Linux Distros Unpatched Vulnerability : CVE-2026-64161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32...

Linux Distros Unpatched Vulnerability : CVE-2026-64075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregisterfprobe to wait for RCU grace period Commit 4346ba1604093 fprobe: Rewri...

ALSA-2026:41906 Important: httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation CVE-2026-24072 http...

PT-2026-61643

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team xmit during mode change team change mode clears team-ops with memset before restoring safe dummy handlers via team adjust ops. A concurrent team xmit running under RCU on another CP...

Linux Distros Unpatched Vulnerability : CVE-2026-64158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, write streaming the caching of dirty data in dirty but !uptodate folios is perform...

PT-2026-61555

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.5 Description An arbitrary file read issue exists in the DEFINE ANALYZER mapper filter. Database users with EDITOR or OWNER roles can read files accessible to the SurrealDB process by specifying arbitrary file...

Linux Distros Unpatched Vulnerability : CVE-2026-63934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200readallchannels takes be16 buf' as a parameter and fills the i2cmsg destination as char...

Linux Distros Unpatched Vulnerability : CVE-2026-63937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READONCE when reading entries/indices from PSC buffer Use READONCE when readin...

Linux Distros Unpatched Vulnerability : CVE-2026-64119

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-64015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls assocarrayfind in findkeytoupdate without holding the...

Linux Distros Unpatched Vulnerability : CVE-2026-63960

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: wcove: don't write past struct pdmessage in wcovereadrxbuffer wcovereadrxbuffer copies the PD RX FIFO into the caller's struct pdmessage with for i...

PT-2026-61642

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the dump process and the ip set list resize operation. The functions ip set dump do and ip set dump done access inst-ip s...

PT-2026-61730

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.4.3 Description A receiver-side out-of-bounds array read exists in the recv files function. This allows a malicious rsync server or any peer acting as a sender to cause a deterministic crash of an rsync client during ...

PT-2026-61567

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

PT-2026-61599

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the number of elements, and the element size are not in agreement it can trigger an out of bounds read. The array datatype stores the...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: clear page-private in freepagesprepare CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks CVE-2026-45850 In the Linux...

Malicious code in supplyhub (npm)

The npm package supplyhub is a credential / SSH-key stealer. Its package.json declares a postinstall lifecycle hook postinstall: node postinstall.js that executes automatically on npm install, before the package is ever imported. postinstall.js uses fs.readFileSync to read the user's SSH private...

RHEL 9 : httpd (RHSA-2026:41906)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41906 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2026-1942)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1942 advisory. A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check...

Linux Distros Unpatched Vulnerability : CVE-2026-63915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: hci: fix out-of-bounds read in HCP header parsing Both nfchcirecvfromllc and ncihcidatareceivedcb read packet-header from skb-data at function entry withou...