Linux Distros Unpatched Vulnerability : CVE-2026-97608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nflog: unregister loggers before per-net teardown nflogsyslog and nfnetlinklog unregister their per-network namespace operations before unregistering...

Linux Distros Unpatched Vulnerability : CVE-2026-97938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reboot: fix cadpid use-after-free race cadpid is a single kernel-wide struct pid pointer. procdocadpid reads it and passes it to pidvnr without protecting the...

Linux Distros Unpatched Vulnerability : CVE-2026-97567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: prevent race between disconnect and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous...

Linux Distros Unpatched Vulnerability : CVE-2026-97998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the...

Linux Distros Unpatched Vulnerability : CVE-2026-98109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing...

CVE-2026-97975: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisysfs: Fix NULL pointer dereference in devicedel A NULL pointer dereference in klistput occurs when a child device such as a BNEP network device in bnepsession is concurrently being unregistered while hciconndelsysf...

CVE-2026-98032: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize races with tracepiperaw readers Concurrent subbuffer resizes may crash tracepiperaw readers or leak uninitialized memory to userspace due to stale size values. Modify ringbufferallocreadpage to handle t...

CVE-2026-97523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

CVE-2026-97925: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decoded the following race condition when a broadcast device is replaced: CPUA CPUB tickbroadcastoneshotcontrol bc = tickbroadcastdevice.evtdev;...

PT-2026-98695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Concurrent subbuffer resizes in the tracing component can lead to crashes of trace pipe raw readers or the leakage of uninitialized memory to userspace caused by stale size values. The...

PT-2026-98713

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.48 Description A concurrency issue exists in the mlxsw spectrum PTP implementation. The function mlxsw sp1 ptp ht gc collect is executed from a garbage-collection workqueue rather than the NAPI poll context...

PT-2026-98589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when a broadcast device is replaced because tick install broadcast device is not serialized against tick broadcast operations. This occurs when tick broadcast...

PT-2026-98607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 Change Page Attributes CPA mechanism, which manages kernel page table manipulations and cache mode properties. When kernel page table entries are collapsed int...

PT-2026-98614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the configfs component where the create link function reads the target's configfs dirent from item-ci dentry-d fsdata. This process relies on an item reference taken b...

PT-2026-98771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during Bluetooth device registration. In the hci register dev function, the power-on work item is queued before the initialization of hdev-adv monitors idr and th...

PT-2026-98463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp scheduler during subflow sockets state changes. This occurs when data transmission on a selected socket fails, potentially leading to a subsequent...

PT-2026-98493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs healthmon unmount function performs an unlocked insertion of the unmount event into the health monitor's event list. This lack of...

PT-2026-98507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Multipath TCP MPTCP implementation between the disconnect function and the retransmission rtx process. This race can lead to an inconsistent status within...

PT-2026-98543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the idpf driver where Tx/Rx DIM works are not drained before the memory they reside in is freed. The tx dim and rx dim works are embedded in the idpf q vector...

PT-2026-98597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the tracing component when opening a tracer options file. The system uses a descriptor pointing to an element in the trace array's topts array to reference the...