CVE-2026-99067

A flaw was found in the Linux kernel's Btrfs file system. When path resolution encounters an error while reporting scrub warnings, the kernel fails to release an acquired reference to the file system root structure. A local user could trigger this condition during file system scrubbing to cause a...

CVE-2026-98910

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. When enabling a debug trap fails during data transfer to user space, the kernel fails to clean up previously allocated resources and state, leaving an inconsistent trap state and an unreleased process reference count. A local attacker...

CVE-2026-98909

A flaw was found in the Linux kernel's CPSW network driver. When network port registration fails during device initialization, the driver does not properly unregister its devlink management interface. This improper cleanup leaves resources allocated in the kernel, which may allow a local user to...

CVE-2026-98908

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When configuring traffic control rules with Per-Stream Filtering and Policing PSFP, the driver fails to properly unwind allocated resources and correct reference counts if a setup step fails. A privileged local user could...

UBUNTU-CVE-2026-98908

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

CVE-2026-98908

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

CVE-2026-98909

In the Linux kernel, the following vulnerability has been resolved: net: cpswnew: unregister devlink on port registration failure cpswprobe registers devlink before registering the CPSW ports. If cpswregisterports fails, the error path only unregisters the notifiers and then releases the lower...

ROS-20261026-73-0170

The vulnerability in Netty is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-98820

A flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When cached input/output I/O requests originally allocated for passthrough commands are reused for standard read or write operations, scheduler flags are not properly updated. This failure bypasses required scheduler...

CVE-2026-98811

A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during creation. Due to improper error handling, the kernel fails...

CVE-2026-98909 net: cpsw_new: unregister devlink on port registration failure

In the Linux kernel, the following vulnerability has been resolved: net: cpswnew: unregister devlink on port registration failure cpswprobe registers devlink before registering the CPSW ports. If cpswregisterports fails, the error path only unregisters the notifiers and then releases the lower...

EUVD-2026-108864

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

CVE-2026-98908

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

CVE-2026-98782

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When device initialization fails or during driver removal, the driver fails to unregister an allocated overlay adaptor platform device. A local user could exploit this flaw to cause a resource leak, potentially...

CVE-2026-98781

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When binding non-master display devices, the driver fails to release a device reference acquired during initialization. A local user could exploit this condition during device initialization or reconfiguration,...

CVE-2026-98779

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During Audio CoProcessor ACP hardware initialization, child multi-function devices are not properly released if a power domain attachment fails or a hardware reset times out. This issue causes an internal resource leak, which may lead ...

CVE-2026-98774

A flaw was found in the Linux kernel's Rust Binder driver. When a thread terminates while handling an active outgoing transaction, deferred work items on the thread's task list are not properly cleaned up during thread release. A local attacker could exploit this vulnerability to cause a resource...

Linux Distros Unpatched Vulnerability : CVE-2026-98908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resourc...

PT-2026-121878

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5 tc flower psfp setup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resourc...

Security Bulletin: Multiple Security Vulnerabilities in HttpClient affect IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-64607, CVE-2026-71290)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION: HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if ...