Linux Distros Unpatched Vulnerability : CVE-2026-63803

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hdlcppp: sync per-proto timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. Tha...

PT-2026-61224

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the uio pci generic sva component. The uio pci sva structure is allocated using devm kzalloc within the probe function. However, the code explicitly calls...

PT-2026-61463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the erofs init inode xattrs function during inode extended attribute xattr initialization. The issue arises because certain error paths following the erofs read...

PT-2026-61462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wilc wlan firmware download function when a bus acquire failure happens. The function allocates a dma buffer using kmalloc, but an early error path uses a...

PT-2026-61432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vsock/vmci component. The vmci transport recv connecting server function incorrectly returns a success value when a peer sends a reset RST packet...

PT-2026-61355

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the lm90 hardware monitoring driver. The issue occurs because cleanup actions are executed in reverse order during module unbind or probe failure. If the lm90...

PT-2026-61371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the network shaper component where the net shaper nl group doit function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multip...

PT-2026-61156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lwmi dev evaluate int function within the platform/x86: lenovo-wmi-helpers module. The issue arises when the retval variable is NULL, causing the output.point...

PT-2026-61333

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd reopen durable fd republishes the same ksmbd file into the session volatile-id table. If smb2 open then takes a later error path,...

PT-2026-61083

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the drm/colorop state blob property handling during state duplication, destruction, and reset operations. The issue stems from a failure to follow established...

PT-2026-61078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mm/vma component where the mmap prepare function incorrectly attempts to unmap a Virtual Memory Area VMA when invoked from the mmap hook of stacked drivers, such a...

PT-2026-61340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpio aggregator. The problem occurs when aggr-lookups-dev id is freed during an error sequence before the corresponding entry is removed from the...

Linux Distros Unpatched Vulnerability : CVE-2026-63859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine...

PT-2026-61350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/rtrs component during the cleanup process of path file creation. In the error path of the rtrs srv create path files function, the system may ca...

OPENSUSE-SU-2026:21372-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers bsc1268398. - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to excessive resource consumption...

libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

A flaw was found in libcurl. This use-after-free vulnerability occurs when an application configures an HTTP/2 stream-dependency tree and then performs a sequence of operations involving curleasyreset and curleasycleanup. During the final cleanup, libcurl attempts to access memory that has alread...

Oracle Linux 10 : coreutils (ELSA-2026-33124)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33124 advisory. 9.5-8.0.1 - clean up empty file if cp is failed Orabug 15973168 9.5-8 - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification RHEL-180649...

SUSE-SU-2026:22731-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nfconntrackhelper. When a connection tracking helper is unregistered, its associated expectations are not properly cleaned up. This oversight can lead to a use-after-free vulnerability, where the system attempts t...

SUSE-SU-2026:3067-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues The following security issues were fixed: - CVE-2026-43037: ip6tunnel: clear skb2-cb in ip4ip6err bsc1265197. - CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond up/down bsc1267206. -...