Linux Distros Unpatched Vulnerability : CVE-2026-90421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as removeidstore can free the...

Linux Distros Unpatched Vulnerability : CVE-2026-93038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-90397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: qcom: scm: Fix NULL dereference in IRQ handler before scm is published In qcomscmprobe, devmrequestthreadedirq is called before smpstorerelease&scm,...

Important: kernel-livepatch-6.12.100-125.179

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

Linux Distros Unpatched Vulnerability : CVE-2026-90399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is...

Linux Distros Unpatched Vulnerability : CVE-2026-91104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potential...

VulnCheck KEV: CVE-2025-39964

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AFALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state...

Linux Distros Unpatched Vulnerability : CVE-2026-93045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject arena frees below the arena base bpfarenafreepages accepts scalar arena addresses. The runtime masks the address to the low 32 bits and reconstructs...

Linux Distros Unpatched Vulnerability : CVE-2026-90384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero...

Important: kernel-livepatch-6.18.48-107.148

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Linux Distros Unpatched Vulnerability : CVE-2026-93084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Drop handle on protocol bind failures The SCMI bus notifier acquires an SCMI handle when the driver core emits BUSNOTIFYBINDDRIVER, before...

Important: kernel-livepatch-6.1.176-223.369

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...

ROS-20260918-73-0106

The vulnerability of the fs/smb/client/cacheddir.h component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-93063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avo...

UBUNTU-CVE-2026-90386

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

Linux Distros Unpatched Vulnerability : CVE-2026-93142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal/drivers/rcar: Fix error checking in probe This code accidentally calls thermalzonedeviceenable before checking whether thermalzonedeviceregisterwithtrip...

Linux Distros Unpatched Vulnerability : CVE-2026-90429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF deinit A user VINTF is torn down by tegra241cmdqvdeinitvintf, which runs from the destroy callback...

Linux Distros Unpatched Vulnerability : CVE-2026-92516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK...

Linux Distros Unpatched Vulnerability : CVE-2026-90149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 data servers, but two NFSv4 code paths assume the data server client ha...

Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2026-010)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2026-010 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial...