Skip to content
OpenAdvisories
High WID-SEC-2026-0774 10 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Mar 17, 2026 · Updated Nov 12, 2026 · Revision 58 · de

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: Google Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Siemens Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Container-Optimized OS Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openSUSE Product: QRadar SIEM Product: Rocky Linux Product: Security Verify Access Product: SIMATIC S7 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 10

  • High 8.8
    CVE-2026-23246

    wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration link_id is taken from the ML Reconfiguration element (control & 0x000f), so it can be 0..15. link_removal_timeout[] has IE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23243

    RDMA/umad: Reject negative data_len in ib_umad_write

    In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP heade…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23245

    net/sched: act_gate: snapshot parameters with RCU on replace

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list. Convert the parameters to an…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23248

    perf/core: Fix refcount bug and potential UAF in perf_mmap

    In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perf_mmap Syzkaller reported a refcount_t: addition on 0; use-after-free warning in perf_mmap. The issue is caused by a race condition between…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2026-23242

    RDMA/siw: Fix potential NULL pointer dereference in header processing

    In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(), qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71265

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A ma…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71266

    fs: ntfs3: check return value of indx_find to avoid infinite loop

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed dent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-71267

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

    In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed NTFS im…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23244

    nvme: fix memory allocation in nvme_pr_read_keys()

    In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23247

    tcp: secure_seq: add back ports to TS offset

    In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This reverts 28ee1b746f49 ("secure_seq: downgrade to per-host timestamp offsets") tcp_tw_recycle went away in 2017. Zhouyan Deng reported off-path…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #58

    Neue Updates von Ubuntu aufgenommen

  2. #57

    Neue Updates von IBM aufgenommen

  3. #56

    Neue Updates von Ubuntu aufgenommen

  4. #55

    Neue Updates von Oracle Linux aufgenommen

  5. #54

    Neue Updates von Dell aufgenommen

  6. #53

    Neue Updates von Ubuntu aufgenommen

  7. #52

    Neue Updates von Ubuntu aufgenommen

  8. #51

    Neue Updates von IBM aufgenommen

  9. #50

    Neue Updates von Ubuntu aufgenommen

  10. #49

    Neue Updates von Ubuntu aufgenommen

  11. #48

    Neue Updates von SUSE aufgenommen

  12. #47

    Neue Updates von Ubuntu aufgenommen

  13. #46

    Neue Updates von openSUSE aufgenommen

  14. #45

    Neue Updates von Ubuntu aufgenommen

  15. #44

    Neue Updates von Ubuntu aufgenommen

  16. #43

    Neue Updates von Red Hat aufgenommen

  17. #42

    Neue Updates von Siemens aufgenommen

  18. #41

    Neue Updates von Ubuntu aufgenommen

  19. #40

    Neue Updates von Ubuntu aufgenommen

  20. #39

    Neue Updates von Oracle Linux aufgenommen

  21. #38

    Neue Updates von Ubuntu aufgenommen

  22. #37

    Neue Updates von Ubuntu aufgenommen

  23. #36

    Neue Updates von Ubuntu aufgenommen

  24. #35

    Neue Updates von Oracle Linux aufgenommen

  25. #34

    Neue Updates von Oracle Linux aufgenommen

References