Linux Distros Unpatched Vulnerability : CVE-2026-98182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later...

Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

Linux Distros Unpatched Vulnerability : CVE-2026-98314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer...

PT-2026-106631

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfp ctl set mac address calls ResetAdapter unconditionally, without checking netif running. ResetAdapter first calls card stop, which sets smc-hw.hw state t...

PT-2026-106664

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitch when leaving a mesh The code in ieee80211 stop mesh leaves CSA active, but leaving the mesh released the channel context, so the CSA finalize work crashes: Oops: general protection fault, probably...

PT-2026-106643

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-private data before registering the PCM timer snd pcm timer init calls snd device register to link the new struct snd timer into the global timer list while it still carries hw.c resolution = snd pcm timer...

PT-2026-106637

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...

PT-2026-106675

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211 calculate bi data calls rdev get radio mask with wdev-netdev, which can be NULL and then crashes in mac80211. To avoid that, invert the order of checks since...

PT-2026-106684

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if init path errors, the callee tries to clean up with rtrs clt close conns. However, this can lead to calling the event tracing code with clt path-kobj-name being NULL and...

PT-2026-106685

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: check create singlethread workqueue in DCB setup bnxt re init dcb wq ignores a failed allocation. The async DCB handler later calls queue work on the NULL pointer...

PT-2026-106614

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlan del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

PT-2026-106599

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without checking either for NULL. Both amdgpu ras get context and amdgpu ras find obj can return NULL, e.g...

PT-2026-106597

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in is include guest event A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmu detach event pmu...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ipu3imggu: Fixed a NULL pointer dereferencing issue in active selection access. The IMGu driver handled this by first acquiring the pointers to the active devices, then attempting to use V4L2 subdev functions. Only after...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: fix NULL pointer dereference on shared blocks The flowchange function calls tcfblockq, and dereferences q-handle to derive a default baseclass. Shared blocks leave block-q NULL, causing a NULL dereference when...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A NULL pointer dereference occurred in amdgpudmconnectoraddcommonmodes. In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode assigns mode to mode, and mode is directly passed to drmmodeprobedadd...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fixed a null pointer dereference in btintelreadversion. If hcicmdsyncComplete is triggered and skb is NULL, then hdev-reqskb will also be NULL, which will cause this issue...

Astra Linux – Vulnerability in Harfbuzz

HarfBuzz is a text shaping engine. Prior to version 12.3.0, there was a null pointer dereference vulnerability in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check whether hbmalloc returns NULL before using placement new to construct an...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through UHID, there is a possibility that we do not have output reports, and as a result, reportfield is set to null...