Most recent entries from all

ALSA-2026:50978 — Important: kernel security, bug fix, and enhancement update

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)

Bug Fix(es) and Enhancement(s):

* Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:AlmaLinux-191844) * gfs2: xfstests generic/363 failure [almalinux-8.10.z] (JIRA:AlmaLinux-214099) * AlmaLinux8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [AlmaLinux 8.10Z] (JIRA:AlmaLinux-188270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-07516

certfr-2026-avi-0579 — Une vulnérabilité a été découverte dans Xen. Elle permet à un attaquant de provoquer une élévation de privilèges.

certfr-2026-avi-0579

EUVD-2026-366100

fkie_cve-2025-54518

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

GHSA-wrmr-crjv-w33g

jvndb-2026-024104

CVE-2025-54518 | AMD: CVE-2025-54518 CPU OP Cache Corruption CVE-2026-21530 | Windows Rich Text Edit Elevation of Privilege Vulnerability CVE-2026-32161 | Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability CVE-2026-32170 | Windows Rich Text Edit Elevation of Privilege Vulnerability CVE-2026-32177 | .NET Elevation of Privilege Vulnerability CVE-2026-32209 | Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability CVE-2026-33834 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-33835 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2026-33837 | Windows TCP/IP Local Elevation of Privilege Vulnerability CVE-2026-33838 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability CVE-2026-33839 | Win32k Elevation of Privilege Vulnerability CVE-2026-33841 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-34329 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVE-2026-34330 | Win32k Elevation of Privilege Vulnerability CVE-2026-34331 | Win32k Elevation of Privilege Vulnerability CVE-2026-34333 | Windows Win32k Elevation of Privilege Vulnerability CVE-2026-34334 | Windows TCP/IP Elevation of Privilege Vulnerability CVE-2026-34336 | Windows DWM Core Library Information Disclosure Vulnerability CVE-2026-34337 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2026-34338 | Windows Telephony Service E…

NCSC-2026-0158 — Kwetsbaarheid verholpen in AMD processors

NCSC-2026-0158

openSUSE-SU-2026:10800-1 — xen-4.21.1_06-1.1 on GA media

xen-4.21.1_06-1.1 on GA media

RHSA-2026:50979 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

RLSA-2026:50978 — Important: kernel security, bug fix, and enhancement update

Affected: Rocky Linux:8: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)

Bug Fix(es) and Enhancement(s):

* Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:Rocky Linux-191844)

* gfs2: xfstests generic/363 failure [rhel-8.10.z] (JIRA:Rocky Linux-214099)

* Rocky Linux8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [Rocky Linux 8.10Z] (JIRA:Rocky Linux-188270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:1899-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

UBUNTU-CVE-2025-54518

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 260 more

WID-SEC-W-2026-1482 — AMD Prozessor: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen – sogar mit Administratorrechten –, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.