PT-2026-61269

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memfd component where the SEAL WRITE seal is implied when SEAL EXEC is added to enforce W^X Write XOR Execute, a security policy ensuring memory is either writable...

PT-2026-61243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf msg push data function within the sockmap component of the BPF Berkeley Packet Filter subsystem. When data is inserted into the middle of a scatterlist entry,...

PT-2026-61501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the Linux kernel when the damon sysfs memcg path to id function breaks the mem cgroup iter loop without calling the mem cgroup iter break function. This failur...

PT-2026-61337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvme-pci module during the completion process. The issue arises because dma vec allocations are not properly released when P2P Peer-to-Peer memory is used, as...

PT-2026-61391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the statmount mnt idmap function. The function uses seq printf to write a mapping and manually increments seq-count to include a NUL separator. If seq...

PT-2026-61390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the irq work single function when using PREEMPT RT. In this configuration, non-HARD irq work is executed in per-CPU kthreads through run irq workd, and i...

PT-2026-61106

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.3 Description A race condition exists in the omap2 framebuffer driver within the omapfb mmap function and the OMAPFB SETUP PLANE ioctl. The fb mmap entry point holds the mm lock but not the fb info-lock, whil...

PT-2026-61124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the exfat find dir entry function. The problem occurs when a buffer head obtained from exfat get dentry is released using brelsebh before the TYPE EXTEND...

PT-2026-61162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v4.0 rings do not support 64-bit user fence writes. A user fence is a synchronization mechanism used to coordinate tasks betwe...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...

Linux Distros Unpatched Vulnerability : CVE-2026-63856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn: set nouserfence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with use...

Fedora 43 : antlr4-project (2026-d9ca28a7b8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d9ca28a7b8 advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

kubevirt1.8-container-disk-1.8.4-1.1 on GA media (moderate)

kubevirt1.8-container-disk-1.8.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11307-1 Rating: moderate Cross-References: CVE-2026-35469 CVSS scores: CVE-2026-35469 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-35469 SUSE : 7.1...

PT-2026-61229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm ESP out-of-place fast path where the esp output head function appends the trailer before esp output tail allocates the destination page frag. The head-side ga...

PT-2026-61101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfsd4 create file function contains two issues related to Access Control List ACL handling. First, the return value of the nfsd4 acl to attr function is ignored. If the conversion fr...

PT-2026-61475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs perform write function where write streaming—the process of caching dirty data in dirty but !uptodate folios to avoid reading data that will be immediately...

PT-2026-61262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth ISO implementation where iso sock close calls iso sock clear timer before acquiring the socket lock. This allows iso sock clear timer to read the...

PT-2026-61265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the L2CAP Bluetooth subsystem within the l2cap chan timeout function. The set chan timer function acquires a reference to the channel using l2cap chan hold...

PT-2026-61357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where the system fails to correctly extract the error code when the vfs mkdir function fails. This results in the mkdir error logic being trigger...

PT-2026-61411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs in the batman-adv module when a hard interface is retrieved as the primary interface of a mesh interface but becomes decoupled from it before the rtnl...