CVE-2026-97551

The Linux kernel 's xfs filesystem contains a vulnerability where xfs_parent_da_args_init() initializes xfs_parent_args with a zeroed value, leaving args->total at 0. During attribute fork growth, xfs_da_grow_inode_int() treats this as a running block reservation; because it is an xfs_extlen_t...

CVE-2026-97551 xfs: initialise args->total for parent pointer updates

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...

PT-2026-98732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function attempts to quiesce transmit and receive-refill paths by checking if RDS IN XM...

CVE-2026-97551

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...

Linux Distros Unpatched Vulnerability : CVE-2026-97551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total ==...

PT-2026-98492

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs defer finish one xfs defer finish one declares error without an initialiser and only assigns it inside the loop over dfp-dfp work. When that list is empty the loop body never runs, control falls throu...

PT-2026-98735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A store-buffering pattern exists in the release in xmit function. The function uses clear bit unlock to clear RDS IN XMIT, which orders the critical section before the bit clear but fail...

DEBIAN-CVE-2026-93285

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...

CVE-2026-97491

The Linux kernel contains a vulnerability in the net/rds component where the rds_ib_conn_path_shutdown function improperly sleeps. Specifically, a shutdown worker thread uses a wait_event call that blocks other work items in the queue, leading to a system hang during the teardown of IB network co...

PT-2026-98110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang occurs during the teardown of ib network configurations. This issue is caused by the shutdown worker thread sleeping on the wait event call, which subsequently blocks other work...

PT-2026-97965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the octeon staging driver. The cvm oct rx shutdown function calls free irq and netif napi del without first disabling the NAPI instance. Since free irq...

CVE-2026-93285

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090052 advisory. In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection...

Linux Distros Unpatched Vulnerability : CVE-2026-90171

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets outside the handler lock smbdirectsocketdestr...

Improper Resource Shutdown or Release

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Improper Resource Shutdown or Release due to NettyConnectListener.onSuccess in the Netty connect path. An attacker can exhaust maxConnections...

CVE-2026-90171 smb: smbdirect: release pending child sockets outside the handler lock

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets outside the handler lock smbdirectsocketdestroy releases the listener's pending/ready child sockets while still holding the listener's handler lock, the &idpriv-handlermutex taken via...

MiracleLinux 9 : kernel-5.14.0-687.34.1.el9_8 (AXSA:2026-1855:81)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1855:81 advisory. kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 Tenable has extracted the preceding description...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the parseplaylist function of the Duration Parser component when processing the duration or targetduration arguments. An attacker can cause a denial of service by providing specially crafted...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fixed potential memory corruption in ipmicreateuser. The “intf” list iterator becomes an invalid pointer if the correct “intf-intfnum” is not found. Calling atomicdec&intf-nrusers with an invalid pointer will lea...

Astra Linux – Vulnerability in Thunderbird

When a worker is shut down, it was possible for the script to run late in the lifecycle, at a time when it should not be possible. This vulnerability affects Firefox 96, Thunderbird 91.6, and Firefox ESR 91.6...