PT-2026-117020

In the Linux kernel, the following vulnerability has been resolved: net: restrict SO RESERVE MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SO RESERVE MEM" and commit d00c8ee31729 "net: fix possible NULL deref in sock reserve memory" only checked sk has...

PT-2026-117023

In the Linux kernel, the following vulnerability has been resolved: net: page pool: fix use-after-free in page pool recycle ring bulk With CONFIG PAGE POOL STATS=y, page pool recycle ring bulk updates the recycle stats after dropping the producer lock. If it just recycled the last inflight netmem...

PT-2026-117048

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments to avoid extra len overflow In ieee80211 rx h defragment, fragment payloads are accumulated into entry-extra len as subsequent fragments arrive: entry-extra len += rx-skb-len; When the fin...

PT-2026-117051

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg tryget closest bio set dev associates the bio with a blkg through bio associate blkg. If the blkg lookup misses, blkg tryget closest takes q-queue lock with spin lock irq and releases it with sp...

Linux Distros Unpatched Vulnerability : CVE-2026-98664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: imu: adis16400: fix unprotected debugfs reads adis16400serialnumberfops is open coded and never calls debugfsfileget, so debugfsremoverecursive does not wa...

Linux Distros Unpatched Vulnerability : CVE-2026-98682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the...

Linux Distros Unpatched Vulnerability : CVE-2026-98736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: Lock parent access during enhanced SCO setup Bluetooth: hciconn: Lock parent access during enhanced SCO setup hcienhancedsetupsync runs on t...

Linux Distros Unpatched Vulnerability : CVE-2026-98785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips...

Linux Distros Unpatched Vulnerability : CVE-2026-98863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in t...

PT-2026-116865

In the Linux kernel, the following vulnerability has been resolved: tcp: Skip cond resched in inet csk listen stop under BPF context bpf sock destroy runs from the tcp iterator, under rcu read lock. If the sock is a listener that still has children in its accept queue, tcp abort ends up in inet c...

PT-2026-116883

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400 serial number fops is open coded and never calls debugfs file get, so debugfs remove recursive does not wait for a read in progress and unbind frees the iio dev...

PT-2026-116948

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va align to hugetlb mappings on AMD F15h get align mask returns huge page mask align for hugetlbfs, but get align bits adds va align.bits regardless, so vm unmapped area returns an address off the huge page...

PT-2026-117030

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change on the shared proto and both can fail: the winner's tcf chain tp dele...

PT-2026-117067

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clk hw onecell data with counted by" annotated the hws member of 'struct clk hw onecell data' with counted by, which informs the bounds...

PT-2026-116671

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open cached dir sends CREATE and QUERY INFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

PT-2026-116677

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: release unused CIS holds after channel attach hci bind cis and hci connect cis return one hci conn hold for the ISO layer. A new channel association consumes that hold, which is eventually released by iso conn fre...

PT-2026-116873

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atomize IRQ register read/modify/write ops Why The OTG GLOBAL SYNC STATUS register controls various HW IRQ sources for the output timing generator OTG. VUPDATE NO LOCK is one of them. To enable the IRQ, driver se...

PT-2026-117165

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD...

PT-2026-116609

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use read text, read blob, COPY...

PT-2026-116608

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...