Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux 10 RLSA-2026-41937 sssd Important Access Fix

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 10 glib2 Important Integer Underflow Fix RLSA-2026-42063

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 10 Pacemaker Important Denial of Service CVE-2026-10649

Calendar White Jul 22, 2026
Important
Rockylinux Esm H800
Rocky

Rocky Linux 10 libtiff Important Heap Overflow Update RLSA-2026-41892

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 10 acl Important Symlink Traversal Threat RLSA-2026-42739

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux glibc Moderate Security Fix Denial Service 2026-42694

Calendar White Jul 22, 2026
moderate
Rockylinux Esm H800
Rocky

Rocky Linux Dovecot Important Denial of Service Vulnern RLSA-2026-41988

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 10 c-ares Important Use-After-Free Issue RLSA-2026-42096

Calendar White Jul 22, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux python3.14 Important CPU Denial of Service Vuln RLSA-2026-40856

Calendar White Jul 22, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 292 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE Libinput Important Local Escalation Vuln 2026-2523-1

An update that solves two vulnerabilities can now be installed.. # Security update for libinput Announcement ID: SUSE-SU-2026:2523-1 Release Date: 2026-06-23T08:52:48Z Rating: important References: * bsc#1267852 Cross-References: * CVE-2026-50265 * CVE-2026-50292 CVSS scores: * CVE-2026-50265 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-50265 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50265 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50292 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50292 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for libinput fixes the following issues * CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2523=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2523=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2523=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-2523=1 * SUSE Linux EnterpriseHigh Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2523=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libinput-debugsource-1.21.0-150500.3.3.1 * libinput10-debuginfo-1.21.0-150500.3.3.1 * libinput-udev-debuginfo-1.21.0-150500.3.3.1 * libinput-tools-debuginfo-1.21.0-150500.3.3.1 * libinput10-1.21.0-150500.3.3.1 * libinput-devel-1.21.0-150500.3.3.1 * libinput-udev-1.21.0-150500.3.3.1 * libinput-tools-1.21.0-150500.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libinput-debugsource-1.21.0-150500.3.3.1 * libinput10-debuginfo-1.21.0-150500.3.3.1 * libinput-udev-debuginfo-1.21.0-150500.3.3.1 * libinput-tools-debuginfo-1.21.0-150500.3.3.1 * libinput10-1.21.0-150500.3.3.1 * libinput-devel-1.21.0-150500.3.3.1 * libinput-udev-1.21.0-150500.3.3.1 * libinput-tools-1.21.0-150500.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libinput-debugsource-1.21.0-150500.3.3.1 * libinput10-debuginfo-1.21.0-150500.3.3.1 * libinput-udev-debuginfo-1.21.0-150500.3.3.1 * libinput-tools-debuginfo-1.21.0-150500.3.3.1 * libinput10-1.21.0-150500.3.3.1 * libinput-devel-1.21.0-150500.3.3.1 * libinput-udev-1.21.0-150500.3.3.1 * libinput-tools-1.21.0-150500.3.3.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * libinput-debugsource-1.21.0-150500.3.3.1 * libinput10-debuginfo-1.21.0-150500.3.3.1 * libinput-udev-debuginfo-1.21.0-150500.3.3.1 * libinput-tools-debuginfo-1.21.0-150500.3.3.1 * libinput10-1.21.0-150500.3.3.1 * libinput-devel-1.21.0-150500.3.3.1 * libinput-debug-gui-1.21.0-150500.3.3.1 * libinput-udev-1.21.0-150500.3.3.1 * libinput-tools-1.21.0-150500.3.3.1 * libinput-debug-gui-debuginfo-1.21.0-150500.3.3.1 * libinput-extra-debugsource-1.21.0-150500.3.3.1 * openSUSE Leap 15.5 (x86_64) *libinput10-32bit-debuginfo-1.21.0-150500.3.3.1 * libinput10-32bit-1.21.0-150500.3.3.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libinput10-64bit-1.21.0-150500.3.3.1 * libinput10-64bit-debuginfo-1.21.0-150500.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libinput-debugsource-1.21.0-150500.3.3.1 * libinput10-debuginfo-1.21.0-150500.3.3.1 * libinput-udev-debuginfo-1.21.0-150500.3.3.1 * libinput-tools-debuginfo-1.21.0-150500.3.3.1 * libinput10-1.21.0-150500.3.3.1 * libinput-devel-1.21.0-150500.3.3.1 * libinput-udev-1.21.0-150500.3.3.1 * libinput-tools-1.21.0-150500.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50265.html * https://www.suse.com/security/cve/CVE-2026-50292.html * https://bugzilla.suse.com/show_bug.cgi?id=1267852 . Address important vulnerabilities in libinput with SUSE's latest security update. Recommended patch instructions included.. SUSE security patch libinput update escalations vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 23, 2026 •Important SuSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraimportant

Fedora 44 libinput Important Local Escalation Fix Advisory 2026-5e2446b30f

libinput 1.31.3, fixes a udev property inject via uinput devices that can lead to local privilege escalation. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5e2446b30f 2026-06-06 01:02:02.289317+00:00 -------------------------------------------------------------------------------- Name : libinput Product : Fedora 44 Version : 1.31.3 Release : 1.fc44 URL : http://www.freedesktop.org/wiki/Software/libinput/ Summary : Input device library Description : libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput need to provide the common set of functionality that users expect. -------------------------------------------------------------------------------- Update Information: libinput 1.31.3, fixes a udev property inject via uinput devices that can lead to local privilege escalation -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 4 2026 Peter Hutterer - 1.31.3-1 - libinput 1.31.3 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5e2446b30f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . libinput fix addresses local privilege escalation issue in Fedora 44. Immediate update recommended for system security.. Fedora Update, Privilege Escalation, Input Device Library. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 06, 2026 •Important Fedora
Banner 1 1028x280 1708121660 1771599717
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorycriticalmemory corruption

Ubuntu 25.10 Kernel Critical Privilege Escalation USN-8374-1

Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8374-1 June 02, 2026 linux-aws-6.17, linux-gcp, linux-gcp-6.17 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-aws-6.17: Linux kernel for Amazon Web Services (AWS) systems - linux-gcp-6.17: Linux kernel for Google Cloud Platform (GCP) systems Details: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000) It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300) Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handlingAppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334) Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337) Several securityissues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - Cryptographic API; - GPU drivers; - Ethernet bonding driver; - Network file system (NFS) server daemon; - Distributed Switch Architecture; - Netfilter; - Control group (cgroup); - Kernel kexec() syscall; - Memory management; - MAC80211 subsystem; - Multipath TCP; - Packet sockets; - RDS protocol; - RxRPC session sockets; - TLS protocol; - Unix domain sockets; - AppArmor security module; (CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134, CVE-2025-71139, CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-23274, CVE-2026-23351, CVE-2026-23394, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-31676, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-43494, CVE-2026-45966, CVE-2026-46028) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 linux-image-6.17.0-1018-gcp 6.17.0-1018.19 linux-image-6.17.0-1018-gcp-64k 6.17.0-1018.19 linux-image-gcp 6.17.0-1018.19 linux-image-gcp-6.17 6.17.0-1018.19 linux-image-gcp-64k 6.17.0-1018.19 linux-image-gcp-64k-6.17 6.17.0-1018.19 Ubuntu 24.04 LTS linux-image-6.17.0-1017-aws 6.17.0-1017.17~24.04.1 linux-image-6.17.0-1017-aws-64k 6.17.0-1017.17~24.04.1 linux-image-6.17.0-1018-gcp 6.17.0-1018.19~24.04.1 linux-image-6.17.0-1018-gcp-64k 6.17.0-1018.19~24.04.1 linux-image-aws 6.17.0-1017.17~24.04.1 linux-image-aws-6.17 6.17.0-1017.17~24.04.1 linux-image-aws-64k 6.17.0-1017.17~24.04.1 linux-image-aws-64k-6.17 6.17.0-1017.17~24.04.1 linux-image-gcp 6.17.0-1018.19~24.04.1 linux-image-gcp-6.17 6.17.0-1018.19~24.04.1 linux-image-gcp-64k 6.17.0-1018.19~24.04.1 linux-image-gcp-64k-6.17 6.17.0-1018.19~24.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8374-1 CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134, CVE-2025-71139, CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-23274, CVE-2026-23351, CVE-2026-23394, CVE-2026-31419, CVE-2026-31431, CVE-2026-31504, CVE-2026-31533, CVE-2026-31676, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-43284, CVE-2026-43494, CVE-2026-43500, CVE-2026-43503, CVE-2026-45966, CVE-2026-45998, CVE-2026-46000, CVE-2026-46028, CVE-2026-46300, CVE-2026-46333, CVE-2026-47326, CVE-2026-47327, CVE-2026-47328, CVE-2026-47329, CVE-2026-47330, CVE-2026-47332, CVE-2026-47333, CVE-2026-47334, CVE-2026-47337 Package Information: https://launchpad.net/ubuntu/+source/linux-gcp/6.17.0-1018.19 https://launchpad.net/ubuntu/+source/linux-aws-6.17/6.17.0-1017.17~24.04.1 https://launchpad.net/ubuntu/+source/linux-gcp-6.17/6.17.0-1018.19~24.04.1 . Discover several critical issues fixed in the Linux kernel on Ubuntu, addressing privilege escalation and memory security.. Ubuntu kernel security local escalation memory issues. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 02, 2026 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryupdateUbuntu

Ubuntu 22.04 Low Latency Kernel Escalation Risk USN-8351-1

Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8351-1 June 01, 2026 linux-lowlatency vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lowlatency: Linux low latency kernel Details: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - Packet sockets; - TLS protocol; (CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-46028) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-179-lowlatency 5.15.0-179.189 linux-image-5.15.0-179-lowlatency-64k 5.15.0-179.189 linux-image-lowlatency 5.15.0.179.151 linux-image-lowlatency-5.15 5.15.0.179.151 linux-image-lowlatency-64k 5.15.0.179.151 linux-image-lowlatency-64k-5.15 5.15.0.179.151 linux-image-lowlatency-64k-hwe-20.04 5.15.0.179.151 linux-image-lowlatency-hwe-20.04 5.15.0.179.151 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manuallyuninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8351-1 CVE-2026-31419, CVE-2026-31431, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-46028 Package Information: https://launchpad.net/ubuntu/+source/linux-lowlatency/5.15.0-179.189 . Several issues fixed in the Ubuntu low latency kernel, addressing potential escalation and system compromise risks.. Ubuntu kernel issues, low latency security, escalate privileges. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 •Low Ubuntu
Banner 1 1028x280 1708121660 1771599717
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisoryinformation leakcritical

Debian 11 Linux DLA-4587-1 Critical Escalation Info Leak CVE-2026-46333

A vulnerability has been discovered in the Linux kernel that may lead to information leaks or local privilege escalation. For Debian 11 bullseye, this problem has been fixed in version 5.10.251-5. We recommend that you upgrade your linux packages.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4587-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Ben Hutchings May 16, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : linux Version : 5.10.251-5 CVE ID : CVE-2026-46333 A vulnerability has been discovered in the Linux kernel that may lead to information leaks or local privilege escalation. For Debian 11 bullseye, this problem has been fixed in version 5.10.251-5. We recommend that you upgrade your linux packages. For the detailed security status of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A critical flaw in Debian Linux kernel enables information leaks and privilege escalation. Upgrade advised for protection.. Debian Linux Kernel Privilege Escalation Information Leak. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 16, 2026 •Critical Debian LTS
87
Ls Advisories Debian Esm H240
Price Tag%201security advisoryvulnerabilitypackage upgrade

Debian Bookworm Linux Critical Local Escalation DSA-6275-1 CVE-2026-46333

One vulnerability has been discovered in the Linux kernel that may lead to a local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 6.1.172-1. We recommend that you upgrade your linux packages.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6275-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso May 15, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : linux CVE ID : CVE-2026-46333 One vulnerability has been discovered in the Linux kernel that may lead to a local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 6.1.172-1. We recommend that you upgrade your linux packages. For the detailed security status of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical local privilege escalation vulnerability in the Linux kernel for Debian oldstable bookworm requires immediate upgrade.. Debian security advisory, Linux kernel update, privilege escalation. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 15, 2026 •Critical Debian
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Ubuntu 22.04 PyTorch 1.12.0 Major Security Patch 2026-a12bc3de45

update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in- lix-and-nix/77407 https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5dfbb9ed69 2026-05-14 00:41:12.640469+00:00 -------------------------------------------------------------------------------- Name : nix Product : Fedora 43 Version : 2.31.5 Release : 1.fc43 URL : https://github.com/NixOS/nix Summary : A purely functional package manager Description : Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis of the NixOS Linux distribution, but it can be used equally well under other Unix systems. See the README.fedora.md file for setup instructions. -------------------------------------------------------------------------------- Update Information: update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA- gr92-w2r5-qw5p https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in- lix-and-nix/77407 https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368 -------------------------------------------------------------------------------- ChangeLog: * Tue May 5 2026 Jens Petersen - 2.31.5-1 - update to 2.31.5: fixes GHSA-vh5x-56v6-4368 - https://discourse.nixos.org/t/security-advisory-local-privilege- escalation-in-lix-and-nix/77407 - https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-5dfbb9ed69' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . The Fedora 43 update for nix 2.31.5 addresses high and moderate security issues effectively.. Fedora nix update local escalation high security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 14, 2026 •Critical Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisoryupdatedebian

Debian 11 Bullseye linux-6.1 Important Local Escalation DLA-4574-1

Two vulnerabilities have been discovered in the Linux kernel that may lead to local privilege escalation. For Debian 11 bullseye, these problems have been fixed in version 6.1.170-3~deb11u1. This version also fixes some regressions found in the previous update.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4574-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Ben Hutchings May 09, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : linux-6.1 Version : 6.1.170-3~deb11u1 CVE ID : CVE-2026-43284 CVE-2026-43500 Debian Bug : 1135514 1135599 Two vulnerabilities have been discovered in the Linux kernel that may lead to local privilege escalation. For Debian 11 bullseye, these problems have been fixed in version 6.1.170-3~deb11u1. This version also fixes some regressions found in the previous update. We recommend that you upgrade your linux-6.1 packages. For the detailed security status of linux-6.1 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux-6.1 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Discover two critical issues in Debian's linux-6.1 kernel resolved with the latest update addressing local privilege escalation.. Debian Linux kernel Security Updates Privilege Escalation. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 09, 2026 •Important Debian LTS
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics