Linux Distros Unpatched Vulnerability : CVE-2026-113795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that...

PT-2026-121890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel on arm64 architecture where the damon ptep mkold function fails to use a page-aligned address. When damon va prepare access check selects a random byt...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It arises because the HID Steam driver still allows callbacks to be scheduled during sequence deallocation, resulting in null pointers pointing to freed Steam structures. This may lead to memory corruption or crashes...

PT-2026-135167

Security vulnerability affects the argo-cd package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...

Linux Distros Unpatched Vulnerability : CVE-2026-99043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ice: fix metadatadst refcount handling on representor teardown iceeswitchreleaserepr uses metadatadstfree to release the representor's metadatadst...

Linux Distros Unpatched Vulnerability : CVE-2026-113791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations,...

PT-2026-135187

Security vulnerability affects the argo-cd package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...

Linux Distros Unpatched Vulnerability : CVE-2026-90797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a denial of service via...

Linux Distros Unpatched Vulnerability : CVE-2026-113400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. CVE-2026-113400 Note that...

PT-2026-129127

Name of the Vulnerable Software and Affected Versions Echo versions 4.0.0 through 4.16.0 Description The opt-in BodyDump middleware reads entire request bodies into memory before handlers execute and retains full response bodies for the dump callback without capture limits. An unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-112059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizi...

Linux Distros Unpatched Vulnerability : CVE-2026-99080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c...

Linux Distros Unpatched Vulnerability : CVE-2026-99028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop In the dmaengine path the driver pre- submits RX buffers and holds in-flight TX buffers who...

Linux Distros Unpatched Vulnerability : CVE-2026-99045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ibmveth: hfree logical LAN on open-fail after register ibmvethopen registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from GVE failing to release XSK buffers when stopping queues and resetting ring states, resulting in a leak of XSK buffers submitted to the NIC...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability stems from the failure to release excess xarray nodes within clearinode, potentially leading to memory leaks...

Eclipse KeyPont - GOSE input validation error vulnerability

Eclipse KeyPont – Versions 0.9.0 through 0.13.0-rc1 and versions prior to 1.0.0-rc1 contain an input validation error vulnerability. This vulnerability arises because the JweDirectDecryptorBlock.Decrypt function reads a 64-bit plaintext length from protected header fields of thalesaad without...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because after removing matchall entries via sparx5tcmatchalldestroy, no memory is freed, resulting in a memory leak when deleting mirror and goto matchall filters...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because cipsov4skbuffdelattr fails to adjust the cache offset of subsequent options when removing CIPSO bytes. This may result in accessing incorrect bytes and causing packet data to be interpreted as option length, which is...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises because registration.inner is not initialized when requestirq is called within Devres::new. Accessing registration.inner.device in the IRQ callback may result in reading from uninitialized memory...