UBUNTU-CVE-2026-68453

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...

CVE-2026-64009

In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component: xfrmstatemtu returns u32 but performs its arithmetic in unsigned modulo-2^32 space using an attacker-influenced "headerlen + authsize +...

CVE-2026-64009

The CVE-2026-64009 family affects the Linux kernel xfrm subsystem, specifically an out-of-bounds write in ESP handling due to an underflow in xfrm_state_mtu(). The function computes using unsigned arithmetic: it subtracts attacker-influenced header_len + authsize + net_adj from a small mtu, allow...

EUVD-2026-27730

In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check if the error record length is big enough to handle offset. On a bad firmware, if the ofset is above the actual record, length -= offs...

CVE-2023-54021

In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4mbnormalizerequest We need to set acgex to notify the goal start used in ext4mbfindbygoal. Set acgex instead of acfex in ext4mbnormalizerequest. Besides we should assure goal start is in rang...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990007 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproccoredumpwrite Check count for 0, to avoid a potential...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987641 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproccoredumpwrite Check count for 0, to avoid a potential...