PT-2026-82903

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack irc: fix parse dcc off-by-one OOB read parse dcc treats data end as an inclusive end pointer, but its only caller passes data limit = ib ptr + datalen, which points one past the last valid byte. The newlin...

PT-2026-82926

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl emb pmu del fsl emb pmu del unconditionally calls put cpu varcpu hw events at the 'out:' label, but only calls the matching get cpu var after the 'i hw.idx is negative the function...

PT-2026-82912

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the sk buff-data me...

PT-2026-82997

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f path for page cache sharing Previously, backing files for page cache sharing were set up with f path left as NULL only f inode was valid. It worked, but a recent mincore fix relies on f path.mnt and crashes...

MiracleLinux 9 : kernel-5.14.0-687.25.1.el9_8 (AXSA:2026-1687:69)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1687:69 advisory. kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling CVE-2026-22979 kernel: rtmutex: Use waiter::task instead of...

Linux Distros Unpatched Vulnerability : CVE-2026-80721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing...

Linux Distros Unpatched Vulnerability : CVE-2026-80716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after...

Linux Distros Unpatched Vulnerability : CVE-2026-80655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent...

Linux Distros Unpatched Vulnerability : CVE-2026-80689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/mmiotrace: Add NULL check for mmiotracearray in logging functions mmiotracerw and mmiotracemapping retrieve mmiotracearray into tr and pass it to...

Linux Distros Unpatched Vulnerability : CVE-2026-80628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and produce...

Linux Distros Unpatched Vulnerability : CVE-2026-80722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before...

Linux Distros Unpatched Vulnerability : CVE-2026-80680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the...

Linux Distros Unpatched Vulnerability : CVE-2026-80695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte...

Linux Distros Unpatched Vulnerability : CVE-2026-80669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but...

Linux Distros Unpatched Vulnerability : CVE-2026-80590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO;...

Linux Distros Unpatched Vulnerability : CVE-2026-80693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: bound interrupt-vector register fill to the allocated array idpfgetregintrvecs fills the caller-allocated regvals array from the VIRTCHNL2OPALLOCVECTORS...

Linux Distros Unpatched Vulnerability : CVE-2026-80637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields...

PT-2026-82890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a virtio net hdr used in tun/tap or AF PACKET with PACKET VNET HDR can incorrectly mark IPv4 or IPv6 fragments as Generic Segmentation Offload GSO. The functions in...

PT-2026-82954

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use after free issue exists in the Linux kernel within the xilinx soc component. The problem occurs during the device removal process when the mbox request channel byname function is...

PT-2026-82891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where corrupted xattr entries are not properly handled. The f2fs listxattr function fails to validate the xattr entry before reading its fields,...