Linux Distros Unpatched Vulnerability : CVE-2026-74498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fillmax is set When a USB audio endpoint requests full packet transfers via the fillmax descriptor flag...

Linux Distros Unpatched Vulnerability : CVE-2026-68471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE type...

Linux Distros Unpatched Vulnerability : CVE-2026-74341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte...

PT-2026-73022

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs rl realloc and ntfs rl realloc nofail...

PT-2026-72685

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than...

Linux Distros Unpatched Vulnerability : CVE-2026-73193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse...

Linux Distros Unpatched Vulnerability : CVE-2026-72098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows...

Linux Distros Unpatched Vulnerability : CVE-2026-72030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent...

Linux Distros Unpatched Vulnerability : CVE-2026-74455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

openSUSE 16: ffmpeg-7 / ffmpeg-7-libavcodec-devel / ffmpeg-7-libavdevice-devel / etc (openSUSE-SU-2026:21572-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21572-1 advisory. - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec...

OPENSUSE-SU-2026:11518-1 gzip-1.14-3.1 on GA media

These are all security issues fixed in the gzip-1.14-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11515-1 ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-72846

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtw pci rx napi, new len is computed as the sum of pkt len 14-bit descriptor field, max 16383 and pkt offset drv info sz + shift, both...

PT-2026-72874

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng alg Remove sun4i ss rng, as it is insecure and unused: - It has multiple vulnerabilities. sun4i ss prng seed is missing locking and has a buffer overflow. sun4i ss prng generate...

PT-2026-73008

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi tcp: Bound SCSI Response data segment to the connection buffer iscsi tcp hdr dissect receives the data segment of several PDU types into the fixed-size conn-data buffer, which is allocated for ISCSI DEF MAX RECV SE...

PT-2026-72387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where resident $INDEX ROOT values are not fully validated during lookup. The index header fields, which are consumed by callers after lookup, lacked...

PT-2026-72491

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE NOTIFICATION payload length before reading bytes/channel data in control update handling...

PT-2026-72827

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq buf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAX FILTER STR VAL buffers. The current code appends those strings wit...

PT-2026-72949

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd usb handle sync urb scales received sync packet sizes by the sender's stride and stores the result directly in out packet-packet sizei. If a connected USB device sen...