openSUSE 16 Security Update : python-jwcrypto (openSUSE-SU-2026:21827-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21827-1 advisory. - CVE-2026-80179: denial of service via malformed JWE tokens bsc1277639. - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet...

Linux Distros Unpatched Vulnerability : CVE-2026-80942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92duinitswvars The memory allocated inside rtl92duinitshareddata is not freed in any of the subsequent...

Linux Distros Unpatched Vulnerability : CVE-2026-89769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhpsetupstate error path When cpuhpsetupstate fails after pitclockeventpercpuinit has successfully called...

Linux Distros Unpatched Vulnerability : CVE-2026-89627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-89707

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return t...

Linux Distros Unpatched Vulnerability : CVE-2026-89532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upp...

Linux Distros Unpatched Vulnerability : CVE-2026-89478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: drop a chunk if its transport was removed sctprcv resolves the transport once per packet and leaves it in chunk-transport. The lookup reference, or the on...

Linux Distros Unpatched Vulnerability : CVE-2026-89488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, while netns teardown frees that state under ovsmutex. The CT...

Linux Distros Unpatched Vulnerability : CVE-2026-89540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs...

Linux Distros Unpatched Vulnerability : CVE-2026-89571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/features: bound fwctl command payload to the input buffer fwctlcmdrpc copies cmd-inlen bytes into inbuf = kvzalloccmd-inlen and passes inbuf and inlen to...

Linux Distros Unpatched Vulnerability : CVE-2026-89508

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file...

Linux Distros Unpatched Vulnerability : CVE-2026-89586

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes atascsiwritesamexlat translates a SCSI WRITE SAME command with the UNMAP bit set into an...

Linux Distros Unpatched Vulnerability : CVE-2026-80929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysctl: move the cadpid entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to...

Linux Distros Unpatched Vulnerability : CVE-2026-89644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all...

Linux Distros Unpatched Vulnerability : CVE-2026-89693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: check nfsd4acltoattr return value in nfsd4create nfsd4create stores the return value of nfsd4acltoattr in status, but the switchcreate-crtype block...

Linux Distros Unpatched Vulnerability : CVE-2026-80962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache...

Linux Distros Unpatched Vulnerability : CVE-2026-89503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page wi...

Linux Distros Unpatched Vulnerability : CVE-2026-89688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a...

Linux Distros Unpatched Vulnerability : CVE-2026-89518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix thisrq assumptions in dispatch kfuncs Under core scheduling, dispatch runs from within the core-wide pick and can target a sibling rq, so...

Linux Distros Unpatched Vulnerability : CVE-2026-89602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after...