Linux Distros Unpatched Vulnerability : CVE-2026-89475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove...

Linux Distros Unpatched Vulnerability : CVE-2026-89660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-89649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: bound xattr value length in buildxattrs buildxattrs decodes the MDS-supplied xattr blob one attribute at a time. For each attribute it reads a 32-bit name...

Debian dsa-6497 : xnest - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6497 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6497-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-89735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: midi2: remove default configfs groups on teardown fmidi2allocinst creates default configfs child groups for the default endpoint and default block...

Linux Distros Unpatched Vulnerability : CVE-2026-90473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts...

Linux Distros Unpatched Vulnerability : CVE-2026-89456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Propagate partial completion length across ERP recovery dasddefaulterppostaction copies the timing and device state from the finished ERP request bac...

Linux Distros Unpatched Vulnerability : CVE-2026-80944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller- provided data buffer in cmdnode-databuf. Several callers...

Linux Distros Unpatched Vulnerability : CVE-2026-81002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied...

Linux Distros Unpatched Vulnerability : CVE-2026-89556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS...

Linux Distros Unpatched Vulnerability : CVE-2026-89499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Stop remote reader update when page swap fails The remote swapreaderpage callback can return -EBUSY when the writer moves the head before the remot...

Linux Distros Unpatched Vulnerability : CVE-2026-80936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop...

Linux Distros Unpatched Vulnerability : CVE-2026-89563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6tunnel: use skbcowhead in ip6tnlxmit ip6tnlxmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does...

Linux Distros Unpatched Vulnerability : CVE-2026-89746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses t...

Linux Distros Unpatched Vulnerability : CVE-2026-89575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long...

Linux Distros Unpatched Vulnerability : CVE-2026-89442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user- supplied socketid with 'socketid topologymaxpackages', but...

Linux Distros Unpatched Vulnerability : CVE-2026-89717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: set default primary compressor in zramdestroycomps Patch series zram: fix zram issues reported by sashiko. Sashiko drove by and reported 1 a couple of zra...

Linux Distros Unpatched Vulnerability : CVE-2026-89610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run...

Linux Distros Unpatched Vulnerability : CVE-2026-89765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec ...

Linux Distros Unpatched Vulnerability : CVE-2026-80970

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: do not copy out an uninitialised init response fcpioctlinit allocates its response buffer with kmalloc and copies the whole buffer back to userspace...