Linux Distros Unpatched Vulnerability : CVE-2026-64217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if...

CVE-2026-61721

heap-based buffer overrun for DLS samples...

CVE-2026-64217

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...

UBUNTU-CVE-2026-64217

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...

The vulnerability of the __aq_ring_rx_clean() function in the drivers/net/ethernet/aquantia/atlantic/aq_ring.c module of the Ethernet network adapter driver for the AQuantia Atlantic chipset in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the aqringrxclean function in the drivers/net/ethernet/aquantia/atlantic/aqring.c module of the Ethernet network adapter driver for the AQuantia Atlantic chipset in the Linux operating system is related to buffer out-of-buffer writing. Exploiting this vulnerability could allo...

UBUNTU-CVE-2026-58264

heap-based buffer overrun in command handler...

SUSE CVE-2026-64268

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

CVE-2026-64268

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

UBUNTU-CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

CVE-2026-64520 firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...

EUVD-2026-48864

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...

CVE-2026-64520 firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...

CVE-2026-64354 bpf: Validate BTF repeated field counts before expansion

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

EUVD-2026-48982

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

EUVD-2026-48980

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

SUSE CVE-2026-64217

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...

PT-2026-64704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA firewire isight component where the isight packet function fails to properly validate the frame count from a device iso packet. The function checks the count...