Linux Distros Unpatched Vulnerability : CVE-2026-97434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by a...

Linux Distros Unpatched Vulnerability : CVE-2026-93262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after calling ppliounitfinished, touching io-pendingflushes and leadin...

CVE-2026-57179

Python Social Auth is a social authentication/registration mechanism...

CVE-2026-88358

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2026-97450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: validate handler object type in two places ACPICA: validate handler object type in acpievhasdefaulthandler and acpievfindregionhandler. CVE-2026-97450...

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

CVE-2026-93545

An out-of-bounds read in libXis XListInputDevices in libXi before 1...

Linux Distros Unpatched Vulnerability : CVE-2026-79313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead o...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python D...

Linux Distros Unpatched Vulnerability : CVE-2026-97436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2switchportsetfdb function always allocates a new FDB for the port which i...

CVE-2026-93542

An out-of-bounds read in libXis XI2 class parsing via sizeclasses...

Linux Distros Unpatched Vulnerability : CVE-2026-97410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netconsole: take targetcleanuplistlock in dropnetconsoletarget dropnetconsoletarget unlinks the target while only holding targetlistlock. However, when the...

CVE-2026-77791

Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...

CVE-2026-97428

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

CVE-2026-97455

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in acpidsterminatecontrolmethod by clearing references to method locals and arguments...

Linux Distros Unpatched Vulnerability : CVE-2026-97503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, %u, ir...

CVE-2026-96745

Deserialization of untrusted data in the command monitoring support of...

CVE-2026-88358

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...

CVE-2026-88360

libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vipsavgscan subsequently...

CVE-2026-97429

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroyqueuecpsch waitondestroyqueue drops locks to wait for queue resume, allowing a concurrent destroy to free the queue. Use isbeingdestroyed flag to serialize destruction...