CVE-2026-97596

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

UBUNTU-CVE-2026-97596

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

UBUNTU-CVE-2026-97599

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

CVE-2026-98135

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectorspercluster in the boot sector isbootsectorntfs checks the boot sector's sectorspercluster field with a range test that rejects 0x81..0xf3 but accepts 0 and other non-power-of-two counts. A zero value...

CVE-2026-97596

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

CVE-2026-97596

The Linux kernel contains a vulnerability in IPVS where sync receivers fail to reject invalid states in connection template sync records . While ordinary connections are validated, connection templates only log states outside the allowed range while still storing them. This allows TCP and SCTP to...

CVE-2026-97596 ipvs: reject invalid states in connection template sync records

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

OESA-2026-4045 sentencepiece security update

Security Fixes: Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.CVE-2026-1260...

Linux Distros Unpatched Vulnerability : CVE-2026-88831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. CVE-2026-88831 No...

PT-2026-99103

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS in the Mediawiki - Cargo extension. This occurs specifically within CargoExpo...

CVE-2026-97596

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

CVE-2026-97596: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

CVE-2026-97596: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

Suricata 8.x < 8.0.7 Type Confusion (CVE-2026-94083)

The version of OISF Suricata installed on the remote host is 8.x prior to 8.0.7. It is, therefore, affected by a vulnerability: - Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is...

CVE-2026-98107: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of-bounds write in l2capecredconnect l2capchanconnect tries to ensure there are no more than L2CAPECREDCONNSCIDMAX pending ECRED channels, so they fit in the same L2CAPECREDCONNREQ that l2capecredconnect...

CVE-2026-97599: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

CVE-2026-97599

In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read-swap-free of phy-pib: pibold = rtnldereferencephy-pib; ... rcuassignpointerphy-pib, pib; kfreercupibold, rcu; It assumes the RTN...

PT-2026-98769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the l2cap ecred connect function within the Bluetooth L2CAP subsystem. The issue occurs because l2cap chan connect only counts deferred channels when...

PT-2026-98816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-rdma module where the queue rq function handles -EIO errors in the wrong order. When a host path error is reported, the system continues to clean up the comma...

Linux Distros Unpatched Vulnerability : CVE-2026-97599

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: hwsim: serialize pib updates to fix double-free hwsimupdatepib does an unserialized read- swap-free of phy-pib: pibold = rtnldereferencephy-pib...