CVE-2026-89696: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success with fhdentry and fhexport both NULL if fhverify returns nfserrstale and putfh-noverify is...

PT-2026-96379

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos assoc ioctl isst if clos assoc validates the user-supplied socket id with 'socket id topology max packages', but isst common.sst inst is allocated with topology max packages entries,...

PT-2026-90427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System Daemon NFSD where the nfsd mode check function contains a flawed WARN ON ONCE macro. In scenarios involving NFS reexport, the function may...

PT-2026-96397

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try smi init allocates new smi-si sm and later calls ipmi register smi mod, which maps to ipmi add smi. During ipmi add smi, the upper IPMI message handler obtains...

PT-2026-96592

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm kvzallocpercpu alloc size, cpu to nodecpu" fails, the code jumps to the "out" label and calls dm stat free. dm stat free does "for each possible cpucpu dm...

CVE-2026-81005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

PT-2026-90135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the IPMI system interface si during a failed registration process. When try smi init fails to obtain the BMC device information via bmc get device id...

CVE-2026-89711: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARNONONCE from nfsdmodecheck The header for commit e75b23f9e323 "nfsd: check dcanlookup in fhverify of directories" details the assumption that justified adding the WARNONONCE to nfsdmodecheck, that assumptio...

CVE-2026-89671: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp-mask nfsd3procsetacl calls setposixacl unconditionally for both ACLTYPEACCESS and ACLTYPEDEFAULT, passing argp-aclaccess and argp-acldefault verbatim. The NFSv3 ACL decoder only populates those...

Linux Distros Unpatched Vulnerability : CVE-2026-45747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107310 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible fo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107278 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads uevent device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107270 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev...

RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:66460)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

RHEL 10 : gstreamer1-plugins-base (RHSA-2026:66460)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66460 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

PT-2026-90093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the dm-stats component when the allocation of per-cpu data via the dm kvzalloc function fails. In such cases, the system jumps to the out label and executes the dm stat...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

PT-2026-90173

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description Several sysfs show/store handlers call a discipline callback that dereferences the device-private variable, either directly or through the DASD DEFINE ATTR macro. During the execution of the...

PT-2026-90268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the param set charp function where character pointer parameters are stored in allocated memory. When a parameter is updated, the previous value is released before the...

PT-2026-96572

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...