Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-84270 | A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length retu | gvfs gvfs gvfs |
| CVE | CVE-2026-84269 | A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that excee | gvfs gvfs gvfs |
| CVE | CVE-2026-84267 | A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a cert | gvfs gvfs gvfs |
| CVE | CVE-2026-97313 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failu | bind9 bind9 bind9 bind9 bind9 bind9 |
| CVE | CVE-2026-96888 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing t | bind9 bind9 bind9 bind9 bind9 bind9 |
| CVE | CVE-2026-94300 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can | bind9 bind9 bind9 bind9 bind9 bind9 |
| CVE | CVE-2026-19630 | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A | bind9 bind9 bind9 bind9 bind9 bind9 |
| Launchpad | 2172646 | linux-xilinx-zynqmp: FTBFS in drivers/mtd/spi-nor/swp.c: 'mtd' undeclared in spi_nor_sr_unlock( | linux-xilinx-zynqmp |
| Launchpad | 2169356 | Migrate linux-azure-nvidia kernel from 6.14 to 7.0 | linux-meta-azure-7.0 linux-meta-azure-7.0 |
| CVE | CVE-2026-114148 | Incorrect default permissions in ASP.NET Core allows an authorized att ... | dotnet10 dotnet8 dotnet10 dotnet11 dotnet10 dotnet8 |
| Launchpad | 2172343 | [SRU] caracal stable release ovn-octavia-provider | ovn-octavia-provider |
| CVE | CVE-2026-80917 | In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80819 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept rfcomm_sock_ | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80814 | In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ens | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80812 | In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trust | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80809 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs [BUG] lsetxattr() pani | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80808 | In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4_xattr_block_set() retrie | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80805 | In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entr | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80737 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
| CVE | CVE-2026-80803 | In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_ | linux-nvidia-tegra linux linux-nvidia-tegra linux linux-nvidia-tegra-igx linux-xilinx-zynqmp linux-nvidia-tegra-igx |
About
-
Send Feedback to @ubuntu_updates
