CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.4:CLSA-2026:1778832730)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1778832730 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skbtrycoales...

DEBIAN-CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

UBUNTU-CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

CVE-2026-97602

The Linux kernel is vulnerable to a flaw where fqdir_pre_exit() flushes skbs from incomplete queues without updating their completion state. This allows a fragment to reuse stale reassembly metadata after a queue is cleared. In IPv6 , this can cause ip6_frag_reasm() to use an old nhoffset with a ...

CVE-2026-97602 inet: frags: invalidate queues before flushing them

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

EUVD-2026-86733

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

CVE-2026-97602 inet: frags: invalidate queues before flushing them

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

Linux Distros Unpatched Vulnerability : CVE-2026-97602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment whi...

CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

Oracle Linux 10 : kernel (ELSA-2026-68507)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68507 advisory. - wifi: ath9k: hifusb: don't dereference hifdev after re-arming firmware request Izabela Bakollari RHEL-241004 CVE-2026-68363 - wifi: iwlwifi: mld:...

AZL-102042 CVE-2026-93105 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

DEBIAN-CVE-2026-93105

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

CVE-2026-93105 esp: do not unref managed frag pages in esp_ssg_unref()

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

CVE-2026-93105 esp: do not unref managed frag pages in esp_ssg_unref()

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

EUVD-2026-82213

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow

A flaw was found in the Linux kernel's t7xx WWAN driver. A malicious, buggy, or compromised modem firmware can exploit this by sending packets with excessive fragments. This leads to a buffer overflow in the skbshinfoskb-frags array, corrupting adjacent memory. This can result in kernel crashes o...

CVE-2026-93105: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...

AZL-101409 CVE-2026-90049 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skbtxerror the source skb in skbzerocopy skbzerocopy copies frags from @from into @to. On an skborphanfrags failure it calls skbtxerror@from, a destructive operation on the source skb the copy helper does not...

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (CVE-2026-43500)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...