linux kernel vulnerability

CVE-2026-45987 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and listed by NVD on May 27, 2026, involving AMD nested virtualization state handling that can cause an L2 virtual machine to hang after restore or migration. The bug is not a flashy remote-code-execution...

CVE-2026-43494 is a newly published Linux kernel vulnerability, disclosed through NVD on May 21, 2026, in the Reliable Datagram Sockets networking code, where a failed zero-copy page-pin operation can leave stale accounting state and trigger a later double free. The bug is narrow in the way only...

The Linux kernel flaw tracked as CVE-2024-23849 is a classic off-by-one bounds-check error in the RDS receive path that can produce an out‑of‑bounds memory access and a denial‑of‑service (system crash) on affected kernels up to and including 6.7.1. Background / Overview Reliable Datagram Sockets...

The short answer is: Microsoft has publicly confirmed Azure Linux as a carrier of the upstream code path implicated by CVE‑2025‑38115, but that attestation is product‑scoped — it is not a technical guarantee that no other Microsoft product could include the same vulnerable kernel code. Treat...

A buffer‑overflow bug in the Linux kernel’s Qualcomm ASoC (audio) support — tracked as CVE‑2025‑37979 — has prompted Microsoft to map the upstream component to its Azure Linux distribution and to advise customers that Azure Linux “includes this open‑source library and is therefore potentially...