CVE-2026-97545

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release newbp,...

Linux kernel Memory Reclamation DoS

The vulnerability of the Linux operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

GitLab Memory Reclamation Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a memory reclamation error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-98002: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

Linux Distros Unpatched Vulnerability : CVE-2026-98057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it...

CVE-2026-97534: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

CVE-2026-97914

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosujobopen return value A WARNON returns a 0 or 1, not the original negative errno. Just drop the WARNON as the FD open will pass the return code to userspace and there's only one possible source of the erro...

libssh Error Handling DoS

The vulnerability of the libssh library is related to deficiencies in handling error situations. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL...

PT-2026-98665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An ineffective error check exists in the nested domain allocation process. The function amd iommu pdom id alloc returns an integer representing a domain ID on success or a negative error...

CVE-2026-98154

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queuerq On -EIO, the RDMA queuerq path reports a host path error and then still cleans up the command and unmaps the SQE DMA. The path error helper completes the request, so that is double...

Linux Distros Unpatched Vulnerability : CVE-2026-93225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup...

CVE-2026-98051

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix txspbringfull checking same slot cnt times The loop initialised nextindex from intf-txspbindex on every iteration, so incrring always produced the same result and only one slot was ever tested. Move the...

PT-2026-98729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ALSA caiaq driver's resource management during error handling. The driver attempts to release resources through a common destructor call; however, certa...

CVE-2026-98114: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL conversion. Return parsing and allocation errors to parsesecdesc so...

PT-2026-98806

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the amdxdna cmd set error function. The function retrieves the first Buffer Object BO of a command chain, which increments its reference count. If the subseque...

Linux Distros Unpatched Vulnerability : CVE-2026-97952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunvdc: unmap LDC cookies when the descriptor send fails sendrequest maps the request's pages into the LDC channel's map table ldcmapsg, fills in the descriptor...

pgAdmin 4 DoS

The vulnerability of the pgAdmin 4 database management tool is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-97542

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

PT-2026-99010

Parse Server versions = 9.0.0 before 9.10.0 and = 8.2.2 before 8.6.87 disclose Pointer and Relation target class names through GraphQL validation and input-coercion error messages when public schema introspection is disabled graphQLPublicIntrospection: false, the default. Because these errors are...