CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

EUVD-2026-86854

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

CVE-2026-97546 xfs: don't spin forever on zero-length dirents when salvaging them

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

EUVD-2026-86832

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...

CVE-2026-97524 mptcp: avoid unneeded actions on subflow reset

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8790-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8790-1 advisory. It was discovered that Expat could be made to allocate large amounts of memory wh...

PT-2026-98747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to correctly propagate precision for register R1 during the second iteration of a bpf loop call...

CVE-2026-98009: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantum in parse and fallback paths etsqdiscchange falls back to pschedmtu with no floor for bands without an explicit quantum. With a crafted size table qdiscpktlen reaches 2 GiB, so a zero pschedmtu on a...

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of PostgreSQL PgBouncer’s connection pool software lies in the execution of an infinite loop when a condition for exiting the loop is not met. This allows a hacker to cause a service failure.

The vulnerability of the PostgreSQL PgBouncer connection pool software lies in the execution of a loop with an unreachable exit condition „Infinite loop“ due to a numerical overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2026-97524: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...

PT-2026-98486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xrep dir recover data function can enter an infinite loop when salvaging directory entries. This occurs if the system encounters an unuse...

Linux Distros Unpatched Vulnerability : CVE-2026-97900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero...

ROS-20260925-73-0070

The vulnerability of the btrfs DropExtentMapRange function in the fs/btrfs/extentmap.c file of the Linux operating system’s kernel file system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to caus...

CVE-2026-97981: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...

Linux Distros Unpatched Vulnerability : CVE-2026-97546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that...

Linux Distros Unpatched Vulnerability : CVE-2026-98155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/qaic: Address potential out-of-bounds read in respworker Although 'commit 2feec5ae5df7 accel/qaic: Handle DBC deactivation if the owner went away' fixes t...

Linux Distros Unpatched Vulnerability : CVE-2026-97524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky...

SUSE CVE-2026-93828

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

DEBIAN-CVE-2026-93828

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...