SUSE CVE-2026-99022

In the Linux kernel, the following vulnerability has been resolved: regulator: ltc3676: don't read the write-only HRST and CLIRQ registers HRST 0x1e and CLIRQ 0x1f are write-only command strobes. Writing HRST triggers a hard reset of the chip and writing CLIRQ clears the interrupt; reading them...

SUSE CVE-2026-99039

In the Linux kernel, the following vulnerability has been resolved: memstick: core: wait for request completion before freeing card In memstickalloccard and memsticksetrwaddr, waitforcompletiontimeout is used to wait for device identification and address configuration requests to complete. The...

SUSE CVE-2026-99061

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P device removal race in brcmfdetach When the driver is removed while the user space process that created the P2P device e.g. wpasupplicant is still exiting, the P2P device interface is removed twice and the...

SUSE CVE-2026-99070

In the Linux kernel, the following vulnerability has been resolved: ipv6: do not warn on route notification size race fib6infohwflagsset sizes the skb with rt6nlmsgsize and later fills it with rt6fillnode. With nexthop compatibility mode enabled, a concurrent replacement can grow the group betwee...

SUSE CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

SUSE CVE-2026-99089

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable opclk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the "iis" bus clock enabled, but it also sets priv-opclk to the parent of the RCLKSRC m...

SUSE CVE-2026-99091

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmdcompletersp receives a struct cmdlookup and, for a pending command that has no cmdcomplete callback, falls through to cmdstatusrspcmd, data. cmdstatusrsp rea...

SUSE CVE-2026-99093

In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table freeing while booting Booting with a boot-time function tracer and a filter, for example ftrace=function ftracefilter=pudfreepmdpage panics on 7.3-rc4 as soon as the tracer starts:...

SUSE CVE-2026-99094

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix TX descriptor bounds check btintelpciepreparetx uses tfdindex to access the TFD and data buffer arrays before the index is advanced modulo txq-count. An index equal to txq-count is one past the end of...

SUSE CVE-2026-99096

In the Linux kernel, the following vulnerability has been resolved: iouring/register: don't exempt disabled rings from task restrictions A ring created with IORINGSETUPRDISABLED is exempt from its register restrictions until it is enabled. This lets the creator register the restrictions and then...

SUSE CVE-2026-99097

In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in teedynshmallochelper teedynshmallochelper derives nrpages from a caller-supplied size and passes it to allocpagesexact without checking it. For size == 0 nrpages is 0, and allocpagesexac...

SUSE CVE-2026-99098

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...

SUSE CVE-2026-99099

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum 1718 The processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. Detect the erratum and apply a software workaround when a microcode fix is not present...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

Linux Distros Unpatched Vulnerability : CVE-2026-99065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup/cpuset: Handle cpu hotplug race in guaranteeactivecpus With commit 2125c0034c5d cgroup/cpuset: Make cpuset hotplug processing synchronous, the cpuset...

ROS-20261027-73-0017

Multiple vulnerabilities exist in the openssh-askpass package version 5.3p1 for Red Hat Enterprise Linux; exploitation of these vulnerabilities may result in a breach of confidentiality and integrity of protected information. Exploitation of these vulnerabilities can be carried out remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-98991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already...

PT-2026-126652

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

Linux Distros Unpatched Vulnerability : CVE-2026-99023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: sequencing: pcie-m2: Fix leaking array from ofregulatorbulkgetall ofregulatorbulkgetall allocates the consumers array and hands it to the caller, who is...

Oracle Linux 8 : libreswan (ELSA-2026-90492)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90492 advisory. - Backport fixes for CVE-2026-94453, CVE-2026-77206 and CVE-2026-77207 RHEL-281879, RHEL-282682, RHEL-282477 - Backport fix for CVE-2026-14957...