Linux Distros Unpatched Vulnerability : CVE-2026-98665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: health: max30102: fix NULL dereference in interrupt handler The interrupt is requested in max30102probe and stays enabled for the lifetime of the device, b...

Linux Distros Unpatched Vulnerability : CVE-2026-98854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of/overlay: only treat a positive changeset id as registered ofoverlayfdtapply stores the idralloc return value in ovcs-id before checking it. On failure the...

Linux Distros Unpatched Vulnerability : CVE-2026-98695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down...

Linux Distros Unpatched Vulnerability : CVE-2026-98796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: mtkethsoc: allocate dummy netdev sooner The RX rings and the shared NAPI are carried by an internal dummy netdev eth-dummydev. mtkprobe creates...

Linux Distros Unpatched Vulnerability : CVE-2026-98756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: Fix NULL pointer dereference in cdns3pciprobe The Cadence USBSS controller is a two-function PCI device. The first probed function allocates the...

CVE-2026-98821: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: reject polled dio with user integrity metadata IOCBHASMETADATA leaves iocb-private as a uiometa, while iocbbioiopoll expects a bio. Since 2729a60bbfb9, metadata I/O always uses blkdevdirectIO, which never publishes the bio...

Linux Distros Unpatched Vulnerability : CVE-2026-98565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are only requested for IDMT7530: both the devmregulatorget in pro...

Linux Distros Unpatched Vulnerability : CVE-2026-98764

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: Fix NULL pointer dereference in FUNCTIONFSENDPOINTDESC When user space sets up FunctionFS with only full-speed descriptors e.g., flags =...

Linux Distros Unpatched Vulnerability : CVE-2026-98798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: fix NULL dereference in setcoalesce before first open The Rx ring priv and index are only set in bcmgenetinitrxring, which runs at open. Setting...

PT-2026-116723

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15 Description When CONFIG PCI DYNAMIC OF NODES is enabled, the dynamic Open Firmware OF helpers of pci prop bus range and of pci prop intr map dereference the pdev-subordinate variable without prior validation...

CVE-2026-98747: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereference in serialcoreunregisterport port-portdev is NULL when no port device is installed: it is cleared on teardown, and never set if registration failed before serialcoreportdeviceadd...

PT-2026-116799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Logical Link Control Protocol LLCP of the NFC subsystem during the accept queue lifecycle. In the nfc llcp socket release function, sockets and listener...

Linux Distros Unpatched Vulnerability : CVE-2026-98786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput chec...

Linux Distros Unpatched Vulnerability : CVE-2026-98747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: core: fix NULL pointer dereference in serialcoreunregisterport port-portdev is NULL when no port device is installed: it is cleared on teardown, and nev...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from the s390/cio subsystem, where the ccwdevicegetutilstr function does not check the return value of chpidtochp, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 5.10.258 to 5.11, from 5.15.165 to 5.16, from 6.1.105 to 6.2, from 6.6.46 to 6.7, from 6.10.5 to 6.11, and version 6.11. The vulnerability arises from the failure of the dcstatecreatecopy function to return a value, resulting in NU...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...

Gitea’s improper exception handling vulnerabilities

Gitea 28.1.0 and earlier versions have a vulnerability related to improper exception handling. This vulnerability arises when the organization’s handler processes requests from individual users with the format username/-/repositories. In such cases, the handler may dereference an empty...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the PCI dynamic OF helper function, which dereferences pdev-subordinate without checking the subordinate bus. This may lead to null pointer dereferencing and early startup suspension...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...