PT-2026-79728

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in lzo...

PT-2026-79729

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip vs nat icmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One...

PT-2026-79688

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index the static counts array in evdev get mask cnt and client evmasks arra...

PT-2026-79603

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6 route rcv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of...

PT-2026-79640

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit cursor bit cursor fetches the glyph under the cursor with c = scr readwvc pos; src = vc font.data + c & charmask w height; where charmask is 0x1ff when vc hi font mask is set. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB read in WMMparamhandler WMMparamhandler copies a fixed-size WMM parameter element out of a received information element without...

PT-2026-79717

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create direct keys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmd exec+0x550/0xca0 mlx5 core Read of size 272 at addr 0000000176795020 by task...

Linux Distros Unpatched Vulnerability : CVE-2026-74640

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: fix OOB write in fcpmeterctlget fcpioctlsetmetermap bounds the user-supplied Level Meter map size by the driver's own limit of 255 if map.mapsize 25...

Linux Distros Unpatched Vulnerability : CVE-2026-74612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area,...

Linux Distros Unpatched Vulnerability : CVE-2026-74671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart =...

Linux Distros Unpatched Vulnerability : CVE-2026-74649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's...

Linux Distros Unpatched Vulnerability : CVE-2026-74693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject...

Linux Distros Unpatched Vulnerability : CVE-2026-74580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok...

Linux Distros Unpatched Vulnerability : CVE-2026-74723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compresse...

PT-2026-79568

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfile write function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZ LARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating tha...

PT-2026-79653

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw cfg80211 monitor if xmit entry removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains. The data...

PT-2026-79655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the WMM param handler function within the rtl8723bs staging driver. The function copies a fixed-size WMM parameter element from a received information...

Linux Distros Unpatched Vulnerability : CVE-2026-54789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party...

PT-2026-79602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip6 tunnel component where the ip6ip6 err function clones an outer IPv6 ICMP error skb and pulls it to the quoted inner IPv6 packet before passing the clone to...

PT-2026-79646

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...