Most recent entries from all

ALSA-2026:77690 — Important: kernel security, bug fix, and enhancement update

Affected: AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) * kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)

Bug Fix(es) and Enhancement(s):…

BELL-CVE-2026-64035

Affected: Alpaquita:stream: linux-lts

certfr-2026-avi-0926 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a…

certfr-2026-avi-0926

fkie_cve-2026-64035

In the Linux kernel, the following vulnerability has been resolved:

igc: set tx buffer type for SMD frames

Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp

Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path.

Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.

GHSA-85cw-fhvw-f94j

In the Linux kernel, the following vulnerability has been resolved:

igc: set tx buffer type for SMD frames

Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path.

Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.

RHSA-2026:77689 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: ipvlan: Make the addrs_lock be per port kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use kernel: vsock/virtio: fix zerocopy completion for multi-skb sends kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup kernel: vsock/virtio: bind uarg before filling zerocopy skb kernel: igc: set tx buffer type for SMD frames kernel: vsock/vmci: fix UAF when peer resets connection during handshake kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev kernel: svcrdma: Reject inline replies that overflow the pull-up buffer kernel: nfsd: revoke copy-notify stateids before dropping their reference kernel: nfsd: initialize copy-notify stateid before publishing it kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF

RLSA-2026:77689 — Important: kernel security, bug fix, and enhancement update

Affected: Rocky Linux:9: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)

* kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)

* kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)

* kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)

* kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)

* kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)

* kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)

* kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)

* kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)

* kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)

* kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)

* kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)

* kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)

* kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)

Bug Fix(es) and Enhancement(s):

* "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on rhel-9.7 [rhel-9.8.z] (JIRA:Rocky Linux-169480)

* [GNR-D] missing interfaces…

UBUNTU-CVE-2026-64035

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 118 more

In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path. Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.

WID-SEC-W-2026-2403 — Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen oder vertrauliche Informationen offenzulegen.