The vulnerabilities of the functions qdisc_pkt_len_segs_init() and __dev_queue_xmit() in the net/core/dev.c module of the Linux kernel allow an attacker to access protected information or cause service failures.

The vulnerabilities of the functions qdiscpktlensegsinit and devqueuexmit in the net/core/dev.c module of the Linux kernel are related to incorrect assumptions about the organization of data or memory. Exploiting these vulnerabilities can allow an attacker to access protected information or cause...

The vulnerability of the blkcg_maybe_throttle_current() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the blkcgmaybethrottlecurrent function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, relates to the failure to release resources after their useful lifespan has expired. Exploiting this vulnerability could allow an...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the `drivers/accel/ivpu/ivpu_ms.c` kernel module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

The vulnerability of the fw_log_print_buffer() function in the drivers/accel/ivpu/ivpu_fw_log.c file of the Linux kernel’s acceleration device driver allows a hacker to access protected information or cause a service failure.

The vulnerability of the fwlogprintbuffer function in the drivers/accel/ivpu/ivpufwlog.c file of the Linux kernel’s acceleration device driver module is related to the occurrence of operations outside the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to access...

The vulnerability of the `register_shm_helper()` function in the `drivers/tee/tee_shm.c` driver for the trusted execution environment of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file of the Linux kernel’s trusted execution environment driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the nft_meta_bridge_get_eval() function in the net/bridge/netfilter/nft_meta_bridge.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nftmetabridgegeteval function in the net/bridge/netfilter/nftmetabridge.c module, which is part of the networking functions in the Linux kernel, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the __sctp_rcv_asconf_lookup() function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106166 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106175 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106164 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

RockyLinux 9 : grafana-pcp (RLSA-2026:63136)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:63136 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...

Linux Distros Unpatched Vulnerability : CVE-2026-80756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences...

RHEL 8 : container-tools:rhel8 (RHSA-2026:63163)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63163 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/mail:...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

Linux Distros Unpatched Vulnerability : CVE-2026-85769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or...

Linux Distros Unpatched Vulnerability : CVE-2026-80808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking t...

Linux Distros Unpatched Vulnerability : CVE-2026-84970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding...

The vulnerability of the cciremove() function in the drivers/i2c/buses/i2c-qcom-cci.c module of the I2C hardware interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cciremove function in the drivers/i2c/busses/i2c-qcom-cci.c module of the I2C hardware interface driver for the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-84964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already...