CVE-2026-47497

NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor GSP tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789986443)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789986443 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding...

SUSE CVE-2026-97920

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

SUSE CVE-2026-97921

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist trigger whose value or variable carries a modifier that is not allowed there leaks the fields that were built for it. createvalfield takes the field fro...

SUSE CVE-2026-97923

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the var ref when its initialization fails createvarref allocates a VARREF histfield and then calls initvarref to fill it in. When that fails the field is leaked. commit 656fe2ba85e8 "tracing: Use hist...

SUSE CVE-2026-97933

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element on the tracearray's topts array. This element has information to find...

SUSE CVE-2026-97936

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from the histogram stacktrace modifier parsefield sets HISTFIELDFLSTACKTRACE from the ".stacktrace" modifier before it looks the field name up, and nothing afterwards checks that the name resolved t...

CVE-2026-97936

A flaw was found in the Linux kernel's tracing subsystem. A local user with permissions to configure event triggers could cause a Denial of Service DoS or memory corruption by applying a stacktrace modifier to an unsupported field. Because the kernel fails to validate the field type, it performs ...

CVE-2026-97934

A flaw was found in the Linux kernel. An unbounded memory copy vulnerability exists in the tracing subsystem when processing event histogram keys like STACKTRACE due to improper field pointer handling. A local user with access to the kernel tracing interface can exploit this flaw by setting a...

CVE-2026-97933

A flaw was found in the Linux kernel's tracing subsystem. A race condition can occur when opening a tracer option file while the corresponding trace instance is being removed, causing the kernel to access memory that has already been released. A local user could exploit this use-after-free...

CVE-2026-97923

A flaw was found in the Linux kernel's tracing subsystem. When initialization of a histogram variable reference fails during trace event configuration, the allocated memory is not properly released. A local user with administrative or tracing privileges can exploit this vulnerability by repeatedl...

CVE-2026-97924

A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...

CVE-2026-97922

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...

CVE-2026-97921

A flaw was found in the Linux kernel's tracing subsystem. When configuring event histogram triggers, specifying an unpermitted modifier for a value or variable fails to release previously allocated memory on error. A local user with tracing access can exploit this flaw by repeatedly submitting...

CVE-2026-97920

A flaw was found in the Linux kernel. A local user could trigger this vulnerability by reading an event tracing histogram file when a memory allocation failure occurs. Because an error code overwrites the entry counter during cleanup, the system treats the error as an extremely large positive...

CVE-2026-97919

A flaw was found in the Linux kernel's tracing subsystem. When creating a named histogram trigger, the kernel registers the trigger before completing its setup. If initialization fails, the object is freed without being removed from the global tracking list. A local attacker can exploit this flaw...

CVE-2026-97918

A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...

CVE-2026-98057

A flaw was found in the Linux kernel's tracing ring buffer. The persistent ring buffer validation logic fails to verify that the recorded sub-buffer count matches the expected page count in the metadata. A local attacker capable of manipulating persistent memory metadata could exploit this issue ...

SUSE CVE-2026-97918

In the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registration when enabling the histogram trigger fails Commit 6f86bdeab633 "tracing: Fix bad hist from corrupting namedtriggers list" described how a trigger that is registered but not on file-triggers ends up...