Linux Distros Unpatched Vulnerability : CVE-2026-80926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free in oplock break notification smb2oplockbreaknoti reads opinfo-conn without any lock and dereferences it after two allocations which ma...

Linux Distros Unpatched Vulnerability : CVE-2026-89625

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback...

Linux Distros Unpatched Vulnerability : CVE-2026-89626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sensor: custom: Fix field sysfs group cleanup on failure hidsensorcustomaddattributes creates one sysfs group for each custom sensor field. If...

Linux Distros Unpatched Vulnerability : CVE-2026-89655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During th...

Linux Distros Unpatched Vulnerability : CVE-2026-89455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: plda: Fix use-after-free of event IRQs during teardown pldapcieirqdomaindeinit removes pcie-eventdomain via irqdomainremove, but the per-event IRQs mapped...

Linux Distros Unpatched Vulnerability : CVE-2026-89569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: serialize security confirmation handling rfcommsecuritycfm looks up a session on sessionlist and then walks its DLC list without holding...

Linux Distros Unpatched Vulnerability : CVE-2026-89654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates mdsc-sessions and for each active session drops mdsc-mutex to perform per-sessi...

Linux Distros Unpatched Vulnerability : CVE-2026-81004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be...

Linux Distros Unpatched Vulnerability : CVE-2026-89523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: cancel pending mlopmwork If the device is reset, suspended or unregistered within that window, the pending work can still run and access...

Linux Distros Unpatched Vulnerability : CVE-2026-89472

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulato...

Linux Distros Unpatched Vulnerability : CVE-2026-89668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare retur...

Linux Distros Unpatched Vulnerability : CVE-2026-89546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a request while the NFS callback service is being torn down...

Linux Distros Unpatched Vulnerability : CVE-2026-89747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix use-after-free in tracepipe read on sub-buffer order change Writing to buffersubbufsizekb calls ringbuffersubbuforderset, which frees every...

Linux Distros Unpatched Vulnerability : CVE-2026-89658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40cleanadminrevoked takes a stateid reference under clp-cllock, drops nn-clientlock,...

Debian dsa-6496 : libnginx-mod-http-geoip - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6496 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6496-1 [email protected] https://www.debian.org/securit...

CVE-2026-89570

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. Lifetime issues with the CXL Machine Check Exception MCE notifier can lead to NULL dereferences and use-after-free vulnerabilities in the MCE handler. This could allow an attacker to cause system instability or a denial of...

CVE-2026-89452

A flaw was found in the iommu/msm component of the Linux kernel. This vulnerability occurs when msmiommuprobe fails to properly unwind its probe state during registration, leaving a dangling list entry. A local attacker could potentially exploit this to cause a dereference of the dangling list...

CVE-2026-89641

A flaw was found in the Linux kernel's Common Internet File System CIFS module. This vulnerability, a use-after-free, occurs in the cifsfilesetsize function. When a file's size is being modified, a critical system resource tcon object can be released too early but then accessed again. A local...

CVE-2026-89635

A flaw was found in ksmbd, a component of the Linux kernel. An authenticated attacker could exploit a use-after-free vulnerability by manipulating durable handles and oplocks during session reconnection. When two sessions hold durable handles on the same file and both disconnect, reconnecting one...

CVE-2026-89441

A flaw was found in the Linux kernel, specifically within the mmc: via-sdmmc driver responsible for managing SD and MultiMediaCard MMC devices. This vulnerability occurs during device removal, where a timing issue allows a process to attempt to access memory that has already been released. This...