52659 matches found
PT-2026-72472
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...
PT-2026-72653
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The out norqst exit in rpcrdma reply handler branches away before the credit clamp, so a reply that matches no pending request reaches out post carrying the raw credit value...
PT-2026-72606
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nft connlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped...
PT-2026-72673
In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter increment until alloc succeeds coresight add out conn increments nr outconns before calling devm krealloc array and again before devm kmalloc. If either allocation fails, the counter ...
PT-2026-72724
In the Linux kernel, the following vulnerability has been resolved: net: fib rules: Don't dump dying fib rule in fib rules dump. rocker router fib event calls fib rule get during RCU dump. If the fib rule is dying, refcount inc will complain about it. Let's call refcount inc not zero in fib rules...
PT-2026-72803
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix inconsistent arvif state in vdev create error paths ath12k mac vdev create has three error path issues that leave arvif in an inconsistent state: 1. When ath12k wmi vdev create fails, the function returns direct...
Linux Distros Unpatched Vulnerability : CVE-2026-74476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that...
Linux Distros Unpatched Vulnerability : CVE-2026-72181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is...
Linux Distros Unpatched Vulnerability : CVE-2026-72085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsibackgetpendreq obtains a command tag and returns a vscsibkpend whose embedded sec...
Linux Distros Unpatched Vulnerability : CVE-2026-72308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mlxsw: fix refcount leak in mlxswspportlagjoin When mlxswspportlagindexget fails, mlxswspportlagjoin returns an error without releasing the lag reference obtain...
Linux Distros Unpatched Vulnerability : CVE-2026-74528
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...
Linux Distros Unpatched Vulnerability : CVE-2026-74566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...
Linux Distros Unpatched Vulnerability : CVE-2026-74356
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all...
SUSE CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
SUSE CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
MINI-C933-QCR8-QMR4
Bulletin has no description...
CVE-2026-74243
In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...
MINI-FWRF-5JC7-5HHV
Bulletin has no description...