PT-2026-61478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the icssm prueth probe function within the net: ti: icssm-prueth component. The issue arises when of property read u32 fails, causing the function to return witho...

PT-2026-61383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs read to pagecache function where the system fails to pause the generation of new subrequests when a previously issued subrequest fails. Recommendations At th...

PT-2026-61097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 flexfiles implementation where the ff layout alloc lseg function fails to properly validate the filehandle-version array count decoded from the flexfiles...

PT-2026-61103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd4 decode secinfo no name function where sin exp is initialized after the sin style is decoded. If the XDR External Data Representation stream is truncated, the...

PT-2026-61100

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nfsd4 create function when a client encodes both FATTR4 WORD0 ACL and FATTR4 WORD2 POSIX DEFAULT,ACCESS ACL in the same CREATE fattr bitmap. The function...

PT-2026-61381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where netfs invalidate folio fails to clear the dirty bit when all changes in a folio are removed during a file truncation. This leaves the folio i...

PT-2026-61496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the net: wwan: iosm component. The issue occurs within the ipc imem init function, where memory allocated by the ipc protocol init function is not properly freed...

PT-2026-61314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool module where the module flash fw schedule function fails to undo the setting of the in progress flag and the acquisition of the netdev reference during...

PT-2026-61379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock exists in the netfs component when operating in write-through mode. The issue occurs within the netfs advance writethrough function, where a failure to consistently...

PT-2026-61307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel paging request crash occurs in the can rx unregister function within net/can/af can.c when a virtual CAN device vxcan is enslaved to a bonding master. This happens because the...

PT-2026-61239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 extension header handling where the ip6 parse tlv function caches the network header pointer in nh while processing Type-Length-Value TLV structures. When ipv...

PT-2026-61430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ixgbevf driver during VEPA multicast source pruning. The function ixgbevf clean rx irq frees a socket buffer skb and continues to the next descriptor...

Linux Distros Unpatched Vulnerability : CVE-2026-53391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-...

Linux Distros Unpatched Vulnerability : CVE-2026-63830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skmsg: preserve sg.copy across SG transforms The skmsg sg.copy bitmap is part of the scatterlist entry ownership state. A set bit tells...

Linux Distros Unpatched Vulnerability : CVE-2026-63801

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from tipcbearerholdb to cryptoaeaddecryptreq without taking a reference...

Linux Distros Unpatched Vulnerability : CVE-2026-53399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to...

Linux Distros Unpatched Vulnerability : CVE-2026-53398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the...

CVE-2026-16127 zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgery

A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function clawnetget/clawnetpost of the file claw/tools/toolnet.c of the component httprequest. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The...

CVE-2025-71398 SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to acce...

CVE-2025-71398 SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to acce...