Linux Distros Unpatched Vulnerability : CVE-2026-97942

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/alternatives: Exclude text poking against changepageattr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kern...

Linux Distros Unpatched Vulnerability : CVE-2026-98151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpfmaplookupelem... /...

CVE-2026-97925

In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decoded the following race condition when a broadcast device is replaced: CPUA CPUB tickbroadcastoneshotcontrol bc = tickbroadcastdevice.evtdev;...

CVE-2026-98095

In the Linux kernel, the following vulnerability has been resolved: afpacket: Don't cast tpackethdr.tplen to int in tpacketparseheader. syzbot reported BUG in socksendmsgnosec. 0 The problem is that tpacketparseheader casts user-provided tpackethdr.tplen, which is u32, to int. If the length is...

Linux Distros Unpatched Vulnerability : CVE-2026-97986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecveven...

Linux Distros Unpatched Vulnerability : CVE-2026-98134

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug...

Linux Distros Unpatched Vulnerability : CVE-2026-98095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afpacket: Don't cast tpackethdr.tplen to int in tpacketparseheader. syzbot reported BUG in socksendmsgnosec. 0 The problem is that tpacketparseheader casts...

CVE-2026-98151

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpfmaplookupelem... / PTRTOMAPVALUE, offset 0 / ... 14: r0 += r1 / r1 is a bounded scalar / 15: r9 = ...

CVE-2026-98044: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet loads from callbacks checkldabs models a failed BPFLDABS or BPFLDIND in a subprogram as an implicit return with R0 set to zero. It calls preparefuncexit to explore this synthesized path. When the load is...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: crun: crun-1.30-1.hum1 aarch64, x8664 crun-krun-1.30-1.hum1 aarch64, x8664 crun-wasm-1.30-1.hum1 aarch64, x8664 crun-1.30-1.hum1.src src...

DEBIAN-CVE-2026-93258

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use makebadinode in ocfs2readinodeblockfull This reverts commit 58b6fcd2ab34 "ocfs2: mark inode bad upon validation failure during read". Since 'makebadinode' resets inode type to SIFREG, doing this for directory...

EUVD-2026-86130

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use makebadinode in ocfs2readinodeblockfull This reverts commit 58b6fcd2ab34 "ocfs2: mark inode bad upon validation failure during read". Since 'makebadinode' resets inode type to SIFREG, doing this for directory...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: maven3.9: maven3.9-3.9.16-0.3.hum1 noarch maven3.9-lib-3.9.16-0.3.hum1 noarch maven3.9-3.9.16-0.3.hum1.src src...

Joern 4.0.636

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-98107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The qnx4 file system implementation fails to properly handle set blocksize failures. This occurs because qnx4 utilizes buffer heads, which do not effectively manage block sizes that exce...

PT-2026-104896

In the Linux kernel, the following vulnerability has been resolved: bfs: handle set blocksize failures bfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-104868

In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set blocksize failures qnx4 uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-104958

In the Linux kernel, the following vulnerability has been resolved: hpfs: handle set blocksize failures hpfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-98105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The hpfs file system fails to properly handle set blocksize failures. This occurs because hpfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104844

In the Linux kernel, the following vulnerability has been resolved: jfs: handle set blocksize failures jfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...