CVE-2026-98157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

CVE-2026-98157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: EDAC/devicesysfs: Use kstrtouint for pollmsec to prevent truncation The pollmsec sysfs store file uses simplestrtoul which accepts an unsigned long, but the target field pollmsec is unsigned int. On 64-bit systems, a value UINTMA...

CVE-2026-97526: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for tha...

Linux Distros Unpatched Vulnerability : CVE-2026-6669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a maliciou...

PT-2026-98470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A CPU soft lockup can occur in the scsi qla2xxx driver due to an incorrect polling mechanism in the qla27xx copy multiple pkt and qla27xx copy fpin pkt functions. These functions poll th...

PT-2026-98581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ivpu to cpu addr function where the full buffer range is not validated. This can be addressed by adding a size parameter to the function to ensure that the entire...

PT-2026-98622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tc ctl chain function where the replay logic is incorrectly applied to RTM GETCHAIN requests. If a netlink socket sends RTM GETCHAIN requests repeatedly without...

PT-2026-98649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af unix module where blocking recvMSG PEEK calls can lead to high CPU usage. This occurs because the manage oob function may skip Out-of-Band OOB socket buffers sk...

PT-2026-98819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the EDAC/device sysfs component where the poll msec sysfs store file utilizes the simple strtoul function. Because simple strtoul accepts an unsigned long while the...

PT-2026-106067

Version 0.12.3 fixes a large number of panics, soundness issues, and CPU and memory exhaustion issues in all parts of the crate. The following is a summary of the issues per affected components. For details, please see the release notes. Base Limited the number of compression pointers that are...

CVE-2026-98004

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the...

CVE-2026-98149

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPFFCPU or BPFFALLCPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is siz...

CVE-2026-97985: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

CVE-2026-97985: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

CVE-2026-98087: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A migratedisable'd RT task cannot be moved to another CPU, but the scheduler still keeps such a task on that CPU's pushable list rq-rt.pushabletasks and still...

Fast and Secure Simultaneous Authentication of Equals for WPA3

The Simultaneous Authentication of Equals SAE protocol, introduced in WPA3, provides robust protection against offline dictionary attacks against a network Pre-Shared Key PSK and also protection of session keys from other people knowing that PSK. However, its high computational cost for the...

Linux Distros Unpatched Vulnerability : CVE-2026-98150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix BPFFCPU validation for sparse CPU IDs BPFFCPU stores the target CPU ID in the upper 32 bits of the map operation flags. bpfmapcheckopflags currently...

Linux Distros Unpatched Vulnerability : CVE-2026-67419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecuti...

Linux Distros Unpatched Vulnerability : CVE-2026-97530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature qla27xxcopymultiplepkt and qla27xxcopyfpinpkt poll rspq-ringptr-signature for RESPONSEPROCESS...

Linux Distros Unpatched Vulnerability : CVE-2026-93208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belongi...