CVE-2026-68435

A flaw was found in the Linux kernel, specifically within the LoongArch architecture's kexec command line lookup functionality. A local attacker could exploit this by using the kexecload system call, which incorrectly passes a user-space segment buffer to a kernel function without proper...

DEBIAN-CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

AZL-88770 CVE-2026-45958 affecting package kernel for versions less than 6.6.139.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user space, so instead o...