Linux Distros Unpatched Vulnerability : CVE-2026-89573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and...

PT-2026-104468

Уязвимость драйвера устройств Aquarius L311 операционной системы Аврора связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации и оказать воздействие на систему...

Linux Distros Unpatched Vulnerability : CVE-2026-81003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/iucv: filter frames in afiucvhsrcv by ingress device afiucvhsrcv selects a socket from iucvsklist by matching four 8-byte name fields in the transport heade...

Linux Distros Unpatched Vulnerability : CVE-2026-89570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-fre...

Linux Distros Unpatched Vulnerability : CVE-2026-89719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: fix out-of-bounds access in readblockstate readblockstate calculates nrpages before taking devlock. If the device is reset and reinitialized with a smalle...

Linux Distros Unpatched Vulnerability : CVE-2026-89627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-89744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can ente...

Linux Distros Unpatched Vulnerability : CVE-2026-89577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the...

Linux Distros Unpatched Vulnerability : CVE-2026-89453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with it...

Linux Distros Unpatched Vulnerability : CVE-2026-89512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data...

Linux Distros Unpatched Vulnerability : CVE-2026-89624

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback...

CVE-2026-89770

A flaw was found in the iomap component of the Linux kernel. This vulnerability occurs when Protection Information PI verification is disabled on a block device, causing fsbiointegrityalloc to not allocate a bio integrity payload. Subsequently, the iomapbioreadfoliorangesync function attempts to...

CVE-2026-89441

A flaw was found in the Linux kernel, specifically within the mmc: via-sdmmc driver responsible for managing SD and MultiMediaCard MMC devices. This vulnerability occurs during device removal, where a timing issue allows a process to attempt to access memory that has already been released. This...

CVE-2026-80974

A flaw was found in the mfd: sm501 component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for struct sm501devdata during the device removal process. A local attacker could potentially exploit this memory leak, which may lead to a denial of servic...

CVE-2026-89621

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. A malicious USB device can exploit this vulnerability by sending a specially crafted, short HID report with an invalid size. This can cause the system to read past valid memory, leading to the disclosure of sensitiv...

CVE-2026-89535

A flaw was found in the svcrdma module of the Linux kernel. A use-after-free vulnerability can occur due to an incorrect order of operations during the teardown of an RDMA Remote Direct Memory Access transport. If a device unregistration process happens concurrently, it can attempt to access a...

CVE-2026-80959

A flaw was found in the Linux kernel's device-mapper persistent cache dm-pcache component. A local attacker with administrative privileges CAPSYSADMIN could provide a specially crafted cache device, leading to an out-of-bounds read. This vulnerability allows reading past the intended segment data...

CVE-2026-89744

A flaw was found in the Linux kernel's device property handling. When the kernel iterates over child nodes of a firmware node fwnode that also has a secondary fwnode, the fwnodegetnextchildnode function can enter an endless loop. This occurs if the secondary fwnode has multiple children, causing...

CVE-2026-89755

A flaw was found in the Linux kernel's device migration mechanism. When a memory page is freed from the swap cache, a stale mapping of that page might still be used. This incorrect memory accounting can lead to a system crash or instability. Mitigation Mitigation for this issue is either not...

CVE-2026-45056

matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix clients. Starting in version 0.12.0 and prior to version 0.17.0, the matrix-sdk-crypto crate was missing a check for the user ID when decrypting an Olm-encrypted event containing t...