The Linux kernel has been updated to address multiple vulnerabilities, including memory leaks and undefined behavior in specific functions.

🚨 EUVD-2026-24903 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a number of subvolumes with broken dentries. ls-ing the parent dir looks like: drwxrwxrwt 1 root r... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24903 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24902 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+15 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output_tail_tcp will return an error and not free the skb, because with synchronous crypt... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24902 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24905 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The caller of report_f... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24905 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24907 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+11 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn't check for bounds of the ELF section index in simplify_symbols(): for (i = 1; i < sy... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24907 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24909 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+11 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The ca... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24909 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24911 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+13 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24911 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24913 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+13 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning a newly allocated kmemdup()-allocated buffer, but never freeing it. Switch to devm... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24913 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24916 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bit division and modulo handlers use the kernel abs() macro on s32 operands. The abs()... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24916 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24917 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process_bpf_exit_full() passes check_lock = !curframe to check_resource_leak(), which is false in cases when bpf_throw() is called f... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24917 #cybersecurity #infosec #euvd #cve #vulnerability