Linux Distros Unpatched Vulnerability : CVE-2026-98125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-100388: Missing Authorization

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authenticated remote peers with disabled file transfer permissions can place files onto the host clipboard and retrieve copied...

CVE-2026-98124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

PT-2026-98699

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtab map update elem initializes special fields after obtaining an element from bpf mem cache alloc. The allocator can return a fresh, zeroed unit, or recycle one from its...

PT-2026-98786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Server-side range operations in the SMB client modify file contents but fail to invalidate the FS-Cache cookie. While the affected page cache is discarded, the valid FS-Cache cookie may...

PT-2026-98560

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emit render cache flush sets PIPE CONTROL0 HDC PIPELINE FLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC...

PT-2026-99108

Name of the Vulnerable Software and Affected Versions RustDesk versions prior to 1.5.0 Description On Linux and macOS, the Cliprdr message handler fails to properly validate file transfer permissions for incoming file clipboard messages. This allows authenticated remote peers, even those with fil...

CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-98124

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

PT-2026-98668

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inode share cache key components Previously, inode share keys were encoded as follows: fingerprint || domain id It would be better to have a separator between the fingerprint and domain ID so that the fingerprint...

PT-2026-98928

Name of the Vulnerable Software and Affected Versions BerriAI LiteLLM versions prior to 1.101.0-rc.1 Description A tenant isolation bypass exists in the semantic cache layer due to a metadata key mismatch between the get semantic cache tenant scope and get metadata variable name functions...

CVE-2026-89032: Incorrect Authorization

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...

PT-2026-98787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 insert range and smb3 collapse range functions fail to properly invalidate the page cache when the offset off or old eof is not...

CVE-2026-98125: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-97620: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

Linux Distros Unpatched Vulnerability : CVE-2026-93208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belongi...

Linux Distros Unpatched Vulnerability : CVE-2026-97620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before...

SUSE CVE-2026-93208

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

SUSE CVE-2026-93210

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint assumes ce-tgthint is always valid. In preparation for clearing...