Skip to content
OpenAdvisories
High WID-SEC-2026-1531 14 CVEs

Linux Kernel: Mehrere Schwachstellen

Published May 14, 2026 · Updated Nov 12, 2026 · Revision 25 · de

Vendor: Debian Vendor: Google Vendor: Oracle Vendor: SUSE Vendor: Ubuntu Product: Container-Optimized OS Product: Linux Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 14

  • High 7.8
    CVE-2026-43476

    iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

    In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-43481

    net-shapers: don't free reply skb after genlmsg_reply()

    In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_reply() genlmsg_reply() hands the reply skb to netlink, and netlink_unicast() consumes it on all return paths, whether the skb is queued succes…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43477

    drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Apparently ICL may hang with an MCE if we write TRANS_VRR_VMAX/FLIPLINE before enabling TRANS_DDI_FUNC_CTL. Personally I …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43478

    ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put

    In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put The correct helper to use in rt1011_recv_spk_mode_put() to retrieve the DAPM context is snd_soc_component_to_dapm()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43479

    net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

    In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant netif_napi_del() call from disconnect path. A WARN may be triggered in __netif_napi_del_locked() during U…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43480

    ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition

    In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition The acp3x_5682_init() function did not check the return value of clk_get(), which could lead to dereferencing er…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43482

    sched_ext: Disable preemption between scx_claim_exit() and kicking helper work

    In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exit() and kicking helper work scx_claim_exit() atomically sets exit_kind, which prevents scx_error() from triggering further error handling. A…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43483

    KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated

    In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Explicitly set/clear CR8 write interception when AVIC is (de)activated to fix a bug where KVM leaves the interception ena…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43484

    mmc: core: Avoid bitfield RMW for claim/retune flags

    In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts. The host->cla…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43485

    nouveau/gsp: drop WARN_ON in ACPI probes

    In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WARN_ONs seem to trigger a lot, and we don't seem to have a plan to fix them, so just drop them, as they are most likely harmless.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43486

    arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults

    In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults contpte_ptep_set_access_flags() compared the gathered ptep_get() value against the requested entry to detect no-ops. pte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43487

    ata: libata-core: Disable LPM on ST1000DM010-2EP102

    In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP102 has problems with LPM, causing random system freezes. The drive belongs to the same Barr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43488

    usb: xhci: Prevent interrupt storm on host controller error (HCE)

    In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error (HCE) The xHCI controller reports a Host Controller Error (HCE) in UAS Storage Device plug/unplug scenarios on Android devices. HCE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43489

    liveupdate: luo_file: remember retrieve() status

    In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #25

    Neue Updates von Debian aufgenommen

  2. #24

    Neue Updates von Debian aufgenommen

  3. #23

    Neue Updates von Ubuntu aufgenommen

  4. #22

    Neue Updates von SUSE aufgenommen

  5. #21

    Neue Updates von SUSE aufgenommen

  6. #20

    Neue Updates von Ubuntu aufgenommen

  7. #19

    Neue Updates von Ubuntu aufgenommen

  8. #18

    Neue Updates von SUSE aufgenommen

  9. #17

    Neue Updates von Ubuntu aufgenommen

  10. #16

    Neue Updates von Ubuntu aufgenommen

  11. #15

    Neue Updates von Ubuntu aufgenommen

  12. #14

    Neue Updates von Ubuntu aufgenommen

  13. #13

    Neue Updates von Ubuntu aufgenommen

  14. #12

    Neue Updates von SUSE aufgenommen

  15. #11

    Neue Updates von SUSE und Ubuntu aufgenommen

  16. #10

    Neue Updates von Oracle Linux aufgenommen

  17. #9

    Neue Updates von SUSE aufgenommen

  18. #8

    Neue Updates von SUSE aufgenommen

  19. #7

    Neue Updates von SUSE aufgenommen

  20. #6

    Neue Updates von SUSE aufgenommen

  21. #5

    Neue Updates von SUSE aufgenommen

  22. #4

    Neue Updates von SUSE aufgenommen

  23. #3

    Neue Updates von Debian aufgenommen

  24. #2

    Neue Updates aufgenommen

  25. #1

    Initiale Fassung

References