PT-2026-106572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free issue exists in the dma-buf/dma-fence component. A previous fix intended to prevent a NULL pointer dereference changed the validation logic to check the ops pointer...

PT-2026-106631

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL pointer dereference occurs in the skfp driver when setting the MAC address of a down interface. The function skfp ctl set mac address calls ResetAdapter without verifying if the...

PT-2026-106684

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the RDMA/rtrs client. When the init path function returns an error, the system attempts cleanup via the rtrs clt close conns function. This process can...

PT-2026-106599

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description In the drm/amdgpu component, the function nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without verifying if they are NULL. Because amdgpu ras get context and...

PT-2026-106675

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A crash occurs in mac80211 when the cfg80211 calculate bi data function calls rdev get radio mask using the wdev-netdev variable while it is NULL. This happens specifically with wireless...

PT-2026-106685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA component where the bnxt re init dcb wq function ignores a failed allocation. Consequently, the async DCB handler subsequently calls queue work using a NULL...

PT-2026-106637

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the ALSA hda component where a tracepoint is triggered before verifying if a stream has been successfully assigned. When hardware streams are exhausted, stream assignment...

PT-2026-106507

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the drm/amdgpu component where the amdgpu amdkfd clear kfd mapping function assumes that a non-NULL kfd dev has a fully populated node array. This assumption is incorrect...

PT-2026-106614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge vlan component where errors during switchdev deletion in the vlan del function can lead to an inconsistent state, memory leaks during flushing, or a NULL...

PT-2026-106664

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless driver where the ieee80211 stop mesh function fails to properly abort a Channel Switch Announcement CSA when leaving a mesh network. Because the...

PT-2026-106597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the Linux kernel when a module is unloaded while a perf connection is active. The function pmu detach event sets the event-pmu pointer to null, which...

Security Advisory 0194

Security Advisory 0194 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description Two security vulnerabilities have been identified in Arista access point firmware affecting the Captive Portal feature. Both vulnerabilities allow an...

PT-2026-115729

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlan del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

PT-2026-106511

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless subsystem where a monitor interface may be activated without a transmit queue TXQ. This occurs because setting the active flag on a down interface i...

Linux Distros Unpatched Vulnerability : CVE-2026-98358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered...

Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

Linux Distros Unpatched Vulnerability : CVE-2026-98270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both...

CVE-2026-98270: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

F5 Networks BIG-IP : Linux kernel vulnerability (K000163557)

"The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163557 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in...

Linux Distros Unpatched Vulnerability : CVE-2026-98302

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning...