PT-2026-128100

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfs attr record resize ntfs new attr flags passes the wrong MFT record to ntfs attr record resize. When the attribute is in an extent record, ctx-mrec points to the extent but the...

PT-2026-128168

In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector teardown fsnotify destroy marks keeps a reference to its current mark while it drops conn-lock to destroy the mark. This stabilizes the forward-walk cursor, but does not prevent a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It arises because ntfssetattrsize fails to hold a mapping-invalidatelock when updating isize and adjusting disk attributes. This can lead to page errors and resize conflicts, potentially causing VCN parsing failures and generating...

PT-2026-128177

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when a core is removed rocket remove decrements rdev-num cores for each core it removes, while find core for dev searches slots 0 to num cores - 1. Unbinding the cores in the order they were...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises because rocketprobe saves the return value of rocketdeviceinit before checking for an error pointer; if initialization fails, rdev is not cleared. Subsequent probes then skip initialization and dereference the erroneous...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146251 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146650 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ before...

Oracle Linux 9 : kernel (ELSA-2026-86033)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86033 advisory. - ipv4: validate checksumstart before completing checksum CKI Backport Bot RHEL-284987 CVE-2026-99999 - smb: client: reject a tree connect response...

Linux Distros Unpatched Vulnerability : CVE-2026-117873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,...

Rocky Linux 10.2 [CIQ] Security Update: oci-seccomp-bpf-hook / oci-seccomp-bpf-hook-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89752)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689752 advisory. net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 net/http: golang: golang: Denial of Servic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146646)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146646 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rspinfolen to avoid OOB sense-data read In qla2x00statusentry, the FWI2...

Linux Distros Unpatched Vulnerability : CVE-2026-118003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-99152

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that...

Linux Distros Unpatched Vulnerability : CVE-2026-99182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture When chcount is smaller than blob-alhcfg.devicecount e.g. a mono capture stream, su...

Linux Distros Unpatched Vulnerability : CVE-2026-117860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-99170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e movemount: transfer MNTLOCKED a mount can be moved beneath a locked...

Linux Distros Unpatched Vulnerability : CVE-2026-99099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/CPU/AMD: Fix AMD TLBI Erratum 1718 The processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. Detect the erratum...

Linux Distros Unpatched Vulnerability : CVE-2026-116273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to...

Linux Distros Unpatched Vulnerability : CVE-2026-99211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKFNETOFF and SKFLLOFF to read relative to an skb's network and MAC...