CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

EUVD-2026-64530

In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...

PT-2026-79703

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e queue start deactivates and re-activates all channels but closes only the queue being restarted. mlx5e activate txqsq then unconditionally calls netdev tx reset queue, zeroing th...

PT-2026-79721

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG ON in amdxdna insert pages In amdxdna insert pages, vm flags mod sets VM MIXEDMAP and clears VM PFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then call...

Linux Distros Unpatched Vulnerability : CVE-2026-74653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is...

Linux Distros Unpatched Vulnerability : CVE-2026-74657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: Fix fibnlmsgsize for RTAVIA nexthops fibnlmsgsize still estimates nexthop space as if every gateway is encoded as an IPv4 RTAGATEWAY attribute. IPv4 route...

Linux Distros Unpatched Vulnerability : CVE-2026-74704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if...

PT-2026-79638

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in module event cache removal A module-only event filter such as ":mod:foo" is cached with a NULL event mod-match when foo has not been loaded. If a later write tries to remove a specific mat...

Linux Distros Unpatched Vulnerability : CVE-2026-74702

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array...

PT-2026-79615

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk msg ring unpushed When the copy path in tls sw sendmsg locked adds the fragment that fills the plaintext sk msg ring, it does not set full record, so the record is left full and unpushed. A...

PT-2026-79689

In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb-dev before parsing virtio net header in tap get user xdp The commit 4f61f133f354 "net: tap: NULL pointer derefence in dev parse header protocol when skb-dev is null" fixed a crash in tap get user by assigning...

PT-2026-79598

In the Linux kernel, the following vulnerability has been resolved: sched ext: Take cgroup lock first in scx cgroup lock scx cgroup lock write-locks scx cgroup ops rwsem and then takes cgroup lock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write...

PT-2026-79669

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovs flow cmd new preallocates the optional reply skb before it takes ovs mutex and before it knows which existing flow will be updated. That is normally fine because...

Linux Distros Unpatched Vulnerability : CVE-2026-74686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is suppressed for rqspinlock in cases where a deadlock i...

Linux Distros Unpatched Vulnerability : CVE-2026-74692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix TOCTOU race between smclistenout and listener close smclistenout reads lsmc-sk.skstate without the listener lock, then acquires locksocknested only...

Linux Distros Unpatched Vulnerability : CVE-2026-74610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does no...

Linux Distros Unpatched Vulnerability : CVE-2026-74684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 net: tap: NULL pointer derefence in devparseheaderprotocol when...

Fedora 44 : pack (2026-14ebd38fea)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-14ebd38fea advisory. Update to 0.40.9 - fixes CVE-2026-41178 DoS via oversized OpenTelemetry baggage headers Tenable has extracted the preceding description block directly from t...

CVE-2026-48050 Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS

Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via app.Usepprof.New in internal/api/server.go, and /debug/pprof is added to PublicPrefixes in cmd/arc/main.go. The auth middleware short-circuits before...

CVE-2026-53524 WeeChat has a Decompression Bomb in Relay WebSocket (DoS)

WeeChat Wee Enhanced Environment for Chat is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relaywebsocketinflate has no upper bound on output size. An authenticated relay user can send a small compressed WebSock...