Skip to content
OpenAdvisories
High WID-SEC-2026-1691 10 CVEs

Linux Kernel: Mehrere Schwachstellen

Published May 26, 2026 · Updated Sep 28, 2026 · Revision 33 · de-DE

Vendor: amazon Vendor: Debian Vendor: Oracle Vendor: SUSE Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Zustand oder andere Auswirkungen herbeizuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 10

  • High 8.2
    CVE-2026-45843

    slip: bound decode() reads against the compressed packet length

    In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compressed packet length slhc_uncompress() parses a VJ-compressed TCP header by advancing a pointer through the packet via decode() and pull16(). Neithe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45837

    bpf: Fix use-after-free in arena_vm_close on fork

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork arena_vm_open() only bumps vml->mmap_count but never registers the child VMA in arena->vma_list. The vml->vma always points at the parent VMA…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-45838

    bpf: fix end-of-list detection in cgroup_storage_get_next_key()

    In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_next_entry() never returns NULL -- when the current element is the last entry it wraps to the list head via container_of()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45839

    bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()

    In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CO-RE accessor strings are colon-separated indices that describe a path from a root BTF type to a target field, e.g. "0:1:…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45840

    openvswitch: cap upcall PID array size and pre-size vport replies

    In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a fixed-size skb with nlmsg_new(NLMSG_DEFAULT_SIZE, ...) but serialize the full upca…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45841

    netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes ctx->window % f->wss.val in the OSF_WSS_MODULO branch with no guard for f->wss.val == 0. A CAP_NET_A…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45842

    slip: reject VJ receive packets on instances with no rstate array

    In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhc_init() accepts rslots == 0 as a valid configuration, with the documented meaning of 'no receive compression'. In that ca…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45844

    netfilter: arp_tables: fix IEEE1394 ARP payload parsing

    In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arp_packet_match() unconditionally parses the ARP payload assuming two hardware addresses are present (source and ta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45845

    net/sched: taprio: fix NULL pointer dereference in class dump

    In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When a TAPRIO child qdisc is deleted via RTM_DELQDISC, taprio_graft() is called with new == NULL and stores NULL into q->qdiscs[c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-45846

    bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()

    In the Linux kernel, the following vulnerability has been resolved: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() bareudp_fill_metadata_dst() passes bareudp->sock to udp_tunnel6_dst_lookup() in the IPv6 path without a NULL check. The so…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #33

    Neue Updates von Ubuntu aufgenommen

  2. #32

    Neue Updates von Ubuntu aufgenommen

  3. #31

    Neue Updates von Ubuntu aufgenommen

  4. #30

    Neue Updates von Ubuntu aufgenommen

  5. #29

    Neue Updates von SUSE aufgenommen

  6. #28

    Neue Updates von SUSE aufgenommen

  7. #27

    Neue Updates von Ubuntu aufgenommen

  8. #26

    Neue Updates von Ubuntu aufgenommen

  9. #25

    Neue Updates von SUSE und Oracle Linux aufgenommen

  10. #24

    Neue Updates von Ubuntu aufgenommen

  11. #23

    Neue Updates von Ubuntu aufgenommen

  12. #22

    Neue Updates von SUSE und Ubuntu aufgenommen

  13. #21

    Neue Updates von Ubuntu aufgenommen

  14. #20

    Neue Updates von openSUSE aufgenommen

  15. #19

    Neue Updates von Ubuntu und SUSE aufgenommen

  16. #18

    Neue Updates von SUSE aufgenommen

  17. #17

    Neue Updates von SUSE und Ubuntu aufgenommen

  18. #16

    Neue Updates von SUSE aufgenommen

  19. #15

    Neue Updates von SUSE aufgenommen

  20. #14

    Neue Updates von SUSE und Debian aufgenommen

  21. #13

    Neue Updates von SUSE aufgenommen

  22. #12

    Neue Updates von SUSE aufgenommen

  23. #11

    Neue Updates von openSUSE und SUSE aufgenommen

  24. #10

    Neue Updates von SUSE und Amazon aufgenommen

  25. #9

    Neue Updates von Debian aufgenommen

References