Linux Distros Unpatched Vulnerability : CVE-2026-23372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket...

Linux Distros Unpatched Vulnerability : CVE-2026-23293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: vxlan: fix ndtbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the ndtbl is never initialized because inet6init...

Linux Distros Unpatched Vulnerability : CVE-2026-23394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Give up GC if MSGPEEK intervened. Igor Ushakov reported that GC purged the receive...

Linux Distros Unpatched Vulnerability : CVE-2026-3119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain conditions, named may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incomin...

Linux Distros Unpatched Vulnerability : CVE-2026-21717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafti...

Linux Distros Unpatched Vulnerability : CVE-2026-23289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mthca: Add missed mthcaunmapuserdb for mthcacreatesrq Fix a user triggerable leak on the system call failure path. CVE-2026-23289 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-23390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/dma: Cap dmamapsg tracepoint arrays to prevent buffer overflow The dmamapsg tracepoint can trigger a perf buffer overflow when tracing large...

Linux Distros Unpatched Vulnerability : CVE-2026-23300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop When a standalone IPv6 nexthop object is created with a loopback device e.g., ip -6 nextho...

Linux Distros Unpatched Vulnerability : CVE-2026-23361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel,...

Linux Distros Unpatched Vulnerability : CVE-2026-26209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial ...

Linux Distros Unpatched Vulnerability : CVE-2026-21712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN...

Linux Distros Unpatched Vulnerability : CVE-2026-23379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: ets: fix divide by zero in the offload path Offloading ETS requires computing each class' WRR weight: this is done by averaging over the sums of quan...

Linux Distros Unpatched Vulnerability : CVE-2026-23385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: clone set on flush only Syzbot with fault injection triggered a failing memory allocation with GFPKERNEL which results in a WARN splat:...

Linux Distros Unpatched Vulnerability : CVE-2026-23373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rsi: Don't default to -EOPNOTSUPP in rsimac80211config This triggers a WARNON in ieee80211hwconfinit and isn't the expected behavior from the driver - oth...

Linux xchk_xfile_*_descr Heap Buffer Overflow DoS

The vulnerability of the xchkxfiledescr function in the Linux operating system is related to access to a buffer with an incorrect length value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mellanox Ethernet adapter Heap Buffer Overflow DoS

The vulnerability of the mlx5initonedevllocked function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to caus...

Linux xchk_scrub_create_subord Heap Buffer Overflow DoS

The vulnerability of the xchkscrubcreatesubord function in the Linux operating system is related to incorrect checking of the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/ipv4/xfrm4Protocol.c Heap Buffer Overflow DoS

The vulnerability of the xfrm4protocolinit function in the net/ipv4/xfrm4Protocol.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kasanreleasevmalloc function in the mm/kasan/shadow.c module of the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: NVIDIA Apex - March 2026

NVIDIA has released an update for NVIDIA® Apex to address a security issue. To protect your system, clone or update NVIDIA Apex to include commit db8e053 or later from NVIDIA Apex. Ensure that your environment uses PyTorch 2.6 or later from PyTorch. Go to NVIDIA Product Security. Details The...