SUSE CVE-2026-23397

In the Linux kernel, the following vulnerability has been resolved: nfnetlinkosf: validate individual option lengths in fingerprints nfnlosfaddcallback validates optnum bounds and string NUL-termination but does not check individual option length fields. A zero-length option causes nfosfmatchone ...

The vulnerability of the `register_for_each_vma()` function in the kernel/events/uprobes.c module, which manages kernel events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the registerforeachvma function in the kernel/events/uprobes.c module, which handles kernel event handling in Linux operating systems, is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-4926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: A bad regular expression is generated any time you have multiple sequential optional groups curly brace syntax, such as abc:z. The generated regex grows...

Linux Distros Unpatched Vulnerability : CVE-2026-33984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resizevbarentry in libfreerdp/codec/clear.c, vBarEntry-size is...

Linux Distros Unpatched Vulnerability : CVE-2026-4923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtrackin...

Linux Distros Unpatched Vulnerability : CVE-2026-23397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfnetlinkosf: validate individual option lengths in fingerprints nfnlosfaddcallback validates optnum bounds and string NUL-termination but does not check...

Linux Distros Unpatched Vulnerability : CVE-2026-25645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files fr...

The vulnerability of the idxd_cdev_register() function in the drivers/dma/idxd/cdev.c module of the Intel Data Accelerator driver software allows a malicious actor to cause a service failure.

The vulnerability of the idxdcdevregister function in the drivers/dma/idxd/cdev.c module of the Intel Data Accelerator driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to...

Linux Distros Unpatched Vulnerability : CVE-2026-34085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a cra...

The vulnerability of the chacha_crypt_arch() function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the fq_resize() function in the net/sched/sch_fq.c module of the network scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fqresize function in the net/sched/schfq.c module of the network scheduling subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-4867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period...

The vulnerability of the rtw89_cam_reset_key_iter() function in the driver/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89camresetkeyiter function in the drivers/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for Linux operating systems is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker t...

The vulnerability of the nf_conntrack_confirm() function in the include/net/netfilter/nf_conntrack_core.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfconntrackconfirm function in the include/net/netfilter/nfconntrackcore.h header file of the Linux operating system leads to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-23320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fncm: align netdevice lifecycle with bind/unbind Currently, the netdevice is allocated in ncmallocinst and freed in ncmfreeinst. This ties the...

Linux Distros Unpatched Vulnerability : CVE-2026-23281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before...

Linux Distros Unpatched Vulnerability : CVE-2026-23324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: usb: etases58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before...

Linux Distros Unpatched Vulnerability : CVE-2026-23335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid =...

Linux Distros Unpatched Vulnerability : CVE-2026-4712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Linux Distros Unpatched Vulnerability : CVE-2026-23386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It...