PT-2026-90311

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.12.95 Description A race condition exists in the fsnotify system affecting fanotify and inotify. When a mark receives a new event bit, the system may skip recalculating the object mask if the cached aggregate already...

PT-2026-96462

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr probe requests pcxhr threaded irq before initializing mgr-lock, even though the threaded handler takes that mutex. Initialize the manager locks before request...

PT-2026-90285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth RFCOMM component. The function rfcomm security cfm performs a session lookup on session list and traverses the DLC list without holdin...

PT-2026-96466

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs tls handshake sync gives xs tls handshake done a reference to the lower transport before submitting the handshake request. On timeout or signal, the synchronous waiter...

PT-2026-90402

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the NFS server nfsd during delegation revocation. The function nfsd4 alloc layout stateid reads fp-fi deleg file without holding the fi lock when the parent statei...

PT-2026-90385

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A use-after-free issue exists in the nfsd4 copy notify function. The cpntf state was being initialized after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR an...

PT-2026-90370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ceph component of the Linux kernel within the check new map function. The function iterates through mdsc-sessions and releases mdsc-mutex to...

Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107294 advisory. In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107325 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an...

Linux Distros Unpatched Vulnerability : CVE-2026-57229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME pars...

PT-2026-96494

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040 work requeues itself after every poll. cancel delayed work only cancels a pending instance and does not wait for a callback that is already running. If...

PT-2026-96416

In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh want write for early-verified SETATTR in nfsd proc setattr The BOTH TIME SET branch calls fh verify early so setattr prepare can inspect the dentry. This causes nfsd setattr to skip fh want write, so notify change ru...

PT-2026-90223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/ucma component where the ucma write cm event function fails to acquire the handler lock. This allows ucma migrate id to change the ctx-file reference...

PT-2026-96365

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack file send sigiotask When inspecting the credentials of another task, objective credentials -real cred, accessed with task cred must always be used. Accessing -cred on a non-current task is forbidden...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...

PT-2026-90435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the zram module. The read block state function calculates the nr pages variable before acquiring the dev lock. If the device is reset and...

PT-2026-96354

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm probe registers the display before initializing ddata-lock. Once omapdss register display publishes the display, another consumer can reach a dsicm...

PT-2026-90217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ring-buffer component. The ring buffer subbuf order set function can clear cpu buffer-free page without proper synchronization. To prevent races with ring...

RockyLinux 8 : kernel (RLSA-2026:66325)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66325 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: scsi: target:...