PT-2026-64483

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse req on io-uring cancel task work When io uring delivers task work with tw.cancel set PF EXITING, PF KTHREAD fallback, or percpu ref is dying on the ring context, fuse uring send in task takes the cancel branc...

PT-2026-64616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the FSCTL DUPLICATE EXTENTS TO FILE control code passes the source file to vfs clone file range or vfs copy file range without verifying the SMB access mask of the...

Linux Distros Unpatched Vulnerability : CVE-2026-64411

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtables: terminate table name before findtablelock updatecounters and compatupdatecounters forward a user-supplied 32-byte table name to...

Linux Distros Unpatched Vulnerability : CVE-2026-64496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file...

PT-2026-64489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA siw driver where the siw proc rresp function fails to check the running total of inbound Read Response DDP segments against the sink buffer length on...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return valu...

AlmaLinux 10 : kernel (ALSA-2026:44270)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:44270 advisory. kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs CVE-2026-46323 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-64260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: Avoid queue-stopped races and set/read that value under lock There are several readers of queue-stopped that check the value under lock, but...

CVE-2026-64238

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 "gpio: shared: call gpiochip::ofxlate if set" used the mutex embedded in struct gpiosharedentry to protect the offset field which now can be modified...

CVE-2026-64232

CVE-2026-64232 relates to the Linux kernel: when a request carries integrity data, blk_insert_cloned_request now also recomputes nr_integrity_segments against the bottom queue and rejects the request if it exceeds the bottom queue’s max_integrity_segments. This mirrors the existing nr_phys_segmen...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64219

CVE-2026-64219 affects the Linux kernel drm/amd/display path, specifically dc_process_dmub_aux_transfer_async, where payload->length is copied into a 16-byte stack buffer (dpaux.data[16]) guarded only by an ASSERT(). If length > 16, this can cause a stack-based overflow; additionally, dc-&g...

CVE-2026-64215

In the Linux kernel, a fix was applied to the DRM MSM A6xx driver (a8xx_hfi_send_perf_table) to check the return value of kzalloc() and prevent a NULL pointer dereference on allocation failure. This addresses a memory allocation failure path in the a6xx HFI perf table setup. The fix is documented...

CVE-2026-64209

In the Linux kernel, the issue resides in phy: qcom: qmp-usbc, where swing_tbl and pre_emphasis_tbl (both 4x4, valid indices 0–3) may be accessed out of bounds due to a boundary check using > 4 instead of >= 4. This permits index 4 to slip through, causing an out-of-bounds read/write as des...

CVE-2026-49745

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

CVE-2026-49743

CVE-2026-49743 affects GPU driver workflows where, during workload submission, the reference count of an underlying synchronisation primitive tied to an exported fence is not properly incremented. This can allow a local attacker running under a non-privileged user to destroy the exported fence an...

OESA-2026-3156 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even i...

PT-2026-64323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The krb5 crypto library lacks facilities to precheck the length of messages before they are decrypted or verified. This issue affects AF RXRPC when validating DATA packets secured with...

PT-2026-64368

In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF BLOCK TS in copy process PF BLOCK TS is only set in blk time get ns when current-plug is non-NULL, and blk finish plug clears it via blk flush plug before NULLing the plug pointer. copy process breaks the...

kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

A use-after-free vulnerability was found in the Linux kernel. When removing a resource from vmciresourcetable in vmciresourceremove, the search is performed using the resource handle by comparing context and resource fields. However, it is possible to create two resources with different types but...