Skip to content
OpenAdvisories
High WID-SEC-2026-3294 12 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Sep 9, 2026 · Updated Nov 12, 2026 · Revision 20 · de

Vendor: amazon Vendor: Debian Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren, Denial-of-Service-Zustände herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 12

  • High 8.8
    CVE-2026-80914 Public exploit

    Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready iso_conn_ready() looks up the BIS listener socket with iso_get_sock(), which takes a reference, and then, without re-ch…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-80921

    KVM: s390: vsie: zero stale crypto bits

    In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2026-80924

    crypto: krb5 - use kfree_sensitive() for derived key buffers

    In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-80915

    drm/xe: Fix DPT allocation paths.

    In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-80916

    kcov: fix data corruption and race conditions on PREEMPT_RT

    In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV state corruption on PREEMPT_RT kernels, for the temporary storage used for saving/restoring remote KCOV st…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80917

    PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems

    In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pci_ecam_create() maps each bus segment separate…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80918

    HID: core: fix number/pointer type confusion on long items

    In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by hid_scan_report() on an item with HID_ITEM_TAG_LONG, it stores a pointer to the item data in item->da…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80919

    drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format When dumping IB contents from a hung job, amdgpu_devcoredump_format() acquired the VM root PD's reservation via amdgpu_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-80920

    io_uring: defer eventfd signaling when queued from a wakeup handler

    In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when queued from a wakeup handler io_req_local_work_add() signals the CQ ring eventfd inline when it is the one to push the first entry onto ->work_list. For…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80922

    crypto: qcom-rng - Allow zero as a random number

    In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-80923

    xhci: dbgtty: Fix unregister on tty_register_driver() failure

    In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_register_driver() failure If tty_register_driver() fails, it drops the reference, but fails to set the global dbc_tty_driver to NULL, causing the unregiste…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80925

    vlan: fix skb_under_panic and races when toggling HW VLAN offload

    In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or NETIF_F_HW_VLAN_STAG_TX) on a lower device invokes vlan_transfe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #20

    Neue Updates von SUSE aufgenommen

  2. #19

    Neue Updates von SUSE und Red Hat aufgenommen

  3. #18

    Neue Updates von Ubuntu aufgenommen

  4. #17

    Neue Updates von Ubuntu aufgenommen

  5. #16

    Neue Updates von SUSE aufgenommen

  6. #15

    Neue Updates von IBM und SUSE aufgenommen

  7. #14

    Neue Updates von Debian aufgenommen

  8. #13

    Neue Updates von Red Hat aufgenommen

  9. #12

    Neue Updates von Oracle Linux und Debian aufgenommen

  10. #11

    Neue Updates von Oracle Linux aufgenommen

  11. #10

    Neue Updates von Oracle Linux aufgenommen

  12. #9

    Neue Updates von Oracle Linux aufgenommen

  13. #8

    Neue Updates von Red Hat aufgenommen

  14. #7

    Neue Updates von Oracle Linux aufgenommen

  15. #6

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  16. #5

    Neue Updates von Debian aufgenommen

  17. #4

    Neue Updates von Debian aufgenommen

  18. #3

    Neue Updates von Amazon aufgenommen

  19. #2

    Neue Updates von Debian aufgenommen

  20. #1

    Initiale Fassung

References