Most recent entries from all

ALSA-2026:27288 — Important: kernel security, bug fix, and enhancement update

2026-10-02T16:07:30.726412+00:00

Affected: AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

* AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2…

bdu:2026-12724

2026-10-02T16:07:30.726593+00:00

bdu:2026-12724

BELL-CVE-2026-43330

2026-10-02T16:07:30.726614+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

certfr-2026-avi-0697 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at…

2026-10-02T16:07:30.726636+00:00

certfr-2026-avi-0697

EUVD-2026-347893

2026-10-02T16:07:30.726652+00:00

EUVD-2026-347893

fkie_cve-2026-43330

2026-10-02T16:07:30.726664+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - fix overflow on long hmac keys

When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory.

The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.

GHSA-7669-mcjm-pwg9

2026-10-02T16:07:30.726692+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - fix overflow on long hmac keys

openSUSE-SU-2026:21555-1 — Security update for the Linux Kernel

2026-10-02T16:07:30.726711+00:00

Security update for the Linux Kernel

RHSA-2026:39371 — Red Hat Security Advisory: kernel security update

2026-10-02T16:07:30.727251+00:00

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup kernel: eventpoll: defer struct eventpoll free to RCU grace period kernel: crypto: caam - fix overflow on long hmac keys kernel: scsi: qla2xxx: Completely fix fcport double free kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete kernel: nvmet-tcp: fix race between ICReq handling and queue teardown kernel: exit: prevent preemption of oopsing TASK_DEAD task kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

RLSA-2026:27288 — Important: kernel security, bug fix, and enhancement update

2026-10-02T16:07:30.727319+00:00

Affected: Rocky Linux:10: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

* kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

* kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641)

* kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

* kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)

* kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)

* kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

* kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)

* kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)

* kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

* kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

* kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

* kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

* kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

* kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

* Rocky Linux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [rhel-10.2.z] (JIRA:Rocky Linux-166047…

SUSE-SU-2026:21876-1 — Security update for the Linux Kernel

2026-10-02T16:07:30.727370+00:00

Security update for the Linux Kernel

UBUNTU-CVE-2026-43330

2026-10-02T16:07:30.727480+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 141 more

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory. The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.

WID-SEC-W-2026-1454 — Linux Kernel: Mehrere Schwachstellen

2026-10-02T16:07:30.727649+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.