Oracle Linux 10 : sudo (ELSA-2026-75579)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75579 advisory. - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z - Fix CVE-2026-82474: execveat2...

PT-2026-106544

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vm file with a backing file. For nested backing files overlayf...

PT-2026-106549

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scx bpf select cpu and and scx bpf dsq insert vtime refuse the call and report to @p's...

PT-2026-106554

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set shrinker bit with cgroup.memory=nokmem With cgroup.memory=nokmem, shrinker memcg alloc bails out early and never allocates an id, so shrinker-id keeps the 0 it got from the kzalloc in shrinker alloc. li...

PT-2026-106566

In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi wwan mbim: guard against a cyclic NDP chain The NDP traversal in mhi mbim rx only stops when wNextNdpIndex is zero. Nothing requires the offsets to advance, so a modem that points an NDP at itself, or at an earlier...

PT-2026-106582

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy to user failure rdma join multicast queues RoCE work that later reads the ucma multicast through event-param.ud.private data, then list adds the CMA multicast at the head of id priv-mc...

PT-2026-106598

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...

PT-2026-106637

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...

PT-2026-106639

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xe shrinker walk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which need...

PT-2026-106641

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from device-reported iso length usb6fire pcm in urb handler sizes each outgoing isochronous packet as actual length - 4 / in n analog buffer, a 4832-byte object from kcallocPCM MAX PACKET SIZE, PCM N...

PT-2026-106673

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref underflow in dma chan put dma chan get takes chan-device-ref only on the slow path: / no kref on fast path / if chan-client count module getowner; chan-client count++; return 0; if !try module getowner...

CVE-2026-98220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

Linux Distros Unpatched Vulnerability : CVE-2026-98253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through...

Linux Distros Unpatched Vulnerability : CVE-2026-98308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check...

Linux Distros Unpatched Vulnerability : CVE-2026-98344

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: Fix device kref underflow in dmachanput dmachanget takes chan-device-ref only on the slow path: / no kref on fast path / if chan-clientcount...

CVE-2026-98253: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

PT-2026-106545

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIO CRED credit-return mmap hfi1 file mmap's PIO CRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

PT-2026-106612

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv emulate tlbie all lpid kvmhv emulate tlbie all lpid iterates the nested-guest IDR and drops mmu lock before calling kvmhv emulate tlbie lpid, but does not hold a reference on the k...

PT-2026-106663

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211 start ap can set enable beacon and beacon int and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to:...

PT-2026-106676

In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER UP after multicast flush ipoib ib dev flush light temporarily clears IPOIB FLAG OPER UP to prevent multicast joins while ipoib mcast dev flush is running, and restores the flag afterwards if it was...