PT-2026-82201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation regarding TCP Fast Open TFO. The function mptcp fastopen subflow synack set params incorrectly sets the is mptfo flag before...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8662-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8662-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

PT-2026-82172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the atmel-mci driver due to a race condition in the atmci remove function. The &host-bh work variable is bound to the atmci work func function and can be...

PT-2026-82130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovpn module where key slots are released through a kref, and the release path frees AEAD Authenticated Encryption with Associated Data transforms from an RCU...

PT-2026-82129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hard lockup can occur during a granted time slice extension. The function exit to user mode loop calls rseq grant timeslice extension while interrupts are enabled. If the extension is...

PT-2026-82189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iforce process packet function where input packet lengths for joystick, wheel, and status packets are not validated before reading fixed fields. Specifically, a...

Linux Distros Unpatched Vulnerability : CVE-2026-74739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass...

Linux Distros Unpatched Vulnerability : CVE-2026-80582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/shmemhelper: Check VMA boundaries for PMD mappings In the -hugefault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries ...

PT-2026-82198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...

PT-2026-82127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipvs module where the system fails to revalidate embedded headers after reading them from the skb frags. A local process can modify the ihl field, which, following...

Linux Distros Unpatched Vulnerability : CVE-2026-80568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are...

PT-2026-82176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the restore sigcontext function where the supervision register SR is copied from the signal frame without properly clearing privileged bits before returning to user...

Linux Distros Unpatched Vulnerability : CVE-2026-74742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is onl...

PT-2026-82131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...

PT-2026-82167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the first Indirect Data Address Word IDAW in a list is read separately to calculate the buffer size for the full Indirect Data Addres...

Linux Distros Unpatched Vulnerability : CVE-2026-80581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IP...

PT-2026-82122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the veth poll function where the index of the peer TX queue to wake is incorrectly derived from rq-xdp rxq.queue index. This field is only initialized when an XDP...

Linux Distros Unpatched Vulnerability : CVE-2026-80537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098739)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098739 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctpunpackcookie only...

PT-2026-82181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto qce component where the error path in the devm qce register algs function is handled incorrectly. If the ops-register algs function fails, the system...