Bugs fixes in "linux-hwe-6.17"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-52955 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A message of type | 2026-08-01 |
| CVE | CVE-2026-52914 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv keeps a runnin | 2026-08-01 |
| CVE | CVE-2026-52986 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsi | 2026-08-01 |
| CVE | CVE-2026-52993 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially | 2026-08-01 |
| CVE | CVE-2026-53006 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull | 2026-08-01 |
| CVE | CVE-2026-53175 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush On netns t | 2026-08-01 |
| CVE | CVE-2026-53049 | In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the log flushing | 2026-08-01 |
| CVE | CVE-2026-53216 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM p | 2026-08-01 |
| CVE | CVE-2026-64531 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores gene | 2026-08-01 |
| CVE | CVE-2026-52999 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching In nf_osf_m | 2026-08-01 |
| CVE | CVE-2026-52982 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot reported a | 2026-08-01 |
| Launchpad | 2048183 | Don't produce linux-*-cloud-tools-common, linux-*-tools-common and linux-*-tools-host binary packages | 2026-08-01 |
| Launchpad | 2081030 | Clean up packaging bits | 2026-08-01 |
| CVE | CVE-2026-22984 | In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an | 2026-07-14 |
| CVE | CVE-2026-43304 | In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that | 2026-07-14 |
| CVE | CVE-2026-43406 | In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in process_message_header() If t | 2026-07-14 |
| CVE | CVE-2026-43407 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() This pa | 2026-07-14 |
| CVE | CVE-2026-43414 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp- | 2026-07-14 |
| CVE | CVE-2026-46243 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descript | 2026-07-14 |
| CVE | CVE-2026-43376 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd currently f | 2026-07-14 |
About
-
Send Feedback to @ubuntu_updates
