CVE-2026-10669

On Xtensa SoCs built with CONFIGXTENSAMPU and CONFIGUSERSPACE, archbuffervalidate in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-supplied buffer is accessible to the calling user thread with the requested permission — defaulted its return value to 0 access permitted a...

SUSE SLES15 Security Update : kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:1271-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1271-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: -...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: CVE-2025-39973: i40e: add validation for ringlen param bsc1252036. CVE-2025-40018: ipvs: Defer ipvsftp unregister during netns cleanup bsc1252689...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xsk: Enhanced the validation of xdpdesc provided by the user space. It was discovered that certain clearly invalid values passed in xdpdesc from the user space can successfully pass the xp,unalignedvalidatedesc function, leading ...

CVE-2025-40159

CVE-2025-40159 applies to the Linux kernel’s XSK/XDP path. The issue arises from accepting clearly invalid userspace-provided xdp_desc values, allowing validation to pass under certain overflow conditions. Root cause: desc->len can reach values near U32_MAX, and desc->addr (u64) can interac...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ublk: It is necessary to sanitize the arguments from userspace when adding a device. The Sanity function checks the values for queue depth and the number of queues that we obtain from userspace when adding a device...

CVE-2025-38090

The CVE-2025-38090 issue affects the Linux kernel module drivers/rapidio/rio_cm.c, specifically riocm_cdev_ioctl path through cm_chan_msg_send() to riocm_ch_send(). The root cause is that riocm_ch_send() did not verify that the entire rio_ch_chan_hdr was copied from userspace, letting writes occu...