DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen
view advisory published 2026-06-23
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Angriff auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (31)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-52942US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_log: validate MAC header was set before dumping it
The fallback path of dump_mac_header() guards… | ||||
| CVE-2026-52941US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
The smc_msg_event tracepoint class, shared… | ||||
| CVE-2026-52940US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tun: zero the whole vnet header in tun_put_user()
tun_put_user() declares an on-stack struct virtio_net_hdr_v1… | ||||
| CVE-2026-52939US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
rds_ib_xmit_atomic() always p… | ||||
| CVE-2026-52938US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
bpf_selem_unlink_nofail() sets SDATA(… | ||||
| CVE-2026-52937US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
In the SIOCGIFHWADDR path, tap_ioctl() copies 16 bytes o… | ||||
| CVE-2026-52936US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: jitterentropy - replace long-held spinlock with mutex
jent_kcapi_random() serializes the shared jitter… | ||||
| CVE-2026-52935US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: espintcp: do not reuse an in-progress partial send
espintcp keeps a single in-flight transmit in ctx->pa… | ||||
| CVE-2026-52934US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tvlv: reject oversized TVLV packets
batadv_tvlv_container_ogm_append() builds a TVLV packet sectio… | ||||
| CVE-2026-52933US | —OT elevated | — | ||
In the Linux kernel, the following vulnerability has been resolved:
io_uring/poll: fix signed comparison in io_poll_get_ownership()
io_poll_get_ownership() uses a signed comparis… | ||||
| CVE-2026-52932US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: ipcomp: Free destination pages on acomp errors
Move the out_free_req label up by a couple of lines so th… | ||||
| CVE-2026-52931US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tp_meter: avoid use of uninit sender vars
batadv_tp_recv_ack() and batadv_tp_stop() are only valid… | ||||
| CVE-2026-52930US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ipc/shm: serialize orphan cleanup with shm_nattch updates
shm_destroy_orphaned() walks the shm idr under shm_i… | ||||
| CVE-2026-52929US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sctp: stream: fully roll back denied add-stream state
When ADD_OUT_STREAMS is denied, SCTP only shrinks the qu… | ||||
| CVE-2026-52928US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Reject SIOCATMARK on non-stream sockets
SIOCATMARK reports whether the receive queue is at the urgent… | ||||
| CVE-2026-52927US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: fix OOB read in compat_mtw_from_user
Luxiao Xu says:
The function compat_mtw_from_user(… | ||||
| CVE-2026-52926US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: clear current gateway during teardown
batadv_gw_node_free() removes the gateway list entries durin… | ||||
| CVE-2026-52925US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
vrf: Fix a potential NPD when removing a port from a VRF
RCU readers that identified a net device as a VRF por… | ||||
| CVE-2026-52924US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
sctp: purge outqueue on stale COOKIE-ECHO handling
sctp_stream_update() is only invoked when the association i… | ||||
| CVE-2026-52923US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
ipc: limit next_id allocation to the valid ID range
The checkpoint/restore sysctl path can request the next Sy… | ||||
showing 20 of 31
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-49857 vom 2026-08-06external
- Oracle Linux Security Advisory ELSA-2026-53330 vom 2026-08-12external
- Oracle Linux Security Advisory ELSA-2026-88477 vom 2026-10-27external
- Red Hat Security Advisory RHSA-2026:48386 vom 2026-07-30external
- Red Hat Security Advisory RHSA-2026:49031 vom 2026-07-31external
- Red Hat Security Advisory RHSA-2026:49212 vom 2026-08-01external
- Red Hat Security Advisory RHSA-2026:49851 vom 2026-08-04external
- Red Hat Security Advisory RHSA-2026:49857 vom 2026-08-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan