kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tgptgpmembersshow function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of...

kernel: ipv6: validate extension header length before copying to cmsg

A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

K000163773: Linux kernel vulnerability CVE-2026-46122

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43rx The firmware-controlled key index in b43rx can exceed the dev-key array size 58 entries. The existing B43WARNON is non-enforcing in...

UBUNTU-CVE-2026-98557

In the Linux kernel, the following vulnerability has been resolved: gve: DQO: fix header length used by gvecansendtso for UDP GSO gvecansendtso computes how many buffers each segment of a GSO packet would span, and for this it needs the length of the headers that the device replicates in front of...

UBUNTU-CVE-2026-98500

In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use canceldelayedworksync in remove oxphidremove uses canceldelayedwork for all three delayed work items. canceldelayedwork only dequeues a pending work item without waiting for a currently executing callback to...

ROS-20261019-73-0015

The vulnerability of the secattestinfo function drivers/accel/habanalabs/common/habanalabsioctl.c in the Linux kernel is related to insufficient protection of service data when processing the Pad0 field. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

UBUNTU-CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

Linux Distros Unpatched Vulnerability : CVE-2026-98501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: alps: fix use-after-free on input2 registration failure alpsinputconfigured stores data-input2 before calling inputregisterdevice. If registration fails,...

UBUNTU-CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

UBUNTU-CVE-2026-98587

In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...

UBUNTU-CVE-2026-98864

In the Linux kernel, the following vulnerability has been resolved: schedext: Wait for SCXOPSSDISPATCHING before reenqueueing a task ebf1ccff79c4 "schedext: Fix ops.dequeue semantics" moved the final opsstate store in scxdispatchenqueue after the DSQ unlock so that the custody update and...

Linux Distros Unpatched Vulnerability : CVE-2026-98442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: -...

Linux kernel parse_dcc() Function

The vulnerability of the parsedcc function in the net/netfilter/nfconntrackirc.c component of the Linux kernel is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of t...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the devhassyncstate function within the include/linux/device.h component of the Linux kernel system is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the msixcapabilityinit function within the drivers/pci/msi/msi.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the atkecpresent function in the drivers/hwmon/asusatk0110.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux kernel veth_enable_xdp_range Heap Buffer Overflow DoS

The vulnerability in the vethenablexdprange function within the drivers/net/veth.c component of the Linux kernel operating system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

Linux GPU Memory Free DoS

The vulnerability in the amdgpuamdkfdgpuvmfreememoryofgpu function within the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Linux operating system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to compromise the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the fbconnewmodelist function in the drivers/video/fbdev/core/fbcon.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...