---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.14 and other versions prior to 6.18.42 or 7.1.6
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/d8aaf06b29f5a0b6186cf68d21c7d63678ee3891","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ffd64e0717efd83fbf3396ab4e5ac6d795dac4d0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/430ea57d6daf765e88f90046afbfd1e071cb7200","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A memory corruption vulnerability exists in the Linux kernel IPTFS implementation where improper flag propagation leads to kernel panic or unauthorized memory access.

Executive Summary:
A critical memory corruption flaw in the Linux kernel IPTFS component could allow an unauthenticated attacker to trigger a system panic or potentially compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-64566

Affected Software: Linux Kernel

Affected Versions: 6.14 and versions prior to 6.18.42 or 7.1.6

Vulnerability: The vulnerability resides in the iptfs_skb_add_frags function, which fails to propagate the SKBFL_SHARED_FRAG flag when copying fragment references. This oversight allows subsequent decryption processes to write directly over shared memory pages, resulting in kernel-level memory corruption.

Business Impact

The potential for kernel memory corruption poses a severe risk to system stability and security. Successful exploitation can lead to a complete denial of service through system crashes (kernel panic), or in specific circumstances, unauthorized data modification or escalation of privileges. With a CVSS score of 9.8, this vulnerability is classified as critical due to the ease of remote exploitation and the potential for full system compromise.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.42, 7.1.6, or a later stable release where the SKBFL_SHARED_FRAG flag propagation has been corrected.

Proactive Monitoring: Monitor system logs for recurring kernel panic events or unexpected memory access violations that may indicate exploitation attempts.

Compensating Controls: Ensure that network boundaries are strictly enforced to limit exposure of the kernel networking stack to untrusted traffic, as the flaw is triggered via network input.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its location in the core networking stack, but it requires specific kernel configurations to be reachable.

Analyst Recommendation

Given the critical severity of this kernel-level vulnerability, immediate patching is required to prevent potential system instability or exploitation. Administrators should prioritize upgrading to the specified fixed versions to ensure the integrity of the memory management subsystem and maintain system availability.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 2.6.25 up to (excluding) 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel SCTP implementation, known as SCTPhantom, allows local privilege escalation and potential container escapes.

Executive Summary:
A critical use-after-free vulnerability in the Linux kernel SCTP implementation, dubbed SCTPhantom, permits unprivileged local attackers to achieve root-level privileges and potentially escape containerized environments.

Vulnerability Details

CVE-ID: CVE-2026-64564

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions from 2.6.25 up to (excluding) 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc5.

Vulnerability: This is a use-after-free vulnerability located within the Stream Control Transmission Protocol (SCTP) dynamic address reconfiguration logic. The flaw allows an attacker to interact with a freed transport object during DEL-IP processing, which can be triggered by a local user, including those within constrained environments like containers.

Business Impact

The CVSS score of 9.8 reflects the extreme severity of this flaw, as it enables full system compromise through local privilege escalation. Successful exploitation results in an attacker gaining root access, which facilitates data exfiltration, persistent malware installation, and the compromise of containerized workloads, potentially impacting the entire host infrastructure.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, 7.1.6, or 7.2-rc5 as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected kernel crashes, segmentation faults related to the sctp module, or suspicious attempts to load the sctp kernel module.

Compensating Controls: If immediate patching is not feasible, restrict the ability of unprivileged users to load the sctp kernel module using modprobe blacklisting (e.g., install sctp /bin/true in modprobe.d).

Exploitation Status

Public Exploit Available: Yes, multiple public proofs-of-concept are available on GitHub and other security research repositories.

Analyst Notes: As of August 4, 2026, there is no confirmed active exploitation in the wild; however, because the vulnerability was weaponized during research and multiple functional proofs-of-concept are publicly available, the risk of exploitation is high. The flaw is inherently dangerous due to its presence in core kernel networking code that is often automatically loaded on demand.

Analyst Recommendation

Given the critical severity of this vulnerability and the availability of public exploit code, organizations must prioritize patching the kernel across all affected environments, including container hosts. System administrators should verify kernel versions immediately and apply the stable updates provided by their respective distributions to prevent unauthorized root-level access.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 4.18, and up to (excluding) 6.6.151, 6.12.103, 6.18.42, and 7.1.6.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel rhashtable implementation allows local attackers to trigger memory corruption or information disclosure by dereferencing stale pointers.

Executive Summary:
A high-severity use-after-free vulnerability in the Linux kernel rhashtable implementation could lead to privilege escalation or system instability.

Vulnerability Details

CVE-ID: CVE-2026-64563

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions prior to 4.18, and up to (excluding) 6.6.151, 6.12.103, 6.18.42, and 7.1.6.

Vulnerability: This is a use-after-free vulnerability in the rhashtable walk functionality, where a stale pointer is not cleared after a table resize, allowing for potential dereferencing of freed kernel memory by an authenticated local user.

Business Impact

The CVSS score of 7.8 indicates a high-severity threat. Successful exploitation could lead to kernel memory corruption, unauthorized information disclosure, or system crashes (Denial of Service). In environments where attackers can interact with affected subsystems like netlink or TIPC, this vulnerability provides a potential pathway for privilege escalation, threatening the overall security posture of the host operating system.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.42, 7.1.6, or apply the fix commits 3ff7c1dbf722cf3fa538672452ba182318e0fcc3, 4169d9fb92f313ff8e7e83d733c1ecdcc93eebd3, or 8173f7e2ce67e6ca1d4763f3da14e5b01ce77456.

Proactive Monitoring: Monitor for unexpected kernel crashes or system instability, particularly those preceded by network configuration changes or subsystem activity.

Compensating Controls: Where possible, limit the execution of untrusted code or containerized workloads that interact heavily with networking subsystems, as these are common vectors for triggering rhashtable operations.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists.

Analyst Notes: As of Aug 4, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently exploitable by local users who can manipulate the kernel's rhashtable state.

Analyst Recommendation

This vulnerability represents a significant risk to kernel integrity. Security administrators must prioritize patching across all Linux distributions, particularly those utilizing Debian bullseye, bookworm, or trixie, to mitigate the risk of local privilege escalation and system compromise.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 4.9, and up to (excluding) 6.6.148, 6.12.101, 6.18.42, and 7.1.6.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A race condition in the Linux kernel KVM nVMX code during nested virtualization allows a use-after-free scenario when freeing the shadow VMCS, potentially leading to host memory corruption.

Executive Summary:
A high-severity race condition in the Linux kernel KVM nested virtualization subsystem allows for potential memory corruption and host system instability.

Vulnerability Details

CVE-ID: CVE-2026-64562

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions prior to 4.9, and up to (excluding) 6.6.148, 6.12.101, 6.18.42, and 7.1.6.

Vulnerability: This is a use-after-free vulnerability in the nVMX component of the KVM driver, occurring due to improper synchronization during the freeing of a shadow VMCS, which requires local authenticated access.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe risk to host systems supporting nested virtualization. Exploitation could result in kernel memory corruption or unauthorized host access. The primary business impact includes potential host system crashes, denial of service for hosted virtual machines, and the possibility of privilege escalation for attackers capable of triggering the race condition.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, 7.1.6, or apply the upstream fix commit af56298e9d86e6098cd1d2e155cb2949b7c45412.

Proactive Monitoring: Review system logs for kernel-level errors related to KVM or nested virtualization operations.

Compensating Controls: Disable nested virtualization on host kernels if it is not strictly required for business operations to eliminate the attack surface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Aug 4, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's complexity as a race condition may make reliable exploitation difficult, but the potential for system-wide impact remains high.

Analyst Recommendation

Security teams should treat this vulnerability with high urgency, particularly in environments utilizing nested KVM virtualization. Applying the recommended kernel updates is the only effective way to neutralize the race condition and prevent potential host-level memory corruption.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions from 5.9 up to (excluding) 6.6.148, 6.12.101, 6.18.42, and 7.1.6.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel KVM x86 shadow MMU allows local attackers to potentially trigger a guest-to-host escape and gain root privileges on the host system.

Executive Summary:
A high-severity use-after-free vulnerability in the Linux kernel KVM virtualization subsystem creates a risk of guest-to-host escape and host-level privilege escalation.

Vulnerability Details

CVE-ID: CVE-2026-64561

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions from 5.9 up to (excluding) 6.6.148, 6.12.101, 6.18.42, and 7.1.6.

Vulnerability: This is a use-after-free vulnerability located in the KVM shadow memory management unit (MMU) page fault path, requiring an authenticated local user or a privileged guest workload to trigger.

Business Impact

The CVSS score of 8.8 reflects the high risk of this vulnerability. Successful exploitation could allow an attacker to escape a virtualized environment, gaining unauthorized root access to the underlying host system. This represents a critical threat to multi-tenant cloud environments and virtualized infrastructure, potentially leading to total system compromise, data theft, and loss of service integrity.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, 7.1.6, or apply the upstream fix commit 35e77467610c4a37cb0ff54ee56b85f73b1f5700.

Proactive Monitoring: Monitor host system logs for abnormal KVM kernel panics or unexpected memory access errors associated with virtual machine operations.

Compensating Controls: Restrict access to virtualization capabilities, such as KVM guest creation, to highly trusted users only, as local access is a prerequisite for exploitation.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists.

Analyst Notes: As of Aug 4, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. While the PoC is not currently weaponized for immediate cloud exploitation, its existence necessitates prompt patching.

Analyst Recommendation

Given the potential for host compromise and the existence of a public proof-of-concept, this vulnerability poses a significant risk to virtualized environments. Administrators should prioritize patching the Linux kernel on all host systems running KVM to prevent potential guest-to-host escapes.

---METADATA---
VENDOR: Account Switcher
PRODUCT: Account Switcher (WordPress Plugin)
AFFECTED_VERSIONS: 0 through 1.0.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Account Switcher WordPress plugin is vulnerable to improper authentication, allowing authenticated users to escalate privileges due to insufficient validation.

Executive Summary:
The Account Switcher WordPress plugin contains a critical privilege escalation vulnerability that permits authenticated users to gain unauthorized administrative access.

Vulnerability Details

CVE-ID: CVE-2026-6456

Affected Software: Account Switcher (WordPress plugin)

Affected Versions: 0 through 1.0.2

Vulnerability: This plugin is affected by an improper authentication flaw (CWE-287). An authenticated user can exploit this vulnerability to bypass intended access controls and escalate their privileges within the WordPress environment.

Business Impact

With a CVSS score of 8.8, this vulnerability presents a high risk of total system compromise. An attacker who successfully escalates to administrator status can manipulate user accounts, steal sensitive data, and fully control the website, potentially leading to widespread data breaches and loss of organizational trust.

Remediation Plan

Immediate Action: As there is no patch available, immediately deactivate and remove the Account Switcher plugin from all WordPress instances until a secure version is released by the developer.

Proactive Monitoring: Audit WordPress user roles and permissions for unauthorized changes or the creation of new administrative accounts.

Compensating Controls: Use a Web Application Firewall (WAF) to block unauthorized requests to the plugin's REST API endpoints, which are known vectors for this type of vulnerability.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly severe given that it allows for full administrative takeover of the affected WordPress site.

Analyst Recommendation

The severity of this privilege escalation flaw requires immediate action. Administrators must remove the plugin from their production environments immediately and monitor for any signs of suspicious account activity or unauthorized privilege modification.

---METADATA---
VENDOR: Linux
PRODUCT: Linux Kernel
AFFECTED_VERSIONS: Linux 8ffb929098a56939ac71509302eeab5b207bf262 up to (excluding) b39298044e5534612511a2ff5de03ba5f6e7a820, 8c37e4338c801ebb8cee52436c01c41e009f6e87, 84e718b6a814edc84159361f9f454a4e92ae91ae, 36da806f7fbaee56ad9e81859deec203f9728700, 733e76e74e406c1d1ddc7369420dd8a47f48bb8a, 6fef032af0092ed5ccb767239a9ac1bc38c08a40
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel Bluetooth L2CAP implementation allows potential memory corruption via improper socket handling.

Executive Summary:
A use-after-free vulnerability in the Linux kernel Bluetooth subsystem poses a high risk of local or adjacent memory corruption and potential system instability.

Vulnerability Details

CVE-ID: CVE-2026-64557

Affected Software: Linux Linux Kernel

Affected Versions: Various kernel builds prior to the identified stable branch fixes.

Vulnerability: The vulnerability exists in the l2cap_sock_new_connection_cb function, where a use-after-free condition occurs due to the premature release of a socket structure. An attacker within Bluetooth range can potentially trigger this condition, resulting in an impact on system stability or unauthorized access.

Business Impact

The use-after-free flaw carries a CVSS score of 8.8, reflecting its potential to compromise system integrity and availability. In environments where Bluetooth is enabled, this vulnerability could be leveraged to crash systems or potentially execute code, necessitating urgent kernel updates to prevent exploitation.

Remediation Plan

Immediate Action: Update your Linux kernel to the latest stable versions: 6.1.178, 6.6.145, 6.12.97, or 6.18.40.

Proactive Monitoring: Monitor system logs for kernel-level errors or Bluetooth service crashes that may indicate the exploitation of memory management flaws.

Compensating Controls: If kernel updates cannot be applied immediately, disable the Bluetooth service on affected systems to eliminate the attack vector.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While this is a complex kernel-level bug, it remains a critical target for attackers seeking reliable local or adjacent execution primitives.

Analyst Recommendation

Kernel maintenance is critical for infrastructure security. Administrators should verify their current kernel version against the fixed releases and coordinate a reboot cycle to apply these patches as soon as possible to mitigate the risk of local or adjacent exploitation.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions from 5.13 up to (excluding) 6.6.145, 6.12.96, 6.18.39, and 7.1.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Linux kernel perf_core component allows local attackers to cause system instability or denial of service by improperly detaching event groups during remove_on_exec.

Executive Summary:
A high-severity vulnerability in the Linux kernel allows local users to trigger system instability or denial of service due to improper handling of performance event groups.

Vulnerability Details

CVE-ID: CVE-2026-64556

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions from 5.13 up to (excluding) 6.6.145, 6.12.96, 6.18.39, and 7.1.4

Vulnerability: This vulnerability occurs within the perf/core component, where improper detachment of event groups during the remove_on_exec process leads to state inconsistencies. An authenticated local attacker with low privileges can exploit this to corrupt the PMU context active list, resulting in system instability or a potential denial of service.

Business Impact

The vulnerability carries a CVSS score of 7.8, indicating a high risk level. While exploitation requires local access, the potential for system instability or a denial of service can disrupt critical business operations, particularly on multi-user systems or shared infrastructure. Successful exploitation may lead to unexpected kernel panics or service unavailability, necessitating urgent attention for environments where uptime is critical.

Remediation Plan

Immediate Action: Update your Linux kernel to the versions containing the upstream fix, specifically 6.6.145, 6.12.96, 6.18.39, or 7.1.4.

Proactive Monitoring: Monitor system logs for kernel-related errors, specifically messages related to performance monitoring unit (PMU) or perf event failures, which may indicate attempted exploitation.

Compensating Controls: Restrict access to performance monitoring interfaces or limit the ability of low-privileged users to execute performance profiling tools, which can serve as a temporary mitigation until the kernel is patched.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 29, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by local users who can trigger the race condition within the perf event handling code.

Analyst Recommendation

Given the high severity of this kernel-level vulnerability, administrators should prioritize patching as part of their standard maintenance cycle. While exploitation requires local access, the potential for system-wide impact makes it essential to apply the provided kernel updates to ensure stability and prevent potential denial of service attacks.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions 6.7 and earlier, specifically those containing the vulnerable MOPS exception handling logic.
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/10a568010e827108d149779908850afaec898846","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/884b44256041ec6b2dcbe8e6a67384d26145cba1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/dd3b237eb7780d65eae296d3d3a70012b6e7a02f","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ff1022c3de46753eb7eba2f6efd990569e66ff95","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A vulnerability in the Linux kernel KVM arm64 nested virtualization component allows for improper SPSR_EL2 restoration during MOPS exception handling.

Executive Summary:
A vulnerability in the Linux kernel KVM arm64 hypervisor could allow a local authenticated attacker to achieve full system compromise or escape the virtual machine.

Vulnerability Details

CVE-ID: CVE-2026-64555

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions 6.7 and earlier, with specific fixes available for branches 6.12.97, 6.18.40, and 7.1.5.

Vulnerability: The flaw resides in the kvm_hyp_handle_mops function, which improperly handles state rewinding for MOPS exceptions by failing to translate synthetic state before writing to hardware. This allows an attacker with low privileges, who has access to the local system, to influence the hypervisor state.

Business Impact

The CVSS score of 8.8 reflects the high severity of this issue, as it involves potential scope changes and impacts on confidentiality, integrity, and availability. Successful exploitation could allow a local attacker to break out of a virtualized environment, leading to unauthorized access to the host system, data exfiltration, or complete system disruption. Given the critical nature of kernel-level vulnerabilities, this poses a significant risk to any infrastructure relying on KVM virtualization.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.12.97, 6.18.40, 7.1.5, or later, depending on the distribution branch in use.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected hypervisor restarts, or abnormal behavior within guest virtual machines that may indicate attempted exploitation.

Compensating Controls: Restrict local access to systems running KVM virtualization to prevent unauthorized users from executing code that could trigger this kernel-level flaw.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While currently unexploited, the complexity of kernel-level memory management bugs makes them high-value targets for advanced persistent threats seeking privilege escalation or hypervisor escapes.

Analyst Recommendation

This vulnerability represents a significant security risk for environments utilizing nested virtualization on arm64 architecture. IT administrators should prioritize patching affected kernel versions as part of their next maintenance cycle to eliminate the possibility of hypervisor compromise. Failure to address this flaw leaves the host system susceptible to attackers who have already gained low-level local access.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 5.3 and various stable branches prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/8c10778ec674b67a07ea042fcba64270f3f38a5a","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2731efa6364e47934c96eb69e01ea131e8af8030","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/00c06ef8c018493943891a7d0ca82b71b24f3180","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/c141f69d0a0fb16964dbc293650047e69bda8af7","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f2e6596d10783557aeb9668da2a3b4d19deb2001","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1c4f67c89fd27c4df4c70b135c2c59627698b3c0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4ac981a8b7ce7aec99a52d08f8a8953e8e120067","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/86f3ce81dd2b4b0aa2c3016c989a943e4b1b643d","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A use-after-free vulnerability exists in the Linux kernel netfilter bridge implementation due to a stale pointer in br_ip6_fragment, potentially allowing memory corruption or arbitrary code execution.

Executive Summary:
A use-after-free vulnerability in the Linux kernel netfilter bridge component poses a critical risk of memory corruption, which could be leveraged by an adjacent attacker to achieve system compromise.

Vulnerability Details

CVE-ID: CVE-2026-64554

Affected Software: Linux Kernel

Affected Versions: 5.3 and various stable branches prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The flaw resides in the br_ip6_fragment function, where a pointer to the skb head becomes stale after a call to skb_checksum_help causes memory reallocation. This results in a use-after-free condition when the pointer is subsequently dereferenced, and the vulnerability is triggerable by an unauthenticated adjacent attacker.

Business Impact

The potential for a use-after-free error in the core networking stack represents a severe security risk. Successful exploitation could lead to a system crash, denial of service, or potentially arbitrary code execution at the kernel level, resulting in full system compromise and loss of data confidentiality or integrity. Given the CVSS score of 8.8, this vulnerability must be treated with high urgency, particularly in environments processing untrusted bridge traffic.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor network traffic for anomalous fragmentation patterns or bridge-related errors in kernel logs, which may indicate exploitation attempts.

Compensating Controls: If immediate patching is not feasible, restrict access to the affected network bridge interfaces and employ network segmentation to limit the exposure of the vulnerable kernel components to trusted segments only.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex, requiring specific conditions during packet processing to trigger the use-after-free, but it remains a significant concern for kernel stability and security.

Analyst Recommendation

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize the deployment of the provided kernel patches. Administrators must verify their current kernel version against the patched releases and perform rolling updates to minimize operational impact while ensuring the security of the infrastructure.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.1.x before 6.1.178, 6.6.x before 6.6.145, 6.12.x before 6.12.97, and versions up to 6.18
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/f9451d0fd5ba635dcabb49bfe456a6db734a8986","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/38e94d63e29f4a5c6eae87ee2c02101aaa321502","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/fbeb65154583879d556ea94cb2f15888e9470f3d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/c7fc9adf4e006155f7f2aeda052fbcde25cdcc49","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/e6b8463b7d791f3886d7584259d6e9f06a69f12e","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9e5ad06ea826322ce8c58b4a68442a96f600c3c4","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A buffer overflow vulnerability exists in the Linux kernel virtio-net driver, where improper length validation in receive_big() allows a malicious virtio backend to trigger out-of-bounds memory writes.

Executive Summary:
A critical out-of-bounds memory write vulnerability in the Linux kernel virtio-net subsystem could allow a malicious virtio backend to compromise system integrity or cause a denial of service.

Vulnerability Details

CVE-ID: CVE-2026-64552

Affected Software: Linux Kernel

Affected Versions: 6.1.x before 6.1.178, 6.6.x before 6.6.145, 6.12.x before 6.12.97, and versions up to 6.18

Vulnerability: The vulnerability resides in the virtio-net driver's receive_big function, which fails to correctly bound the length of received packets. A malicious virtio backend can exploit this to cause an out-of-bounds write to the socket buffer, potentially allowing an attacker to overwrite memory or trigger kernel-level corruption without requiring authentication.

Business Impact

The potential for kernel-level memory corruption poses a severe risk to system stability and data confidentiality. Successful exploitation could lead to arbitrary code execution within the kernel context, resulting in full system compromise, loss of sensitive data, or persistent denial of service. The CVSS score of 8.4 reflects the high impact on confidentiality, integrity, and availability, even though the attack requires a local vector.

Remediation Plan

Immediate Action: Update the Linux kernel to the corrected versions (6.1.178, 6.6.145, 6.12.97, 6.18.40 or later) as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected segmentation faults that may indicate failed exploitation attempts.

Compensating Controls: Ensure that untrusted guest environments are isolated using strong virtualization boundaries, and restrict access to the virtio backend infrastructure to authorized administrators only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is technically significant, it requires the attacker to control the virtio backend, which typically limits the scope of impact to virtualized environments where the backend is compromised or untrusted.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/6022da37786701df1fc5dd946a6dcba59d5473b1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/861f884f5471632c731cbbd612a1c072e391a624","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/588706ebaf8cdb4a4161602949eba365514b1db1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a257b41ddfe9e327b26581ad2777f04b23ac73f5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/08a8f2d13f703924316e9aeac863a88ef50990c7","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ebe0a55d954fa8da383b6192edb8f763dcb002d5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/bbd6b2ea966cf57b6ae095cf5a8dbc993cd197a0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1cd23ca80784223fa2204e16203f754da4e821f8","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The Linux kernel SCTP implementation improperly validates STALE_COOKIE cause lengths, leading to out-of-bounds memory reads and potential kernel information leakage or denial-of-service.

Executive Summary:
An unauthenticated remote attacker can trigger an out-of-bounds memory read in the Linux kernel SCTP stack, potentially leading to unauthorized information disclosure or system instability.

Vulnerability Details

CVE-ID: CVE-2026-64551

Affected Software: Linux Kernel

Affected Versions: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This vulnerability occurs in the SCTP (Stream Control Transmission Protocol) implementation when processing ERROR chunks. Due to insufficient length validation of the STALE_COOKIE cause, the kernel may read past the intended buffer, resulting in an uninitialized memory leak that is subsequently echoed to the peer.

Business Impact

The flaw carries a CVSS score of 9.1, reflecting its critical nature as it allows for unauthenticated remote exploitation. Successful exploitation poses a significant risk of leaking sensitive kernel memory, which may contain cryptographic keys or authentication tokens, and can be leveraged to cause system crashes, leading to significant operational downtime.

Remediation Plan

Immediate Action: Apply the vendor-provided kernel patches immediately. Ensure your distribution is updated to at least version 5.10.261, 5.15.212, 6.1.178, or 6.6.145 depending on your active LTS branch.

Proactive Monitoring: Monitor system logs for unusual SCTP traffic patterns or recurring kernel panic events. Use network analysis tools to identify malformed SCTP packets targeting the host.

Compensating Controls: If immediate patching is not feasible, restrict access to SCTP-enabled services using host-based firewalls or network access control lists. Disable SCTP support at the kernel level if the protocol is not required for business operations.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. The flaw is inherently dangerous as it allows an unauthenticated remote attacker to interact directly with the kernel's protocol handling logic.

Analyst Recommendation

This vulnerability represents a high-risk exposure due to its potential for remote exploitation without authentication. Organizations must prioritize the deployment of the official kernel patches to prevent information leakage and potential system compromise. If patching cannot be performed immediately, strictly limiting network access to SCTP services is a necessary measure to reduce the attack surface.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 4.14 and various versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/ed25befc8c36f896b5878f9078faddb67fd7e2d0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a54d76d176e50d2fdbd39b7231efe256170339e4","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/00f4c366dbca16a40772c3b7ec2d8cba839e9724","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/3868c3244369ab709a90c9aad7534d406009b824","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/14eb0c9491385d5361a292ea4974aec0e6887299","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1b12612c367e4be9b0814c0468e7e687835315b4","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/231a8a4b76cb1b1827b3b19d7b3603642f5aaaef","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f0f1887a9e30712a1df03e152dce6fb91344b1f3","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A memory safety vulnerability in the Linux kernel rmnet driver allows an attacker to trigger an out of bounds read via insufficient frame length validation during ingress parsing.

Executive Summary:
A memory safety flaw in the Linux kernel rmnet driver could allow a local attacker to trigger an out of bounds read, potentially leading to system instability or information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-64550

Affected Software: Linux Kernel

Affected Versions: 4.14 and various versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The vulnerability occurs when ingress deaggregation is disabled, causing the rmnet handler to skip necessary length validation. This permits the parser to process malformed MAP frames, resulting in an out of bounds read when dereferencing headers based on untrusted length values.

Business Impact

Successful exploitation requires a local attacker with low privileges. While the attack vector is local, the potential for kernel level memory corruption poses a significant risk to system integrity and availability, as indicated by the CVSS score of 7.3. Organizations running affected kernel versions on shared hosting or multi user systems face the highest risk of unauthorized data access or service disruption.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or bug reports related to the rmnet driver or slab out of bounds errors.

Compensating Controls: Restrict access to the system to trusted users only and employ kernel hardening features such as KASLR to increase the difficulty of exploiting memory corruption vulnerabilities.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof of concept for this vulnerability. The flaw is fundamentally an implementation error in the ingress path logic, making it highly dependent on the ability of a local user to inject specifically crafted network packets into the rmnet interface.

Analyst Recommendation

Given the potential for kernel level memory corruption, this vulnerability should be prioritized within standard patch cycles. System administrators should verify their current kernel version and apply the upstream patches to prevent potential local exploitation.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Linux kernel net1080 USB network driver contains an out-of-bounds read vulnerability in the rx_fixup function due to insufficient validation of packet lengths.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel net1080 driver could allow an unauthenticated attacker to access unauthorized memory addresses.

Vulnerability Details

CVE-ID: CVE-2026-64547

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The flaw resides in the net1080_rx_fixup function, where the driver reads a pad byte past the end of the skb buffer. This is an unauthenticated vulnerability triggered by processing malformed packets from a USB network adapter.

Business Impact

The vulnerability allows for potential memory disclosure or system instability, leading to denial of service. With a CVSS score of 8.1, this represents a significant risk to the confidentiality and availability of the affected system. Exploitation could potentially be used as a stepping stone for more complex kernel-level attacks.

Remediation Plan

Immediate Action: Apply the vendor-provided kernel patches by updating to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Review kernel logs for errors related to network interface resets or memory access violations.

Compensating Controls: Limit access to physical hardware ports and apply strict network segmentation to minimize the exposure of USB-connected network devices.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically limited to the context of the net1080 driver, which requires specific hardware interaction to trigger.

Analyst Recommendation

While no active exploitation is currently confirmed, the high CVSS score warrants prompt attention. Administrators should incorporate these kernel updates into their standard maintenance cycle to ensure system integrity and mitigate the risk of memory-related vulnerabilities.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Versions prior to 5.10.265, 5.15.216, 6.1.183, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/380413cdfd29fb9fa486c82889132b680c4983c5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f05b3f4c78370469286879c765f5a1dd39dbcd32","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4da2ac7749411971e1b222b992da5a172ce45f98","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/5e215bf1c47fdddf8203a0fe80a0ed594065f101","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ec7d54d8cc1723921d671e3272b427c96366506f","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a0c5fdeb5fa257f8c6d469af266bc087cb5de6a2","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b65289e1c3f352a9f92c6e19713ddd647e033253","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1579342d71133da7f00daa02c75cebec7372097b","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A use-after-free vulnerability exists in the Linux kernel TIPC subsystem due to improper handling of the discoverer object during bearer cleanup, potentially leading to memory corruption or execution.

Executive Summary:
A use-after-free vulnerability in the Linux kernel TIPC component poses a significant risk of local privilege escalation or system instability.

Vulnerability Details

CVE-ID: CVE-2026-64543

Affected Software: Linux Kernel

Affected Versions: Versions prior to 5.10.265, 5.15.216, 6.1.183, and 6.6.145

Vulnerability: The vulnerability is a use-after-free flaw located in the TIPC (Transparent Inter-Process Communication) discovery mechanism. It occurs when a UDP bearer is disabled, as the discoverer object is freed prematurely while still being referenced by concurrent softirq processes, requiring low-privileged local access to trigger.

Business Impact

Successful exploitation of this memory corruption vulnerability could allow a local attacker to achieve privilege escalation or cause a kernel panic, resulting in service disruption. While the attack requires local access, the CVSS score of 7.8 indicates a high severity level, as it provides a pathway for an unprivileged user to gain full control over the affected system.

Remediation Plan

Immediate Action: Update the Linux kernel to the corrected versions (5.10.265, 5.15.216, 6.1.183, 6.6.145, or later) provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the TIPC subsystem or network interface drivers.

Compensating Controls: If patching is delayed, restrict access to the system to authorized personnel only and disable the TIPC module if it is not required for network operations to reduce the attack surface.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex, involving race conditions in kernel memory management, which typically increases the difficulty of developing a reliable exploit.

Analyst Recommendation

Given the potential for local privilege escalation and the critical nature of kernel-level vulnerabilities, organizations should prioritize testing and deploying the provided kernel patches. Ensure that all production environments are updated to a version containing the fix to neutralize this risk.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Linux kernel usbnet driver contains an out-of-bounds read vulnerability in the genelink_rx_fixup function due to improper validation of device-supplied packet lengths.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel USB network driver allows unauthenticated attackers to leak sensitive heap memory information.

Vulnerability Details

CVE-ID: CVE-2026-64540

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This vulnerability is an out-of-bounds read flaw within the GeneLink (GL620A) USB network driver. An unauthenticated attacker can exploit this by providing malicious USB device data to trigger a kernel heap information leak.

Business Impact

Successful exploitation allows an attacker to read sensitive information from the kernel heap, which may include cryptographic keys or other security-relevant data. Given the CVSS score of 8.1, this is a high-severity issue that could lead to full system compromise or facilitate further attacks. The ability to trigger this without authentication significantly increases the potential threat landscape for affected systems.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for unusual USB device connection events or kernel-related crashes that might indicate exploitation attempts.

Compensating Controls: Restrict physical access to USB ports on critical systems and implement hardware-level controls to prevent unauthorized USB devices from being connected.

Exploitation Status

Public Exploit Available: Yes, public proof-of-concept exploits are available.

Analyst Notes: As of July 27, 2026, there is no confirmed active exploitation in the wild. However, the availability of public proof-of-concept code elevates the risk level, and the vulnerability is inherently exploitable by an attacker with physical or adjacent network access to a vulnerable USB interface.

Analyst Recommendation

This vulnerability presents a significant risk to systems utilizing the GeneLink USB network driver. Security teams should prioritize patching affected kernels immediately to prevent unauthorized memory disclosure. Given the existence of public exploit code, the urgency for remediation is high.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions prior to 6.1.178, 6.12.97, 6.18.40, and 7.1.5.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A stack-based out-of-bounds write vulnerability in the Linux kernel Bluetooth subsystem allows local attackers to cause memory corruption or privilege escalation.

Executive Summary:
A stack-based out-of-bounds write vulnerability in the Linux Bluetooth driver could allow a local attacker to escalate privileges or crash the system.

Vulnerability Details

CVE-ID: CVE-2026-64539

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions prior to 6.1.178, 6.12.97, 6.18.40, and 7.1.5.

Vulnerability: The vulnerability is located in the eir_create_adv_data() function within the Bluetooth subsystem. It is a stack-based out-of-bounds write that can be triggered by a local attacker with CAP_NET_ADMIN privileges, allowing them to corrupt memory and potentially execute arbitrary code.

Business Impact

The vulnerability carries a high CVSS score of 7.8, reflecting the potential for local privilege escalation and system denial of service. While it requires specific privileges to exploit, successful execution could result in full system compromise, representing a significant risk to security in environments where local access is shared.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.1.178, 6.12.97, 6.18.40, 7.1.5, or newer.

Proactive Monitoring: Review system logs for Bluetooth service errors or unusual kernel activity related to network stack operations.

Compensating Controls: Restrict CAP_NET_ADMIN capabilities to authorized users and services to minimize the potential for exploitation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of August 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically significant as it involves direct corruption of the kernel stack.

Analyst Recommendation

Kernel vulnerabilities of this nature are high-priority items. Administrators should schedule and perform updates to the latest stable kernel versions to ensure that memory safety issues in the Bluetooth subsystem are addressed, thereby preventing local privilege escalation.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux kernel versions prior to 5.15.212, 6.1.178, 6.6.145, and 6.12.97.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A buffer overflow vulnerability in the Linux kernel NTFS3 filesystem driver allows for out-of-bounds memory access, potentially leading to privilege escalation or system instability.

Executive Summary:
An out-of-bounds memory access vulnerability in the Linux kernel NTFS3 filesystem could allow an attacker to trigger system crashes or execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-64532

Affected Software: Linux Kernel

Affected Versions: Linux kernel versions prior to 5.15.212, 6.1.178, 6.6.145, and 6.12.97.

Vulnerability: The vulnerability resides within the Linux kernel NTFS3 implementation where improper bounds checking on the data_off parameter during record updates leads to a memory corruption flaw. This vulnerability is exploitable by a local, unauthenticated user who can interact with the filesystem.

Business Impact

Successful exploitation of this high-severity vulnerability (CVSS 7.8) could allow an attacker to escalate privileges or cause a kernel panic, leading to unauthorized system access or significant denial of service. The potential for arbitrary code execution poses a severe risk to data integrity and system availability.

Remediation Plan

Immediate Action: Update your Linux kernel to version 5.15.212, 6.1.178, 6.6.145, 6.12.97, or newer.

Proactive Monitoring: Review system logs for kernel oops or unexpected filesystem errors that may indicate exploitation attempts.

Compensating Controls: If patching is delayed, restrict user access to mount or interact with NTFS filesystems to reduce the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of August 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous due to its location in the kernel, where memory corruption can lead to full system compromise.

Analyst Recommendation

Given the critical impact of kernel-level vulnerabilities, administrators should prioritize applying the provided kernel patches across all affected environments. Immediate patching is the most reliable way to mitigate the risk of privilege escalation and system instability associated with this memory safety issue.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 5.15.x, 6.1.x, 6.6.x (prior to specific stable releases); 6.8
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel network scheduler allows local attackers to trigger memory corruption via improper handling of TC_ACT_CONSUMED return values.

Executive Summary:
A critical use-after-free vulnerability in the Linux kernel network scheduler could allow an attacker to cause system instability or execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-64530

Affected Software: Linux Kernel

Affected Versions: 5.15.212, 6.1.178, 6.6.145, 6.12.97 (and prior stable versions)

Vulnerability: The vulnerability exists in the tcf_qevent_handle function within the network scheduler API. The function fails to handle TC_ACT_CONSUMED return values correctly, leading to a use-after-free condition when the kernel attempts to operate on a socket buffer that is no longer owned by the caller.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating a critical risk to system integrity, confidentiality, and availability. Successful exploitation could lead to kernel panics, denial of service, or potentially privilege escalation, which would significantly disrupt business operations and compromise sensitive data stored on the affected server.

Remediation Plan

Immediate Action: Update the Linux kernel to the versions specified in the enrichment data: 5.15.212, 6.1.178, 6.6.145, or 6.12.97 or later.

Proactive Monitoring: Monitor system logs for kernel oops or crash reports that coincide with network traffic anomalies.

Compensating Controls: Restrict access to network configuration tools and limit the ability of non-privileged users to interact with traffic control (tc) sub-systems.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 26, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex and requires specific conditions, such as the use of defragmentation engines, to trigger the use-after-free state.

Analyst Recommendation

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected Linux distributions as part of their next maintenance cycle. Ensure that all production kernels are updated to the latest stable versions to mitigate the risk of local exploitation.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 3.17 up to 5.10.259, 5.15.210, 6.1.176
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Linux kernel QAT driver involving unused character devices and IOCTLs has been resolved to prevent potential security exposures.

Executive Summary:
A high-severity vulnerability in the Linux kernel QAT driver, involving improper character device management, may allow local attackers to compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-64529

Affected Software: Linux Kernel

Affected Versions: Versions starting from 3.17 up to 5.10.259, 5.15.210, and 6.1.176

Vulnerability: The vulnerability exists in the QuickAssist Technology (QAT) driver, which exposed unused character devices (qat_adf_ctl) and associated IOCTLs. An authenticated local user could potentially leverage these interfaces to interact with device configurations or status queries in an unauthorized manner.

Business Impact

With a CVSS score of 7.8, this kernel-level flaw poses a significant risk to system security. An attacker with local access could potentially escalate privileges, compromise data, or cause system instability by manipulating the driver interfaces, leading to a complete loss of system integrity and availability.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, or 6.6.144, depending on the current branch in use.

Proactive Monitoring: Audit system logs for any unexpected usage of the qat_adf_ctl character device or anomalous IOCTL calls.

Compensating Controls: Implement strict kernel module loading policies and limit user access to sensitive device nodes to minimize the attack surface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The removal of unused code paths is a standard security hardening practice that effectively mitigates this risk.

Analyst Recommendation

Kernel vulnerabilities require immediate attention due to their potential for full system compromise. Organizations running Linux distributions should verify their kernel version and apply the upstream patches provided by their respective distribution maintainers.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 5.14 and versions containing the specified commit range
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Linux kernel drm/hyperv driver contains an out-of-bounds read vulnerability due to improper validation of the resolution_count parameter.

Executive Summary:
A memory corruption vulnerability in the Linux kernel drm/hyperv driver may allow a local attacker to cause a system crash or potentially access sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-64524

Affected Software: Linux Kernel

Affected Versions: 5.14 and various sub-versions (see fixed versions for details)

Vulnerability: The driver fails to validate the resolution_count field during a SYNTHVID_RESOLUTION_RESPONSE operation, allowing it to exceed the defined array bounds. This is a local, unauthenticated vulnerability that occurs during the parsing loop.

Business Impact

While the vulnerability requires local access, the potential for denial of service or information disclosure is significant in multi-tenant or shared environments. With a CVSS score of 7.7, this flaw represents a high risk to system stability and data confidentiality for affected Linux deployments.

Remediation Plan

Immediate Action: Update the Linux kernel to a patched version, specifically 5.15.210, 6.1.176, 6.6.143, or 6.12.93.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected driver errors related to hyperv components.

Compensating Controls: Restrict local system access to authorized personnel only to reduce the attack surface for local-only vulnerabilities.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is an inherent logic error in the driver code, making it stable and reproducible for an attacker with local access.

Analyst Recommendation

System administrators should prioritize patching the kernel to the recommended versions listed above. Given the potential for system-wide instability, testing the patch in a staging environment is advised before a full production rollout.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Versions prior to 6.12.93, 6.18.44, and 7.0.12
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/685b10dd0e32c7782cead16c8cf055c609678583","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b913801ad9b9a51437d84d030ec6843e08976bd6","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/16eaba5aa89c04eea125905bb8f988c1897f4f29","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/09dba37eee70d0596e26645015f1aa95a9848e9d","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A reference counting vulnerability in the Linux kernel net/handshake subsystem allows potential memory corruption due to premature socket release.

Executive Summary:
A critical use-after-free vulnerability in the Linux kernel net/handshake component poses a severe risk of system compromise or instability.

Vulnerability Details

CVE-ID: CVE-2026-64523

Affected Software: Linux Kernel

Affected Versions: Versions prior to 6.12.93, 6.18.44, and 7.0.12

Vulnerability: The vulnerability exists in the net/handshake subsystem, where an incorrect reference count on the file pointer backing a socket can lead to a race condition. An unauthenticated attacker could trigger this flaw to cause a use-after-free scenario, potentially leading to system crashes or arbitrary code execution.

Business Impact

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level. Successful exploitation allows for remote, unauthenticated access to the kernel, which may result in full system compromise, data exfiltration, or prolonged service disruption. Given the ubiquity of the Linux kernel in enterprise infrastructure, this flaw represents a significant risk to organizational availability and data integrity.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.12.93, 6.18.44, 7.0.12, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected reboots, or suspicious network activity originating from the handshake subsystem.

Compensating Controls: Implement network segmentation and restrict access to services that utilize the handshake protocol to minimize the attack surface until patches are applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is fundamentally an implementation error regarding reference counting in kernel memory management, which is a common vector for high-impact exploitation.

Analyst Recommendation

Due to the critical nature of this kernel-level vulnerability and the lack of required privileges for exploitation, immediate patching is essential. Administrators should prioritize upgrading affected Linux kernels to the specified fixed versions to eliminate the risk of remote exploitation and system instability.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.17.4 up to 6.18
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Linux kernel mlx5e driver causes an eswitch mode block underflow during IPsec acquire SA operations, potentially leading to system instability.

Executive Summary:
A high-severity memory management flaw in the Linux kernel mlx5e driver may allow for system-level disruption, necessitating an immediate kernel update.

Vulnerability Details

CVE-ID: CVE-2026-64522

Affected Software: Linux Kernel

Affected Versions: 6.17.4 up to 6.18

Vulnerability: This is an integer underflow vulnerability occurring within the mlx5e_xfrm_add_state function, triggered during the handling of temporary IPsec security associations. The vulnerability does not require authentication to trigger if an attacker can influence the network traffic processed by the affected driver.

Business Impact

Successful exploitation of this flaw could result in a kernel panic or an unrecoverable system hang, leading to significant service downtime. Given the CVSS score of 8.8, this vulnerability represents a high risk to availability for infrastructure relying on the mlx5e driver for high-performance networking and IPsec offloading.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the mlx5e driver module.

Compensating Controls: Restrict network access to devices utilizing the affected mlx5e hardware offload features to trusted segments to reduce the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is an inherent logic error in memory management, which typically requires specific network conditions to trigger.

Analyst Recommendation

Organizations utilizing affected Linux kernel versions should prioritize patching as part of their next maintenance cycle. The stability of the networking stack is critical, and applying the vendor-provided kernel updates is the only definitive way to resolve this underflow condition.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.12
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A buffer handling vulnerability in the Linux kernel arm_ffa firmware driver allows for out-of-bounds memory copies due to insufficient validation of firmware-provided indices.

Executive Summary:
A high-severity memory corruption vulnerability in the Linux kernel arm_ffa driver may allow local attackers to compromise system integrity and availability.

Vulnerability Details

CVE-ID: CVE-2026-64520

Affected Software: Linux Kernel

Affected Versions: 6.12

Vulnerability: The arm_ffa driver improperly trusts firmware-provided indices when copying partition descriptors into a caller-provided buffer. This is a local vulnerability where an attacker with the ability to interact with the FFA interface could trigger an out-of-bounds memory write.

Business Impact

With a CVSS score of 8.4, this vulnerability poses a significant threat to system security. Exploitation could allow an attacker to escalate privileges or cause a system crash, resulting in unauthorized data access or complete system compromise.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later versions that include the necessary bounds checking for the FFA interface.

Proactive Monitoring: Monitor for kernel-level security events or unusual system behavior that might indicate memory corruption attempts.

Compensating Controls: Ensure that access to the system is restricted to authorized users only, as this vulnerability requires local access to the affected environment.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex and requires specific interaction with the FFA firmware interface.

Analyst Recommendation

System administrators should apply the latest kernel patches to address this memory corruption flaw. Given the potential for privilege escalation, patching should be treated with high urgency in environments where local users have access to system interfaces.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.19 and previous releases
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Linux kernel drm/amdgpu driver related to VCE 1 firmware size and offset calculations has been addressed.

Executive Summary:
An improper calculation of firmware size in the Linux kernel AMDGPU driver may lead to memory-related vulnerabilities and system-wide compromise.

Vulnerability Details

CVE-ID: CVE-2026-64516

Affected Software: Linux Kernel

Affected Versions: Versions up to 6.19

Vulnerability: The vulnerability stems from an incorrect calculation of the VCPU Buffer Object (BO) size in the drm/amdgpu/vce1 driver, where the actual firmware offset was not properly accounted for. This could result in memory corruption or out-of-bounds access when the driver interacts with the firmware.

Business Impact

This vulnerability carries a CVSS score of 8.8, reflecting its potential for a high impact on confidentiality, integrity, and availability. A local attacker could leverage this memory corruption to gain unauthorized access to kernel memory, potentially leading to a system crash or privilege escalation, which severely threatens the security posture of the affected infrastructure.

Remediation Plan

Immediate Action: Update the Linux kernel to version 7.0.11 or any version 7.1 and later, which contains the necessary fixes for the VCE 1 firmware size calculation.

Proactive Monitoring: Monitor system logs for kernel oops or memory-related errors associated with the amdgpu driver.

Compensating Controls: Ensure that systems are running with hardened kernel configurations and that untrusted users are restricted from accessing graphics-related device drivers.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While complex to exploit, memory management flaws in graphics drivers are historically attractive targets for local privilege escalation.

Analyst Recommendation

Given the high CVSS severity, organizations should prioritize updating the Linux kernel on all systems utilizing AMD graphics hardware. Apply the patches provided by your distribution vendor as soon as they become available to mitigate the risk of memory corruption attacks.

---METADATA---
VENDOR: Linux
PRODUCT: Linux Kernel
AFFECTED_VERSIONS: 4d70e9c5488dd57ff5fcabe4d4ecf3d9dd4555ff up to (excluding) 1f573e17bcb7275ddd1c8f47f46ae0faf0e902a4 (and related branches)
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Linux kernel wifi mac80211 subsystem contains a flaw in multi-link element (MLE) defragmentation that may lead to memory corruption or instability.

Executive Summary:
A memory management vulnerability in the Linux kernel mac80211 subsystem poses a high risk of system instability or potential exploitation via adjacent network access.

Vulnerability Details

CVE-ID: CVE-2026-64515

Affected Software: Linux Linux Kernel

Affected Versions: Linux Kernel versions prior to 6.12.92, 6.18.34, and 7.0.11.

Vulnerability: This vulnerability resides in the mac80211 wireless subsystem, specifically during the handling of multi-link elements within non-transmitted profiles. An attacker within adjacent network range can trigger an incorrect pointer reference during the defragmentation routine, leading to undefined behavior.

Business Impact

Exploitation of this kernel-level vulnerability can result in denial of service through system crashes or potential privilege escalation. Given the CVSS score of 8.3 and the nature of kernel vulnerabilities, this represents a critical risk to the stability and security of wireless-enabled infrastructure.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.12.92, 6.18.34, 7.0.11, or later, depending on the current distribution branch. These updates contain the necessary fixes to the MLE defragmentation logic.

Proactive Monitoring: Review system crash logs and kernel panic reports for patterns indicating memory corruption or crashes within the wireless driver stack.

Compensating Controls: Disable wireless interfaces on systems where they are not strictly required to mitigate the attack vector until the kernel can be updated.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Kernel memory corruption flaws are highly complex and can be leveraged by sophisticated actors to achieve reliable code execution.

Analyst Recommendation

Updating the Linux kernel is essential for maintaining system integrity. Organizations should coordinate with their distribution maintainers to ensure that the patched kernel versions are deployed across all affected wireless-enabled endpoints as soon as they become available.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Linux: 132d44dc6966c1cf841ffe0f6f048165687e870b up to (excluding) 3394e0b3328422431cadaf314fa58d3717ed4936, 132d44dc6966c1cf841ffe0f6f048165687e870b up to (excluding) 3bceb26dfaf7ba805b459e41c1d0ba916862dade, 132d44dc6966c1cf841ffe0f6f048165687e870b up to (excluding) 91bc6767a4f55dc470d8a56b55b9f2ea09094efe, Linux Linux: 6.14
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/3394e0b3328422431cadaf314fa58d3717ed4936","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/3bceb26dfaf7ba805b459e41c1d0ba916862dade","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/91bc6767a4f55dc470d8a56b55b9f2ea09094efe","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:12.862Z
---END_METADATA---

Description Summary:
A heap corruption vulnerability exists in the Linux kernel IIO ADC ad_sigma_delta driver due to improper handling of registerless devices.

Executive Summary:
A heap corruption vulnerability in the Linux kernel IIO ADC subsystem affects specific versions and can lead to complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-64502

Affected Software: Linux Kernel

Affected Versions: Linux Linux: 132d44dc6966c1cf841ffe0f6f048165687e870b up to (excluding) 3394e0b3328422431cadaf314fa58d3717ed4936, 3bceb26dfaf7ba805b459e41c1d0ba916862dade, 91bc6767a4f55dc470d8a56b55b9f2ea09094efe; Linux Linux: 6.14

Vulnerability: This is a heap overflow flaw caused by an incorrect fallback path in the ad_sigma_delta_clear_pending_event function for registerless devices, requiring local low-privileged access.

Business Impact

A successful exploit of this vulnerability could allow an authenticated local attacker to achieve severe system instability, arbitrary code execution, or complete system compromise. The high CVSS score of 7.8 reflects the potential for total loss of confidentiality, integrity, and availability of the affected host.

Remediation Plan

Immediate Action: Update the Linux kernel to fixed versions such as 6.18.39, 7.1.4, or later where the patch has been integrated.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalous process terminations that might indicate heap corruption attempts.

Compensating Controls: Restrict local shell access and enforce strict the principle of least privilege to minimize the risk of unauthorized users executing malicious code locally.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents a significant local risk via kernel memory corruption if untrusted local users can interact with vulnerable IIO ADC hardware drivers.

Analyst Recommendation

Administrators managing systems utilizing the affected Linux kernel versions should prioritize applying the official upstream patch or updating to a secure kernel release immediately. Given the high severity and potential for core system compromise, mitigating this vulnerability prevents local privilege escalation and kernel instability.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.14 and earlier (specifically involving ad_sigma_delta driver)
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/c313bb7c38855e94ceef939d152dd75e5a904b5f","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f1de829ee87a1198d3465493ce430d36c5fa029c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/c72da0688575e5ef39c36bb44fed53aa18f8ae65","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The Linux kernel ad_sigma_delta driver contains a flaw in state management that causes Chip Select signals to remain asserted and leads to SPI bus locking errors.

Executive Summary:
A flaw in the Linux kernel ad_sigma_delta driver allows a local attacker to cause state leaks and improper SPI bus behavior, leading to potential system instability and unauthorized hardware interaction.

Vulnerability Details

CVE-ID: CVE-2026-64501

Affected Software: Linux Kernel

Affected Versions: Versions up to 6.14; fixed in 6.18.39 and 7.1.4.

Vulnerability: This vulnerability involves improper handling of the Chip Select (CS) state and bus locking mechanisms within the ad_sigma_delta ADC driver. A local authenticated user can trigger error paths that leave the SPI bus in an inconsistent state, allowing for concurrent SPI access and potential integrity or availability compromises.

Business Impact

The exploitation of this vulnerability could lead to system instability or denial of service due to the improper handling of SPI hardware communication. While the attack requires local access, the resulting integrity impact on hardware communication presents a risk to systems where SPI-connected peripherals are used for critical operations. The CVSS score of 7.1 reflects the high impact on system integrity and availability, even with the requirement for local privileges.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel-level SPI bus errors or unexpected device driver resets.

Compensating Controls: Restrict local system access to authorized personnel only to mitigate the risk posed by the required local privilege vector.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is an implementation error in kernel-level hardware driver state management, which is typically difficult to weaponize without specific local access to the affected hardware interface.

Analyst Recommendation

This vulnerability represents a significant stability and security risk for systems utilizing the affected ADC drivers. Security teams should prioritize patching the kernel to the recommended versions to ensure the SPI bus state remains consistent and protected against potential manipulation. Immediate attention is required to prevent local privilege exploitation of hardware communication channels.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/9dc84ba4be5bbeb29ee49efe6cea2cb32c461424","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/d16a702ca7d29c0b7a9b509339d1b044a1cadb32","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a13ef1adbc62085b21b546b07b0be7e2fbf52150","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0d4a646d7f87ea3625fafe387043fddc6a2f5e7f","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/72c6aa8e0d74eab91b8694cde97dec088c248fee","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9edefd4c56bee3fe331e0355d1f10a533134999d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f187dc5a4c4846ffa07d9bda6e760837ed005574","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/af791d295737ea6b6ff2c8d8488462a49c14af01","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A race condition in the Linux kernel Industrial I/O (IIO) subsystem allows a local attacker to access event FIFO data prematurely, potentially leading to information disclosure or system instability.

Executive Summary:
A race condition in the Linux kernel IIO subsystem, exploitable by local users, poses a high risk of information disclosure and potential denial of service.

Vulnerability Details

CVE-ID: CVE-2026-64496

Affected Software: Linux Kernel

Affected Versions: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is a race condition (CWE-362) occurring within the IIO event handling mechanism. A local attacker with low privileges can trigger a conflict between the file descriptor allocation and the FIFO reset process, allowing unauthorized access to kernel data structures.

Business Impact

Successful exploitation allows a local attacker to read data from the kernel FIFO buffer, which may contain sensitive information. Given the CVSS score of 7.1, this vulnerability presents a significant risk to systems where low privileged users are present, as it enables the compromise of confidentiality and system integrity. This could lead to unauthorized data exposure or system crashes, impacting operational availability.

Remediation Plan

Immediate Action: Update the Linux kernel to the corrected versions (5.10.261, 5.15.212, 6.1.178, 6.6.145, or later) as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unusual kernel-related errors or repeated attempts to access IIO event interfaces by unauthorized processes.

Compensating Controls: Restrict access to IIO character devices to only necessary users and processes to reduce the local attack surface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires local, low-privileged access to the system, which restricts the potential threat landscape primarily to multi-user environments or systems with compromised local accounts.

Analyst Recommendation

This vulnerability represents a significant local security flaw within the Linux kernel. Administrators should prioritize patching their kernel versions to the specified fixed releases to eliminate the race condition. Regular kernel updates are essential to mitigating this and similar local privilege or information disclosure risks.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions from d6568e3de42dd971a1356f7ba581e6600d53f0a0 up to (excluding) 3243563f99ef5d3949b934bd6390a5679405d0e1 and related branches
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/3243563f99ef5d3949b934bd6390a5679405d0e1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/5da9742de22db0dbaa8d414214ab5e1bedde00f9","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/21584672fd699abe1768241d6c501b2de6139b6a","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/c77a6cbb36ff8cbc1f084d94f8dcda5250935271","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A metadata validation flaw in the Linux kernel ALSA virtio sound driver allows out-of-bounds memory access via malicious device responses.

Executive Summary:
An out-of-bounds access vulnerability in the Linux kernel ALSA virtio driver can lead to arbitrary code execution, system crashes, or data compromise.

Vulnerability Details

CVE-ID: CVE-2026-64490

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions from d6568e3de42dd971a1356f7ba581e6600d53f0a0 up to (excluding) 3243563f99ef5d3949b934bd6390a5679405d0e1 and related stable branches prior to the fix

Vulnerability: This is an improper input validation vulnerability within the virtio sound driver parsing logic, where unverified device-provided control metadata allows local attackers with specialized privileges or compromised virtio backends to trigger out-of-bounds memory operations with no user interaction required.

Business Impact

A successful exploitation of this flaw can result in complete system compromise, allowing an attacker to achieve arbitrary code execution, escalate privileges, or cause a denial of service via kernel panics. The CVSS score of 8.4 reflects the high severity of confidentiality, integrity, and availability impacts if the kernel memory is successfully manipulated.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.12.96, 6.18.39, 7.1.4, or later where the metadata validation patch is applied.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected virtio driver errors that may indicate exploitation attempts.

Compensating Controls: Restrict access to virtual machine guest configurations and untrusted virtio hardware backends until patches can be deployed.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires specific conditions involving a compromised or malicious virtio backend device to trigger the out-of-bounds condition.

Analyst Recommendation

System administrators must prioritize patching the Linux kernel to the designated fixed versions to prevent potential out-of-bounds memory corruption. Applying the vendor-supplied updates immediately is critical to maintaining kernel stability and safeguarding system integrity against compromised virtual hardware devices.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 04177158cf98a79744937893b100020d77e6f9ac up to (excluding) b27a75d42044d9d4709095617730b91b1c4af423, 426a9947a38d272d0e19c031658da68e31128667, and 4a60127debb9e370d6c0e22a307326b624a141f3; and version 6.13
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/b27a75d42044d9d4709095617730b91b1c4af423","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/426a9947a38d272d0e19c031658da68e31128667","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4a60127debb9e370d6c0e22a307326b624a141f3","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:20.963Z
---END_METADATA---

Description Summary:
A task creation error unwind flaw in the Linux kernel ALSA compress component allows a local authenticated attacker to cause resource leaks and incorrect status reporting.

Executive Summary:
An improper task creation error unwind flaw in the Linux kernel ALSA compress component affects the Linux Kernel, creating local privilege escalation and system compromise risks.

Vulnerability Details

CVE-ID: CVE-2026-64485

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions 04177158cf98a79744937893b100020d77e6f9ac up to (excluding) b27a75d42044d9d4709095617730b91b1c4af423, 426a9947a38d272d0e19c031658da68e31128667, and 4a60127debb9e370d6c0e22a307326b624a141f3; and version 6.13

Vulnerability: This is a resource management and error handling flaw in the ALSA compress driver task creation function, requiring local access with low privileges and no user interaction.

Business Impact

A successful exploit of this vulnerability could allow a local authenticated user to compromise confidentiality, integrity, and availability of the affected system through resource leaks and improper error handling. With a CVSS score of 7.8, this high-severity flaw threatens underlying host stability and security if unpatched.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later depending on the active release branch, or apply the official fix commits.

Proactive Monitoring: Monitor system logs for kernel resource allocation failures or anomalous error codes related to ALSA compress audio tasks.

Compensating Controls: Restrict local shell access and auditing user privileges to minimize the risk of unauthorized local execution.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability.

Analyst Recommendation

Given the high severity score and potential for complete system compromise via local vector, administrators should prioritize updating the Linux kernel to the corrected versions. Immediate application of the upstream patch prevents resource leaks and potential privilege escalation.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 up to (excluding) 8947215c0136c9d905e4a46d824824f8b48a2e5b, ce0a903d0591e3e2c790c5b628802b08d1b287cc, d6a40a4d083ef74d00c8f9516cb5ff07ac70720b, and b65020d5398f499c09498c9786dba6d67ae57664
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/8947215c0136c9d905e4a46d824824f8b48a2e5b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ce0a903d0591e3e2c790c5b628802b08d1b287cc","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/d6a40a4d083ef74d00c8f9516cb5ff07ac70720b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b65020d5398f499c09498c9786dba6d67ae57664","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:29.291Z
---END_METADATA---

Description Summary:
A flaw in the Linux kernel ALSA hda cs35l41 driver allows local users with low privileges to trigger use-after-free conditions and achieve high system compromise.

Executive Summary:
A use-after-free vulnerability in the Linux kernel ALSA hda cs35l41 driver affects multiple kernel branches, posing a severe risk of local privilege escalation and system compromise.

Vulnerability Details

CVE-ID: CVE-2026-64481

Affected Software: Linux Kernel

Affected Versions: Linux Linux versions 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 up to (excluding) 8947215c0136c9d905e4a46d824824f8b48a2e5b, ce0a903d0591e3e2c790c5b628802b08d1b287cc, d6a40a4d083ef74d00c8f9516cb5ff07ac70720b, and b65020d5398f499c09498c9786dba6d67ae57664

Vulnerability: This vulnerability is a use-after-free flaw caused by improper firmware load work teardown and unbind handling in the cs35l41_hda ALSA driver, requiring low local privileges to exploit.

Business Impact

A successful exploit allows an authenticated local attacker to achieve high confidentiality, integrity, and availability impacts. This can lead to total system compromise, arbitrary code execution within kernel space, and potential data leakage. The CVSS score of 7.8 reflects the severity of local privilege escalation within core operating system components.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.12.97, 6.18.39, 7.1.4, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual driver teardown errors related to the ALSA subsystem.

Compensating Controls: Restrict local shell access and harden system permissions to prevent untrusted local users from executing arbitrary code or loading unauthorized kernel modules.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents a credible local threat due to the complexity of kernel memory management bugs.

Analyst Recommendation

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately. Applying the latest kernel patches removes the unsafe driver state dereferences and prevents potential local system takeovers.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 5.13 and various kernels prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/0f2a35a0c7ea7da347b814750eaa78adf3582381","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/8d65decde9afd2bd78bcfffdc0df73b82a0b5509","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ef4c38d30b3744e89eb5048218904bb629ea8d47","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9e0a3f642e607848669235f5069f35640abbfc88","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/42d758a09d2c46c42357ecde9a5492f015bde2e5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/52adb2dff7ce3d8430e2bdc5988b618a430def85","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/278a5659c391fe5afe5f9ce1bad1fd24e90144f1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/daedde7f024ecf88bc8e832ed40cf2c795f0796a","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A memory management flaw in the Linux kernel vfio/pci driver allows for potential use-after-free conditions during device registration failure, which may lead to system compromise.

Executive Summary:
A critical vulnerability in the Linux kernel vfio/pci driver could allow a local, low-privileged attacker to achieve full system compromise through a use-after-free condition.

Vulnerability Details

CVE-ID: CVE-2026-64475

Affected Software: Linux Kernel

Affected Versions: 5.13 and various versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145.

Vulnerability: The vulnerability involves an improper cleanup of the VGA arbiter client during a device registration failure in the vfio/pci subsystem. This failure creates a stale callback reference to a freed memory object, allowing an authenticated, low-privileged local user to potentially trigger arbitrary code execution or system instability.

Business Impact

The vulnerability carries a CVSS score of 8.8, indicating a high severity risk. Successful exploitation allows a local attacker to escalate privileges, leading to full system compromise, unauthorized data access, and potential service disruption. Given the critical role of the Linux kernel in enterprise infrastructure, this flaw poses a significant risk to the confidentiality, integrity, and availability of host systems.

Remediation Plan

Immediate Action: Update the Linux kernel to the versions specified in the enrichment data: 5.10.261, 5.15.212, 6.1.178, or 6.6.145, depending on the current distribution branch.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected errors related to the vfio/pci driver or device initialization sequences.

Compensating Controls: Restrict access to local system accounts to reduce the number of potential attackers capable of executing local commands.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw is theoretically exploitable by a local user, the requirement for specific device registration failure conditions limits the ease of weaponization.

Analyst Recommendation

Organizations should prioritize patching affected Linux kernels to the identified stable release versions. Because this vulnerability exists within the core kernel, regular patching cycles must be strictly followed to mitigate the risk of local privilege escalation and potential system-wide compromise.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/5602a43f251c3d75312df91a422675fc00ca3dce","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0be901ab1dcc4af59b88f2e324493bb283850167","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/48aeda9f8039e4a6971d1804578efde7f2c01eda","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/45df558c543bb5543bacc8065fd7c567740781e5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/d45ef513eed1abebfec90c3cfb6ae50c2a4182db","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/328ccf32acb87e8bbb1fe2b065068c574e4db2bf","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0f15f0f6ca5df566275ce517f257af2559528b41","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f223d27a546c1e1f48d38fd67760e78f068fe8c4","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:36.599Z
---END_METADATA---

Description Summary:
A use-after-free vulnerability exists in the Linux kernel binder subsystem due to a race condition in binder_free_transaction() when handling locks.

Executive Summary:
A use-after-free vulnerability in the Linux kernel binder driver allows local attackers to achieve arbitrary code execution or cause a system crash.

Vulnerability Details

CVE-ID: CVE-2026-64468

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is a use-after-free vulnerability in the binder_free_transaction function of the Linux kernel binder subsystem, where a race condition occurs after dropping the transaction lock, requiring low local privileges to exploit.

Business Impact

Successful exploitation of this flaw can lead to a complete compromise of the affected operating system, resulting in unauthorized data access, privilege escalation, or system instability and denial of service. The CVSS score of 7.8 reflects a high severity threat, primarily constrained by the requirement for local access.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots associated with slab allocation errors and KASAN reports.

Compensating Controls: Restrict local shell access and implement strict principle-of-least-privilege controls to minimize the number of users capable of executing code on the host.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability.

Analyst Recommendation

Given the high severity of this kernel-level vulnerability and its potential to facilitate full privilege escalation, administrators must prioritize applying the latest kernel patches across all supported environments. Immediate deployment of the updated packages is vital to eliminate the underlying use-after-free condition.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions up to excluding 89b8cc948dce661af87527623b3a41cdd115e2f9, 74920b1b4e474ba7a4de4323c0458deec49d210b, 803c8a9502e9b97cd6ae937618ef4a8fd6274343, and fixed in 6.18.39, 7.1.4
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/89b8cc948dce661af87527623b3a41cdd115e2f9","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/74920b1b4e474ba7a4de4323c0458deec49d210b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/803c8a9502e9b97cd6ae937618ef4a8fd6274343","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A reference counting corruption vulnerability exists in the Linux kernel rust_binder driver on 32-bit systems, allowing local authenticated users to corrupt memory and potentially achieve escalation of privilege.

Executive Summary:
A reference count corruption vulnerability in the Linux kernel rust_binder driver on 32-bit architectures allows local attackers with low privileges to corrupt memory and impact system integrity.

Vulnerability Details

CVE-ID: CVE-2026-64467

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions up to excluding 89b8cc948dce661af87527623b3a41cdd115e2f9, 74920b1b4e474ba7a4de4323c0458deec49d210b, 803c8a9502e9b97cd6ae937618ef4a8fd6274343, and fixed in 6.18.39, 7.1.4

Vulnerability: This is a memory corruption flaw within the rust_binder component, specifically caused by improper use of data types when walking the offsets array on 32-bit kernels, requiring local low-privileged access.

Business Impact

Successful exploitation of this vulnerability could lead to severe system instability, denial of service, or potential escalation of privilege on affected 32-bit host environments. Given the high CVSS score of 8.8, an attacker who has already obtained local access can leverage this flaw to compromise the confidentiality, integrity, and availability of the underlying operating system.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later, or apply the official patches provided by the vendor.

Proactive Monitoring: Monitor kernel logs for recurring error messages such as reference count underflow warnings related to the rust_binder driver.

Compensating Controls: Restrict local shell access and auditing user accounts to limit potential threat actors from executing low-privileged code on vulnerable 32-bit systems.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents an inherent local risk specifically on 32-bit kernels due to improper stride calculations during array cleanup operations.

Analyst Recommendation

Administrators managing 32-bit Linux environments utilizing the rust_binder driver must prioritize applying the latest kernel updates. Promptly integrating these fixes eliminates the reference accounting corruption vector and secures system stability against local privilege escalation attempts.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Versions prior to 6.18.39 and 7.1.4
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/657646c08c94ef7b9dbe468fe7828032216f9841","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4caf12c778fed3dc3824cf36263be5e2c491fbd0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/8bc4d43bccbd60efe85d0a44d5bf41762f2f0c30","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A race condition in the Linux kernel TCP-AO implementation allows potential use-after-free scenarios during socket destruction.

Executive Summary:
A critical use-after-free vulnerability in the Linux kernel TCP stack exposes systems to potential remote code execution or denial of service attacks.

Vulnerability Details

CVE-ID: CVE-2026-64459

Affected Software: Linux Kernel

Affected Versions: Versions prior to 6.18.39 and 7.1.4

Vulnerability: This flaw exists due to the incorrect removal of an RCU grace period in the tcp_ao_destroy_sock function. An unauthenticated remote attacker can trigger this race condition, causing the kernel to access memory that is in the process of being freed, leading to memory corruption.

Business Impact

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level due to its potential for full system compromise. Successful exploitation could allow an attacker to execute arbitrary code with kernel-level privileges or crash the system, resulting in significant service disruption and data exposure.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later versions where the RCU grace period restoration fix has been implemented.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected segmentation faults that may indicate exploitation attempts against the network stack.

Compensating Controls: While no direct virtual patch exists, ensure that network perimeter defenses are configured to drop malformed or suspicious TCP packets that may attempt to trigger complex socket state transitions.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex, requiring precise timing of network packets to win the race condition, which may limit the pool of potential attackers capable of developing a reliable exploit.

Analyst Recommendation

Given the critical nature of this kernel-level vulnerability, organizations must prioritize patching their Linux environments. System administrators should verify their current kernel version and apply the recommended updates as part of the next scheduled maintenance window to eliminate the risk of remote memory corruption.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/3aa3e89cf80721c8d382b4c1a2b70a0449dad4a5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/63335e7b638ae70028ae285bb95153874a8bc852","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2e788948ff2a13358a303af112497a63201c5739","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/fde19b0d4eeabae042519313c843fe6f27d41e9d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/81dd21b5f0c299cc7b5bf84f04a61938559d20e6","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/285e17c44e3873a73460f294acbd64018ff64385","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/92d5736a62040ec1cfff23ea57e6599301690ad5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/e3046eeada299f917a8ad883af4434bfb86556b1","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A buffer overflow vulnerability in the Linux kernel virtio-rng driver allows out-of-bounds memory access via a malicious or compromised hypervisor.

Executive Summary:
A critical out-of-bounds memory access vulnerability exists in the Linux kernel virtio-rng driver that could allow a malicious hypervisor to leak sensitive kernel memory.

Vulnerability Details

CVE-ID: CVE-2026-64456

Affected Software: Linux Kernel

Affected Versions: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The virtio-rng driver fails to validate the length of data reported by the device before performing a memcpy operation. This flaw allows a malicious hypervisor to trigger an out-of-bounds read, potentially exposing sensitive data from adjacent kernel slab memory to the guest environment.

Business Impact

Successful exploitation of this vulnerability poses a significant risk to the confidentiality of guest virtual machines, particularly within confidential computing environments. By leaking kernel memory contents, an attacker could potentially obtain sensitive information or cryptographic keys, leading to complete compromise of the guest instance. While the CVSS score of 7.7 reflects high severity, the nature of the flaw in cross-boundary scenarios elevates the urgency for systems utilizing virtualized infrastructure.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later, depending on the specific stable branch in use.

Proactive Monitoring: Monitor kernel logs for unusual virtio-rng driver behavior and implement memory integrity monitoring tools within virtualized guest environments.

Compensating Controls: Ensure that virtual machine configurations follow the principle of least privilege regarding hypervisor access and maintain strict isolation between guest and host memory spaces.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw exists due to a lack of bounds checking in the virtio-rng driver, which is inherently exploitable if the hypervisor is untrusted or compromised.

Analyst Recommendation

This vulnerability represents a critical risk for users of virtualized Linux environments. Administrators should prioritize patching the kernel across all affected guest instances to prevent potential memory leakage. Given the potential for cross-boundary data exposure, immediate application of the provided kernel updates is strongly advised to maintain the security posture of virtualized workloads.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/9c2f5c0829a8c8b904dae36be6d8056b719ac605","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/80b5c8779acee0550845394fb3e5176a398aa24c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/cc27aea4d454abfb385ee2c9499c78b96db9b728","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a8e3a94711134e898c6021a6b77374efa91b3639","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/593b78bb3c7ef0c6e9ae6fdf5afa80a5f7573168","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0beccbcf50de125be5520d0ffc59af4bb8655482","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b713aa0cc344f10f7a9928a230b5f5e780d04078","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1720db928e5a58ca7d75ac1d514c3b73fd7061a7","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Linux kernel 6lowpan subsystem can be triggered during an error path in NHC descriptor processing, potentially leading to system instability or code execution.

Executive Summary:
A use-after-free vulnerability within the Linux kernel 6lowpan component exposes systems to potential memory corruption and instability when processing specific network headers.

Vulnerability Details

CVE-ID: CVE-2026-64452

Affected Software: Linux Kernel

Affected Versions: Versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The flaw exists in the lowpan_nhc_do_uncompression function, where a race condition occurs during error handling, causing a use-after-free scenario when accessing NHC descriptors. An attacker with adjacent network access can trigger this condition, requiring specific timing and user interaction to exploit the race window.

Business Impact

The vulnerability carries a CVSS score of 7.1, reflecting a high risk due to the potential for memory corruption which may result in a kernel panic or unauthorized code execution. If exploited, an attacker could compromise the integrity and availability of the affected system, leading to service disruption or potential privilege escalation within the kernel space.

Remediation Plan

Immediate Action: Update the Linux kernel to the corrected versions (5.10.261, 5.15.212, 6.1.178, 6.6.145, or later) as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-related crashes, specifically looking for KASAN reports or "use-after-free" memory warnings that may indicate exploitation attempts.

Compensating Controls: Restrict network access to the affected kernel subsystem by isolating devices that utilize 6LoWPAN, or implement network-level filtering to minimize exposure to untrusted adjacent devices.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires a precise race condition to be triggered, which limits the likelihood of opportunistic exploitation in the wild.

Analyst Recommendation

Given the potential for kernel-level impact, it is imperative that administrators prioritize patching systems utilizing the 6LoWPAN protocol. Verify the kernel version currently in use and apply the relevant security updates provided by the upstream Linux kernel maintainers or your specific distribution vendor to mitigate the risk of memory corruption.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/055663d21dc4336f67933ab26bef3c5934be6324","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/016f5995c37a5a2c45198308f830f244517d70b7","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/74b45af86a767594ba52330cd440ea84e24d700d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9a51115fcdc78687c8852bf93a1db3951dbb223b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a21ed5064217cc33726da6c7ef1a520eba43aea1","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2de42e268174766cb2e2b90721afdfdff70e0d8d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f333b6851bdf326fd2134133272dbbed0c94d921","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2b66974a1b6134a4bbc3bfed181f7418f688eb54","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A memory safety vulnerability exists in the Linux kernel TIPC subsystem where a lack of bounds checking on broadcast Gap ACK blocks leads to an out-of-bounds memory read.

Executive Summary:
A critical out-of-bounds read vulnerability in the Linux kernel TIPC subsystem could allow an unauthenticated remote attacker to compromise system memory and cause service disruption.

Vulnerability Details

CVE-ID: CVE-2026-64450

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions prior to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: The vulnerability exists in the TIPC (Transparent Inter-Process Communication) broadcast handling logic. An unauthenticated attacker can send a crafted broadcast message that fails to validate the size of Gap ACK blocks against the actual message data, resulting in an out-of-bounds read via kmemdup.

Business Impact

The flaw carries a CVSS score of 9.1, reflecting its critical potential for remote exploitation without user interaction. Successful exploitation may lead to the disclosure of sensitive kernel memory contents or cause a system crash, resulting in significant service downtime and potential exposure of proprietary data residing in the kernel address space.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later, depending on the current stable branch in use.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or crashes and analyze network traffic for malformed TIPC protocol messages.

Compensating Controls: If patching is not immediately feasible, disable the TIPC module if it is not required for system operations to eliminate the attack surface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its location in the kernel's network stack, which allows for remote triggers before authentication occurs.

Analyst Recommendation

Given the critical nature of this kernel-level vulnerability and the lack of required authentication for exploitation, system administrators should prioritize patching as part of the next scheduled maintenance cycle. Ensure that all downstream Linux distributions are updated as soon as their respective maintainers release the relevant kernel packages.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions up to excluding 6.1.178, 6.6.145, 6.12.96, and 6.18.39
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/65358d89dc9f1c25d9364b2b3ef0f3b47717f9ed","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/adc8b9c30d716c362646edb45662aa1c641a154a","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/8eff7cd4817e14dbe3b9952cce55ef52d1d38940","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/e99f2df433c63c86c93de1e5f08f16e404388756","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1b495fa0d4927c88d88bf346bf311f2e26e860ed","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9f32f38265014fac7f5dc9490fb01a638ce6e121","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:43.951Z
---END_METADATA---

Description Summary:
A buffer overflow vulnerability exists in the Linux kernel VME user staging driver due to missing bounds checking on read and write operations.

Executive Summary:
An out-of-bounds memory access vulnerability in the Linux kernel staging VME user driver allows local authenticated attackers to achieve complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-64449

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions up to excluding 6.1.178, 6.6.145, 6.12.96, and 6.18.39

Vulnerability: This is a buffer overflow vulnerability involving the vme_user staging driver helper functions, requiring low local privileges and no user interaction to execute.

Business Impact

A successful exploit permits local users to execute arbitrary code with elevated privileges, resulting in total confidentiality, integrity, and availability loss of the host operating system. The CVSS score of 7.8 reflects the high severity of the potential impact, though the local attack vector slightly mitigates the overall exposure compared to network-based flaws.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.1.178, 6.6.145, 6.12.96, 6.18.39, or later depending on the active release branch.

Proactive Monitoring: Monitor system audit logs for abnormal kernel crashes, segmentation faults, or unauthorized access attempts to local VME device nodes.

Compensating Controls: Restrict local shell access and apply strict file permission controls on VME device files to prevent unauthorized interaction by unprivileged users.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw was discovered through static analysis and requires local system access to trigger.

Analyst Recommendation

Administrators must prioritize updating affected Linux kernel packages to the patched versions as part of standard maintenance cycles. Applying these kernel updates promptly neutralizes the vector for local privilege escalation and protects underlying system integrity.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 3.6 up to 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/8d0bbc78046d264bbf6a574ea6f9072258a43e35","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b6a381c01e2ac98a48e32ac0f2a45bbadd9e26b0","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/31c6312608c60b72a1feb99a5afb680645a3e8a3","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/573e502d14714d2947e22e7eff40ec20a6a44a42","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/419ec1b604d7fb60c10aec2dc062371f9fcd4940","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ceb875a375dedbf51c9425c1d13a2d7a8435c08c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6e9d10f62773b99bd927940fd9cbdfe7207e23ff","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/53b7c271f06be4dd5cfc8c6ef552a8355c891a7f","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability in the Linux kernel SMB client allows unauthenticated remote servers to cause potential denial of service or information disclosure.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel SMB client implementation can lead to kernel memory exposure or denial of service when interacting with non-conforming servers.

Vulnerability Details

CVE-ID: CVE-2026-64448

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions 3.6 up to 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is an out-of-bounds read vulnerability in the smb2_check_message function of the Linux kernel client, triggered by improper length calculations on responses from unauthenticated remote attackers.

Business Impact

A successful exploit of this vulnerability can result in kernel crashes leading to system downtime, or unauthorized disclosure of sensitive kernel memory contents. With a CVSS score of 8.2, this high-severity flaw poses a significant risk to enterprise environments running vulnerable Linux kernels, as it can be triggered remotely without authentication during early connection phases such as SMB negotiate and session setup.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later stable releases containing the official fix.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or KASAN memory error reports related to SMB client operations.

Compensating Controls: Restrict outbound and inbound SMB traffic at network boundaries to trusted internal file shares, and prevent mounting SMB shares from untrusted or external servers.

Exploitation Status

Public Exploit Available: No - As of Jul 25, 2026, there is no confirmed public exploit in the available data.

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's remote trigger mechanism increases its inherent risk, but exploitation requires interacting with a malicious or non-conforming SMB server.

Analyst Recommendation

Administrators managing systems that utilize the Linux CIFS/SMB client should prioritize updating their kernel packages immediately. Applying the upstream patches prevents out-of-bounds memory reads and secures the node against crafted responses from malicious servers during the initial connection handshake.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) b5ddc7257bee71f5b8cf9083e2b0ac0427e9fbb3, b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) 837c1f9655421055f751ed34745e820a54a27642, b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) d3a9a8cf2d7fd61a2f63df61f6cbc0a9bb007cc0, 6.17
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/b5ddc7257bee71f5b8cf9083e2b0ac0427e9fbb3","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/837c1f9655421055f751ed34745e820a54a27642","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/d3a9a8cf2d7fd61a2f63df61f6cbc0a9bb007cc0","name":null,"tags":[]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T10:58:52.223Z
---END_METADATA---

Description Summary:
A memory management flaw in the Linux kernel staging media ipu7 driver leads to double-free and use-after-free conditions in error paths.

Executive Summary:
A double-free and use-after-free vulnerability exists in the Linux kernel ipu7 media driver, allowing local attackers with low privileges to achieve high impact on confidentiality, integrity, and availability.

Vulnerability Details

CVE-ID: CVE-2026-64447

Affected Software: Linux Kernel

Affected Versions: Linux Kernel b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) b5ddc7257bee71f5b8cf9083e2b0ac0427e9fbb3, b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) 837c1f9655421055f751ed34745e820a54a27642, b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 up to (excluding) d3a9a8cf2d7fd61a2f63df61f6cbc0a9bb007cc0, and version 6.17

Vulnerability: This is a memory management vulnerability involving double-free and use-after-free conditions within error paths of the ipu7_isys_init and ipu7_psys_init functions. An attacker requires local access and low privileges with no user interaction to trigger the flaw.

Business Impact

A successful exploit of this memory corruption vulnerability can allow an attacker with local access to compromise system integrity, access sensitive data, or crash the operating system, resulting in denial of service. The assigned CVSS score of 7.8 establishes this as a high-severity risk that demands prompt patching on affected systems.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later versions where the fix has been applied.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots that may indicate memory corruption attempts.

Compensating Controls: Restrict local user access and audit system permissions to ensure untrusted users cannot execute arbitrary code or interact with vulnerable hardware drivers.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability arises from improper handling of device reference counts and memory deallocation during initialization error paths in the kernel driver.

Analyst Recommendation

Administrators managing systems utilizing the affected Linux kernel versions should prioritize applying the official kernel updates immediately. Because this flaw allows local privilege escalation or system disruption via memory corruption, timely patching is critical to maintaining host security.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel (rtl8723bs)
AFFECTED_VERSIONS: 4.12 up to (excluding) 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Linux kernel rtl8723bs Wi-Fi driver contains a WEP length underflow and out-of-bounds read vulnerability in the OnAuth() function.

Executive Summary:
A critical buffer overflow vulnerability in the Linux rtl8723bs Wi-Fi driver allows an attacker within radio range to execute arbitrary code or crash the system.

Vulnerability Details

CVE-ID: CVE-2026-64445

Affected Software: Linux Kernel (rtl8723bs driver)

Affected Versions: 4.12 up to (excluding) 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is a memory corruption vulnerability involving an integer underflow and out-of-bounds read within the OnAuth() function of the rtl8723bs driver. An unauthenticated attacker within radio range can send malformed 802.11 authentication frames to trigger this flaw.

Business Impact

The CVSS score of 8.8 reflects the high risk posed by this vulnerability, particularly for mobile or embedded devices using the rtl8723bs chipset. An attacker could achieve remote code execution, leading to a complete compromise of the wireless device or significant denial-of-service, potentially impacting corporate network integrity.

Remediation Plan

Immediate Action: Update the Linux kernel to versions 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor wireless interface logs for abnormal authentication patterns or frequent driver-related crashes.

Compensating Controls: If the kernel cannot be updated, disable the rtl8723bs driver or restrict the use of the affected wireless hardware in high-security environments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of the flaw, involving radio-frequency access, makes it an attractive target for proximity-based attacks.

Analyst Recommendation

Organizations should prioritize patching systems running the rtl8723bs driver. Given that this vulnerability can be triggered by unauthenticated attackers within radio range, it represents a significant security risk that requires urgent attention.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 5.15 before 5.15.212, 6.1 before 6.1.178, 6.6 before 6.6.145, and related development branches
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/889ca6000ac7fa73457b041848fcb08e0d51b809","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1a52a05471494546f955a58e8c170c0c796c52d5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0406d746574e875d8778552eb674fcfbf5330bfb","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/0970dd47726a57e52013594e9fbf667586eb3673","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/04f612dc03427e0b1ac80a2611b5ac0ba93ac446","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/7e7741c8315e4160aead00a60cdd6f81ab880717","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f9654207e92283e0acac5d64fe5f8835383b5a23","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability in the Linux kernel wireless driver rtl8723bs allows an adjacent attacker to cause a denial of service or information disclosure.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel rtl8723bs wireless driver allows adjacent attackers to trigger memory disclosure or service disruption.

Vulnerability Details

CVE-ID: CVE-2026-64444

Affected Software: Linux Kernel

Affected Versions: Linux Kernel 5.15 before 5.15.212, 6.1 before 6.1.178, 6.6 before 6.6.145, and 6.12 before 6.12.96

Vulnerability: This is an out-of-bounds read flaw caused by insufficient boundary checks within the OnAssocRsp information element parsing loop, triggerable by unauthenticated adjacent attackers via malicious Association Response frames.

Business Impact

A successful exploit against this vulnerability can lead to kernel memory disclosure or system crashes, resulting in unexpected service downtime for affected hosts. With a CVSS score of 8.1, the high severity rating reflects the potential for severe impact on system availability and confidentiality within the local radio frequency domain.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.15.212, 6.1.178, 6.6.145, 6.12.96, or later depending on the active branch, and reboot the system.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalies related to wireless driver operations and memory access violations.

Compensating Controls: Restrict wireless network access to trusted access points and utilize MAC filtering or physical security controls to limit adjacent attack vectors.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires proximity to the wireless network interface, limiting its attack surface primarily to the local broadcast domain.

Analyst Recommendation

Given the high CVSS severity and the low complexity required for exploitation on wireless interfaces, administrators must prioritize applying the latest kernel patches. Coordinate with distribution maintainers to deploy updated packages and ensure all vulnerable nodes are rebooted to clear active runtime memory.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 4.12 and versions up to excluding 5e8db4cff5b45c7c4edc8ae3f302027c3bb32b25, 6dd5e8c3011ebabf417257d7f07901a7c4311539, 9193c34f75fd9e1ea8a590d7cced464c3380dc29, bd953d52d587d42365e399b96c52dbdb13032070, 69f174a0673b6b7a29b851adb60bc450cdc0ecc4, b5cc2f999927f69723ca53f1f2a3aa37dbeda907, ed51de4a86e173c3b0ef78e039c2e49e08b11f16
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/5e8db4cff5b45c7c4edc8ae3f302027c3bb32b25","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6dd5e8c3011ebabf417257d7f07901a7c4311539","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/9193c34f75fd9e1ea8a590d7cced464c3380dc29","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/bd953d52d587d42365e399b96c52dbdb13032070","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/69f174a0673b6b7a29b851adb60bc450cdc0ecc4","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b5cc2f999927f69723ca53f1f2a3aa37dbeda907","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ed51de4a86e173c3b0ef78e039c2e49e08b11f16","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability in the Linux kernel staging rtl8723bs driver allows an adjacent malicious access point to cause information disclosure or denial of service.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel rtl8723bs driver affects multiple kernel branches and poses a high risk of information disclosure or denial of service via malicious Wi-Fi beacons.

Vulnerability Details

CVE-ID: CVE-2026-64443

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions 4.12 and versions up to excluding 5e8db4cff5b45c7c4edc8ae3f302027c3bb32b25, 6dd5e8c3011ebabf417257d7f07901a7c4311539, 9193c34f75fd9e1ea8a590d7cced464c3380dc29, bd953d52d587d42365e399b96c52dbdb13032070, 69f174a0673b6b7a29b851adb60bc450cdc0ecc4, b5cc2f999927f69723ca53f1f2a3aa37dbeda907, ed51de4a86e173c3b0ef78e039c2e49e08b11f16

Vulnerability: This is an out-of-bounds read flaw located in the update_beacon_info function within the staging rtl8723bs wireless driver, triggered by an unauthenticated adjacent attacker sending malformed information elements in beacon frames.

Business Impact

A successful exploit can lead to kernel memory exposure or system crashes, resulting in unexpected node downtime and potential leakage of sensitive kernel memory contents. The CVSS score of 8.1 indicates high severity, primarily driven by the potential for high impacts to confidentiality and availability when processing untrusted wireless management frames.

Remediation Plan

Immediate Action: Update the Linux kernel to patched upstream versions including 5.15.212, 6.1.178, 6.6.145, 6.12.96, or later depending on the active release series.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or driver-related errors associated with wireless interface operations.

Compensating Controls: Restrict wireless network connectivity to trusted access points and disable the vulnerable rtl8723bs staging driver if wireless functionality is not required.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires proximity to the target network interface, limiting remote exploitability.

Analyst Recommendation

System administrators maintaining affected Linux kernel branches must apply the official upstream patches immediately to prevent potential denial of service conditions and unauthorized memory reads. Prioritize updating kernel packages across all vulnerable deployments utilizing the rtl8723bs wireless driver.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions 4.12 up to excluding 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/bc881c9915c4468747d0ca5fd1abd7b313cfb0f4","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/605ebd94d0f469204f3c9f2f84acc71e43e2780f","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/a830bdc82461353bf7b1f8a2ad2689bf5d2de444","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4c21eec80cf502d9ea18e0b946246b2376452786","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ad2637c46ef8b8ae0894372a2d39fdfcdc420a1e","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/c38d16b1ffac385c9e4b38447cd5c46af1114b58","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/402f13ec95945f34a210b28df1f8740d3d4a58c5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/ef61d628dfad38fead1fd2e08979ae9126d011d5","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability in the Linux kernel staging rtl8723bs driver allows a malicious access point to cause information disclosure or denial of service via crafted IE loops.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel rtl8723bs wireless staging driver allows adjacent attackers to cause information disclosure or denial of service.

Vulnerability Details

CVE-ID: CVE-2026-64442

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions 4.12 up to excluding 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is an out-of-bounds read flaw caused by missing header bounds checks in information element parsing loops within the issue_assocreq and join_cmd_hdl functions, requiring no privileges and no user interaction from an adjacent network position.

Business Impact

A successful exploit can lead to unauthorized disclosure of sensitive kernel memory or trigger a system crash resulting in denial of service for wireless clients. With a CVSS score of 8.1, the vulnerability presents a high severity risk due to the potential for operational disruption and memory leakage within the networking subsystem of affected hosts.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or the latest stable release incorporating the upstream fix commits.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots associated with wireless interface driver operations.

Compensating Controls: Restrict wireless network associations to trusted access points and utilize network segmentation to limit exposure to potentially malicious broadcast frames.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw stems from insufficient bounds checking when processing truncated information elements from AP beacon and probe-response frames.

Analyst Recommendation

System administrators maintaining wireless infrastructure running the affected rtl8723bs staging driver must apply the official kernel patches immediately. Promptly updating the kernel prevents potential information leaks and denial of service attacks originating from malicious or spoofed wireless access points.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Linux: 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) efa27d487abcdec79669a60a6d94d5d6eceb7c1d, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 2ea1ce30ead61589214240e8d33d96310fd613e5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) b27ecba3196f6c14e3809595ebd69c0c2392512a, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 6ab1161e539fb7a1c8b35ff5a6ced4702e855b9c, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 4b51ee8a40fe47864197d73cc02b191de7a6b072, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 729c4e72563bda0f1725db1db9ea08df06f41d9b, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/efa27d487abcdec79669a60a6d94d5d6eceb7c1d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2ea1ce30ead61589214240e8d33d96310fd613e5","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/b27ecba3196f6c14e3809595ebd69c0c2392512a","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6ab1161e539fb7a1c8b35ff5a6ced4702e855b9c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/4b51ee8a40fe47864197d73cc02b191de7a6b072","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/729c4e72563bda0f1725db1db9ea08df06f41d9b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
Missing bounds checks in the Linux kernel staging rtl8723bs driver IE parsing functions lead to out-of-bounds reads.

Executive Summary:
An out-of-bounds read vulnerability in the Linux kernel rtl8723bs wireless staging driver allows adjacent attackers to cause potential information disclosure or denial of service.

Vulnerability Details

CVE-ID: CVE-2026-64441

Affected Software: Linux Kernel

Affected Versions: Linux Linux: 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) efa27d487abcdec79669a60a6d94d5d6eceb7c1d, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 2ea1ce30ead61589214240e8d33d96310fd613e5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) b27ecba3196f6c14e3809595ebd69c0c2392512a, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 6ab1161e539fb7a1c8b35ff5a6ced4702e855b9c, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 4b51ee8a40fe47864197d73cc02b191de7a6b072, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 729c4e72563bda0f1725db1db9ea08df06f41d9b, 554c0a3abf216c991c5ebddcdb2c08689ecd290b up to (excluding) 1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344

Vulnerability: This is an out-of-bounds read vulnerability within information element parsing functions inside the rtl8723bs driver, requiring no privileges and an adjacent network attack vector.

Business Impact

Successful exploitation of this flaw can lead to kernel memory disclosure or system instability, potentially resulting in localized denial of service. The high CVSS score of 8.8 reflects the severity of allowing low-privilege adjacent actors to compromise confidentiality, integrity, and availability within the kernel space.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.15.212, 6.1.178, 6.6.145, 6.12.97, or later where the bounds checks have been properly implemented.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalies related to wireless driver initialization and frame processing.

Compensating Controls: Restrict physical and wireless network access to trusted personnel and segment vulnerable wireless hardware from critical network zones.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw exists due to insufficient validation of raw information element buffers during wireless parsing routines.

Analyst Recommendation

Given the high CVSS severity and potential impact on kernel stability, administrators should prioritize applying the updated kernel packages or disabling the vulnerable staging driver module if wireless functionality is not strictly required.

---METADATA---
VENDOR: Linux
PRODUCT: Linux Kernel
AFFECTED_VERSIONS: Linux Kernel versions 4.12 up to (excluding) 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/37f642d47c3648a707df3ceb092eee1adffbfd28","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/8c872b47c7fc32e95e0da1db7512388794adcd69","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/bb3b942da4123b55d1cacf19d1a7d5ba15dbf83a","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/918537a0fbed85aab61fa28ad75e6279070610c9","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6f91621fc45025ad3c0be796b70e6e4cee22fc69","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/225b6d3fc7e99ac3d20b6c861d1e47d24e7ea31d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f8001e1a516ba3b495728c65b61f799cbfad6bd0","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
An out-of-bounds write vulnerability exists in the Linux kernel rtl8723bs wireless staging driver via unvalidated 802.11 association response frames.

Executive Summary:
An out-of-bounds write vulnerability in the Linux kernel wireless staging driver allows adjacent attackers to cause memory corruption, integrity loss, or denial of service.

Vulnerability Details

CVE-ID: CVE-2026-64440

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions from 4.12 up to (excluding) 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This is an out-of-bounds write flaw located in the HT_caps_handler function of the rtl8723bs wireless driver, where an unauthenticated adjacent attacker using a malicious access point can supply an unvalidated length parameter.

Business Impact

A successful exploit can compromise system stability and data integrity, potentially leading to kernel crashes or arbitrary memory overwrites on affected hosts. Given the CVSS score of 8.1, this high severity vulnerability poses a significant operational risk to wireless infrastructure utilizing the vulnerable driver.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.15.212, 6.1.178, 6.6.145, or later where the upstream fix is integrated.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots associated with wireless driver modules.

Compensating Controls: Restrict wireless network access to trusted access points and disable the vulnerable rtl8723bs staging driver module if wireless functionality is not required.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents a credible adjacent threat vector due to the lack of input validation on wireless frames.

Analyst Recommendation

Administrators must treat this high severity kernel vulnerability with urgency by applying the official kernel patches immediately. Ensuring that affected staging drivers are updated or disabled will prevent potential adjacent memory corruption and maintain overall system security.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: 6.15 (and earlier versions prior to specified fixes)
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/ef6feb77e2d91761427c5b773edc9c97e1b706ad","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/2b7bd6dccff14b8b632c5244f1fd506918077221","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6c9dddeb582fde005360f4fe02c760d45ca05fb5","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The Linux kernel crypto krb5 implementation fails to filter out asynchronous AEAD instances, leading to a use-after-free vulnerability when handling cryptographic requests.

Executive Summary:
A critical use-after-free vulnerability in the Linux kernel crypto krb5 subsystem could allow an unauthenticated attacker to trigger memory corruption and potential code execution.

Vulnerability Details

CVE-ID: CVE-2026-64439

Affected Software: Linux Kernel

Affected Versions: 6.15 (and earlier versions prior to specified fixes)

Vulnerability: The vulnerability exists because the krb5 encryption and decryption helpers do not account for asynchronous AEAD instances. When an asynchronous backend returns an EINPROGRESS status, the system prematurely frees a buffer that is still in use by a background worker, resulting in a use-after-free condition upon completion.

Business Impact

The flaw carries a CVSS score of 9.8, indicating a critical severity due to its potential for full system compromise. Successful exploitation could lead to unauthorized code execution, system instability, or full service disruption. Given that this affects core cryptographic functions, it poses a significant risk to the integrity and confidentiality of data processed by the Linux kernel.

Remediation Plan

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later versions where the async AEAD instances are properly filtered at allocation time.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process terminations, which may indicate memory corruption events associated with this use-after-free flaw.

Compensating Controls: While no direct virtual patch exists for kernel-level memory corruption, restricting access to network services that utilize krb5 encryption (such as rxrpc, AFS, or Ceph) can reduce the attack surface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically complex, requiring a specific configuration where an asynchronous AEAD provider is bound to the krb5 encryption type.

Analyst Recommendation

This vulnerability is highly severe and requires immediate attention for all systems utilizing the affected kernel versions. Administrators should prioritize patching the kernel to the recommended versions to prevent potential memory exploitation. Testing updates in a staging environment is advised to ensure compatibility with existing cryptographic configurations before deployment to production systems.

---METADATA---
VENDOR: Linux
PRODUCT: Kernel
AFFECTED_VERSIONS: Linux Kernel versions up to excluding 5.10.261, 5.15.212, 6.1.178, and 6.6.145
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://git.kernel.org/stable/c/218c2836b3987f3fa1d9eac505462cded0821e4c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/446b4d77599cf1a168573f7fb32a4a6aa4f09219","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/5d916c1eae1933511a69bffe243b4ee5d7da399c","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/f344a369d0380d54c8d6c8d24734a78dd5a89817","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/51144032248cc4ea22917370565650670b8b4e9b","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/49cd5ac6de8de39a14ead609bb552d372d5602cd","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/6e92b28cd74fa433658efeadf21b9d4b01023d7d","name":null,"tags":[]},{"url":"https://git.kernel.org/stable/c/277281c10c63791067d24d421f7c43a15faa9096","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A use-after-free vulnerability exists in the Linux kernel crypto QAT driver due to a race condition during SR-IOV teardown operations.

Executive Summary:
A use-after-free vulnerability in the Linux kernel crypto QAT driver allows local users with low privileges to achieve complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-64438

Affected Software: Linux Kernel

Affected Versions: Linux Kernel versions up to excluding 5.10.261, 5.15.212, 6.1.178, and 6.6.145

Vulnerability: This flaw is a use-after-free vulnerability caused by a race condition in the adf_disable_sriov() function during VF2PF work teardown, requiring low privileges and no user interaction.

Business Impact

Successful exploitation of this vulnerability can lead to full system compromise, including confidentiality, integrity, and availability loss. With a high CVSS score of 8.8, an attacker who has obtained local access could escalate privileges or cause kernel panics, resulting in system downtime and unauthorized access to sensitive system resources.

Remediation Plan

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panics, KASAN reports referencing qat_pf2vf_resp_wq, or unauthorized local access attempts.

Compensating Controls: Restrict local shell access and apply strict principle-of-least-privilege permissions to prevent untrusted local users from executing arbitrary code or manipulating device drivers.

Exploitation Status

Public Exploit Available: No (false / unknown)

Analyst Notes: As of Jul 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents significant local risk due to the potential for memory corruption and privilege escalation.

Analyst Recommendation

System administrators must prioritize patching affected Linux kernel instances immediately to remediate this high-severity use-after-free condition. Applying the appropriate stable kernel update prevents local attackers from exploiting driver teardown races to compromise host integrity.