CVE-2026-98233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98240: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

PT-2026-106565

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description The mhi mbim rx function fails to check the return value of skb copy bits when copying datagrams from the NTB Network Transfer Buffer. Because the datagram offset and length are provided by...

PT-2026-106562

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A race condition exists in the tpacket rcv function within the net/packet module. When processing V1 or V2 ring slots, the system claims a slot before converting the virtio-net header. If t...

ROS-20261006-73-0024

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

PT-2026-106563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where the hhf change function stores the TCA HHF HH FLOWS LIMIT attribute without an upper bound. An excessively large hh flows limit allows ne...

CVE-2026-98234: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT with no upper bound. A huge hhflowslimit lets each new heavy-hitter flow pass the hhflowscurrentcnt check in allocnewhh and forces a fixed-size...

ROS-20261006-73-0028

The vulnerability in the net/netfilter/nftablesapi.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0228

The vulnerability of the net/l2tp/l2tpcore.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0266

The vulnerability in the net/bpf/testrun.c module of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0005

The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0335

The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mvpp2: prevent buffer overflow in pagepool allocation The perprocessor buffering scheme is supported only if the number of pools nrxqs 2 does not exceed...

Linux Distros Unpatched Vulnerability : CVE-2026-98239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan743x: fix RX checksum use-after-free lan743xrxprocessbuffer adds each non-first receive buffer to the head skb's fraglist. On the last descriptor,...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_65334)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before buildin...

Linux Distros Unpatched Vulnerability : CVE-2026-98271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and...

Linux Distros Unpatched Vulnerability : CVE-2026-98285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple...

Oracle Linux 8 : kernel (ELSA-2026-72468)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72468 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Linux Distros Unpatched Vulnerability : CVE-2026-98236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: mhiwwanmbim: check skbcopybits return value mhimbimrx ignores the return value of skbcopybits when it copies each datagram out of the NTB. The datagr...

ai-stp-cli (>=0.0.23, <=0.0.33), pygpt-net (>=2.8.27, <=2.9.1) +1 more potentially affected by CVE-2026-104843 via uv (>=0.12.10, <=0.12.15)

uv PYPI version =0.12.10, =0.0.23, =2.8.27, =2.9.1 - uvenv 3.11.1 Source cves: CVE-2026-104843 Source advisory: OSV:GHSA-2CV4-CQWR-GWF7...