PT-2026-90181

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr rdy work, max charging time work and batt presence work. pwr rdy work and batt presence work can also queue max charging time work...

PT-2026-90060

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm i2c nuvoton: disable IRQ on wait timeout i2c nuvoton wait for stat enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the...

PT-2026-90138

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc get and of icc get by index In of icc get by index and icc get, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the pat...

PT-2026-90100

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp ioctl init allocates its response buffer with kmalloc and copies the whole buffer back to userspace: buf size = init.step0 resp size + init.step2 resp size; void resp...

PT-2026-90221

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method elm The legacy write path dispatches through a uverbs api write method, but the uverbs attr bundle passed to provider code does not have an ioctl method element. If malformed...

PT-2026-90436

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifs sb verify signature bounds the on-disk ubifs sig node-len field before handing the signature payload to verify pkcs7 signature, but the check has the wrong sign: if le...

PT-2026-90135

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try smi init allocates new smi-si sm and later calls ipmi register smi mod, which maps to ipmi add smi. During ipmi add smi, the upper IPMI message handler obtains...

PT-2026-90247

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle connect req returns without action when svc rdma create xprt fails to allocate the new transport. The CM core returns 0 for CONNECT REQUEST events, so it does not...

PT-2026-90178

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040 get vcell and max17040 get soc ignore errors returned by regmap read. When an I2C transfer fails, the uninitialized register value is converted and reported to...

Linux Distros Unpatched Vulnerability : CVE-2026-89162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PCRE2 before 10.48, pcre2serializeencode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is...

Linux Distros Unpatched Vulnerability : CVE-2026-89161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. CVE-2026-89161...

AlmaLinux 10 : kernel (ALSA-2026:65334)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:65334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before building...

Oracle Linux 10 : ELSA-2026-66349-0: / freerdp (ELSA-2026-663490)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663490 advisory. 2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346 Tenable has extracted the preceding description block...

RockyLinux 9 : freerdp (RLSA-2026:66347)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66347 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directly fr...

PT-2026-90455

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3 gadget free endpoints due to race condition In dwc3 gadget init endpoint, &dep-nostream work is bound with dwc3 nostream work, and dwc3 gadget endpoint stream event can queue this...

PT-2026-90066

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo pm work on stop mt7925 queues mlo pm work with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work...

PT-2026-90217

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu buffer::lock when resizing a subbuf Because, ring buffer subbuf order set can clear cpu buffer-free page, hold cpu buffer-lock to prevent races with ring buffer alloc read page and ring buffer free read page...

PT-2026-90227

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add build skb...

PT-2026-90224

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma set ib path ucma set ib path calls ucma event handler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file f...

PT-2026-90263

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svc create initializes three per-pool percpu counter stats and ignores every return value. On SMP, percpu counter init fails when alloc percpu gfp cannot satisfy the allocation,...