Linux Distros Unpatched Vulnerability : CVE-2026-89552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous...

Linux Distros Unpatched Vulnerability : CVE-2026-89597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If...

Linux Distros Unpatched Vulnerability : CVE-2026-89452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/msm: Unwind probe state on registration failure msmiommuprobe adds its devm-managed IOMMU object to qcomiommudevices before adding the IOMMU sysfs device...

Linux Distros Unpatched Vulnerability : CVE-2026-89572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: apple-soc: Fix OPP table cleanup applesoccpufreqinit adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses...

Linux Distros Unpatched Vulnerability : CVE-2026-89473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: bq25890: Fix powersupply reference leak bq25890fwprobe acquires a reference to a secondary charger using powersupplygetbyname, but the reference ...

Linux Distros Unpatched Vulnerability : CVE-2026-89446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the...

Linux Distros Unpatched Vulnerability : CVE-2026-89576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for...

PT-2026-97148

XZ Utils: Invalid write if a decoder is reinitialized after allocation failure...

Linux Distros Unpatched Vulnerability : CVE-2026-81006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that...

Linux Distros Unpatched Vulnerability : CVE-2026-89577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the...

Linux Distros Unpatched Vulnerability : CVE-2026-89602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after...

Linux Distros Unpatched Vulnerability : CVE-2026-89585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH, charlcdinit schedules blwork before charlcdregister calls...

CVE-2026-80940

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI Networked Attached Peripheral Interface setup fails, allocated PCI resources are not properly released. This resource leak could potentially lead to a Denial of Service DoS due to resource exhaustion,...

CVE-2026-89706

A flaw was found in the Linux kernel's nfsd component. When an asynchronous async copy writeback operation fails, the server's write verifier is not properly reset. This can lead to a client incorrectly assuming that data has been made durable, resulting in the silent loss of data that was intend...

CVE-2026-89552

A flaw was found in the Linux kernel. When updating charp parameters, an allocation failure can cause the parameter to be set to NULL before the new value is successfully allocated. This can lead to a kernel NULL pointer dereference, which may result in a system crash and a denial of service...

CVE-2026-81015

A flaw was found in the Linux kernel's AMD PMC Power Management Controller driver. When the amdstbs2dinit function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt...

CVE-2026-89527

A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when a listener creation fails, leading to an improper release of a network namespace reference. This resource leak can be exploited by a local attacker, potentially causing a denial of service DoS by exhausting syst...

CVE-2026-89534

A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when the system attempts to handle an RDMA Remote Direct Memory Access address change, and a critical memory allocation fails. This can lead to a 'use-after-free' error, where the system tries to access memory that h...

DEBIAN-CVE-2026-89734

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer it uses: video-uvc is not assigned at this point, triggering a null...

CVE-2026-89734

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer it uses: video-uvc is not assigned at this point, triggering a null...