CVE-2026-98365: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

CVE-2026-98317: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

CVE-2026-98171: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

PT-2026-106646

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the neighbour subsystem where the NDTPA INTERVAL PROBE TIME MS parameter lacks proper validation because the .validation type is not set. This allows values to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-98317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: yn...

PT-2026-106500

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Issues exist in the receive encrypted standard function regarding the handling of compound encrypted frames. A stale next buffer pointer can cause a use-after-free condition during error...

Linux Distros Unpatched Vulnerability : CVE-2026-98222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: encrypted: fix integer overflow of databloblen encryptedkeyalloc stores databloblen in a u16. It is computed from multiple string and payload lengths. If...

PT-2026-107004

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow occurs in the Compositing component, which allows a remote attacker to obtain cross-origin data by inducing the user to visit a crafted HTML page. Recommendations...

RockyLinux 10 : libvirt (RLSA-2026:75583)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75583 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buff...

Rocky Linux 10.1 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query...

SUSE SLES15 Security Update : kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4514-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4514-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: -...

CVE-2026-98222: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of databloblen encryptedkeyalloc stores databloblen in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16MAX, the assignment truncates the allocation...

PT-2026-115840

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM Load in load dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause...

PT-2026-115838

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT doPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointer...

PT-2026-115835

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr check range leading to OOB access mr check range validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

PT-2026-107089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An integ...

PT-2026-115788

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA INTERVAL PROBE TIME MS. NDTPA INTERVAL PROBE TIME MS sets .type and .min but misses .validation type, so no validation is applied: ynl --family rt-neigh --do setneightbl --json '"name": "arp...

CVE-2026-98242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA which is greater than 4G to mappedlen...

PT-2026-106912

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description An integer overflow occurs in WebGL, which is a JavaScript API for rendering high-performance interactive 3D and 2D graphics within any compatible web browser. This issue...

PT-2026-106551

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An integer overflow occurs in the encrypted key alloc function when calculating datablob len. Because this value is stored in a u16, results exceeding U16 MAX lead to a truncated allocation...