Linux Distros Unpatched Vulnerability : CVE-2026-98198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pwm-fan Stop RPM timer before freeing tach data sampletimer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulsesperrevolution...

ROS-20261006-73-0119

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-0024

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-106347

Name of the Vulnerable Software and Affected Versions Android Camera driver affected versions not specified Description Memory corruption occurs when the Android Camera driver processes command buffer requests that contain invalid length parameters. Recommendations At the moment, there is no...

ROS-20261006-73-0005

The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0097

The vulnerability of the amdgpubocreatelistentryarray function in the drivers/gpu/drm/amd/amdgpu/amdgpubolist.c source file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system leads to unmanageable resource consumption. Exploiting this vulnerability c...

ROS-20261006-73-0080

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261006-73-0063

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

PT-2026-106538

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the sdhci-of-aspeed driver where probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. This occurs...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1646 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-cassandra-driver (>=0.27.1, <=0.65.0)

@opentelemetry/instrumentation-cassandra-driver NPM version =0.27.1, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =5.1.1-staging.260347880488, =6.0.3 and more Sourc...

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

Impact Multiple @opentelemetry/instrumentation- packages recorded the database connection username as the db.user span attribute on every instrumented database operation. This attribute was emitted unconditionally — it was not gated by enhancedDatabaseReporting or any other opt-in flag, and it wa...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1646 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-cassandra-driver (>=0.27.1, <=0.65.0)

@opentelemetry/instrumentation-cassandra-driver NPM version =0.27.1, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =5.1.1-staging.260347880488, =6.0.3 and more Sourc...

CVE-2026-89877

A flaw was found in the saa7164 media driver in the Linux kernel. When the saa7164devsetup function fails to allocate PCI BAR memory regions, it incorrectly leaves a dangling entry on the global device list. This improper cleanup of resources can lead to a resource leak, potentially allowing a...

CVE-2026-90422

A flaw was found in the Linux kernel. When the mtkclkregisterpllfhs function, part of the MediaTek Phase-Locked Loop PLL clock driver, fails to register a PLL, it does not properly free the input/output IO memory mapped on the fhctl node. This oversight leads to a memory leak. Over time, repeated...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-90007

A flaw was found in the Linux kernel's pm8001 SCSI driver. When pm8001requestmsix attempts to free Message Signaled Interrupts MSI-X vectors, it uses an incorrect index during the rollback process. This error prevents previously registered interrupt handlers from being properly deallocated, leadi...