enterprise_linux_hidden_v_10 vulnerabilities
CVEs whose affected-version data names the enterprise_linux_hidden_v_10 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
30 CVEsRSS
CVE-2026-80775High· 7.0PoCkernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775)
A flaw was found in the Linux kernel. A race condition exists in the `futex_hash_allocate()` function, specifically during the initial allocation of `mm->futex.phash.ref`. This vulnerability can be triggered in scenarios involving nested `…
CVE-2026-80792High· 7.0kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the `ip6_finish_output2()` function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. …
CVE-2026-74746High· 7.8⚖ disputedkernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'us…
CVE-2026-80536High· 7.8kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536)
A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could…
CVE-2026-74641High· 7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-…
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-…
CVE-2026-72262High· 7.0kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
A flaw was found in the Advanced Linux Sound Architecture (ALSA) Sound Open Firmware (SOF) ipc3-control component of the Linux kernel. This vulnerability, a heap overflow, occurs due to incorrect bounds checks when handling user data lengt…
CVE-2026-72320High· 7.0⚖ disputedkernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
A flaw was found in the Linux kernel's `netfilter` component, specifically within the `nft_lookup` functionality. This issue arises from incorrect handling of 'catchall' elements during 'inverted lookups' in the `nft_lookup_eval()` functio…
CVE-2026-72317Medium· 6.5⚖ disputedkernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
A flaw was found in the Linux kernel's SUN Remote Procedure Call (SUNRPC) implementation. A use-after-free vulnerability exists in the Transport Layer Security (TLS) connection path. When a TLS handshake fails, the client resource can be p…
CVE-2026-74509High· 8.0kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509)
A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the `hci_sync` component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free (UAF) vulnerability. This occurs when a pointer to advertising…
CVE-2026-74516High· 8.8kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
A flaw was found in KVM (Kernel-based Virtual Machine). When the Advanced Virtual Interrupt Controller (AVIC) is inhibited while a nested guest (L2) is active, KVM fails to properly update x2APIC MSR intercepts for the primary guest (L1). …
CVE-2026-72052High· 7.8kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
A flaw was found in the Linux kernel's `ip6_gre` and `ip6erspan` tunnel drivers. The `changelink` functions in these drivers do not adequately verify administrative capabilities (`CAP_NET_ADMIN`) across different network namespaces. This a…
CVE-2026-72255High· 7.8kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
A flaw was found in the Linux kernel's netfilter component, specifically within the `nf_queue` functionality. When a bridged packet is queued to NFQUEUE, it can retain a reference to a bridge's private fake destination ('dst') even after t…
CVE-2026-68448High· 7.0kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448)
A flaw was found in the Linux kernel's overlayfs component. When copying files across different overlay filesystems, the system incorrectly checked read permissions using the destination filesystem's credentials instead of the source's. Th…
CVE-2026-68432High· 7.0kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
A flaw was found in the Linux kernel's VXLAN (Virtual Extensible LAN) implementation. A local attacker, with `CAP_NET_ADMIN` (network administration capability) in one network namespace, could exploit an incorrect privilege check in the `r…
CVE-2026-68245High· 7.0kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CVE-2026-68245)
A flaw was found in the `drm/amdgpu` component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine (VM) pointer is dereferenced after its protective lock has been released. This allows the pointer to be mod…
CVE-2026-68140High· 7.0kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the `net/iucv` component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subseque…
CVE-2026-68123High· 7.0⚖ disputedkernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
A flaw was found in the Open vSwitch component of the Linux kernel. This vulnerability arises from an underflow condition when handling Generic Segmentation Offload (GSO) packets in userspace. A length calculation error can lead to a buffe…
CVE-2026-64557High· 7.0kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557)
A flaw was found in the Linux kernel's Bluetooth L2CAP component. A race condition exists during the handling of new Bluetooth connections, where a newly created socket can be prematurely freed by another process before a callback function…
CVE-2026-64481High· 7.0kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481)
A flaw was found in the Linux kernel's ALSA sound driver for the cs35l41 component. This vulnerability occurs because the driver fails to properly remove controls and cancel firmware load work during component unbinding or device removal, …
CVE-2026-64114High· 7.0kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114)
A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAP_NET_RAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length (IHL). This can lead to an out-…
CVE-2026-63984High· 7.0⚖ disputedkernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) segment routing header (SRH) decompression function, ipv6_rpl_srh_decompress(). An integer overflow occurs when processing a specially craf…
CVE-2026-63924High· 7.0⚖ disputedkernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the `ipv6_hop_jumbo()` function, which processes jumbo payloads, can modify internal packet buffer (skb) pointers. However, the network header (nh) poi…
CVE-2026-63922High· 7.0⚖ disputedkernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option (HAO), the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect …
CVE-2026-63920High· 7.0kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger …
CVE-2026-53270High· 7.0kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) component. During the `ip_vs_edit_service()` operation, the `svc->scheduler` pointer is cleared too late when unbinding an old scheduler. This improper handling allows packets…
CVE-2026-52935High· 7.0kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
A flaw was found in the Linux kernel. The `espintcp` component, responsible for handling encrypted network traffic, incorrectly reuses a partial data transmission state. This can lead to an out-of-bounds read, which may allow an attacker t…
CVE-2026-53011High· 7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch In advance_sched(), when should_change_schedules() returns true, switch_schedules() is call…
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch In advance_sched(), when should_change_schedules() returns true, switch_schedules() is call…
CVE-2026-45856High· 7.0kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the `ib_uverbs_post_send` function. A local user can exploit this vulnerability by providing an invalid work queue element size (`wqe_…
CVE-2026-45860High· 7.0kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860)
A flaw was found in the Linux kernel's netfilter connection counting (nf_conncount) feature. This vulnerability occurs when the system tracks more than eight new connections per jiffy, causing the connection list to not be cleaned up effic…
CVE-2026-31678High· 7.8kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
A flaw was found in the Linux kernel's Open vSwitch (OVS) component. A race condition can occur during the destruction of a network device (netdev) tunnel, where the `ovs_netdev_tunnel_destroy()` function may attempt to release a device re…