PT-2026-98472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla2x00 mem alloc function fails to nullify pointers after freeing them during an error path. When qla2x00 probe one encounters a...

PT-2026-98529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto implementation where the do one request callback returns a negative error code instead of 0 after a request is explicitly completed by crypto finalize...

CVE-2026-98066: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch...

PT-2026-98816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-rdma module where the queue rq function handles -EIO errors in the wrong order. When a host path error is reported, the system continues to clean up the comma...

CVE-2026-98154: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queuerq On -EIO, the RDMA queuerq path reports a host path error and then still cleans up the command and unmaps the SQE DMA. The path error helper completes the request, so that is double...

PT-2026-99006

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-100368: Improper Neutralization of Special Elements used in an OS Command

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

PT-2026-98539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ieee802154 module within the hwsim component. The hwsim update pib function performs an unserialized read-swap-free operation on phy-pib. While the...

PT-2026-98729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ALSA caiaq driver's resource management during error handling. The driver attempts to release resources through a common destructor call; however, certa...

CVE-2026-97589: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request, the doonerequest callback must return 0 to indicate successful...

PT-2026-98642

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TP printk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event ice tx dim work has double dereference in TP printk: REC-q vector-tx.tx ring-q...

CVE-2026-97978: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TPprintk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event icetxdimwork has double dereference in TPprintk: REC-qvector-tx.txring-qindex...

CVE-2026-97978

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TPprintk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event icetxdimwork has double dereference in TPprintk: REC-qvector-tx.txring-qindex...

CVE-2026-97585

In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afseditdirremove to use a cleanup function to unmap the block pointed to by afsdiriter::block if it's left pointing to something rather than manually kunmapping the blocks. Manually...

Linux Distros Unpatched Vulnerability : CVE-2026-97589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request,...

Linux Distros Unpatched Vulnerability : CVE-2026-93221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without...

RockyLinux 10 : libxml2 (RLSA-2026:71586)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71586 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflo...

RockyLinux 9 : libxml2 (RLSA-2026:71585)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71585 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-97532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree...

Linux Distros Unpatched Vulnerability : CVE-2026-97599

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read- swap-free of phy-pib: pibold = rtnldereferencephy-pib...