PT-2026-98616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunvdc driver where map table entries are permanently leaked when a descriptor send fails. The send request function maps request pages into the LDC channel map...

PT-2026-98471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where a race condition occurs during vport teardown. The function qla24xx report id acquisition may identify a vport on the ha-vp list that is...

PT-2026-98592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where a VMID 0 flush is forced during a wipe operation on VRAM, even when amdgpu ttm map buffer accesses the VRAM via its direct MC address...

PT-2026-98812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where bpf map check op flags incorrectly validates the target CPU ID stored in the upper 32 bits of map operation flags when BPF F CPU is used. The...

PT-2026-98475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb function calculates a map index using the vp index variable and writes to the vp idx map array without...

PT-2026-98696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where callback frame constructors initialize map-typed argument registers using mark reg known zero before restoring map ptr. This process clears the...

PT-2026-98805

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethosu accelerator driver where the command stream parser incorrectly interprets bits 15:14 of NPU SET IFM,OFM PRECISION as an activation storage mode on U65...

PT-2026-98811

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding per-CPU map updates for array, hash, and cgroup storage maps when BPF F CPU or BPF F ALL CPUS are not used. The syst...

SUSE CVE-2026-67229

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, addvhost/2 calls rabbitdatacoercion:atomizekeys/1 the unsafe variant using binarytoatom on the vhost metadata map. The 20 MB management body limit fits 1M+ short keys. Admin-only. An...

CVE-2026-93253

In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...

CVE-2026-93253

The Linux kernel contained a flaw where cpumask memblock memory was being freed too early during the boot process, before the memory map was fully initialized via deferred_init_memmap(). This issue was triggered when using the nohz_full kernel boot parameter, resulting in a kernel warning. The fi...

Linux Distros Unpatched Vulnerability : CVE-2026-67229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, addvhost/2 calls rabbitdatacoercion:atomizekeys/1 the...

PT-2026-104893

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm arm smmu device remove manually frees the IOPF queue, destroys the vmid map and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns,...

CVE-2026-93253

In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...

CVE-2026-93253: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...

PT-2026-98126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm1105 media driver where the return value of the dm1105 dma map function, which manages DMA memory allocation, is ignored within the dm1105 hw init function. If t...

kernel: Linux kernel: libceph null pointer dereference leads to denial of service

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

UBUNTU-CVE-2026-67229

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, addvhost/2 calls rabbitdatacoercion:atomizekeys/1 the unsafe variant using binarytoatom on the vhost metadata map. The 20 MB management body limit fits 1M+ short keys. Admin-only. An...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...