Security update for the Linux Kernel
Security update for the Linux Kernel
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-23269US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: validate DFA start states are in bounds in unpack_pdb
Start states are read from untrusted data and… | ||||
| CVE-2026-23268US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix unprivileged local user can do privileged policy management
An unprivileged local user can load,… | ||||
| CVE-2026-23209US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix error recovery in macvlan_common_newlink()
valis provided a nice repro to crash the kernel:
ip l… | ||||
| CVE-2026-23204US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: use skb_header_pointer_careful()
skb_header_pointer() does not fully validate negative @of… | ||||
| CVE-2026-23191US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ALSA: aloop: Fix racy access at PCM trigger
The PCM trigger callback of aloop driver tries to check the PCM st… | ||||
| CVE-2026-23089US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
When snd_usb_create_mixer() fails, snd_usb_mixer_f… | ||||
| CVE-2026-23074US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/sched: Enforce that teql can only be used as root qdisc
Design intent of teql is that it is only supposed… | ||||
| CVE-2026-23060US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
authencesn assumes an ESP/ESN-for… | ||||
| CVE-2026-23054US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: hv_netvsc: reject RSS hash key programming without RX indirection table
RSS configuration requires a vali… | ||||
| CVE-2026-23004US | medium4.7 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
syzbot was able to crash the kernel in rt… | ||||
| CVE-2025-71066US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
zdi-disclosures@trend… | ||||
| CVE-2025-40242US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix unlikely race in gdlm_put_lock
In gdlm_put_lock(), there is a small window of time in which the
DFL_… | ||||
| CVE-2025-21738US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-sff: Ensure that we cannot write outside the allocated buffer
reveliofuzzing reported that a SCSI_… | ||||
references
External citations — patches, advisories, analysis.
- SUSE Bug 1238917self
- SUSE Bug 1255075self
- SUSE Bug 1256645self
- SUSE Bug 1257231self
- SUSE Bug 1257473self
- SUSE Bug 1257732self
- SUSE Bug 1257735self
- SUSE Bug 1257749self
remediations (39)
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-devel-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-rt-0:5.14.21-150500.13.124.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkernel-source-rt-0:5.14.21-150500.13.124.1.noarch as component of SUSE Linux Enterprise Micro 5.5
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan