Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-74540 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp l2cap_le_connect_rsp() obtain | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74525 | In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allo | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74523 | In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in the recovery path A TX timeout | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74519 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_name on error path dt_remembe | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74518 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_region_entries() allocate_file | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74512 | In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` dest | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74508 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidp_recv_ctrl_fram | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74507 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidp_get_raw_report() w | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74505 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74499 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() snd_usbmidi_akai_ou | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74498 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set When a | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74497 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74495 | In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mappin | linux linux-nvidia-tegra linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74493 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination __smc_lgr_term | linux linux-nvidia-tegra linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74492 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype_resiz | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74490 | In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints du | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74488 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_ | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74485 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field delimiter The registration st | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74481 | In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix UAF during suspend During PM | linux linux linux-xilinx-zynqmp |
| CVE | CVE-2026-74480 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_gro | linux linux-nvidia-tegra linux linux-xilinx-zynqmp |
About
-
Send Feedback to @ubuntu_updates
