SUSE CVE-2026-43206

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes KFDSIGNALEVENTLIMIT 8 bytes via memset without checking the buffer size parameter. This allows unprivileged userspace to trigger an out-of...

SUSE CVE-2026-43213

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports abnormal sequence number in TX release report, which will access out-of-bounds of wdring-pages array, causing NULL pointer dereference. BUG:...

SUSE CVE-2026-43225

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211informbssframe may return NULL on failure. In that case, the allocated buffer 'buf' is not freed and the function returns early, leading to potential memory leak. Fix th...

SUSE CVE-2026-43276

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroyworkqueue on service rescan PCI path While testing corner cases in the driver, a use-after-free crash was found on the service rescan PCI path. When manaservreset calls managdsuspend, managdcleanup...

CVE-2026-43282

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access ionic driver. This vulnerability occurs in the ionicqueryport function, where a missing check for the return value of ibdevicegetnetdev can lead to a NULL pointer dereference. A local attacker could potentially exploit this t...

CVE-2026-43276

A flaw was found in the Linux kernel's mana network driver. This vulnerability, a use-after-free, occurs when the PCI service rescan path attempts to destroy an already-freed workqueue a second time. A local attacker could exploit this condition to cause a system crash, leading to a denial of...

CVE-2026-43269

A flaw was found in the Linux kernel's drm/atmel-hlcdc component. The atomicdestroystate callback in the drm/atmel-hlcdc driver does not correctly release all allocated objects, specifically drmcrtccommit objects. This oversight leads to a memory leak, where system memory gradually increases. Ove...

Linux Distros Unpatched Vulnerability : CVE-2026-8000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2026-43229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unregistration to the beginning of the remove function to ensure a...

Linux Distros Unpatched Vulnerability : CVE-2026-43157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps rxfcpfvfbmap and txfcpfvfbmap are allocated by cgxlmacinit but never freed in cgxlmacexit...

Linux Distros Unpatched Vulnerability : CVE-2026-43082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: txgbe: leave space for null terminators on propertyentry Lists of struct propertyentry are supposed to be terminated with an empty property, this driver...

Linux Distros Unpatched Vulnerability : CVE-2026-43122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Update cpuidle driver check in acpiprocessorstart Commit 7a8c994cbb2d ACPI:...

Linux Distros Unpatched Vulnerability : CVE-2026-43175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: rs9: Reserve 8 struct clkhw slots for for 9FGV0841 The 9FGV0841 has 8 outputs and registers 8 struct clkhw, make sure there are 8 slots for those newly...

Linux Distros Unpatched Vulnerability : CVE-2026-43142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale...

AlmaLinux 10 : kernel (ALSA-2026:13566)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:13566 advisory. kernel: Linux kernel: Use-after-free in traffic control actct may lead to denial of service or privilege escalation CVE-2026-23270 kernel: nfsd: fix hea...

CVE-2026-43267

A flaw was found in the rtw89 Wi-Fi driver within the Linux kernel. This vulnerability occurs when the beacon interval, a timing parameter used in Wi-Fi communication, is set to zero. This can lead to a division by zero error during subsequent calculations, potentially causing system instability ...

CVE-2026-43263

A flaw was found in the Linux kernel's chips-media wave5 driver. This vulnerability occurs when multiple instances are created and destroyed, leading to many interrupts. Without proper lock protection for the shared vpuinstance structure, a Null dereference can occur, potentially causing a system...

CVE-2026-43260

A flaw was found in the bnxten driver of the Linux kernel. An issue in the RSS Receive Side Scaling context deletion logic can lead to a leak of VNICs Virtual Network Interface Controllers in the firmware. This can cause subsequent attempts to create new VNICs to fail, resulting in the loss of...

CVE-2026-43256

A flaw was found in the Linux kernel's media subsystem, specifically within the Qualcomm Camera Subsystem CAMSS Video Front End VFE driver. An out-of-bounds memory access can occur in the vfeisrregupdate function when processing interrupt service routines. This vulnerability arises because a loop...

CVE-2026-43257

A flaw was found in the Linux kernel's cx88 media driver. This issue stems from a missing resource deallocation in the sndcx88hwparams function during error handling. This could allow a local attacker to cause a resource leak, potentially leading to system instability or a denial of service DoS...