Linux Distros Unpatched Vulnerability : CVE-2026-23352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/efi: defer freeing of boot services memory efifreebootservices frees memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate...

The vulnerability of the xfrm4_protocol_init() function in the net/ipv4/xfrm4Protocol.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xfrm4protocolinit function in the net/ipv4/xfrm4Protocol.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the seg6_hmac_init() function in the net/ipv6/seg6_hmac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the seg6hmacinit function in the net/ipv6/seg6hmac.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-61084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ov8856 init controls function within the i2c media component. The issue arises because the control handler is not properly freed when the process of adding...

ROS-20260323-73-0006

A vulnerability in the initnfsd function in the fs/nfsd/nfsctl.c module of the Linux kernel's NFS network file system support is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-38988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the dcn401 init hw function. The issue occurs because the function assumes the update bw bounding box callback is valid when entering the update path...

CVE-2026-33179

CVE-2026-33179 affects libfuse’s io_uring transport: versions 3.18.0 up to but not including 3.18.2. A NULL pointer dereference and a memory leak in fuse_uring_init_queue can crash the FUSE daemon or exhaust resources; if numa_alloc_local fails, NULL pointers are used, and on fuse_uring_register_...

CVE-2026-33179 libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...

The vulnerability of the a6xx_preempt_init() function in the drivers/gpu/drm/msm/adreno/a6xx_preempt.c driver code of the Direct Rendering Infrastructure (DRI) kernel module of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the a6xxpreemptinit function in the drivers/gpu/drm/msm/adreno/a6xxpreempt.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2026-23261

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvmefabrics creates an NVMe/FC controller in following path: nvmfdevwrite - nvmfcreatectrl - nvmefccreatectrl - nvmefcinitctrl nvmefcinitctrl allocates the admin blk-mq resources right...

CVE-2026-23261

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvmefabrics creates an NVMe/FC controller in following path: nvmfdevwrite - nvmfcreatectrl - nvmefccreatectrl - nvmefcinitctrl nvmefcinitctrl allocates the admin blk-mq resources right...

UBUNTU-CVE-2026-23261

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvmefabrics creates an NVMe/FC controller in following path: nvmfdevwrite - nvmfcreatectrl - nvmefccreatectrl - nvmefcinitctrl nvmefcinitctrl allocates the admin blk-mq resources right...

CVE-2026-23263

CVE-2026-23263: In the Linux kernel, io_uring/zcrx had a page array leak that was not freed during sg init failure. The fix, committed as d9f595b9a65e, releases the previously leaked page array along with the leaked pages. Exploitation details are not provided in the supplied documents beyond the...

CVE-2026-23263 io_uring/zcrx: fix page array leak

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix page array leak d9f595b9a65e "iouring/zcrx: fix leaking pages on sg init fail" fixed a page leakage but didn't free the page array, release it as well...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: erlang (UTSA-2026-006244)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006244 advisory. Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message c...

The vulnerability of the `fb_deferred_io_init()` function in the drivers/video/fbdev/core/fb_defio.c file of the Linux kernel’s graphics buffer device support driver allows a attacker to cause a service failure.

The vulnerability of the fbdeferredioinit function in the drivers/video/fbdev/core/fbdefio.c file of the Linux kernel’s graphics device support driver module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-4230

A vulnerability has been found in vanna-ai vanna up to 2.0.2. Affected is the function updatesql of the file src/vanna/legacy/flask/init.py of the component Endpoint. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and ma...

PT-2026-34937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the vidtv driver. When the vidtv start streaming function fails within vidtv start feed, the nfeeds counter remains incremented despite no feed being started. Thi...

The vulnerabilities of the functions rxrpc_init_peer() and rxrpc_create_peer() in the net/rxrpc/peer_object.c module of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions rxrpcinitpeer and rxrpccreatepeer in the net/rxrpc/peerobject.c module of the Linux kernel is related to an incorrect interrupt call context. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ucsi_init() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ucsiinit function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...