PT-2026-128151

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix false warning in ring buffer map get reader The mmap reader can warn when it catches up with a writer that is still committing events. rb get reader page returns NULL in this case, but ring buffer map get reader...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...

PT-2026-128113

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in NPF exit codes When running Hyper-V from Windows 11, KVM is seeing the SS bit set in nested page fault error codes produced for shadowed NPT. The AMD manual is unclear about when SS...

Linux Distros Unpatched Vulnerability : CVE-2026-117896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

PT-2026-128118

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perf event throttle -- PMU-stop Shortly later t...

Amazon Linux 2 : ca-certificates (ALAS-2026-4045)

The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...

Linux Distros Unpatched Vulnerability : CVE-2026-99104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scxbypass claims bypass dispatch when the scheduler's depth goes from zero to one...

UBUNTU-CVE-2026-99104

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scxbypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates only...

PT-2026-128097

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scx bypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates onl...

CVE-2026-99104

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scxbypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates only...

PT-2026-128104

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix data corruption with concurrent writes and O TRUNC cifs do truncate flushes dirty pages with filemap write and wait and truncates the file on the server, but in the old code both operations ran without holding i...

Linux Distros Unpatched Vulnerability : CVE-2026-99136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-crypt: fix a tiny race condition in cryptdecpending cryptdecpending reads io-error before calling atomicdecandtest. Another context, for example cryptendio...

CVE-2026-99104: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix the bypass dispatch claim for…

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scxbypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates only...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from improper handling of bypass statements in schedext, potentially leading to leakage of sub-scheduler declarations, tasks remaining idle on parent-level bypass DSQ without consumption, and subsequent warnings...

CVE-2026-99117

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because when switching trackers, currenttraceflags may be set to NULL; however, the ring buffer is not cleared. As a result, printing the functiongraph entries of the previous tracker triggers dereferencing of an empty pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-117917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99152

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that...

PT-2026-128145

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsi complete pdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSI OP LOGOUT RSP: case ISCSI OP LOGIN RS...

Linux Distros Unpatched Vulnerability : CVE-2026-99201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both...