PT-2026-98558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring/net component where buffers are overconsumed when using the MSG TRUNC flag. When a recv or recvmsg call is issued with MSG TRUNC and the incoming packet...

PT-2026-98672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ets qdisc change function where it falls back to psched mtu without a minimum value for bands lacking an explicit quantum. When a crafted size table is used, qdisc...

PT-2026-98673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drr change class function where it fails to establish a minimum floor when falling back to psched mtu. If a crafted size table causes qdisc pkt len to reach...

PT-2026-98675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service occurs in the Linux kernel when the sfq change function accepts any non-negative quantum value. By using a crafted size table, the qdisc pkt len can reach approximate...

PT-2026-98676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service occurs in the Linux kernel when the fq pie change function accepts an arbitrary quantum value from userspace. If a user provides a quantum value of 1 along with a...

PT-2026-98688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow exists in the cx82310 eth USB driver. The issue occurs when a 0xffff length sentinel is used to detect a router reboot. Because the logic falls through to the rest of the...

PT-2026-98733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Reliable Datagram Sockets RDS implementation where the rds tcp reset callbacks function fails to properly synchronize the transmit path. The function attempts to...

PT-2026-98735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A store-buffering pattern exists in the release in xmit function. The function uses clear bit unlock to clear RDS IN XMIT, which orders the critical section before the bit clear but fail...

PT-2026-98734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the rds conn path reset function. The function performs a plain store operation to clear the cp-cp flags word, while other accessors use atomic bitops. This can lea...

PT-2026-98766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cls u32 classifier where the node ID pool can be exhausted. The function gen new kid fails to report an error when idr alloc u32 ranges are full, instead returning...

PT-2026-98553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana network driver where the RX completion queue CQ is sized to hold exactly one Completion Queue Element CQE per posted Receive Work Queue Element RX WQE. When...

PT-2026-98555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge networking component where Connectivity Fault Management CFM and Multiple Registration Protocol MRP register a global br frame type. The hlist node of this...

PT-2026-98620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the net failover slave name change function. The issue arises because dev open is called while netdev lock ops is already held by upper callers. To resolve this, net...

PT-2026-98679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists in the sample restore put function. This occurs during the concurrent teardown of TC sample rules that share the same restore context, where the...

PT-2026-98680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where an RTM NEWQDISC request allows clsact to bind a populated shared ingress block during the init function, making an embedded mini Qdisc available to lockless readers...

PT-2026-98714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the tx spb ring full function within the bcmasp network component. The function incorrectly initializes the next index variable from intf-tx spb index during every loop...

PT-2026-98736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network subsystem where conflicting alternative names altnames are not properly handled when a network namespace is being removed. This can lead to failures in...

PT-2026-98762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the net/ipv6/mcast.c component, RCU-protected lists including np-ipv6 mc list, idev-mc list, and idev-mc tomb are updated using direct pointer assignments instead of the required rcu...

golang-x-net Package Code Execution

The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-98070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/rds: acquire RDSINXMIT in rdstcpresetcallbacks rdstcpresetcallbacks quiesces the transmit path by setting the path state to RDSCONNRESETTING and then waitin...