PT-2026-97899

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where kernels compiled with CONFIG DEBUG VM can experience a boot panic. This occurs when hugetlb free vmemmap is enabled and bootmem...

PT-2026-97937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vxlan mdb flush function. The function iterates over Multicast Database MDB entries using hlist for each entry safe, which is designed to handle the...

PT-2026-97888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the nfsd net structure contains boolean fields accessed from concurrent contexts without proper serialization. Specifically, the nfsd4 end grace function uses a plai...

PT-2026-97895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where the system fails to reject Write or Reply chunks that have a segcount field set to zero. Because the xdr check write chunk function only...

PT-2026-98102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the Linux kernel during root hub control transfers. This happens because the SCSI error handler, when managing errors in UAS and storage drivers, may attempt to...

PT-2026-98096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RDMA counter component when the rdma counter bind qp function fails within alloc and bind. The error path jumps to err mode, which frees the counter but fails...

PT-2026-98123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and resource leak risk exists in the lenovo se10 wdt watchdog driver. The issue occurs when the se10 pdev variable is not properly nullified, potentially allowing the...

CVE-2026-93251: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...

PT-2026-98099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial8250 register 8250 port function where uart-port.dev is conditionally copied from up-port.dev only if the latter is non-NULL. If both the existing uart slot...

PT-2026-98084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA component where handler object types are not properly validated within the acpi ev has default handler and acpi ev find region handler functions...

PT-2026-98107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The qnx4 file system implementation fails to properly handle set blocksize failures. This occurs because qnx4 utilizes buffer heads, which do not effectively manage block sizes that exce...

PT-2026-98138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists during the devcoredump cleanup process. In the xe devcoredump snapshot free function, the ss-gt variable may be NULL if the snapshot was not fully...

PT-2026-98085

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ACPICA component within the acpi ex opcode 3A 1T 1R mid op function. The issue occurs when calculating the truncation length due to a lack of overflow...

PT-2026-98136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nl80211 wireless configuration interface where the system fails to properly validate the size of the High Efficiency HE operation element in beacons. Specifically,...

PT-2026-97882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the cdx create res attr function. When sysfs create bin file fails, the system frees res attr without setting cdx dev-res attrnum to NULL, resulting in a...

PT-2026-97938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPI bus. The function acpi get first physical node may return a stale device pointer because acpi unbind one can execute after the ACPI device's...

Linux Distros Unpatched Vulnerability : CVE-2026-93682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of...

Linux Distros Unpatched Vulnerability : CVE-2026-93545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93545 Note...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124481 advisory. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non- linearly with respect to the size of the certificate. This...

PT-2026-97973

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp send ddp aarp send ddp calls atalk find dev addrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalk ptr ==...