PT-2026-117030

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change on the shared proto and both can fail: the winner's tcf chain tp dele...

PT-2026-116784

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are only requested for ID MT7530: both the devm regulator get in probe and the regulator enable in mt7530 setup are guarded by the...

PT-2026-116707

In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw next to clean read Same issue as atl1c see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd cons read": the hardware can report an out-of-range hw ne...

PT-2026-116803

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in em text dump em text dump allocates struct tcf em text on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...

PT-2026-116816

In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...

PT-2026-116713

In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb tpd next to clean read Same issue as atl1c see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd cons read": the hardware can report an out-of-range c...

PT-2026-116781

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx-ptp tx skb is shared between the Tx path, the PTP auxiliary worker and the timestamp cleanup paths. The WX STATE PTP TX IN PROGRESS bit prevents multiple Tx paths from submitting...

PT-2026-117010

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e xs...

CVE-2026-98808: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcmsysportgetstats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcmsysportgetstats. The variable 'j' tracks the compacted index into the destinatio...

CVE-2026-98812: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctpdev only after it is initialised mctpadddev links the new mctpdev into dev-mctpptr before mdev-dev is assigned, so a reader that picks the device up in that window dereferences a netdevice pointer that i...

CVE-2026-98791: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AFXDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to...

CVE-2026-98850: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TXRING byte count overflow tpacketsnd drains every SENDREQUEST frame in a TX ring and adds each valid packet length to the signed int lensum. Userspace can recycle completed frames concurrently, so a single...

CVE-2026-98853: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inetgsosegment or ipv6gsosegment for each nested IP header. encaplevel tracks header bytes, not callback depth, so a deep chain can exhaust the kernel stac...

PT-2026-116829

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch hfsc: bound the classify inner-filter walk with a drift budget hfsc classify applies the "filter may only point downwards" level check only when the filter result carries no bound class. A filter created with a...

CVE-2026-98807: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...

PT-2026-117026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 module where the mlx5 handle changeupper event and mlx5 handle changeinfodata event functions incorrectly call bonding-specific APIs when handling team...

PT-2026-116779

In the Linux kernel, the following vulnerability has been resolved: net/rds: size a connection's path set by the transport it ends up with rds conn create computes npaths from the caller's transport before it decides whether a connection to one of the host's own addresses is to be handled by the...

CVE-2026-98612: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX packet length in catcrxdone catcrxdone walks a multi-packet URB, reading a two-byte length from each packet header. Its bound, pktlen urb-actuallength, ignores the header offset and compares against t...

Linux Distros Unpatched Vulnerability : CVE-2026-98493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...

Linux Distros Unpatched Vulnerability : CVE-2026-98797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mappin...