PT-2026-116781

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx-ptp tx skb is shared between the Tx path, the PTP auxiliary worker and the timestamp cleanup paths. The WX STATE PTP TX IN PROGRESS bit prevents multiple Tx paths from submitting...

PT-2026-116931

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by last lr irq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1742471200)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1742471200 advisory. - In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in...

Linux Distros Unpatched Vulnerability : CVE-2026-98813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Hold map BTF for the memory allocator destructor record bpfmasetdtor duplicates map-record so that the bpfmemalloc destructor can release the special field...

Linux Distros Unpatched Vulnerability : CVE-2026-98736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: Lock parent access during enhanced SCO setup Bluetooth: hciconn: Lock parent access during enhanced SCO setup hcienhancedsetupsync runs on t...

CVE-2026-98712: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98704: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits...

CVE-2026-98775: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nitroenclaves: fix use-after-free on SLOTALLOC failure When necreatevmioctl fails the SLOTALLOC request after anoninodegetfile has succeeded, the error path calls fputenclavefile and then frees neenclave. In normal userspace...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1701963303)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1701963303 advisory. - An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1686651204)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1686651204 advisory. - A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was foun...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1693424916)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1693424916 advisory. - A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1701962635)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1701962635 advisory. - An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in...

PT-2026-116991

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down use-after-free Some drivers for multiport devices access port driver data from completion handlers of shared URBs submitted at attach or first open and stopped at disconnect or last close,...

PT-2026-116992

In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart in port shutdown if disconnected acm port shutdown is called from the tty-port machinery whenever the last user closes the port. acm disconnect sets acm-disconnected and calls tty port tty vhangup,...

Linux Distros Unpatched Vulnerability : CVE-2026-98775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nitroenclaves: fix use-after-free on SLOTALLOC failure When necreatevmioctl fails the SLOTALLOC request after anoninodegetfile has succeeded, the error path cal...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1722977984)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1722977984 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure on...

Security update for iperf (important)

openSUSE security update: security update for iperf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22090-1 Rating: important References: bsc1283528 bsc1283786 bsc1283787 bsc1284404 bsc1284405 Cross-References: CVE-2026-101276 CVE-2026-101283...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22124-1 Rating: important References: bsc1285733 Cross-References: CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916 CVE-2026-110917...

Security update for librsvg (important)

openSUSE security update: security update for librsvg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22051-1 Rating: important References: bsc1282612 Cross-References: CVE-2026-96889 CVSS scores: CVE-2026-96889 SUSE : 7.8...

CVE-2026-98749: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100shutdown...