Alertas de Seguridad de la Información

L Alto vulnerabilidad

24/06/2026

[CVE-2026-52912] In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridg…

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only holds references on state.in/out and bridge physdevs, so a queued bridge packet can retain a freed bridge master in skb->dev until reinjectio…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

21/06/2026

[CVE-2026-52911] In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slow…

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = true, the flag stays set after the call so that the global session lookup in ksmbd_session_lookup_all() can find the session, which was not added to conn->sessions. Because the flag is connection-wide, the global lookup…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

19/06/2026

[CVE-2026-52908] In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure th…

In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr struct add a ib_umem_check_rereg() function that each driver has to call before processing IB_MR_RER…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

19/06/2026

[CVE-2026-52909] In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on…

In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0). Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device i…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

19/06/2026

[CVE-2026-52910] In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog a…

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new one while another thread is sending a UDP packet to the group. The reuseport prog is freed by sk_reuseport_prog_free(). bpf_prog_put() i…

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

17/06/2026

[CVE-2026-12441] Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote atta…

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

16/06/2026

[CVE-2026-46331] In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial CO…

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb…

nvdaltovulnerabilidad CVSS 7.8 NVD

P Alto vulnerabilidad

11/06/2026

[CVE-2026-45174] Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potent…

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12034] Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior …

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

P Alto vulnerabilidad

10/06/2026

[CVE-2026-0271] A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux…

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

nvdaltovulnerabilidad CVSS 7.8 NVD

P Alto vulnerabilidad

10/06/2026

[CVE-2026-0270] A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux …

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-52906] In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being…

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb ("9p: convert to the new mount API"), v9fs_apply_options() applies parsed mount flags with |= onto flags already set by v9fs_session_init(). For 9P2000.L, session_init sets V9FS_ACCESS_CLIENT as the default, so when the user mounts with "access=us…

nvdaltovulnerabilidad CVSS 7.7 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-52907] In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off…

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoid accessing one element beyond the end of the arrays. While at it, use ARRAY_SIZE instead of the _MAX enum values. [fix cosmetic issues]

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46326] In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix…

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Make sure that the spi_transfer struct is zeroed out before use.

nvdaltovulnerabilidad CVSS 8.4 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46327] In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_su…

In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the device is suspended with the "dm_suspended_md" call. However, this function is called without holding any locks, so the device may be suspended just after it. Move the call to dm_suspended_md after dm_get_live_table, so that the device can't…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46328] In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix …

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond setting the rlimit. Refactor the code so its clear when what code is setting the limit and conditionally update the posix cpu timers when appropriate.

nvdaltovulnerabilidad CVSS 7.3 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46330] In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP …

In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40. As reported by Al Viro, the TCP ULP support for SMC is fundamentally broken. The implementation attempts to convert an active TCP socket into an SMC socket by modifying the underlying `struct file`, dentry, and inode in-pla…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46332] In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound b…

In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_bootloader_rx() appends each serdev chunk into the fixed rx_buffer before parsing bootloader packets. The helper can keep leftover bytes between callbacks and may receive multiple packets in one callback, so a single count value is not constrained by one packet le…

nvdaltovulnerabilidad CVSS 8.0 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46317] In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmu…

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_lock, including from the MMU notifier path (kvm_unmap_gfn_range() -> kvm_nested_s2_unmap()), which can run at any time. kvm_vcpu_init_nested() reallocates the array and frees the old buffer while holding only kvm->arch.config_…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46319] In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release…

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the …

nvdaltovulnerabilidad CVSS 7.8 NVD