Linux Distros Unpatched Vulnerability : CVE-2026-23102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task...

Linux Distros Unpatched Vulnerability : CVE-2026-23051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix drm panic null pointer when driver not support atomic When driver not support atomic, fb using plane-fb rather than plane-state-fb. cherry picke...

Linux Distros Unpatched Vulnerability : CVE-2026-23087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Fix potential memory leak in scsibackremove Memory allocated for struct vscsiblkinfo in scsibackprobe is not freed in scsibackremove leadin...

Linux Distros Unpatched Vulnerability : CVE-2026-23090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to...

Linux Distros Unpatched Vulnerability : CVE-2026-23063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been...

Linux Distros Unpatched Vulnerability : CVE-2026-25236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe...

Linux Distros Unpatched Vulnerability : CVE-2026-23085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v3-its: Avoid truncating memory addresses On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses...

Linux Distros Unpatched Vulnerability : CVE-2026-23093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: smbd: fix dmaunmapsg nents The dmaunmapsg functions should be called with the same nents as the dmamapsg, not the value the map function returned...

Linux vDPA Heap Buffer Overflow DoS

The vulnerability of the vdusevdpasetvqaffinity function in the drivers/vdpa/vdpauser/vdusedev.c driver for vDPA devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched cls_api tcf_blockbind buffer overflow

The vulnerability of the tcfblockbind function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Mediatek wireless MT76 MCU Function Heap Overflow DoS

The vulnerability of the mt7996mcuexit function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfssearchpathintreeuser function in the fs/btrfs/ioctl.c file of the btrfs file system in Linux kernels leads to mutual locking issues. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: emsusb: emsusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a can: gsusb: gsusbreceivebulkcallback: fix URB memory...

Linux Distros Unpatched Vulnerability : CVE-2026-23064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actife: avoid possible NULL deref tcfifeencode must make sure ifeencode does not return NULL. syzbot reported: Oops: general protection fault, probab...

Linux Distros Unpatched Vulnerability : CVE-2026-23073

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rsi: Fix memory corruption due to not set vif driver data size The struct ieee80211vif contains trailing space for vif driver data, when struct...

Linux Distros Unpatched Vulnerability : CVE-2026-23065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd: Fix memory leak in wbrfrecord The tmp buffer is allocated using kcalloc but is not freed if acpievaluatedsm fails. This causes a memory leak i...

Linux Distros Unpatched Vulnerability : CVE-2026-23096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uacce: fix cdev handling in the cleanup path When cdevdeviceadd fails, it internally releases the cdev memory, and if cdevdevicedel is then executed, it will...

Linux Distros Unpatched Vulnerability : CVE-2026-23101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the...

Linux Distros Unpatched Vulnerability : CVE-2026-21932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: AWT, JavaFX. Supported...

Linux Distros Unpatched Vulnerability : CVE-2025-15366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...