Linux Distros Unpatched Vulnerability : CVE-2026-64407

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxprecvfwreqv3 During the v3 firmware download the controller sends a v3datareq with a 32 bit offset a...

Linux Distros Unpatched Vulnerability : CVE-2026-60160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-64493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure ...

PT-2026-64620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the smb2 ioctl function fails to perform necessary permission checks when processing the FSCTL DUPLICATE EXTENTS TO FILE control code. Specifically, it uses vfs clon...

PT-2026-64594

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq suspend is called via the kernel restart - device shutdown path. Unlike the normal system suspend path, the reboot path does not call freeze processes,...

PT-2026-64666

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtw wep decrypt is called without verifying that the frame is long enough...

PT-2026-64581

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs bnode read hfs bnode read can return early without writing to the output buffer when is bnode offset valid fails or when check and correct requested length corrects the length to zero...

PT-2026-64664

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update beacon info IE loop The IE parsing loop in update beacon info advances by pIE-length + 2 each iteration but only guards on i length from one byte past the allocated receive buffer...

PT-2026-64511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd fault fops read function where a failure in copy to user within an inner list for each entry loop only breaks the inner loop. This causes the outer while...

PT-2026-64514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd veventq fops read function where a bound-check for the normal vEVENT path incorrectly uses sizeofhdr instead of sizeofhdr. Because hdr is a pointer,...

PT-2026-64715

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002 read raw calls pm runtime get sync before reading the lux value, but if gp2ap002 get lux fails, it returns directly. This skips the pm runtime put autosuspend call ...

Linux Distros Unpatched Vulnerability : CVE-2026-64268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment a...

Linux Distros Unpatched Vulnerability : CVE-2026-9499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not...

PT-2026-64624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap get conf opt function reads the opt-len field, which is controlled by an attacker, and dereferences opt-val before...

PT-2026-64544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read can occur when mounting a crafted UDF image with a virtual VAT partition. The udf load vat function fails to validate the lengthHeader value from the on-disk VAT 2....

Linux Distros Unpatched Vulnerability : CVE-2026-64299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL- terminated, so the filter predicate functions filterpredstring...

Linux Distros Unpatched Vulnerability : CVE-2026-64290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Break the loop on failure in iommufdfaultfopsread On a copytouser failure inside the inner listforeachentry, only the inner loop breaks; the outer whil...

Linux Distros Unpatched Vulnerability : CVE-2026-64514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - userfaultfd: gate mustwait writability check on ptepresent userfaultfdmustwait and userfaultfdhugemustwait read the PTE without taking the page table lock and...

Linux Distros Unpatched Vulnerability : CVE-2026-47043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-64833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer...