ROS-20261006-73-0335

The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0307

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0239

The vulnerability of the net/sctp/smstatefuns.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106599

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without checking either for NULL. Both amdgpu ras get context and amdgpu ras find obj can return NULL, e.g...

PT-2026-106597

In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in is include guest event A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu pointer. The call log is something like: .. pmu detach event pmu...

ROS-20261006-73-0122

The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261006-73-0302

The vulnerability of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261006-73-0372

The vulnerability of the buildpacketmessage function in the net/netfilter/nfnetlinklog.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20261006-73-0362

The vulnerability of the functions xtcheckmatch and xtchecktarget in the net/netfilter/xtables.c module of the netfilter component of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0080

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261006-73-0086

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

ROS-20261006-73-0211

The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer’s initial limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106592

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config...

PT-2026-106610

In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork As Jann demonstrated, it is entirely feasible to access the mm through vfork. Therefore we need to allocate a private hash on vfork as well as any other CLONE VM user. Specifically, it...

PT-2026-106624

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci devcd handle pkt init arms dump timeout and coredump producers queue dump rx without holding an hdev reference. Unregister leaves both works live, so disconnecting during a...

PT-2026-106652

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the remaining length siw get hdr can receive an extended DDP/RDMAP header across more than one TCP callback. The first callback may receive most of the header, while the next one still...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-98372: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...

Rocky Linux 10.2 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_19061)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619061 advisory. glibc: glibc: Incorrect DNS response parsing via crafted DNS server response CVE-2026-4437 glibc: glibc: Invalid DNS hostname returned via gethostbyadd...

Oracle Linux 10 : sudo (ELSA-2026-75579)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75579 advisory. - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z - Fix CVE-2026-82474: execveat2...