cve patch management

  1. CVE-2026-45835 Linux Bluetooth L2CAP NULL Pointer: Why You Still Patch

    CVE-2026-45835 is a Linux kernel Bluetooth vulnerability published by NVD on May 26, 2026, after kernel.org reported a fixed NULL pointer dereference in L2CAP’s l2cap_sock_new_connection_cb() callback, with stable kernel patches already linked but no NVD severity score assigned yet. That dry...
  2. CVE-2026-46059: KVM AMD Nested Virtualization NextRIP Save/Restore Fix

    CVE-2026-46059 is a newly published Linux kernel KVM vulnerability, received by NVD on May 27, 2026, affecting AMD nested virtualization logic in nSVM when KVM restores an L2 guest after its first VMRUN. It is not yet scored by NVD, and the public record still sits in the frustrating “awaiting...