PT-2026-97891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where svc rdma accept fails to correctly handle the error path when rpcrdma rn register does not succeed. In this scenario, the cleanup block...

CVE-2026-93222: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites sendsignallocked rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it...

PT-2026-98102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the Linux kernel during root hub control transfers. This happens because the SCSI error handler, when managing errors in UAS and storage drivers, may attempt to...

PT-2026-104913

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte count in acpi ps get next package length Validate package length reading in acpi ps get next package length...

PT-2026-98017

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the perf subsystem where event::addr filter ranges is used under RCU Read-Copy-Update, a synchronization mechanism that allows multiple readers to access data while it...

CVE-2026-85682: Origin Validation Error

The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...

PT-2026-97703

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Level of Authentication enforcement mechanism of Keycloak. The issue arises when a client requires a higher security level for a user who already possesses an active...

PT-2026-104999

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1. we have a BSS connection 2. we have a NAN connection 3. FW error occurs 4. reconfig restores the BSS connection 5...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124469 advisory. When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content...

PT-2026-104870

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2 switch port set fdb function always allocates a new FDB for the port which is becoming standalone. In case no FDB is found, then the port...

PT-2026-98131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Incomplete error handling in the runtime Power Management PM functions of the spi-qcom-qspi driver can leave the system in an inconsistent state. If an operation fails during suspend or...

CVE-2026-91132: Origin Validation Error

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildcard patterns in the allowediframes setting could accept a crafted iframe URL whose allowlisted suffix appeared after a URL authority separator. The wildcard origin check matched...

CVE-2026-93284: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

CVE-2026-97176: Missing Authorization

A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. Due to a logic error in how...

Linux Distros Unpatched Vulnerability : CVE-2026-97508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return...

PT-2026-98127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the tb-root switch is not properly set to NULL when a domain is stopped. This failure to clear the root switch prevents the tb xdp hand...

CVE-2026-97508: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

K000163397: GnuTLS vulnerability CVE-2026-42015

Security Advisory Description A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...