CVE-2026-22998 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec Commit efa56305908b "nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" added ttag bounds checking and dataoffset validation in...

CVE-2026-22998: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec Commit efa56305908b "nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" added ttag bounds checking and dataoffset validation in...

Linux Distros Unpatched Vulnerability : CVE-2026-22998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec Commit efa56305908b nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length add...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27435)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27435 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49569)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49569 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: unquiesce adminq before destr...

MiracleLinux 9 : kernel-5.14.0-570.16.1.el9_6 (AXSA:2025-10431:39)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10431:39 advisory. kernel: iouring/sqpoll: zero sqd-thread on tctx errors CVE-2025-21633 kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number...

MiracleLinux 8 : kernel-4.18.0-513.9.1.el8_9 (AXSA:2024-7403:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7403:01 advisory. kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe CVE-2023-2163 kernel: tun: bugs for oversize...

MiracleLinux 7 : kernel-3.10.0-327.3.1.el7 (AXSA:2015-969:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-969:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002935 advisory. In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Tenable has extracted the preceding description block directly from...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002545 advisory. In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : kernel-5.14.0-503.40.1.el9_5 (AXSA:2025-9934:30)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9934:30 advisory. kernel: kobjectuevent: Fix OOB access within zapmodaliasenv CVE-2024-42292 kernel: ipvs: properly dereference pe in ipvsaddservice CVE-2024-42322...

SUSE CVE-2025-68756

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

UBUNTU-CVE-2025-68756

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

CVE-2025-68756

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

CVE-2025-68756: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

Linux Distros Unpatched Vulnerability : CVE-2025-68756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure...

PT-2026-26047

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0 1 Description The Linux kernel contains a flaw in the nvme pr read keys function related to memory allocation. A malicious or buggy userspace process can provide a large num keys value, leading to an attem...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993260 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmetreqcomplete An nvme target -queueresponse operation...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992701 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmetreqcomplete An nvme target -queueresponse operation...

SUSE CVE-2022-50756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the max size to bytes to match the units of the divisor that calculates the worst-case number of PRP entries. The result is used to determine how many PRP Lists are required. The code was...