🌐 XMLRPC-C Error Pages Expose Reflected XSS
Teams using XMLRPC-C in web-facing services should upgrade promptly, especially where untrusted input can reach generated error pages.
CVE-2026-15928 is a reflected cross-site scripting vulnerability in the error page component of the XMLRPC-C Library. Versions 1.07 through 1.67.01 are affected. The issue is rated HIGH with CVSS 8.2.
🔗 Read more 🔗
Source: NVD
💥 Linux Traffic Control Bug Triggers Use-After-Free
Linux operators using traffic control, RED qdiscs, connection tracking, or fragmented traffic should prioritize kernel updates immediately.
CVE-2026-64530 is a Linux kernel use-after-free in the traffic-control qevent path. The code failed to handle TC_ACT_CONSUMED correctly, allowing the RED queueing discipline to continue using a network buffer it no longer owned. The vulnerability is rated CRITICAL with CVSS 9.8.
🔗 Read more 🔗
Source: NVD
🔧 Linux QAT Driver Drops Risky Legacy IOCTL Interface
Systems with Intel QAT hardware or the QAT kernel driver enabled should install the corrected kernel through their normal distribution update channel.
CVE-2026-64529 affects the Linux kernel QAT driver and concerns an unused character-device and IOCTL interface that expanded the driver attack surface. The remediation removes the configuration, lifecycle, status, and enumeration IOCTL paths along with related dead code. The issue is rated HIGH with CVSS 7.8.
🔗 Read more 🔗
Source: NVD
🖥️ Hyper-V Display Response Can Overrun Kernel Array
Administrators running Linux guests with Hyper-V synthetic video should patch soon, particularly on multi-tenant or less-trusted virtualization hosts.
CVE-2026-64524 affects the Linux Hyper-V DRM driver. A firmware response with a resolution_count greater than 64 could cause the parser to walk beyond the supported-resolution array, while faulty fallback handling could also prevent userspace framebuffers from being created. The vulnerability is rated HIGH with CVSS 7.7.
🔗 Read more 🔗
Source: NVD
🤝 Linux Handshake Framework Hit by File-Lifetime Flaw
Patch Linux systems that use kernel handshake consumers as a top priority, since the flaw involves unsafe object lifetime and concurrent cancellation paths.
CVE-2026-64523 is a Linux kernel lifetime-management vulnerability in the network handshake framework. A socket file could be released during the interval between request retrieval and descriptor preparation because the request did not hold a long-lived file reference. The issue is rated CRITICAL with CVSS 9.8.
🔗 Read more 🔗
Source: NVD
🔐 Linux mlx5 IPsec Path Causes Eswitch Counter Underflow
Operators using Mellanox or NVIDIA mlx5 adapters with IPsec offload should deploy the fixed kernel urgently to avoid corrupted eswitch state.
CVE-2026-64522 affects the Linux mlx5 Ethernet driver during IPsec acquire security-association handling. A success path could unblock eswitch mode without a matching block operation, underflowing the mode-block counter. The vulnerability is rated HIGH with CVSS 8.8.
🔗 Read more 🔗
Source: NVD
🛡️ Arm FFA Firmware Data Can Overflow Kernel Buffer
Patch affected Arm systems and firmware-integrated platforms promptly, especially where secure-world or platform firmware cannot be fully trusted.
CVE-2026-64520 affects the Linux kernel Arm FFA firmware interface. The register-based partition-information path trusted firmware-provided counts and indices, allowing descriptor copies to proceed beyond the allocated array. The issue is rated HIGH with CVSS 8.4.
🔗 Read more 🔗
Source: NVD
🎞️ AMDGPU VCE Firmware Layout Risks Out-of-Bounds Access
Linux workstations and servers using older AMD GPUs with VCE 1 support should update their kernel promptly.
CVE-2026-64516 affects the Linux AMDGPU VCE 1 driver. Incorrect firmware-size and offset calculations could permit out-of-bounds access when loading microcode into the VCPU buffer object. The vulnerability is rated HIGH with CVSS 8.8.
🔗 Read more 🔗
Source: NVD
📶 Linux Wi-Fi MLE Parsing Can Overrun Heap Data
Patch Linux laptops, access points, and embedded devices using mac80211, particularly where they process frames from untrusted nearby networks.
CVE-2026-64515 affects the Linux mac80211 subsystem’s multi-link element defragmentation logic. The parser could combine a defragmented pointer with elements from the original frame, causing incorrect parsing and a potential heap-data overrun. The issue is rated HIGH with CVSS 8.3.
🔗 Read more 🔗
Source: NVD
🧠 Linux ACPI NFIT Cleanup Bug Leaves Dangling Pointer
Prioritize kernel updates on systems using NVDIMM or ACPI NFIT, especially servers where machine-check events and persistent memory are relevant.
CVE-2026-64510 is a use-after-free vulnerability in the Linux ACPI NFIT subsystem. Failed initialization or later driver removal could leave a freed descriptor in a global list, with a subsequent ACPI Machine Check Exception triggering access to the dangling pointer. The issue is rated HIGH with CVSS 7.0.
🔗 Read more 🔗
Source: NVD
⚡ Linux ADC Driver Can Leak SPI State and Hold Chip Select
Embedded and industrial systems using sigma-delta ADCs should update their kernels promptly, especially when multiple devices share the SPI bus.
CVE-2026-64501 affects the Linux ad_sigma_delta ADC framework. Cleanup and error paths could leave chip select asserted, keep a device in continuous-conversion mode, or mark the SPI bus as locked after it had been released, enabling unsafe concurrent access. The vulnerability is rated HIGH with CVSS 7.1.
🔗 Read more 🔗
Source: NVD