PT-2026-117072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic Segmentation Offload GSO implementation for IP-in-IP. The system can re-enter the inet gso segment or ipv6 gso segment functions for each nested IP header...

PT-2026-116832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where program-allocated objects can own other local objects via referenced kptrs. The function bpf obj free fields follows these pointers through bpf...

CVE-2026-98755: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vccsendctl The stack-allocated struct viovcc pkt was partially initialized, leaving the tag.stypeenv field uninitialized before being sent via ldcwrite, potentially leaking kernel stack...

PT-2026-116645

Name of the Vulnerable Software and Affected Versions lwIP versions prior to 2.2.2 Description A stack out-of-bounds write exists in the mdns handle response function. Adjacent attackers can corrupt stack memory by sending mDNS responses containing invalid domain names. Specifically, attackers on...

CVE-2026-98613: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Bound ownership depth through local kptrs and graph roots Program-allocated objects can own other local objects through referenced kptrs. bpfobjfreefields follows those pointers through bpfobjdropimpl synchronously, before t...

CVE-2026-98584: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...

CVE-2026-98853: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inetgsosegment or ipv6gsosegment for each nested IP header. encaplevel tracks header bytes, not callback depth, so a deep chain can exhaust the kernel stac...

CVE-2026-98540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraphdata list when the reservation is not filled fprobefgraphentry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0...

Linux Distros Unpatched Vulnerability : CVE-2026-98755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: vcc: zero-initialize control packet in vccsendctl The stack-allocated struct viovcc pkt was partially initialized, leaving the tag.stypeenv field...

Linux Distros Unpatched Vulnerability : CVE-2026-98466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fixhostownership walks only the linear-map alias of each memblock region, and the per-CPU hyp...

Security update for stunnel (moderate)

openSUSE security update: security update for stunnel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22088-1 Rating: moderate References: bsc1274206 bsc1274207 Cross-References: CVE-2026-70367 CVE-2026-70368 CVSS scores: CVE-2026-70367 SUSE : 5.4...

Security update for virtiofsd (important)

openSUSE security update: security update for virtiofsd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22079-1 Rating: important References: bsc1257912 bsc1283239 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...

Security update for fetchmail (important)

openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...

Security update for p11-kit (moderate)

openSUSE security update: security update for p11-kit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22105-1 Rating: moderate References: bsc1269664 bsc1280702 Cross-References: CVE-2026-13757 CVE-2026-18938 CVSS scores: CVE-2026-13757 SUSE : 6.2...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2024:1727815919)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2024:1727815919 advisory. - In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in...

PT-2026-116770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the perf clear branch entry bitfields function fails to clear all bitfields of the perf branch entry structure, specifically omitting the new ty...

Linux Distros Unpatched Vulnerability : CVE-2026-98760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after...

PT-2026-116685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the fix host ownership function only processes the linear-map alias of each memblock region. Consequently, the per-CPU hyp stack, which i...

CVE-2026-112055: Out-of-bounds Read

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

PT-2026-116638

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX FKP and wvGetCHPX FKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...