Linux Distros Unpatched Vulnerability : CVE-2026-98434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 sysctl: replace...

Linux Distros Unpatched Vulnerability : CVE-2026-98632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: Dequeue pending meshsendsync entries on cancel In sendcancel, pending meshtx objects are removed from the hdev-meshpending list and freed via...

Linux Distros Unpatched Vulnerability : CVE-2026-98584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name a...

Linux Distros Unpatched Vulnerability : CVE-2026-98541

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fou: reject omitted FOUATTRIPPROTO on FOUENCAPDIRECT Commit 7a9bc9e3f423 fou: Don't allow 0 for FOUATTRIPPROTO. added NLAPOLICYMINNLAU8, 1 to...

Linux Distros Unpatched Vulnerability : CVE-2026-98610

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schhfsc: bound the classify inner-filter walk with a drift budget hfscclassify applies the filter may only point downwards level check only when the...

Linux Distros Unpatched Vulnerability : CVE-2026-98606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: release the GEM object on virtiogpuvramcreate errors virtiogpuvramcreate frees the object with a bare kfreevram on both error paths after...

Linux Distros Unpatched Vulnerability : CVE-2026-98581

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: Fix list corruption / refcount desync in nfcllcprecvdm nfcllcprecvdm handles DMNOBOUND/DMREJ for a socket that is still linked on...

Linux Distros Unpatched Vulnerability : CVE-2026-98491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing...

Linux Distros Unpatched Vulnerability : CVE-2026-98623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/clk: fix list cursor use after loop in nvkmclkustateupdate If listforeachentry exits without hitting a break then pstate is not a valid pstate...

Linux Distros Unpatched Vulnerability : CVE-2026-98596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which...

Linux Distros Unpatched Vulnerability : CVE-2026-98723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf nvmet: Improve nvmetallocctrl interface and implementation added a second...

Linux Distros Unpatched Vulnerability : CVE-2026-98548

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA...

Linux Distros Unpatched Vulnerability : CVE-2026-98550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: reject invalid and unexpected GRPACKMSG to prevent bcackers underflow Commit 48a5fe38772b tipc: fix bcackers underflow on duplicate GRPACKMSG rejected...

Linux Distros Unpatched Vulnerability : CVE-2026-98494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atl1: fix soft lockup on out-of-range cmbtpdnexttoclean read Same issue as atl1c see the first commit in this series, net: atl1c: fix soft lockup on...

Linux Distros Unpatched Vulnerability : CVE-2026-98536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - writeback: report a Tasks-RCU quiescent state per cgwb drain pass cleanupofflinecgwbsworkfn drains a dying cgwb by calling cleanupofflinecgwb until it returns...

Linux Distros Unpatched Vulnerability : CVE-2026-98644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Avoid soft lockup in htabmaplookupanddeletebatch htabmaplookupanddeletebatch has no rescheduling point. The batch count bounds how many entries are copied...

Linux SMB Preauth Hash RCE

The vulnerability of the smb3preauthhashrsp function in the fs/smb/server/smb2pdu.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Trust module OPNsense Privilege Escalation

The vulnerability of the Trust module in the OPNsense operating system is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information and increase their privileges...

kin-openapi visitJSON DoS

The vulnerability of the visitJSON component in the file handling library for kin-openapi files is related to improper handling of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

kin-openapi parseArray UrlencodedBodyDecoder MultipartBodyDecoder DoS

The vulnerability of the parseArray, UrlencodedBodyDecoder, and MultipartBodyDecoder functions in the kin-openapi library is related to errors in pointer manipulation when processing the deepObject parameter. Exploiting this vulnerability could allow an attacker to cause service failures...