Linux Distros Unpatched Vulnerability : CVE-2026-98066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a...

Linux Distros Unpatched Vulnerability : CVE-2026-98003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 iommu/amd: Simplify and Consolidate Virtual APIC AVIC Enablement moved the GA log...

Linux Distros Unpatched Vulnerability : CVE-2026-97576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read numtilecolumnsminus1 + 1 entries from columnwidthminus1 and numtilerowsminus1 + 1...

Linux Distros Unpatched Vulnerability : CVE-2026-97571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the...

Linux Distros Unpatched Vulnerability : CVE-2026-66071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values...

Linux Distros Unpatched Vulnerability : CVE-2026-97581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized...

Linux Distros Unpatched Vulnerability : CVE-2026-97569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The...

Linux Distros Unpatched Vulnerability : CVE-2026-98124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through...

Linux Distros Unpatched Vulnerability : CVE-2026-98025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedule...

Linux Distros Unpatched Vulnerability : CVE-2026-97558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix cifsFileInfo reference leak in deferred close When cifsclose defers a close, it hands the cifsFileInfo reference of the closing struct file to...

Linux Distros Unpatched Vulnerability : CVE-2026-98103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igmp: convert struct ipsflist to RCU Commit 23d2b94043ca igmp: Add ipmclist lock in ipcheckmcrcu added spinlockbh&im-lock to ipcheckmcrcu to prevent a...

Linux Distros Unpatched Vulnerability : CVE-2026-95834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the...

Linux Distros Unpatched Vulnerability : CVE-2026-98138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the remount- read-only path both clear the dirty bit only when...

Linux Distros Unpatched Vulnerability : CVE-2026-98125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache...

Linux Distros Unpatched Vulnerability : CVE-2026-97559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fail DACL rewrite when the new DACL exceeds 64K replacesidsandcopyaces and setchmoddacl accumulate the size of the DACL they build in a u16. That...

Linux Distros Unpatched Vulnerability : CVE-2026-93225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup...

Linux Distros Unpatched Vulnerability : CVE-2026-97573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result...

Linux Distros Unpatched Vulnerability : CVE-2026-98095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afpacket: Don't cast tpackethdr.tplen to int in tpacketparseheader. syzbot reported BUG in socksendmsgnosec. 0 The problem is that tpacketparseheader casts...

Linux Distros Unpatched Vulnerability : CVE-2026-98145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload,...

Linux Distros Unpatched Vulnerability : CVE-2026-17545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when...