PT-2026-97982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands...

PT-2026-98044

In the Linux kernel, the following vulnerability has been resolved: netconsole: take target cleanup list lock in drop netconsole target drop netconsole target unlinks the target while only holding target list lock. However, when the underlying interface has been unregistered, netconsole netdev...

PT-2026-98001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb/client component where the stack-allocated cifs open info data is not zero-initialized. This can result in the structure containing random data, potentially...

PT-2026-97949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ppl do flush function within the md/raid5-ppl component. The problem occurs because a loop continues to iterate after the ppl io unit finished functi...

PT-2026-98067

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

PT-2026-98043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-fc module where a controller in the CONNECTING state may experience an admin request timeout, triggering ctrl-ioerr work to abort inflight requests. This...

PT-2026-97993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi wifi driver within the mvm module regarding the validation of the TX CMD response layout. The parsing of TX CMD utilizes the frame count variable to traver...

PT-2026-98051

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the netfilter nf conntrack component within the tcp sack function. The timestamp-only fast path incorrectly dereferences the option stream as a 4-byte aligned pointer,...

Linux Distros Unpatched Vulnerability : CVE-2026-97483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: hcd: fix possible deadlock in rh control transfers From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS...

PT-2026-98010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double fput occurs during error handling within the cachefiles create tmpfile function. A double fput is a condition where the reference...

PT-2026-98054

In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, proc sys call handler guarantees that the buffer passed to proc handlers is NUL-terminated. If bpf sysctl set new value replaces the pending sysctl value, it can...

PT-2026-98024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Integration between TLS and sockmap BPF psock contains latent bugs that are exploitable. The issue arises because checking for the presence of a User Level Protocol ULP prior to...

PT-2026-97984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a malformed Information Element IE buffer can be stored via the SIOCSIWGENIE command in the cfg80211 wext siwgenie function without proper validation. A subsequent...

PT-2026-97959

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from num pd vregs to num pds, which would shift the info...

PT-2026-97953

In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to &regs.a1 makes FORTIFY treat the destination as the single a1 field, resulting in a...

PT-2026-98076

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where hardware may provide packets with a length exceeding the maximum native Wi-Fi header length. This can lead to the ath11k dp rx h undecap nwifi function accessing an...

PT-2026-98000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Btrfs file system where a failure in the insert dirty subvol function, caused by an error returned by btrfs update reloc root, leads to a use-after-free or double...

PT-2026-97987

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs filldir function copies entry names from SMB1 TRANS2 FIND FIRST or FIND NEXT responses using a length de.namelen provided by the server...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124483 advisory. The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this c...

UBUNTU-CVE-2026-93815

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...