CVE-2026-58094 \u2014 nj\u00eb gjendje garanci n\u00eb implementimin e operacionit ioctl FIOSSHMLPGCNF, i aplikuar p\u00ebr rregullimin e madh\u00ebsis\u00eb s\u00eb faqes s\u00eb memories s\u00eb ndar\u00eb. Problemi shkaktohet nga mungesa e vendosjes s\u00eb bllokimit gjat\u00eb ekzekutimit t\u00eb operacionit t\u00eb verifikimit t\u00eb ndryshimit t\u00eb madh\u00ebsis\u00eb, e cila lejonte q\u00eb d\u00ebrgimi i dy k\u00ebrkesave t\u00eb nj\u00ebkohshme me madh\u00ebsi t\u00eb ndryshme t\u00eb sillte vendosjen e parametrave t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb objektit.\n
CVE-2026-58093 \u2014 qasje n\u00eb memorien pas \u00e7lirimit t\u00eb saj n\u00eb implementimin e ioctl TIOCSCTTY, i p\u00ebrdorur p\u00ebr menaxhimin e pseudo-terminalit. Problemi shkaktohet nga funksionimi i pap\u00ebrshtatsh\u00ebm me bllokimet.\n
CVE-2026-58095, CVE-2026-58096, CVE-2026-58097 \u2014 probleme n\u00eb implementimin e protokollit PPP (Point-to-Point Protocol), t\u00eb shkaktuara nga verifikimi i pap\u00ebrshtatsh\u00ebm i madh\u00ebsis\u00eb s\u00eb parametrave t\u00eb p\u00ebrpunuar.\n
CVE-2026-58092 \u2014 nj\u00eb gabim logjik n\u00eb modul\u00ebn mac_do, e cila ofron funksionalitet p\u00ebr ekzekutimin e komandave n\u00ebn nj\u00eb p\u00ebrdorues tjet\u00ebr. Problemi shkaktohet nga ndryshimi i struktur\u00ebs s\u00eb ruajtjes s\u00eb informacionit p\u00ebr t\u00eb drejtat e p\u00ebrdoruesve \u2014 identifikuesi kryesor i grupit t\u00eb p\u00ebrdoruesit u transferua n\u00eb nj\u00eb struktur\u00eb t\u00eb ve\u00e7ant\u00eb, por n\u00eb funksionin group_is_primary() ky ndryshim u harua t\u00eb pasqyrohej dhe ajo vazhdoi t\u00eb merrte informacion sipas offset-it t\u00eb vjet\u00ebr.\n
CVE-2026-58091 \u2014 qasje n\u00eb memorien pas \u00e7lirimit t\u00eb saj n\u00eb implementimin e ioctl SNDCTL_DSP_SYNCSTART, i p\u00ebrdorur p\u00ebr nisjen sinkronike t\u00eb riprodhimit n\u00eb disa pajisje audio. Vulnerabiliteti shkaktohet nga funksionimi i pap\u00ebrshtatsh\u00ebm me bllokimet dhe shfaqet n\u00eb sisteme me disa pajisje audio.\n
CVE-2026-58090 \u2014 qasje n\u00eb memorien pas \u00e7lirimit t\u00eb saj n\u00eb implementimin e soketeve UNIX, q\u00eb ndodh gjat\u00eb p\u00ebrpunimit t\u00eb mesazheve SOCK_STREAM.\n
CVE-2026-58089 \u2014 nj\u00eb gabim logjik n\u00eb driver-in hwpmc, i destinuar p\u00ebr monitorimin e performanc\u00ebs, p\u00ebr shkak t\u00eb t\u00eb cilit mbledhja e statistikave nuk ndalohej pas rritjes s\u00eb privilegjeve gjat\u00eb ekzekutimit t\u00eb proceseve me privilegje t\u00eb larta. Problemi lejon nj\u00eb p\u00ebrdorues t\u00eb zakonsh\u00ebm t\u00eb monitoroj\u00eb aktivitetin n\u00eb proceset me privilegje.\n
CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076 \u2014 vulnerabilitete n\u00eb bibliotek\u00ebn openssl, t\u00eb shkaktuara nga mbushja e buf\u00ebr\u00ebve, \u00e7lirimi i dyfisht\u00eb i memorjes, probleme me formatin e stringjeve dhe dereferencimi i nj\u00eb treguesi NULL. Potencialisht, disa nga k\u00ebto probleme nuk p\u00ebrjashtojn\u00eb organizimin e ekzekutimit t\u00eb kodit n\u00eb distanc\u00eb. <\/ul>\n
Disa probleme t\u00eb rrezikshme, q\u00eb lejojn\u00eb p\u00ebrdoruesin lokal t\u00eb fitoj\u00eb t\u00eb drejtat root, jan\u00eb identifikuar gjithashtu n\u00eb b\u00ebrtham\u00ebn Linux: <\/p>\n
\n
CVE-2026-53361 \u2014 akses n\u00eb memorie pas lirimit n\u00eb implementimin e sockets AF_UNIX. Nj\u00eb exploit \u00ebsht\u00eb publikuar n\u00eb internet, i cili lejon daljen nga nj\u00eb konteiner t\u00eb izoluar. Funksionimi i exploit-it \u00ebsht\u00eb demonstruar n\u00eb Ubuntu 24.04, RHEL 10 dhe Debian 13 me kernet Linux 6.8, 6.12, 6.14 dhe 6.17. Problemi \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet e kernelit 7.1.0, 6.18.38, 6.12.95 dhe 6.6.144.\n
CVE-2026-72137 \u2014 lirimi i dyfisht\u00eb i memories n\u00eb modulit nat_keepalive. Problemi shfaqet q\u00eb nga kernel 6.11 dhe \u00ebsht\u00eb zgjidhur n\u00eb versionet 7.2.0, 6.12.101, 6.18.40 dhe 7.1.5. Nj\u00eb exploit funksional \u00ebsht\u00eb publikuar n\u00eb internet, duke lejuar marrjen e dy t\u00eb drejtave root n\u00eb sistem.\n
Dob\u00ebsi (CVE nuk \u00ebsht\u00eb caktuar) n\u00eb sistemin e skedar\u00ebve eCryptfs, q\u00eb potencialisht \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit n\u00eb nivel b\u00ebrthame gjat\u00eb trajtimit t\u00eb skedar\u00ebve t\u00eb enkriptuar t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb.\n
Dob\u00ebsi (CVE nuk \u00ebsht\u00eb caktuar) n\u00eb modulin ntfs3, e cila lejon z\u00ebvend\u00ebsimin e nj\u00eb skedari ekzekutiv me bitin suid root gjat\u00eb montimit t\u00eb nj\u00eb imazhi t\u00eb formatuar t\u00eb sistemit (jepet nj\u00eb shembull i shfryt\u00ebzimit t\u00eb dob\u00ebsis\u00eb p\u00ebr t\u00eb marr\u00eb t\u00eb drejtat root gjat\u00eb automontimit t\u00eb nj\u00eb USB-t)\n