DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-10-18
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
01
beschreibt (329)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-98868US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: reject a kset that overruns its segment
cache_replay(), the writeback worker and the GC worker read… | ||||
| CVE-2026-98867US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: bound the logical key offset from persistent memory
cache_key_decode() takes a key's logical off fr… | ||||
| CVE-2026-98866US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sched/cache: Introduce task_struct->sched_cache_grp to fix UAF
Add a sched_cache_grp pointer to task_struct so… | ||||
| CVE-2026-98865US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Don't run ops.dequeue() with a DSQ lock held
ops.dequeue() is invoked with the source user DSQ's lo… | ||||
| CVE-2026-98864US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task
ebf1ccff79c4 ("sched_ext: Fix ops.dequeue(… | ||||
| CVE-2026-98863US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
Re-pend GET_NESTED_STATE_PAGES before exi… | ||||
| CVE-2026-98862US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
audit: fix exe mark UAF in kill_rules()
kill_rules() removes mixed AUDIT_DIR and AUDIT_EXE rules when an audit… | ||||
| CVE-2026-98861US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()
unregister_fprobe() and unregister_fprobe_asy… | ||||
| CVE-2026-98860US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
As reported by Sashiko:
If a transport driver… | ||||
| CVE-2026-98859US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: stop the release timer from being rearmed on remove
mt_remove() quiesces the sticky-finger ti… | ||||
| CVE-2026-98858US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix task_work add use-after-free with SQPOLL
For SQPOLL, the sqpoll thread runs task_work off its ow… | ||||
| CVE-2026-98857US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ipvs: bound LBLCR and LBLC cache growth
ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for
every… | ||||
| CVE-2026-98856US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
kprobes: Skip disarmed probes when checking optkprobe overlap
On x86, an optkprobe at A replaces five bytes wi… | ||||
| CVE-2026-98855US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
of/overlay: put property on deadprops only after changeset add succeeds
add_changeset_property() links a new p… | ||||
| CVE-2026-98854US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
of/overlay: only treat a positive changeset id as registered
of_overlay_fdt_apply() stores the idr_alloc() ret… | ||||
| CVE-2026-98853US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: gso: limit recursive IP-in-IP segmentation
IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segme… | ||||
| CVE-2026-98852US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: extend IPv6 exthdr detection of tunneled packets
Commit c4336a07eb6b ("net: correctly handle tunneled tra… | ||||
| CVE-2026-98851US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_flow_offload: drop flowtable reference on init error path
nft_flow_offload_init() bumps the flo… | ||||
| CVE-2026-98850US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/packet: prevent TX_RING byte count overflow
tpacket_snd() drains every SEND_REQUEST frame in a TX ring and… | ||||
| CVE-2026-98849US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
pfcp: fix socket lifetime on netdevice registration failure
pfcp_newlink() creates the UDP socket before regis… | ||||
20 von 329 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Amazon Linux Security Advisory ALAS2-2026-4036 vom 2026-10-25external
- Amazon Linux Security Advisory ALAS2KERNEL-5.4-2026-134 vom 2026-10-25external
- Debian Security Advisory DLA-4850 vom 2026-10-22external
- Kernel CVE Announce Mailinglisteexternal
- Linux Kernel CVE Announcement CVE-2026-98675external
- Linux Kernel CVE Announcement CVE-2026-98676external
- Linux Kernel CVE Announcement CVE-2026-98677external
- Linux Kernel CVE Announcement CVE-2026-98678external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan