PT-2026-98116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate sdma queue function fails to perform bounds-checking on the restore sdma id variable. This variable, which allows the...

PT-2026-98047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unauthenticated RDMA client can trigger an integer underflow in the RTRS RDMA Transparent RPC Service component. The issue occurs in the process read and process write functions, wher...

PT-2026-104873

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack: use get unaligned be32 in tcp sack The timestamp-only fast path dereferences the option stream as be32 ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use get unaligned...

PT-2026-98051

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the netfilter nf conntrack component within the tcp sack function. The timestamp-only fast path incorrectly dereferences the option stream as a 4-byte aligned pointer,...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386: Heap-based Buffer Overflow

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-97413: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

PT-2026-98013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs tree-checker where the namelen of an INODE REF item is not properly validated. A crafted btrfs image containing a corrupted INODE REF item with a namelen...

PT-2026-97974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMBus block transfer handling where the length specified in data-block0 is not validated early enough. This allows user-controlled oversized block lengths to reach...

PT-2026-98119

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the parser fails to verify the length of the PHY status Information Element IE before processing. Because hardware may report a PHY status ...

PT-2026-97815

Name of the Vulnerable Software and Affected Versions libvips version 8.19.0 Description A memory access issue occurs when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader may expose pixel data at an address not properly...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

CVE-2026-88360

The libvips 8.19.0 library is vulnerable to a memory access issue when processing little-endian PFM images . The root cause is that an mmap-based loader may expose pixel data at an address improperly aligned for float access if the PFM text header length is not a multiple of four bytes. This occu...

Linux Distros Unpatched Vulnerability : CVE-2026-97413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network- supplied message field le16tocpu and used to compute datalen...

Linux Distros Unpatched Vulnerability : CVE-2026-88386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the functio...

PT-2026-97937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vxlan mdb flush function. The function iterates over Multicast Database MDB entries using hlist for each entry safe, which is designed to handle the...

PT-2026-104863

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from num pd vregs to num pds, which would shift the info...

EUVD-2026-86472

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...