The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
s390/boot: Avoid IPL parameter append past command line
A command line may occupy all but the terminating byte of COMMAND_LINE_SIZE. In that case append_ipl_block_parm() passes a zero size to the IPL parameter conversion helpers and points the destination one byte past early_command_line. The helpers subtract one from the unsigned size and write the converted parameter outside the command line buffer.
Convert the IPL parameter in the command line parsing buffer first. A parameter beginning with '=' can then replace the existing command line regardless of its length, while other parameters are appended only when space remains.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Oct 20, 2026 | Oct 14, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2026 | Oct 14, 2026 |
| Redhat_linux | — | No solution exists | Oct 19, 2026 | Oct 14, 2026 |
| Ubuntu | — | Upgrade linux-hwe-7.0Upgrade linux-gcpUpgrade linux-awsUpgrade linux-oem-7.0Upgrade linux-ibmUpgrade linux-riscv-7.0Upgrade linux-oracleUpgrade linuxUpgrade linux-riscv | Nov 3, 2026 | Oct 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Oct 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub