Linux Distros Unpatched Vulnerability : CVE-2026-68163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagevmamapped: fix device-private PMD handling Commit 65edfda6f3f2 mm/rmap: extend rmap and migration support device-private entries introduced the concept o...

PT-2026-70966

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert add reloc root allocates a mapping node before inserting it into rc-reloc root tree. If rb simple insert finds an existing entry, it returns the existing rb node and leaves...

PT-2026-70950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the dc create function uses kzalloc to allocate struct dc. Because struct dc has increased in size, it can exceed the page...

Linux Distros Unpatched Vulnerability : CVE-2026-68232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released,...

Linux Distros Unpatched Vulnerability : CVE-2026-73214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtlsserverinputhandler and createnewconnectedudpsocket in...

Linux Distros Unpatched Vulnerability : CVE-2026-15565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any...

PT-2026-71347

Name of the Vulnerable Software and Affected Versions http4s-blaze-server versions prior to 0.23.18 http4s-blaze-server versions prior to 1.0.0-M42 Description The software aggregates fragments of incoming WebSocket messages without limiting the total size or the number of fragments. A client can...

PT-2026-71312

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

PT-2026-71329

IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2026-68447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without...

Linux Distros Unpatched Vulnerability : CVE-2026-68145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and...

The vulnerability of the drivers/clk/mediatek/clk-mtk.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/clk/mediatek/clk-mtk.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs_clear_space_info_full() function in the btrfs module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btrfsclearspaceinfofull function in the btrfs module of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau: fix reversed error cleanup order in ucopy functions nouveauuvmmvmbinducopy and nouveauexecucopy place their error cleanup labels in allocation orde...

RockyLinux 10 : kernel (RLSA-2026:53330)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:53330 advisory. kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-68208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns...

PT-2026-70994

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llext link plt subsys/llext/llext link.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch...

PT-2026-70993

The userspace syscall verifiers z vrfy zsock sendmsg and z vrfy zsock recvmsg in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net msghdr into a kernel-side copy with k usermode from copy, but then re-read the still-live user struct for subsequent decisions. The kernel iove...

PT-2026-70947

In the Linux kernel, the following vulnerability has been resolved: libceph: bound get version reply decode to front len handle get version reply uses msg-front alloc len as the decode boundary for MON GET VERSION REPLY. That is the size of the reused reply buffer, not the number of bytes actuall...

Oracle Linux 10 : kernel (ELSA-2026-53330)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53330 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223405 CVE-2026-64368 - net: openvswitch: reject...