46191 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-98490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations...
PT-2026-116710
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch conntrack component where a shared unconfirmed connection tracking ct entry can be modified. When a socket buffer skb with an unconfirmed ct entry is...
PT-2026-116706
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the bridge multicast database MDB implementation. The function br mdb flush pgs maintains a pointer-to-pointer cursor while traversing mp-ports. Whe...
CVE-2026-98791: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AFXDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to...
CVE-2026-98811: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change on the shared proto and both can fail: the winner's...
CVE-2026-98850: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TXRING byte count overflow tpacketsnd drains every SENDREQUEST frame in a TX ring and adds each valid packet length to the signed int lensum. Userspace can recycle completed frames concurrently, so a single...
PT-2026-117010
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e xs...
PT-2026-117030
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change on the shared proto and both can fail: the winner's tcf chain tp dele...
PT-2026-117026
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 module where the mlx5 handle changeupper event and mlx5 handle changeinfodata event functions incorrectly call bonding-specific APIs when handling team...
PT-2026-116848
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls u32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it...
PT-2026-116831
In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX packet length in catc rx done catc rx done walks a multi-packet URB, reading a two-byte length from each packet header. Its bound, pkt len urb-actual length, ignores the header offset and compares...
CVE-2026-98807: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...
Linux Distros Unpatched Vulnerability : CVE-2026-98493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...
Linux Distros Unpatched Vulnerability : CVE-2026-98808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: systemport: Fix buffer overflow in bcmsysportgetstats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during...
CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1738663576)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1738663576 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic...
Linux Distros Unpatched Vulnerability : CVE-2026-98811
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsapi: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change ...
CVE-2026-98441: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...
Linux Distros Unpatched Vulnerability : CVE-2026-98797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap skb-queuemapping when the tx queue is picked skbedit can set skb-queuemapping and raise the per-CPU skiptxqueue flag so devqueuexmit honours the mappin...
CVE-2026-98592: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: spacemit: clear TX descriptor on fragment mapping failure emactxmemmap writes TXDESC0OWN into the ring descriptor for every slot beyond oldhead as soon as that slot's memset'd local copy is committed with "txdescaddr =...
