PT-2026-98835

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi wifi driver within the mei component where an incorrect argument is passed to the iwl mei write cyclic buf function. Specifically, the q head pointer is...

Linux Distros Unpatched Vulnerability : CVE-2026-98144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: put the chained BO when its mapping fails amdxdnacmdseterror looks up the first BO of a command chain, which takes a reference, and drops it at t...

PT-2026-98806

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the amdxdna cmd set error function. The function retrieves the first Buffer Object BO of a command chain, which increments its reference count. If the subseque...

PT-2026-98490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where unit conversions in the per binval computation are performed incorrectly. Specifically, the second parameter of the xfs buf inval log space...

CVE-2026-98144: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdnacmdseterror looks up the first BO of a command chain, which takes a reference, and drops it at the end of the function. The mapping of that BO is established in...

kernel: drm/xe: Hold a dma-buf reference for imported BOs

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...

PT-2026-98113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the fw pri buf PSP private buffer was handled using open-coded memset and memcpy operations without proper validation. The fix involves...

PT-2026-98011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak and improper error handling exist in the ksmbd module. When the ndr decode v4 ntacl function fails, the system fails to execute kfreeacl.sd buf, resulting in a memory leak...

ai.koryki.core:koryki-core (>=0.1.0, <=0.2.0), ai.koryki.core:koryki-duckdb (>=0.1.0, <=0.2.0) +2924 more potentially affected by CVE-2026-91777 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.2)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.24, =0.7.24, =2.2.0, =2.7.1 and more Source cves: CVE-2026-91777 Source advisory: SNYK:JAVA-TOOLSJACKSONCORE-20059682...

SUSE CVE-2026-90051

In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIFFSG isn't present. In this case, tcpsendmsglocked will try the copy path and try to copy data from an...

PT-2026-99964

The code in pppd that formats a response to a PEAP Request packet in peap response copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket buf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting ...

CVE-2026-90051

In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIFFSG isn't present. In this case, tcpsendmsglocked will try the copy path and try to copy data from an...

PT-2026-94405

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free read occurs in the slip receive buf function during a race condition with tty hangup. The tty ldisc hangup function calls ld-ops-hangup while holding only a read lo...

PT-2026-94399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the TCP implementation where devmem TX is not properly enforced to require zero-copy when NETIF F SG is absent. In such scenarios, the tcp sendmsg locked function...

PT-2026-94545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID haptic subsystem where the fill effect buf function initializes values only for four specific haptic usages. However, it writes these values to field-value for...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-93387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the read log rec buf function within the NTFS3 file system. The issue occurs because the log-record header len value is taken directly from the on-disk...

CVE-2026-89996: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

PT-2026-93637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dma-heap component where the DMA HEAP IOCTL ALLOC operation installs a file descriptor fd into the caller's fd table before the result is successfully copied back ...

Linux Distros Unpatched Vulnerability : CVE-2026-89996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma- buf and installs an fd into the caller's fd table via dmabuffd...