Linux Distros Unpatched Vulnerability : CVE-2026-89554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and ms...

CVE-2026-89481

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

CVE-2026-89458

A flaw was found in the Linux kernel's s390/dasd component. The dasdinthandler function incorrectly marks failed Extended Sense Data ESE read operations as successful when processing unallocated ESE tracks. This leads to the block layer receiving stale or uninitialized memory instead of properly...

AZL-100755 CVE-2026-89458 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

CVE-2026-89458

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

CVE-2026-89554 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...

CVE-2026-89458 s390/dasd: Do not complete a failed ESE read as successful

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

EUVD-2026-76364

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

CVE-2026-89458 s390/dasd: Do not complete a failed ESE read as successful

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

CVE-2026-89458

CVE-2026-89458 affects the s390/dasd driver in the Linux kernel. The function dasd_int_handler() completes an NRF read of an unallocated ESE track by calling ese_read() and unconditionally marking the request as DASD_CQR_SUCCESS. However, dasd_eckd_ese_read() can return an error before zeroing th...

PT-2026-90174

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd int handler completes an NRF read of an unallocated ESE track by calling ese read and unconditionally marking the request DASD CQR SUCCESS. dasd eckd ese read can...

CVE-2026-80714

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

CVE-2026-80603 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

CVE-2026-80567

A flaw was found in the Linux kernel. The synaptics-rmi4 input driver's rmif54bufferqueue function failed to propagate errors from its worker thread. This oversight could result in the delivery of stale or uninitialized memory to user applications, potentially leading to information disclosure or...

UBUNTU-CVE-2026-80567

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmif54bufferqueue waited for the worker thread to finish but ignored whether it succeeded. If the worker failed e.g., due to a timeout or register read...

CVE-2026-80567

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmif54bufferqueue waited for the worker thread to finish but ignored whether it succeeded. If the worker failed e.g., due to a timeout or register read...

CVE-2026-80567 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmif54bufferqueue waited for the worker thread to finish but ignored whether it succeeded. If the worker failed e.g., due to a timeout or register read...

CVE-2026-80567

CVE-2026-80567 affects the synaptics-rmi4 input driver in the Linux kernel. The function rmi_f54_buffer_queue() waited for the F54 worker thread to finish but ignored its exit status. When the worker failed (e.g., due to a timeout or register read failure), the queue thread silently returned succ...

PT-2026-82183

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 buffer queue function fails to verify the success of the worker thread. When the worker fails due to register read failures...

EUVD-2026-64586

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...