CVE-2026-98580

A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP implementation. A race condition occurs during concurrent socket release and connection accept operations due to improper lock synchronization. A local attacker could exploit this flaw to cause ...

CVE-2026-98565

A flaw was found in the Linux kernel's MediaTek MT7530 network switch driver. This flaw allows a local user with administrative privileges to cause a Denial of Service DoS through a kernel crash. The issue occurs during driver unbinding or module removal on specific hardware variants, where the...

CVE-2026-98564

A flaw was found in the Linux kernel's MediaTek MT7530 DSA Distributed Switch Architecture driver. During device removal or driver unbinding, interrupt mappings are prematurely disposed while the parent interrupt is still active. A local privileged user could trigger this flaw during device...

PT-2026-118276

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc rx fsm function...

PT-2026-118478

HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host imports buffer set contents, face create, and font set coords. Attackers can supply a crafted font whose embedded wasm module passes out-of-range addresses with non-zer...

PT-2026-118275

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on disconnected callback function...

PT-2026-118274

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service...

PT-2026-118277

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc rx fsm function when msglen is set to 0...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43094)

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 'ixgbevf: fix mailbox API compatibility by negotiating supported features' added the .negotiatefeatures callback to ixgbemacoperations and populat...

Siemens SIMATIC S7-1500 TM MFP Missing Lock Check (CVE-2026-23382)

In the Linux kernel, the following vulnerability has been resolved: HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them In commit 2ff5baa9b527 'HID: appleir: Fix potential NULL dereference at raw event handle', we handle the fact that raw event callbacks can happen even for a HID...

Linux Distros Unpatched Vulnerability : CVE-2026-98676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45835)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsocknewconnectioncb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23442)

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths in6devget can return NULL when the device has no IPv6 configuration e.g. MTU IPV6MINMTU or after NETDEVUNREGISTER. Add NULL checks for idev returned by in6devget in both...

Linux Distros Unpatched Vulnerability : CVE-2026-98477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task...

Linux Distros Unpatched Vulnerability : CVE-2026-98580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: Fix race condition in acceptqueue lifecycle In nfcllcpsocketrelease, sockets and listener accept queues are walked under the local sockets rwlock and...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46110)

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Prevent NULL deref when RX memory exhausted The CPU receives frames from the MAC through conventional DMA: the CPU allocates buffers for the MAC, then the MAC fills them and returns ownership to the CPU. For each...

Linux Distros Unpatched Vulnerability : CVE-2026-98688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix NULL dereference in tbremovework There is a slight race between tbremovework and tbdomainremove which leads to dereferencing a NULL tb-rootswit...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53350)

In the Linux kernel, the following vulnerability has been resolved: ASoC: wmadsp: Fix NULL dereference when removing firmware controls In wmadspcontrolremove check that the priv pointer is not NULL before attempting to cleanup what it points to. When csdsp creates a control it calls...

Linux Distros Unpatched Vulnerability : CVE-2026-98791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix AFXDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested ...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52929)

In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADDOUTSTREAMS is denied, SCTP only shrinks the queued chunks and then lowers outcnt. That leaves removed stream metadata behind, so a later re-add can reuse a stale ext a...