Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 01/05/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| cloudvision agni | ≥ 2024.4.0, ≤ 2025.2.2 | |
| cloudvision portal | ≥ 2024.2.0, ≤ 2026.1.0 | |
| velocloud edge | ≥ 4.5.0, ≤ 6.4.1 | |
| openshift container platform | = 4.0≥ 4.12, < 4.12.89≥ 4.13, < 4.13.66≥ 4.14, < 4.14.65≥ 4.15, < 4.15.64≥ 4.16, < 4.16.61≥ 4.17, < 4.17.53≥ 4.18, < 4.18.40≥ 4.19, < 4.19.30≥ 4.20, < 4.20.21≥ 4.21, < 4.21.14 | 4.12.894.13.664.14.654.15.644.16.614.17.534.18.404.19.304.20.214.21.14 |
| caas platform | = 4.0 | |
| enterprise storage | = 6.0= 7.0= 7.1 | |
| manager proxy | = 4.0= 4.1= 4.2= 4.3 | |
| manager retail branch server | = 4.0= 4.1= 4.2= 4.3 | |
| manager server | = 4.0= 4.1= 4.2= 4.3 | |
| openstack cloud | = 9.0 | |
| openstack cloud crowbar | = 9.0 |
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free