Linux Distros Unpatched Vulnerability : CVE-2026-80991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ravb: serialize PTP clock teardown ravbptpinterrupt can race with ravbptpstop and pass the clock to ptpclockevent while ptpclockunregister is freeing it...

Linux Distros Unpatched Vulnerability : CVE-2026-89544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: fix gssxdecoptionarray error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller...

Linux Distros Unpatched Vulnerability : CVE-2026-89545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: defer rqargp and rqresp free until after RCU grace period svcrqstfree frees rqstp-rqargp and rqstp-rqresp synchronously via kfree, but defers the rqstp...

Linux Distros Unpatched Vulnerability : CVE-2026-89546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a request while the NFS callback service is being torn down...

Linux Distros Unpatched Vulnerability : CVE-2026-89569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: serialize security confirmation handling rfcommsecuritycfm looks up a session on sessionlist and then walks its DLC list without holding...

CVE-2026-89570

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. Lifetime issues with the CXL Machine Check Exception MCE notifier can lead to NULL dereferences and use-after-free vulnerabilities in the MCE handler. This could allow an attacker to cause system instability or a denial of...

CVE-2026-89452

A flaw was found in the iommu/msm component of the Linux kernel. This vulnerability occurs when msmiommuprobe fails to properly unwind its probe state during registration, leaving a dangling list entry. A local attacker could potentially exploit this to cause a dereference of the dangling list...

CVE-2026-89641

A flaw was found in the Linux kernel's Common Internet File System CIFS module. This vulnerability, a use-after-free, occurs in the cifsfilesetsize function. When a file's size is being modified, a critical system resource tcon object can be released too early but then accessed again. A local...

CVE-2026-89635

A flaw was found in ksmbd, a component of the Linux kernel. An authenticated attacker could exploit a use-after-free vulnerability by manipulating durable handles and oplocks during session reconnection. When two sessions hold durable handles on the same file and both disconnect, reconnecting one...

CVE-2026-89441

A flaw was found in the Linux kernel, specifically within the mmc: via-sdmmc driver responsible for managing SD and MultiMediaCard MMC devices. This vulnerability occurs during device removal, where a timing issue allows a process to attempt to access memory that has already been released. This...

CVE-2026-89486

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. Due to incorrect synchronization during the deallocation of command receiver objects, a use-after-free vulnerability can occur. This allows a freed memory region to be accessed, which could be exploit...

CVE-2026-68138

CVE-2026-68138: Linux qdisc rate-table race to local root This repository contains a proof-of-concept local privilege-escalation exploit for CVE-2026-68138 , a race in the Linux traffic-control rate-table code. In the tested QEMU environment, the PoC escalates from an ordinary process with outer...

CVE-2026-89689

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. A remote attacker could exploit a use-after-free vulnerability in the nfsd4sequence function. This occurs when the system attempts to reduce the number of active session slots while a client is still using one of the slo...

CVE-2026-89662

A flaw was found in the Linux kernel's Network File System Daemon NFSD. During client teardown, a race condition can occur where a lock owner is freed while still being referenced, leading to a use-after-free vulnerability. This can result in a NULL dereference, potentially causing a system crash...

CVE-2026-89764

A flaw was found in the Linux kernel's rust: devres component. A race condition exists when two processes attempt to revoke a Devres resource concurrently. This can lead to a use-after-free vulnerability, where one process might free resources that another process is still actively using. Such an...

CVE-2026-81008

A flaw was found in the Linux kernel's interconnect subsystem. When a dynamic memory allocation fails during path initialization, an object is prematurely freed while still being referenced in internal lists. This creates dangling pointers, which can be later accessed or modified. This...

CVE-2026-89703

A flaw was found in the nfsd component of the Linux kernel. The nfsd4droprevokedstid function, which handles admin-revoked delegations, fails to correctly set a status flag before releasing a lock. This oversight can lead to a use-after-free condition when a freed delegation is incorrectly added ...

CVE-2026-89708

A flaw was found in the Linux kernel's NFS daemon nfsd. During the teardown of an NFSv4 session, a race condition can occur where the session's memory is freed while an active callback task still holds a reference to it. This can lead to a use-after-free vulnerability, potentially causing system...

CVE-2026-89548

A flaw was found in the Linux kernel's SUNRPC component. When sunrpcdestroycachedetail is called, it may not properly drain the cachecleaner before freeing a cachedetail object. This oversight can lead to a use-after-free vulnerability, where the system attempts to access or use memory that has...

CVE-2026-89762

A flaw was found in the Linux kernel's AppArmor security module. The begincurrentlabelcritsection function, used in various Linux Security Module LSM hooks, attempts to replace user credentials when a security label becomes stale. This process can lead to a Use-After-Free UAF vulnerability if the...