Linux Distros Unpatched Vulnerability : CVE-2026-89682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix fcachedisposal UAF by inlining dispose state into nfsdnet nfsdfiledisposelistdelayed defers fput to nfsd service threads via a per-net freeme queue,...

Linux Distros Unpatched Vulnerability : CVE-2026-89697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: add fhwantwrite for early-verified SETATTR in nfsdprocsetattr The BOTHTIMESET branch calls fhverify early so setattrprepare can inspect the dentry. This...

Linux Distros Unpatched Vulnerability : CVE-2026-89562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6gre: fix hardware header length for NBMA tunnels ip6gretnllinkconfigroute accumulates the lower device's hardware header length into dev-hardheaderlen whenev...

Linux Distros Unpatched Vulnerability : CVE-2026-89605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: release message context on send failure ecryptfssendmessagelocked moves a message context from the free list to the allocated list before sending the...

Linux Distros Unpatched Vulnerability : CVE-2026-89498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when...

Linux Distros Unpatched Vulnerability : CVE-2026-80994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is...

Linux Distros Unpatched Vulnerability : CVE-2026-80937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data...

Linux Distros Unpatched Vulnerability : CVE-2026-80949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Fix memory leak in brcmfsdioreadcontrol The memory allocated for buf is not freed in some of the error paths in brcmfsdioreadcontrol. Fix that b...

Linux Distros Unpatched Vulnerability : CVE-2026-89528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sendi...

Linux Distros Unpatched Vulnerability : CVE-2026-89552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous...

Linux Distros Unpatched Vulnerability : CVE-2026-80963

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-stats: fix a crash if allocation of per-cpu data fails If dmkvzallocpercpuallocsize, cputonodecpu fails, the code jumps to the out label and calls dmstatfre...

Linux Distros Unpatched Vulnerability : CVE-2026-89468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue...

Linux Distros Unpatched Vulnerability : CVE-2026-80977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged...

Linux Distros Unpatched Vulnerability : CVE-2026-89672

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: gate nfs2 setacl by argp-mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 sibling: nfsaclsvcdecodesetaclargs fills in...

Linux Distros Unpatched Vulnerability : CVE-2026-89656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from...

Linux Distros Unpatched Vulnerability : CVE-2026-89527

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Use svcxprtput to free listener on create failure svcrdmacreate calls kfreecmaxprt when svcrdmacreatelistenid fails. svcxprtinit has already acquired ...

Linux Distros Unpatched Vulnerability : CVE-2026-89710

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held,...

Linux Distros Unpatched Vulnerability : CVE-2026-89483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges...

Linux Distros Unpatched Vulnerability : CVE-2026-89762

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in...

Linux Distros Unpatched Vulnerability : CVE-2026-80958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by...