Linux Distros Unpatched Vulnerability : CVE-2026-98294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciqca: Do not write to the serial port after it is closed hciuartclose closes the serdev port if HCIQUIRKNONPERSISTENTSETUP is set for example, for...

Linux Distros Unpatched Vulnerability : CVE-2026-98217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx4: Fix use-after-free on pkey sysfs registration failure registerpkeytree ignores errors from registeronepkeytree and continues registering the remaining...

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791296305)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791296305 advisory. - A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2026-98341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: don't free driver-owned scan requests When an interface goes down while a scan is running, cfg80211 completes the scan towards userspace and fre...

Linux Distros Unpatched Vulnerability : CVE-2026-98211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: mmci: Fix use-after-free in busy-timeout work ux500busycomplete can queue ux500busytimeoutwork for an R1b command, but mmciremove never cancels it. The wor...

Linux Distros Unpatched Vulnerability : CVE-2026-98230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: use hlistdelinitrcu for statecache and statecacheinput Commit 14acf9652e56 xfrm: defensively unhash xfrmstate lists in xfrmstatedelete converted...

PT-2026-106526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting the w83791d driver. When fan/pwm 4-5 pins are not used as GPIO, the w83791d probe function creates the w83791d group fanpwm4...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_57251)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657251 advisory. kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence...

AlmaLinux 8 : kernel-rt (ALSA-2026:75746)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

RockyLinux 8 : kernel (RLSA-2026:75747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75747 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

PT-2026-106908

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the WebAudio component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

ROS-20261006-73-0433

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-106197: Use After Free

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

ROS-20261006-73-0091

The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261006-73-0086

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

PT-2026-106558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm input function where the current xfrm state is stored in the skb secpath during receive-side processing. Certain input paths, including the VTI receive path,...

PT-2026-106560

In the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush The deferred-device pass in xfrm dev state flush finds states under xfrm state dev gc lock, but drops the lock before calling xfrm dev state free because the driver callback may...

PT-2026-106539

In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: cancel data work and watchdog on remove mxcmci remove frees the host through the devm tail, but neither it nor mmc remove host drains the driver's own asynchronous state. host-watchdog, a 10 s timer armed on the DMA...

PT-2026-106623

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci qca: Do not write to the serial port after it is closed hci uart close closes the serdev port if HCI QUIRK NON PERSISTENT SETUP is set for example, for the WCN399x family. A failed hci dev open sync following a...

PT-2026-106590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cifs chan skip or disable function. When a server no longer supports a secondary channel, the function calls cifs put tcp session, which may drop the...