2336 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is clos...
PT-2026-79648
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the damos quota score function can trigger a division by zero error if the target value is zero. This can be triggered by users through the DAMO...
PT-2026-79659
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial: 8250 dma component where the serial8250 release dma function terminates RX DMA and releases the channel but fails to clear the rx running state. If a port ...
PT-2026-79650
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: error out for 10000 active mem bp damos quota score can trigger division by zero if the target value is zero. DAMON LRU SORT lets users set the target value for the hot memory scheme via active mem bp parameter...
CVE-2026-74654: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...
SUSE CVE-2026-68239
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NULL or backup handles ttmbackuppageptrishandle, neither of which can be passed to setpagesarraywb or freed. Add a dedicated WB pass before...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102079)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102079 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: destroy stale expectfn expectations on unregister NAT helpers such as...
CVE-2026-72446
A flaw was found in the Linux kernel's ALSA USB audio subsystem qcom. An unprivileged local user can exploit this vulnerability by sending a crafted request over AFQIPCRTR to disable a stream with no active interface. This can lead to an out-of-bounds write, resulting in memory corruption or a...
Linux Distros Unpatched Vulnerability : CVE-2026-72346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The drive...
CVE-2026-12631
The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...
SUSE CVE-2026-72033
In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...
Linux Distros Unpatched Vulnerability : CVE-2026-72092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject command submission on devices without a submit op amdxdnacmdsubmit calls xdna-devinfo-ops-cmdsubmit unconditionally, but only aie2devops...
Linux Distros Unpatched Vulnerability : CVE-2026-72298
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost qrtrendpointpost validates an incoming packet with if !size || len != ALIGNsize, 4 + hdrlen goto err;...
Linux Distros Unpatched Vulnerability : CVE-2026-72047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210testintdriverwrite and ca8210testintuserread exchange a kmalloc'd buffer pointer through a...
Linux Distros Unpatched Vulnerability : CVE-2026-72091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into...
Linux Distros Unpatched Vulnerability : CVE-2026-72446
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: qcom: reject stream disable with no active interface handleuaudiostreamreq resolves an interface index with infoidxfromifnum, which returns...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102116)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102116 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, iff mode-refresh someho...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099915)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099915 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Free IRQs before removing the device In pciendpointtestremove, freeing the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099947)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099947 advisory. In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check i...