Linux Distros Unpatched Vulnerability : CVE-2026-93225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup...

Linux Distros Unpatched Vulnerability : CVE-2026-98003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 iommu/amd: Simplify and Consolidate Virtual APIC AVIC Enablement moved the GA log...

Linux Distros Unpatched Vulnerability : CVE-2026-98093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: fslmicfil: balance mclk enable/disable hwparams enables mclk unconditionally and hwfree disables it unconditionally, but the PCM core does not guarantee 1...

Linux Distros Unpatched Vulnerability : CVE-2026-97960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe...

Linux Distros Unpatched Vulnerability : CVE-2026-97575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate AV1 tile counts The stateless AV1 decoders use tileinfo.tilecols and tilerows as loop bounds and as indices into the mistarts and...

Linux Distros Unpatched Vulnerability : CVE-2026-93223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error...

Linux Distros Unpatched Vulnerability : CVE-2026-97600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: cc2520: fix FIFOP work use-after-free The FIFOP interrupt handler queues cc2520fifopirqwork. On removal, cc2520remove only flushes the work. The...

Linux Distros Unpatched Vulnerability : CVE-2026-98154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-rdma: fix -EIO cleanup order in queuerq On -EIO, the RDMA queuerq path reports a host path error and then still cleans up the command and unmaps the SQE DM...

Linux Distros Unpatched Vulnerability : CVE-2026-97971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nstree: check listing permission before taking a namespace reference legitimizens takes a reference on the candidate namespace before maylistns has decided...

Linux Distros Unpatched Vulnerability : CVE-2026-97531

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Skip vport under deletion in report ID acquisition qla24xxreportidacquisition format-1 handling walks ha-vplist under vportslock, takes a...

Linux Distros Unpatched Vulnerability : CVE-2026-98025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedule...

Linux Distros Unpatched Vulnerability : CVE-2026-97585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix double-unmap of directory block Fix afseditdirremove to use a cleanup function to unmap the block pointed to by afsdiriter::block if it's left pointing...

The vulnerability of the identification processing mechanism of the Fleet Server Host service in the Kibana data visualization solution allows a hacker to circumvent security restrictions.

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

Linux Distros Unpatched Vulnerability : CVE-2026-93266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to s.a1 makes FORTIF...

Linux Distros Unpatched Vulnerability : CVE-2026-97951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iscsi: Fix hang for aborted WRITEPENDING commands When a LUNRESET aborts a WRITE command that is in the TRANSPORTWRITEPENDING state, the target co...

Linux Distros Unpatched Vulnerability : CVE-2026-96748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an...

Security update for gitoxide (moderate)

openSUSE security update: security update for gitoxide ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21955-1 Rating: moderate References: bsc1281749 Cross-References: CVE-2026-91986 CVSS scores: CVE-2026-91986 SUSE : 5.4...

CVE-2026-96812: Exposure of Resource to Wrong Sphere

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

PT-2026-98383

Name of the Vulnerable Software and Affected Versions SSL Zen plugin for WordPress versions prior to 4.7.43 Description Reflected Cross-Site Scripting occurs when unauthenticated attackers trick users into clicking specially crafted links to inject arbitrary web scripts. The issue exists because...

PT-2026-98471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where a race condition occurs during vport teardown. The function qla24xx report id acquisition may identify a vport on the ha-vp list that is...