ROS-20261006-73-0366

The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-98198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pwm-fan Stop RPM timer before freeing tach data sampletimer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulsesperrevolution...

ROS-20261006-73-0113

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

PT-2026-106538

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the sdhci-of-aspeed driver where probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. This occurs...

ROS-20261006-73-0063

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

ROS-20261006-73-0086

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

RockyLinux 8 : kernel (RLSA-2026:75747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75747 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

Linux Distros Unpatched Vulnerability : CVE-2026-98262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libahci: clear PxCLBU and PxFBU for AHCIHFLAG32BITONLY A user reported that commit 105c42566a55 ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 made...

RockyLinux 8 : kernel-rt (RLSA-2026:75746)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: validate the netif index in t7xxccmnirecvskb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmniinst only has room fo...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1646 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-cassandra-driver (>=0.27.1, <=0.65.0)

@opentelemetry/instrumentation-cassandra-driver NPM version =0.27.1, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =5.1.1-staging.260347880488, =6.0.3 and more Sourc...

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

Impact Multiple @opentelemetry/instrumentation- packages recorded the database connection username as the db.user span attribute on every instrumented database operation. This attribute was emitted unconditionally — it was not gated by enhancedDatabaseReporting or any other opt-in flag, and it wa...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1646 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-cassandra-driver (>=0.27.1, <=0.65.0)

@opentelemetry/instrumentation-cassandra-driver NPM version =0.27.1, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =5.1.1-staging.260347880488, =6.0.3 and more Sourc...

CVE-2026-89877

A flaw was found in the saa7164 media driver in the Linux kernel. When the saa7164devsetup function fails to allocate PCI BAR memory regions, it incorrectly leaves a dangling entry on the global device list. This improper cleanup of resources can lead to a resource leak, potentially allowing a...

CVE-2026-90422

A flaw was found in the Linux kernel. When the mtkclkregisterpllfhs function, part of the MediaTek Phase-Locked Loop PLL clock driver, fails to register a PLL, it does not properly free the input/output IO memory mapped on the fhctl node. This oversight leads to a memory leak. Over time, repeated...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...