Summary
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 17
-
High 7.8
xen-netback: defer xenvif_mcast_addr_list_free()
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen f…
-
High 7.8
tun: Require CAP_NET_ADMIN to attach to an ownerless device
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAP_NET_ADMIN in commit ca6bb5d7ab22 ("[NET]: Require CAP_NET_ADMIN to cre…
-
High 7.5
ksmbd: hold a connection reference for each session channel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbd_session_unregister() removes a session from the global and per- connection tables before dropping the table reference. A conc…
-
Unscored —
xen-netback: Fix UAF when reading statistics data
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to …
-
Unscored —
xen-blkback: Avoid UAF when reading I/O statistics
In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading …
-
Unscored —
ALSA: line6: Clear prev_fbuf on capture buffer release
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prev_fbuf on capture buffer release A KASAN slab-use-after-free read was reported in submit_audio_out_urb() when generating an impulse test signal: BUG: KASAN: slab-use-aft…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the data area in SMB2_read() …
-
Unscored —CVE-2026-99273 Public exploit
ksmbd: reserve space for the UTF-16 terminator in stream info
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reserve space for the UTF-16 terminator in stream info smb_strtoUTF16() always writes a terminating zero UTF-16 unit after the converted characters, but get_file_stream_info() budgets …
-
Unscored —
smb: client: fix fiemap wild read on empty truncated response
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix fiemap wild read on empty truncated response smb3_fiemap() treats -E2BIG from SMB2_ioctl() as a truncated range blob and loops for the next chunk. If the server reports STATU…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short SESSION_SETUP responses s…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer connection scavenging while session lo…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit sessions on each connection The pendin…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expirat…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping…
-
Unscored —
net/sched: sch_teql: fix use-after-free on lower qdisc drop
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower qdisc drop The issue: teql_master_xmit() tests the slave's ndo_start_xmit() return value against NETDEV_TX_OK alone. A slave that consumes the…
-
Unscored —
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Commit be0502a3f2e9 ("netfilter: conntrack: tcp: only close if RST matches exact sequence") keeps an established connt…
-
Unscored —
net: skbuff: propagate shared-frag marker in skb_zerocopy()
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(from)…
Revision history
-
#3
Neue Updates von Debian aufgenommen
-
#2
Neue Updates aufgenommen
-
#1
Initiale Fassung
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2026-100080
https://lore.kernel.org/linux-cve-announce/2026110651-CVE-2026-100080-9b3a@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-100081
https://lore.kernel.org/linux-cve-announce/2026110653-CVE-2026-100081-0d76@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-100082
https://lore.kernel.org/linux-cve-announce/2026110653-CVE-2026-100082-eb47@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99271
https://lore.kernel.org/linux-cve-announce/2026110751-CVE-2026-99271-e93e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99272
https://lore.kernel.org/linux-cve-announce/2026110754-CVE-2026-99272-4cf8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99273
https://lore.kernel.org/linux-cve-announce/2026110754-CVE-2026-99273-d61c@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99274
https://lore.kernel.org/linux-cve-announce/2026110754-CVE-2026-99274-3998@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99275
https://lore.kernel.org/linux-cve-announce/2026110754-CVE-2026-99275-d9aa@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99276
https://lore.kernel.org/linux-cve-announce/2026110754-CVE-2026-99276-1b8e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99277
https://lore.kernel.org/linux-cve-announce/2026110755-CVE-2026-99277-d299@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99278
https://lore.kernel.org/linux-cve-announce/2026110755-CVE-2026-99278-fc3e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99279
https://lore.kernel.org/linux-cve-announce/2026110755-CVE-2026-99279-81d3@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99280
https://lore.kernel.org/linux-cve-announce/2026110755-CVE-2026-99280-fd05@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99281
https://lore.kernel.org/linux-cve-announce/2026110755-CVE-2026-99281-a970@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99282
https://lore.kernel.org/linux-cve-announce/2026110756-CVE-2026-99282-7c47@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99283
https://lore.kernel.org/linux-cve-announce/2026110714-CVE-2026-99283-26bc@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-99284
https://lore.kernel.org/linux-cve-announce/2026110739-CVE-2026-99284-c15b@gregkh/
-
Microsoft Security Update Guide vom 2026-11-11
https://msrc.microsoft.com/update-guide/
-
Debian Security Advisory DLA-4904 vom 2026-11-13
https://lists.debian.org/debian-lts-announce/2026/11/msg00029.html