Linux Distros Unpatched Vulnerability : CVE-2026-23078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2usbgetconfig function has a logic error in the endianness conversion code that can cause...

Linux Distros Unpatched Vulnerability : CVE-2026-23045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/ena: fix missing lock when update devlink params Fix assert lock warning while calling devlparamdriverinitvalueset in ena. WARNING: net/devlink/core.c:261 a...

Linux Distros Unpatched Vulnerability : CVE-2026-23042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2VPORTENABLERDMA, driver does not allocate vdevinfo fo...

Linux Distros Unpatched Vulnerability : CVE-2025-71198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: imu: stlsm6dsx: fix iiochanspec for sensors without event detection The stlsm6dsxaccchannels array of struct iiochanspec has a non-NULL eventspec field,...

Linux Distros Unpatched Vulnerability : CVE-2026-23110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed so that t...

btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfssearchpathintreeuser function in the fs/btrfs/ioctl.c file of the btrfs file system in Linux kernels leads to mutual locking issues. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux vDPA Heap Buffer Overflow DoS

The vulnerability of the vdusevdpasetvqaffinity function in the drivers/vdpa/vdpauser/vdusedev.c driver for vDPA devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mediatek wireless MT76 MCU Function Heap Overflow DoS

The vulnerability of the mt7996mcuexit function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

Linux net/sched cls_api tcf_blockbind buffer overflow

The vulnerability of the tcfblockbind function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux Distros Unpatched Vulnerability : CVE-2025-67853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-23102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task...

Linux Distros Unpatched Vulnerability : CVE-2026-25236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe...

Linux Distros Unpatched Vulnerability : CVE-2026-23051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix drm panic null pointer when driver not support atomic When driver not support atomic, fb using plane-fb rather than plane-state-fb. cherry picke...

Linux Distros Unpatched Vulnerability : CVE-2026-23074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it...

Linux Distros Unpatched Vulnerability : CVE-2026-23085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v3-its: Avoid truncating memory addresses On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses...

Linux Distros Unpatched Vulnerability : CVE-2025-71195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: xilinx: xdma: Fix regmap maxregister The maxregister field is assigned the size of the register memory region instead of the offset of the last...

Linux Distros Unpatched Vulnerability : CVE-2026-23063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been...

Linux Distros Unpatched Vulnerability : CVE-2026-23067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an...

Linux Distros Unpatched Vulnerability : CVE-2026-23103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvlan: Make the addrslock be per port Make the addrslock be per port, not per ipvlan dev. Initial code seems to be written in the assumption, that any address...

Linux Distros Unpatched Vulnerability : CVE-2026-23077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge Patch series mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge, v2. Commit 879bca0a2c4f...