CVE-2026-98402

In the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmpsend tracepoint syzbot reported a WARNING triggered by DEBUGNETWARNONONCE: WARNING: at skbtransportheader include/linux/skbuff.h:3087 inline WARNING: at udphdr...

CVE-2026-98401

A flaw in the Linux kernel networking subsystem allows a Denial of Service (DoS) via a kernel crash. When processing encapsulated packets with GSO metadata , the kernel fails to reset the transport header offset after stripping outer headers during tunnel decapsulation. If the inner frame is forw...

CVE-2026-98401

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdiscpktlensegsinit caused by a stale transportheader offset after tunnel decapsulation. BUG: unable to handle page fault for addres...

CVE-2026-98401 net: iptunnel: fix stale transport header during tunnel decapsulation

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdiscpktlensegsinit caused by a stale transportheader offset after tunnel decapsulation. BUG: unable to handle page fault for addres...

CVE-2026-98393

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IPMAXMTU to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockopt IPMTUDISCOVER i...

SUSE-SU-2026:4660-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queu...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.51 security and extras update

Red Hat OpenShift Container Platform release 4.19.51 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Malicious code in passwordcrackv2 (npm)

passwordcrackv2 poses as a dependency-free Discord MFA library but pulls node-net-pool from the attacker's GitHub repo lunexindonesia/node-net-pool, and on load lib/cache.js runs trymodule'require'catch to execute it. On Windows, that index.js downloads a script from a limbomail.com attachment UR...

Malicious code in passwordcracker (npm)

passwordcracker poses as a dependency-free Discord MFA library but pulls node-net-pool from the attacker's GitHub repo lunexindonesia/node-net-pool, and on load lib/cache.js runs trymodule'require'catch to execute it. On Windows, that index.js downloads a script from a limbomail.com attachment UR...

ROS-20261014-73-0004

The vulnerability of the function ieee80211prepconnection in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261014-73-0081

The vulnerability of the batadvblaaddclaim function in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker...

ROS-20261014-73-0001

The vulnerability of the strpabortstrp function in the net/strparser/strparser.c module of the Linux kernel is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20261014-73-0066

The vulnerability of the function batadvbladelbackboneclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the networking functions of the Linux kernel, is related to the state of the race. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20261014-73-0008

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261014-73-0077

The vulnerability of the sctpsendmsg function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-98427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: codel: bound the dropping loop per dequeue call The CoDel control law schedules the next drop one interval/sqrtcount after the previous drop, using t...

Linux Distros Unpatched Vulnerability : CVE-2026-98402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: icmp: avoid invalid transport header access in icmpsend tracepoint syzbot reported a WARNING triggered by DEBUGNETWARNONONCE: WARNING: at skbtransportheade...

PT-2026-114406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CoDel control law where very small intervals can cause the scheduled step to round down to zero. This prevents the dropping loop in the codel dequeue function from...

Linux Distros Unpatched Vulnerability : CVE-2026-58280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-58280 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-69651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-69651 Note that Nessus relies on the presenc...