Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-31494: Linux Kernel macb Driver Vulnerable to Out-of-Bounds Write via ethtool Stats
A newly published Linux kernel vulnerability in the Cadence MACB/GEM Ethernet driver is a reminder that even small accounting mistakes in networking code can become memory-safety bugs. CVE-2026-31494...
CVE-2026-31525: Subtle BPF Interpreter Bug in Linux Kernel's Signed Division Could Lead to Incorrect Behavior
A recently disclosed vulnerability in the Linux kernel, tracked as CVE-2026-31525, reveals a subtle but significant correctness flaw in the BPF interpreter's handling of signed 32-bit division and...
BPF signed division bug in Linux kernel 5.10-6.8 allows arbitrary code execution
A newly disclosed vulnerability in the Linux kernel's BPF subsystem, tracked as CVE-2026-31525, exposes a subtle but critical mismatch between the BPF verifier and interpreter when handling signed...
Linux Kernel Fix Patches Critical XFS Use-After-Free Bug
Linux administrators are waking up to a new XFS kernel flaw that looks deceptively small in code but serious in consequence. CVE-2026-31453 affects the Linux kernel’s XFS journaling path, where...
Linux kernel patch fixes memory leak and infinite loop in Bluetooth L2CAP ERTM
A recently disclosed vulnerability in the Linux kernel's Bluetooth subsystem, CVE-2026-31498, has been addressed with a patch that resolves two intertwined issues: a memory leak and an infinite loop...
CVE-2026-31498: Linux Bluetooth L2CAP ERTM Bugs Could Crash Your System
A pair of memory safety flaws in the Linux kernel's Bluetooth subsystem have been assigned CVE-2026-31498, and they're not your typical remote code execution nightmares. Instead, these are...
CVE-2026-31503: Linux Kernel UDP Wildcard Bind Bypass Could Let Attackers Hijack Ports
A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-31503, exposes a subtle but dangerous flaw in UDP port binding logic. The bug allows a socket to bind to a wildcard address (0.0.0.0)...
CVE-2026-31503: Linux Kernel UDP Wildcard Bind Conflict Misses hash2 Threshold
Linux systems are facing a new networking vulnerability that underscores how subtle logic errors can be just as dangerous as memory corruption. Tracked as CVE-2026-31503, this kernel bug affects UDP...
A Single Corrupted File Used to Crash Linux Servers — This ext4 Patch Stops That
A corrupted file on a Linux server no longer has to mean a full system crash. The Linux kernel has patched a flaw in the ext4 filesystem that could turn a damaged piece of inline data into an...
Linux Kernel Fix Ends ext4 Panic on Corrupted Files, Keeping Systems Alive
On April 22, 2026, the Linux kernel community published a fix for CVE-2026-31451, a vulnerability in the ext4 filesystem that could panic a system when encountering a corrupted file. The patch, which...
Microsoft Advisory for Linux CVE-2026-31509: NFC Deadlock Fix You Can’t Ignore
Microsoft rang the bell on April 22, 2026, for a Linux kernel vulnerability that at first glance appears arcane: a deadlock in the NFC (Near Field Communication) device shutdown path. Designated...
CVE-2026-31447: Linux ext4 Mount Hardening Blocks Risky Bigalloc Layouts—What Windows Users Need to Know
The Linux kernel project has disclosed a new mount-time validation flaw in the ext4 filesystem, tracked as CVE-2026-31447 and syndicated through Microsoft’s Security Response Center on April 22,...