Linux Distros Unpatched Vulnerability : CVE-2026-99179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchqueue: Fix note pool publication race in watchqueuesetsize There is a race between watchqueuesetsize and postonenotification. watchqueuesetsize publishes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146652 advisory. In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146810 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ibgetethspeed ibdevicegetnetdev intentionally returns ...

CVE-2026-99162: Linux: In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding…

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup-devid. Fix a potential UAF by duplicating the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146703 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146673)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146673 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctpprocessstrresetoutreq,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146653)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146653 advisory. In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlminspectfile lock-drop nlmtraversefiles pins the current file with...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_89816)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689816 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from t...

CVE-2026-99177

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sevgmempostpopulate setpagedirty requires that the caller holds some kind of lock to ensure that the page's mapping does not concurrently go away. That is not the case for a random page we got from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146877 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146873 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146678)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146678 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header...

Linux Distros Unpatched Vulnerability : CVE-2026-99178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF page not present event arrives through the PF vector, and its reason sits in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146666 advisory. In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146699 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs...

UBUNTU-CVE-2026-99216

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbusconnection.connstate to DISCONNECTED prior to calling vmbusdisconnect. But vmbusdisconnect calls vmbusinitiateunload, whi...

CVE-2026-99148: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last…

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

CVE-2026-99163: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields…

In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields In checksynthfield, when a synthetic event field is a stacktrace field-isstack and the histogram field is not a "long" stacktrace array, validation...

CVE-2026-99170: Linux: In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out…

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

CVE-2026-99216: Linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on…

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbusconnection.connstate to DISCONNECTED prior to calling vmbusdisconnect. But vmbusdisconnect calls vmbusinitiateunload, whi...