AlmaLinux 10 : kernel (ALSA-2026:13566)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:13566 advisory. kernel: Linux kernel: Use-after-free in traffic control actct may lead to denial of service or privilege escalation CVE-2026-23270 kernel: nfsd: fix hea...

Linux Distros Unpatched Vulnerability : CVE-2026-43175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: rs9: Reserve 8 struct clkhw slots for for 9FGV0841 The 9FGV0841 has 8 outputs and registers 8 struct clkhw, make sure there are 8 slots for those newly...

CVE-2026-43267

A flaw was found in the rtw89 Wi-Fi driver within the Linux kernel. This vulnerability occurs when the beacon interval, a timing parameter used in Wi-Fi communication, is set to zero. This can lead to a division by zero error during subsequent calculations, potentially causing system instability ...

CVE-2026-43263

A flaw was found in the Linux kernel's chips-media wave5 driver. This vulnerability occurs when multiple instances are created and destroyed, leading to many interrupts. Without proper lock protection for the shared vpuinstance structure, a Null dereference can occur, potentially causing a system...

CVE-2026-43260

A flaw was found in the bnxten driver of the Linux kernel. An issue in the RSS Receive Side Scaling context deletion logic can lead to a leak of VNICs Virtual Network Interface Controllers in the firmware. This can cause subsequent attempts to create new VNICs to fail, resulting in the loss of...

CVE-2026-43256

A flaw was found in the Linux kernel's media subsystem, specifically within the Qualcomm Camera Subsystem CAMSS Video Front End VFE driver. An out-of-bounds memory access can occur in the vfeisrregupdate function when processing interrupt service routines. This vulnerability arises because a loop...

CVE-2026-43257

A flaw was found in the Linux kernel's cx88 media driver. This issue stems from a missing resource deallocation in the sndcx88hwparams function during error handling. This could allow a local attacker to cause a resource leak, potentially leading to system instability or a denial of service DoS...

CVE-2026-43250

A flaw was found in the Linux kernel's ChipIdea USB Device Controller UDC driver. A local user with a malicious USB device, or a malicious USB device itself, could exploit this by reconnecting the device during an active data transfer. This improper cleanup of Direct Memory Access DMA buffers can...

CVE-2026-43247

A flaw was found in the wave5 media driver within the Linux kernel. This vulnerability can lead to a kernel panic, which causes the system to become unresponsive, effectively resulting in a Denial of Service DoS. The issue occurs when the system attempts to enter suspend mode due to an autosuspen...

CVE-2026-43245

A flaw was found in the Linux kernel's NTFS filesystem driver. The -dcompare function, responsible for comparing directory entries, was found to perform blocking operations. This behavior, along with the misuse of namescachep for memory allocations, could lead to system unresponsiveness or a deni...

CVE-2026-43237

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Incorrect management of graphics memory dmafence references within the amdgpugemvaioctl function can lead to a reference count underflow and a use-after-after-free condition. A local attacker could exploit this vulnerability to trigger...

CVE-2026-43235

A flaw was found in the iris media driver within the Linux kernel. Missing platform data entries for the SM8750 component prevent the driver from allocating necessary internal buffers. This can lead to failures in basic video decoding and encoding operations, effectively causing a Denial of Servi...

CVE-2026-43234

A flaw was found in the Linux kernel's team driver. A local user can exploit this vulnerability by manipulating network devices and namespaces. Specifically, when a slave device is unregistered from a team interface while a NETDEVCHANGEMTU event is pending, it can lead to a deadlock or resource...

CVE-2026-43232

A flaw was found in the Linux kernel's FarSync WAN driver. A race condition can occur during the detachment of a FarSync T-series card, where already freed memory associated with the card is accessed by unfinished tasks. This use-after-free vulnerability could allow a local attacker to cause a...

CVE-2026-43223

A flaw was found in the Linux kernel's pvrusb2 media driver. When the pvr2sendrequestex function submits a write USB Request Block URB but fails to submit a read URB, the write URB remains active. A subsequent attempt to use this URB triggers a warning, which can lead to system instability or a...

CVE-2026-43218

A flaw was found in the tw9903 driver within the Linux kernel. This vulnerability occurs in an error handling path of the tw9903probe function, where memory allocated for video for Linux 2 V4L2 control handlers is not properly released. This oversight can lead to a memory leak, potentially causin...

CVE-2026-43207

A flaw was found in the Linux kernel's mtk-mdp media driver. Improper error handling in the probe function could lead to a resource leak. Additionally, a missing check for the return value of vpugetplatdevice could result in a null pointer dereference, potentially causing a system crash and leadi...

CVE-2026-43195

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. This vulnerability arises from inadequate validation of user-provided queue sizes, which do not meet hardware requirements. An attacker could exploit this by supplying invalid queue size configurations, potentially leading to GPU...

CVE-2026-43183

A flaw was found in the Linux kernel's cx25821 media driver. This vulnerability occurs when the ioremap function fails during device setup, and the allocated memory region is not properly released. A local attacker could exploit this resource leak to exhaust system memory, potentially leading to ...

CVE-2026-43180

A flaw was found in the Linux kernel's kaweth USB network driver. The kawethsetrxmode function incorrectly manipulates the transmit TX queue, allowing it to be re-enabled while a USB Request Block URB is still active. This can result in the same URB being submitted twice, leading to a kernel...