Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because when switching trackers, currenttraceflags may be set to NULL; however, the ring buffer is not cleared. As a result, printing the functiongraph entries of the previous tracker triggers dereferencing of an empty pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-99139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix use-after-free in dotcpgetsockoptTCPCONGESTION dotcpgetsockopt reads icsk-icskcaops-name without holding rcureadlock. Since commit 0baf26b0fcd7 bpf: tc...

Linux Distros Unpatched Vulnerability : CVE-2026-116272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A parameter written...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It arises because hifemacdrvprobe connects to the PHY before assigning dev-netdevops; when CONFIGNETSHAPER is enabled, netdevneedopslock reads dev-netdevops. This may lead to null pointer dereferencing and kernel crashes...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from a failure to invoke wakeuppreempt on queued tasks during changes to the scheduler class, resulting in runnable tasks being left unrescheduled and potentially causing the CPU to become idle...

UBUNTU-CVE-2026-99140

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix hist trigger timestamps for buffered events Syzkaller triggered a WARNONONCE!nest warning: WARNING: kernel/trace/ringbuffer.c:821 at ringbuffereventtimestamp Call trace: ringbuffereventtimestamp histfieldtimestamp...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises because rocketprobe saves the return value of rocketdeviceinit before checking for an error pointer; if initialization fails, rdev is not cleared. Subsequent probes then skip initialization and dereference the erroneous...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. This vulnerability arises from delayed reentrancy, which may allow reading a user DSQ that has been freed, leading to use-after-free conditions...

Linux Distros Unpatched Vulnerability : CVE-2026-118025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118025 Note that Nessus relies on the presence of th...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It arises because au1000probe connects to the PHY before allocating dev-netdevops; as a result, phyattachdirect reads dev-netdevops via netdevneedopslock. When CONFIGNETSHAPER is enabled, this leads to a null pointer dereference and a...

Linux Distros Unpatched Vulnerability : CVE-2026-117894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbi...

PT-2026-128143

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpu gpr amdgpu debugfs gpr read drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label,...

Linux Distros Unpatched Vulnerability : CVE-2026-116264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It stems from rocketremove decrementing numcores, while findcorefordev only searches for indices ranging from 0 to numcores - 1. When unbinding cores in order of binding, the last core is omitted, preventing numcores from reaching zero...

Linux Distros Unpatched Vulnerability : CVE-2026-117889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from improper validation of userq buffer objects in drm/amdgpu/userq; no separate list of evicted objects is traversed. As a result, buffer objects created and then evicted prior to their creation cannot re-enter the eviction...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.19. It arises when a failure in setting up mqueue or ipc sysctl leads to the use of the regular mntput function to unmount a long-lived mount, resulting in leaks of the mount and mqueue superblocks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It stems from a naming conflict wherein the loop counter idx declared in foreachinsnprefix shares the same name as a local variable in getsegregoverrideidx, causing the variable to be shadowed. This prevents termination of loops under ...

UBUNTU-CVE-2026-99150

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...

CVE-2026-99150

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...