Release date:
2026-10-18 05:29:02 UTC
Description:
- KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
- x86/efi: defer freeing of boot services memory {CVE-2026-23352}
- RDMA/irdma: Cap MSIX used to online CPUs + 1 {CVE-2023-53811}
- i2c: smbus: fix NULL function pointer dereference {CVE-2024-35984}
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs {CVE-2024-50048}
- net: hsr: avoid potential out-of-bound access in fill_frame_info() {CVE-2024-56648}
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() {CVE-2024-56539}
- sched/core: Prevent rescheduling when interrupts are disabled {CVE-2024-58090}
- net: bcmgenet: Use stronger register read/writes to assure ordering {CVE-2022-49194}
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n {CVE-2026-23439}
- xsk: Fix race condition in AF_XDP generic RX path {CVE-2025-37920}
- idpf: check error for register_netdev() on init {CVE-2025-22116}
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. {CVE-2025-23143}
- can: isotp: sanitize CAN ID checks in isotp_bind() {CVE-2022-49269}
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
- net/smc: Reset connection when trying to use SMCRv2 fails. {CVE-2023-53382}
- Revert "ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211}"
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
