PT-2026-79701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the TCP Fast Open TFO implementation where the max qlen accounting for a listener becomes inaccurate during SO REUSEPORT listener migration. When a listener is closed,...

PT-2026-79603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rt6 route rcv function incorrectly validates the length of the Route Information option RFC 4191 against the prefix length due to off-by-one...

PT-2026-79655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the WMM param handler function within the rtl8723bs staging driver. The function copies a fixed-size WMM parameter element from a received information...

PT-2026-79653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtl8723bs staging driver where the rtw cfg80211 monitor if xmit entry function removes the radiotap header and reads the 802.11 frame control field without verifyi...

PT-2026-79676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the xattr verify function. The issue occurs because the digest-length check mixes int and size t types. Since sizeof returns size t, the left-hand side of...

PT-2026-79698

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the prestera fw hdr parse function where the firmware header is read before verifying if the firmware image actually contains that header. This occurs when the system...

PT-2026-79715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description AF XDP accepts a TX metadata length as small as eight bytes, whereas every supported request requires flags and at least one eight-byte request field. This allows the kernel to read beyo...

Linux Distros Unpatched Vulnerability : CVE-2026-74681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: misc: usbio: check ibuflen against rxbuflen in bulk msg ibuflen is the bulk IN receive buffer size, but the EMSGSIZE check in usbiobulkmsg compares it...

Linux Distros Unpatched Vulnerability : CVE-2026-74648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: validate monitor transmit frame lengths rtwcfg80211monitorifxmitentry removes the radiotap header and then reads the 802.11 frame control...

Linux Distros Unpatched Vulnerability : CVE-2026-74598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both chec...

Linux Distros Unpatched Vulnerability : CVE-2026-74665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the...

Linux Distros Unpatched Vulnerability : CVE-2026-74649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's...

CVE-2026-74681: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuflen against rxbuflen in bulk msg ibuflen is the bulk IN receive buffer size, but the EMSGSIZE check in usbiobulkmsg compares it against txbuflen — the bulk OUT endpoint size. Both are taken independent...

PT-2026-79686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbio bulk msg function where the ibuf len bulk IN receive buffer size is incorrectly compared against txbuf len bulk OUT endpoint size during an EMSGSIZE check...

CVE-2026-26081

A flaw was found in HAProxy. This vulnerability, stemming from a missing length check in the NEWTOKEN format, could allow a remote attacker to cause a low impact on data integrity and availability. This means an attacker might be able to subtly alter data or temporarily disrupt the service...

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102029)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102029 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a...

Linux Distros Unpatched Vulnerability : CVE-2026-73257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated attacker can send an HTTP request containing both...

Unity Linux 20.1070a Security Update: nghttp2 (UTSA-2026-102505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102505 advisory. nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content- Length header and body onto reusable keep-alive backend...