Linux Distros Unpatched Vulnerability : CVE-2026-99178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF page not present event arrives through the PF vector, and its reason sits in the...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_89816)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689816 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from t...

CVE-2026-99124

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

Linux Distros Unpatched Vulnerability : CVE-2026-99124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct,...

CVE-2026-99178: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async #PF flags on a kernel…

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF "page not present" event arrives through the PF vector, and its reason sits in the per-CPU apfreason.flags until kvmhandleasyncpf reads and clears it...

PT-2026-128171

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF "page not present" event arrives through the PF vector, and its reason sits in the per-CPU apf reason.flags until kvm handle async pf reads and clear...

CVE-2026-99205

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeuppreempt for queued tasks during class change Paul reported recent RCU changes exposed a lost resched where CPU idles with a rcutorture thread waiting while being completely runnable. Dumping the rq state at...

PT-2026-128113

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in NPF exit codes When running Hyper-V from Windows 11, KVM is seeing the SS bit set in nested page fault error codes produced for shadowed NPT. The AMD manual is unclear about when SS...

Apple iOS / iPadOS 17.0.2 Kernel Privilege Escalation

Apple iOS and iPadOS versions before 16.7.1 and versions 17.0 through 17.0.2 contain a kernel issue that may allow a local attacker to elevate privileges. The included proof of concept attempts to demonstrate a copy-on-write bypass using Mach memory mappings. https://packetstorm.news/download/238...

CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from s390/pai failing to handle situations where the PMU stop callback is invoked repeatedly, potentially leading to improper handling of sampling events...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.1. It arises because after a power event is registered, its callback may be triggered immediately by other contexts. If the power is disabled while the externalpowerchanged callback is still executing, the driver data may have already been...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It stems from cifsdotruncate in the SMB client, which fails to hold irwsem or invalidatelock when performing refresh and truncate operations. Concurrent buffer writes may result in data corruption...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from the fact that DRM/xe/oa fails to zero out OA buffer allocations; additionally, when allocating OA buffers via DRMXEOAPROPERTYOADISABLED, xeoainitoabuffer is not called. As a result, ttmbotypekernel buffers may contain dat...

PT-2026-128200

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed cmd lock target do delayed work takes dev-delayed cmd lock with a plain spin lock. It runs from system percpu wq, so interrupts stay enabled while the lock is held. Every oth...

PT-2026-128111

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using check mul overflow before calculating the firmware payload size. Reject zero-length payloads and zero...

PT-2026-128180

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf pmu migrate context leaving events behind perf pmu remove walks the group leaders of a CPU and PMU with perf event groups for cpu pmu, removing each one as it goes. perf remove from context takes the leader out of...

PT-2026-128144

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocate usb4 bandwidth for stream and allocate usb4 bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in...

CVE-2026-99176: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if…

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset the vCPU's MMU pointer back to the root MMU if loading L2 state fails in the "not from VM-Entry" case, i.e. when emulating RSM or handling...

CVE-2026-99103: Linux: In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending…

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pwqs KASAN reports a use-after-free of an unbound workerpool in nodeactivatependingpwq: BUG: KASAN: slab-use-after-free in rawspintrylock+0x6d/0x120 Read of size 4 at addr...