PT-2026-97879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the nfsd file net dispose function. During per-net teardown, the nn-nfsd serv pointer is cleared before the filecache laundrette is shut down. This...

Linux Distros Unpatched Vulnerability : CVE-2026-93286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the...

PT-2026-98069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sja1105 flower implementation where the dsa port from netdev function may return a valid port belonging to a different switch chip. If another chip's port index is...

CVE-2026-97435: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124463 advisory. The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the...

Linux Distros Unpatched Vulnerability : CVE-2026-97411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will...

ROS-20260924-73-0062

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

ROS-20260924-73-0087

The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124469 advisory. When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content...

AlmaLinux 9 : skopeo (ALSA-2026:70641)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion ...

ROS-20260924-73-0034

The vulnerability of the ieee80211txdequeue function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and...

PT-2026-104961

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds ib conn path shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait event call, which blocks oth...

RHEL 9 : buildah (RHSA-2026:70640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70640 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

RockyLinux 9 : buildah (RLSA-2026:70640)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70640 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting via...

Linux Distros Unpatched Vulnerability : CVE-2026-97440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-97435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port...

RHEL 9 : skopeo (RHSA-2026:70641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70641 advisory. Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo...

ROS-20260924-73-0003

The vulnerability of the net/netfilter/ipvs component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2026-97411

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...