Linux Distros Unpatched Vulnerability : CVE-2026-90094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: process: Fix context switching MTE store-only tag check SCTLREL1.TCSO0 is set when user opt-in for MTE store-only tag check mode. However, it is not part...

Linux Distros Unpatched Vulnerability : CVE-2026-90290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: hibernate: Restore DAIF state on error Sashiko AI has reported that if swsuspmtesavetags for some reason fails we return from swsusparchsuspend with DAIF...

Linux Distros Unpatched Vulnerability : CVE-2026-90067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client...

Linux Distros Unpatched Vulnerability : CVE-2026-93062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: guard against division by zero in iwldbgtlvallocfragments Make sure we don't end-up with a numfrags = 0 situation. For that, check that the...

Linux Distros Unpatched Vulnerability : CVE-2026-90269

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject load-acquire from pointers requiring fault protection A BPFLOADACQ is not rewritten to a BPFPROBEMEM load by the verifier, unlike a regular BPFLDX,...

Linux Distros Unpatched Vulnerability : CVE-2026-90111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6mr: do not clone dst in ip6mrcachereport IPv6 input attaches a non-refcounted NOREF dst to skbs under RCU. When an ingress multicast packet misses MFC lookup...

Linux Distros Unpatched Vulnerability : CVE-2026-93071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: bcm2835-unicam: Fix asc leaked in error/remove path v4l2asyncnfaddfwnoderemote allocates the asc, which is freed when v4l2asyncnfcleanup is called. Call...

Linux Distros Unpatched Vulnerability : CVE-2026-90221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix use of uninitialized memory in COREINITRSP parsing ncicoreinitrsppacketv1 and ncicoreinitrsppacketv2 parse the COREINITRSP packet without validati...

Linux Distros Unpatched Vulnerability : CVE-2026-90165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: fix invalid pointer dereference in ksmbdstopdurablescavenger See the procedure below: ksmbdlaunchksmbddurablescavenger durablescavengerrunning = tru...

Linux Distros Unpatched Vulnerability : CVE-2026-90103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encodelayoutstatsmaxsz budgets XDRQUADLENPNFSLAYOUTSTATSMAXSIZE, i.e. 256 bytes, for the layoutupdate4 body...

Linux Distros Unpatched Vulnerability : CVE-2026-90237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftct: move custom expectation support to helper Originally, the ct expectation support called nfcthelperextadd for confirmed conntracks, which is...

Important: kernel-livepatch-6.1.176-220.358

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.1.175-219.359

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Important: kernel-livepatch-6.1.180-225.360

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Linux Distros Unpatched Vulnerability : CVE-2026-90153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: bound smbcheckpermdacl ACE walks by DACL size smbcheckpermdacl validates that the DACL fits inside the NT security descriptor, but then bounds its two AC...

Linux Distros Unpatched Vulnerability : CVE-2026-90383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference ...

Linux Distros Unpatched Vulnerability : CVE-2026-93121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint- disabled ESHUTDOWN and request-allocation failure ENOMEM in...

Linux Distros Unpatched Vulnerability : CVE-2026-93139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: Fix hungqueuedbarray loop limit for multi-XCC The loop iterated only...

Linux Distros Unpatched Vulnerability : CVE-2026-90256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: use protolock for l2capdata to fix l2capdisconnind hciconn::l2capdata is accessed without locks in l2capdisconnind via hciconntimeout discwork...