CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1738663576)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1738663576 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic...

CVE-2026-98487: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...

CVE-2026-98490: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from net/mlx5e, which processes IPv6 IPsec policy masks. In this process, setupfteaddr6 installs the source and destination mask into opposite address fields. When prefix lengths are different, it can lead ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains a security vulnerability. This vulnerability stems from the net/sched actct module, which modifies shared unacknowledged CT entries when processing cloned skb objects with unacknowledged CT entries. This could lead to reuse after deallocation...

CVE-2026-98497: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the corresponding masks independently, but setupfteaddr6 installs each mask in...

PT-2026-116661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the net/sched: act ct component. This occurs when a raw pointer to the extensions area is added to the expectations list during the execution of nf c...

CVE-2026-98564: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq mt7530removecommon disposes the per-PHY interrupt mappings from .remove, but the regmap-irq chip that owns the domain is devm-registered, so its parent interrupt is only...

PT-2026-116781

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx-ptp tx skb is shared between the Tx path, the PTP auxiliary worker and the timestamp cleanup paths. The WX STATE PTP TX IN PROGRESS bit prevents multiple Tx paths from submitting...

CVE-2026-98597: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...

PT-2026-116816

In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...

Linux Distros Unpatched Vulnerability : CVE-2026-98808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: systemport: Fix buffer overflow in bcmsysportgetstats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during...

Linux Distros Unpatched Vulnerability : CVE-2026-98493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...

PT-2026-116710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch conntrack component where a shared unconfirmed connection tracking ct entry can be modified. When a socket buffer skb with an unconfirmed ct entry is...

Linux Distros Unpatched Vulnerability : CVE-2026-98797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mappin...

PT-2026-116706

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the bridge multicast database MDB implementation. The function br mdb flush pgs maintains a pointer-to-pointer cursor while traversing mp-ports. Whe...

Linux Distros Unpatched Vulnerability : CVE-2026-98850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: prevent TXRING byte count overflow tpacketsnd drains every SENDREQUEST frame in a TX ring and adds each valid packet length to the signed int lensum...

Linux Distros Unpatched Vulnerability : CVE-2026-98811

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsapi: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change ...

Linux Distros Unpatched Vulnerability : CVE-2026-98801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: restrict SORESERVEMEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 net: add new socket option SORESERVEMEM and commit d00c8ee31729 net: fix possibl...

Linux Distros Unpatched Vulnerability : CVE-2026-98490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations...