UBUNTU-CVE-2026-72168

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

MINI-8R67-FP44-C6FM

Bulletin has no description...

CVE-2026-72236

CVE-2026-72236 concerns the Linux kernel: on s390 architecture, in the perf_cpum_cf path, __hw_perf_event_init() was missing an array_index_nospec() barrier. The ev variable, controlled by userspace via event->attr.config, could be used as an array index after bounds checks without speculative...

CVE-2026-72168

In the Linux kernel vulnerability CVE-2026-72168, the issue lies in the mtd: maps: vmu-flash path where memcard structs could access uninitialized data due to the use of kmalloc_obj()/kmalloc_objs(). The fix changes memory allocation to kzalloc_obj()/kzalloc_objs(), mitigating the fault seen duri...

CVE-2026-72168 mtd: maps: vmu-flash: fix fault in unaligned fixup

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

PT-2026-72356

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc obj / kzalloc objs to allocate the memcard structs, instead of kmalloc obj / kmalloc objs to prevent access to uninitialized data. Fixes runtime error: Fault in...

MINI-JW3W-JM8H-RPP9

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't...

The vulnerability of the fs/orangefs component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-68089

A flaw was found in the Linux kernel's Industrial I/O iio core debugfs component. When the ppos value is non-zero during a call to simplewritetobuffer, the start of the buffer buf may not be properly initialized. This uninitialized data can lead to unpredictable behavior or potential information...

CVE-2026-68089

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...

UBUNTU-CVE-2026-68089

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...

CVE-2026-68380

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mmstruct in job scheduler amdxdnacmdsubmit stores current-mm in job-mm without holding any reference. aie2schedjobrun later access job-mm from the DRM scheduler worker thread. With only a raw...

CVE-2026-68178

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open miscopen installs a misc driver's file operations with fopsget, which pins fileoperations::owner before replacing the file's fop. The NSM misc device leaves nsmdevfops.owner unse...

CVE-2026-68139

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions and replays multiport affiliation events. In the reported failure, the first relevant device error was: pcieport...

CVE-2026-68089

The CVE-2026-68089 entry concerns the Linux kernel iio core debugfs handling. It documents a vulnerability where uninitialized data could be exposed when *ppos is non-zero, because simple_write_to_buffer() would not initialize buf[]. The fix adds a test for non-zero *ppos at the start of the affe...

EUVD-2026-55270

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...

CVE-2026-68089 iio: core: fix uninitialized data in debugfs

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...

CVE-2026-64264

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. An error handling vulnerability in the fuseuringcommit function allows a positive error code to overwrite a critical negative error, causing FUSE operations to be incorrectly reported as successful. This can lead to FU...

PT-2026-64581

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs bnode read hfs bnode read can return early without writing to the output buffer when is bnode offset valid fails or when check and correct requested length corrects the length to zero...