CVE-2026-64487 ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser sndusbcaiaqtks4dispatch decodes the Traktor Kontrol S4 input stream in fixed 16-byte TKS4MSGBLOCKSIZE message blocks. On every iteration it advances buf a...

CVE-2026-64422

CVE-2026-64422 describes a Linux kernel vulnerability in net/ipv4: bound TCP reordering sysctl writes and MTU probe sizes. The issue arises when negative values written to net.ipv4.tcp_reordering are copied into the u32 tp->reordering field for new sockets, allowing wraparound and potential mi...

CVE-2026-64361

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in checkandcorrectrequestedlength checkandcorrectrequestedlength compares off + len against nodesize using u32 arithmetic. When the caller passes a large len value e.g. from an underflowed subtractio...

CVE-2026-64357 xfs: fix exchmaps reservation limit check

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...

CVE-2026-64357

CVE-2026-64357 affects the Linux kernel XFS code: xfs_exchmaps_estimate_overhead() incorrectly allowed a reservation value to bypass the UINT_MAX check due to adding overhead to a local resblks, which then feeds xfs_trans_alloc() as an unsigned int. A fix ensures the reservation value tested agai...

EUVD-2026-48995

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

CVE-2026-64283 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

CVE-2026-64283

The CVE-2026-64283 issue affects the Linux kernel KVM guest_memfd binding: binding a memslot to a guest_memfd could overflow when computing offset+size due to signed interpretation. The bug arises because offset and size were not treated as unsigned values, risking a negative sum that could bypas...

CVE-2026-64283

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

CVE-2026-64283 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

EUVD-2026-48753

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

Linux Distros Unpatched Vulnerability : CVE-2026-64283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values ...

Linux Distros Unpatched Vulnerability : CVE-2026-66337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart...

Linux Distros Unpatched Vulnerability : CVE-2026-64357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check...

PT-2026-64504

In the Linux kernel, the following vulnerability has been resolved: KVM: guest memfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guest memfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negativ...

CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

DEBIAN-CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

UBUNTU-CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

CVE-2026-66337

Summary: Libsoup contains a flaw where an unsigned integer underflow in soup_filter_input_stream_read_until() leads to a heap buffer over-read while parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client a...