Linux Distros Unpatched Vulnerability : CVE-2026-89535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the...

Linux Distros Unpatched Vulnerability : CVE-2026-89575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long...

Linux Distros Unpatched Vulnerability : CVE-2026-89442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user- supplied socketid with 'socketid topologymaxpackages', but...

Linux Distros Unpatched Vulnerability : CVE-2026-89475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove...

Linux Distros Unpatched Vulnerability : CVE-2026-80997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipa: fix stalled modem TX queue after runtime resume ipastartxmit unconditionally stops the TX queue before calling pmruntimeget, relying on the wake...

Linux Distros Unpatched Vulnerability : CVE-2026-89590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: Fix error path handling in rocketjobrun In rocketjobrun, after taking an extra fence reference for job-donefence via dmafenceget, the error paths...

Linux Distros Unpatched Vulnerability : CVE-2026-12611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and t...

Linux Distros Unpatched Vulnerability : CVE-2026-89519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Replace SCXRQBALKEEP with a dispatch verdict return SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and...

Linux Distros Unpatched Vulnerability : CVE-2026-54258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-89499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Stop remote reader update when page swap fails The remote swapreaderpage callback can return -EBUSY when the writer moves the head before the remot...

Linux Distros Unpatched Vulnerability : CVE-2026-89630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: restore the dataoffset bound in isvalidoplockbreak Commit 83bfbd0bb902 cifs: Remove the RFC1002 header from smbhdr changed the quantity this bound ...

Linux Distros Unpatched Vulnerability : CVE-2026-89692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: clear CALLBACKRUNNING on failed delegation recall queue nfsdbreakonedeleg sets NFSD4CALLBACKRUNNING via testandsetbit at entry to serialize recall work,...

Linux Distros Unpatched Vulnerability : CVE-2026-89685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix clock domain mismatch in clientsstillreclaiming clientsstillreclaiming computes a deadline from nn-boottime CLOCKREALTIME, 1.7 billion but compares it...

Linux Distros Unpatched Vulnerability : CVE-2026-80986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has maxrecvsge == 1 there is no shared v2 receive buffer, and...

Linux Distros Unpatched Vulnerability : CVE-2026-89661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent post-shutdown use-after-free in unlockfilesystem Writing a filesystem path to /proc/fs/nfsd/unlockfilesystem runs nfsd4cancelcopybysb before...

Linux Distros Unpatched Vulnerability : CVE-2026-89452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/msm: Unwind probe state on registration failure msmiommuprobe adds its devm-managed IOMMU object to qcomiommudevices before adding the IOMMU sysfs device...

Linux Distros Unpatched Vulnerability : CVE-2026-89468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue...

Linux Distros Unpatched Vulnerability : CVE-2026-89552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous...

Linux Distros Unpatched Vulnerability : CVE-2026-89492

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an...

Linux Distros Unpatched Vulnerability : CVE-2026-87910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is...