Unbreakable Enterprise kernel security update

6.12.0-206.104.4.4 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035125 CVE-2026-80844 - RDMA/nldev: Fix locking when accessing mr-pd Jason Gunthorpe Orabug: 400289...

Linux Kernel xsk_skb_metadata Buffer Overflow

The vulnerability of the xskskbmetadata function in the net/xdp/xsk.c module, which implements kernel networking functions in the Linux operating system, is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise t...

CVE-2026-53250 xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()

In the Linux kernel, the following vulnerability has been resolved: xsk: cache csumstart/csumoffset to fix TOCTOU in xskskbmetadata The TX metadata area resides in the UMEM buffer which is memory-mapped and concurrently writable by userspace. In xskskbmetadata, csumstart and csumoffset are read...

CVE-2026-53250: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: xsk: cache csumstart/csumoffset to fix TOCTOU in xskskbmetadata The TX metadata area resides in the UMEM buffer which is memory-mapped and concurrently writable by userspace. In xskskbmetadata, csumstart and csumoffset are read...