PT-2026-93654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the tracing component. This occurs because options files do not take a trace array reference for the options they represent. If one task opens one of...

PT-2026-93678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the NFSD component. An nfs4 openowner remaining on nn-close lru after a final CLOSE operation retains a raw pointer to its nfs4 client. When the laundrom...

CVE-2026-90001: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in structops destroy path hidbpfopsdestroydevice and hidbpfunreg can race on the same registration reference, double-putting struct hiddevice and freeing it while hiddestroydevice stil...

PT-2026-93444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/nouveau component where the nouveau channel del function destroys the fence context before unsubscribing from the channel-kill event. This creates a race...

ROS-20260916-73-0010

The vulnerability of the hfscenqueue function in the net/sched/schhfsc.c component of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...

PT-2026-93743

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.27 BIND 9 versions 9.21.0 through 9.21.25 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.27-S1 Description A use-after-free issue...

CVE-2026-19666: Use After Free

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

ROS-20260916-73-0032

The vulnerability of the l2capconnect function in the net/bluetooth/l2capcore.c module of the Linux operating system’s Bluetooth kernel implementation is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an...

CVE-2026-19666: Use After Free

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

PT-2026-93831

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 1.14.2 Description A heap-use-after-free issue exists in the H5T conv f f function within src/H5Tconv.c. This occurs during the conversion of a compound datatype containing floating-point members during a dataset read,...

CVE-2026-90041: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

PT-2026-93446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm pagemap migrate populate ram pfn function when populating RAM PFNs with higher-order folios. The problem consists of two main parts: first, higher-order vma...

PT-2026-93611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the nvmet-auth component during the teardown of a Submission Queue SQ. The function nvmet auth sq free uses cancel delayed work to cancel auth expired work, bu...

PT-2026-93673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbtv media component where an open PCM file can remain active after a USB disconnect. This occurs because usbtv audio free utilizes snd card free when closed,...

PT-2026-93582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IIO buffer implementation. The iio dma fence implementation used kfree for its custom release process, which violates the dma fence requirement that...

CVE-2026-90006: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

Linux Distros Unpatched Vulnerability : CVE-2026-89960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfio-ap: fix stale pqaphook pointer on error in vfioapmdevsetkvm In vfioapmdevsetkvm, kvm-arch.crypto.pqaphook is set to &matrixmdev-pqaphook before the...

Linux Distros Unpatched Vulnerability : CVE-2026-89853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00freefcetrace freed and cleared ha-fce while holding only fcemutex. The firmware-dump...

Linux Distros Unpatched Vulnerability : CVE-2026-89938

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq...

Linux Distros Unpatched Vulnerability : CVE-2026-89928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk kvmrmaplock deliberately elides the rmap lock when it observes an empty rmap. In that case...