Threats Tagged 'cve-2026-63956'

A security update for the SUSE Linux Enterprise 15 SP7 RT kernel addresses multiple security vulnerabilities across various kernel components, including hardware monitoring, Bluetooth, SCSI, networking, tracing, and more. These fixes resolve issues such as null pointer dereferences, memory leaks, use-after-free, out-of-bounds reads/writes, race conditions, and other kernel-level bugs. The update mitigates a broad range of potential security risks by correcting these defects.

A memory corruption vulnerability in the Linux kernel's USB serial driver for Cypress M8 devices has been fixed. The issue occurs when the interrupt-out endpoint max packet size is smaller than eight bytes, potentially leading to user-controlled slab corruption or NULL-pointer dereference. This flaw could be triggered by a malicious USB device reporting a small endpoint size. The vulnerability affects multiple Linux kernel versions prior to 7.0.0-28.28~24.04.1 and related builds. A patch is available and included in recent Ubuntu kernel updates. Users are advised to update and reboot to apply the fix.