The Linux kernel has been updated to address vulnerabilities that could lead to out-of-bounds (OOB) issues in specific compound requests.

🚨 EUVD-2026-24641 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+13 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in get_file_all_info() for compound requests When a compound request consists of QUERY_DIRECTORY + QUERY_INFO (FILE_ALL_INFORMATION) and the first command co... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24641 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24639 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24639 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24640 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(Security) is received, and the first command (READ) consumes most of the res... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24640 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24768 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+7 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing the configuration registers to go back to their default state, which is ze... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24768 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24797 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Multiple sysfs command paths dereference contexts_arr[0] without first verifying that kdamond->contexts->nr == 1. ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24797 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24796 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeat_call_fn() calls damon_sysfs_upd_tuned_intervals(), damon_sysfs_upd_schemes_stats(), and damon_sysfs_upd_schemes... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24796 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24798 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+6 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMON_SYSFS can leak memory u... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24798 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24830 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+6 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded(). However, the cleanup for ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24830 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24809 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_NO_DATA_INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sy... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24809 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24841 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+3 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registration can fail before the trigger-data cleanup kthread exists. Deferring those frees until lat... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24841 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24921 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+9 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oliver reported that x86_pmu_del() ended up doing an out-of-bound memory access when group_sched_in() fails and needs to roll back. Thi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24921 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24923 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+3 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-22 📝 In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() needs to explicitly kfree the resource as it is too early for cxl_region_iomem_release() to do so. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24923 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25461 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-24 📝 In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special cases where secure storage access exceptions happen in a kernel context for pages that don't hav... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25461 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25476 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-24 📝 In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xx_v4l2_open() em28xx_v4l2_open() reads dev->v4l2 without holding dev->lock, creating a race with em28xx_v4l2_init()'s error path and em28xx_v... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25476 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25504 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+5 more) 🏢 Vendor: Linux 📅 Updated: 2026-04-24 📝 In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each ACE SID against sid_unix_NFS_mode and on match reads sid.sub_auth[2] as the file mode. If sid_u... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25504 #cybersecurity #infosec #euvd #cve #vulnerability