions rb_free_cpu_buffer() and ring_buffer_free() in the kernel/trace/ring_buffer.c module, which support Linux operating system’s kernel tracing functionality, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions rbfreecpubuffer and ringbufferfree in the kernel/trace/ringbuffer.c module, which supports Linux operating system debugging, stems from the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a...

The vulnerability of the trigger_data_free() function in the kernel/trace/traceeventstrigger.c module, which supports Linux operating system tracing, allows a hacker to cause a service failure.

The vulnerability of the triggerdatafree function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74636

A flaw was found in the Linux kernel. A race condition exists between the updateeventfields and eventdefinefields functions within the tracing subsystem. A local user, by loading specific modules, could exploit this unprotected access to kernel fields. This could lead to a kernel panic, resulting...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fixed a leak in the traceremoteallocbuffer error path. If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not incremented for the current CPU. As a result, upon an error, the half-allocated rbdesc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: tracing/fprobe: Fixed a NULL pointer dereference in fprobefgraphentry. The fprobefgraphentry function sizes a shadow-stack reservation during one iteration of the per-ip fprobe list, and fills it during another iteration—both...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: It was determined that processstring also allows arrays. To address a common bug where TRACEEVENT’s TPfastassign assigns the address of an allocated string to the ring buffer and then references it in TPPrintk, which can...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Ensure that traceeventfile has a ref counter. The following actions can cause the kernel to crash: cd /sys/kernel/tracing echo 'p:sched schedule' kprobeevents exec 5events/kprobes/sched/enable kprobeevents exec 5&- Th...