CVE-2026-98576: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when logging service names nfcllcpwkssap and nfcllcpbuildsdreqtlv pass non-null- terminated strings to prdebug using the %s format specifier. The buffers are allocated via kmemdup or come...

Linux Distros Unpatched Vulnerability : CVE-2026-98843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: zero gaps in read-gaps folio to avoid writing back stale data netfsreadgaps leaves gaps around a streaming write's dirty region unread on the server side...

Linux Distros Unpatched Vulnerability : CVE-2026-98810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: fix slab-out-of-bounds read in ieee80211monitorselectqueue ieee80211monitorselectqueue validates the skb length using skb-len before dereferenci...

PT-2026-128396

In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX packet length in catc rx done catc rx done walks a multi-packet URB, reading a two-byte length from each packet header. Its bound, pkt len urb-actual length, ignores the header offset and compares...

PT-2026-128641

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena device init initializes the MMIO read mechanism with ena com mmio reg read request init, which allocates a coherent DMA buffer for MMIO read responses. The normal removal...

CVE-2026-112055: Out-of-bounds Read

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

CVE-2026-98454: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

PT-2026-128629

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame length before control and FCS access l2cap data rcv unpacks either a two-byte or four-byte control field without first ensuring that it is present. A short ERTM or streaming-mode frame can therefo...

PT-2026-128416

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacom wac pen serial enforce The 'wacom wac pen serial enforce' function may calculate and pass an invalid offset to hid field extract, resulting in memory reads at incorrect addresses -- possibly beyo...

PT-2026-116945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An underflow exists in the ANA log bounds checks within the nvme-multipath component. The ANA log buffer is sized based on the number of ANA groups advertised through Identify Controller...

PT-2026-116624

LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepng util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...

PT-2026-116640

Name of the Vulnerable Software and Affected Versions libdvdnav versions prior to 7.0.0 Description A heap out-of-bounds read occurs in the dvdnav describe title chapters function. This happens when an attacker provides a crafted DVD or disc image with an oversized vts ttn value that exceeds the...

PT-2026-128378

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t rt: fix zero-address non-strict match out-of-bounds read rt mt6 check permits rules to be configured with rtinfo-addrnr == 0 even when address matching IP6T RT FST MASK is requested. In the IP6T RT FST NSTRICT pat...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.11 contains security vulnerabilities. These vulnerabilities stem from the wifi cw1200 driver, where the TX path alignment fills the transmission length without reserving space for the padding, and the padding bytes are not cleared. This leads to an out-of-bounds read in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from the fact that smb2parsecontexts does not limit each record within its Next field, and the SMB2/SMB3 lease resolver does not read data offset values. This can lead to out-of-bounds reads and exposure of...

PT-2026-128540

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of rtt min in sock ops A sockops prog reading skops-rtt min never checks the sk type: on the tcp conn request path sock ops-sk is a request sock non-full, and the ctx rewrite casts it to a tcp sock ful...

CVE-2026-98461: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: validate event length before filtering isfilteredpacket reads the event code from skb-data0 without first checking that the skb is nonempty. When an opcode filter is configured, it also reads the command opcod...

PT-2026-116867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read can occur in the s390/uv component when the system contains more than 85 secrets. This happens because the uv secret list struct array is limited to 85 items per...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from nouveauuvmmsm incorrectly treating ttmresource as nouveaumem when BO is at TTMPLSYSTEM. This leads to out-of-bounds read accesses and reuse of resources after release...

CVE-2026-98604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpnbind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...