OESA-2026-4096 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

PT-2026-98758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af packet module where the tpacket parse header function incorrectly casts the user-provided tpacket hdr.tp len variable, which is a u32 unsigned 32-bit integer, t...

PT-2026-98707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the check ld abs function models failed BPF LD ABS or BPF LD IND instructions in a subprogram as an implicit return with...

PT-2026-98820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ppp async component where the process input packet function incorrectly resets a reused socket buffer skb headroom to zero during a frame-error path. This violates...

Linux Distros Unpatched Vulnerability : CVE-2026-98101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and...

Linux Distros Unpatched Vulnerability : CVE-2026-6668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service...

PT-2026-98640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the btintel pcie submit rx work function reads the packet len variable from rfh hdr without verifying if it exceeds the RX buffer size. A...

SUSE CVE-2026-93792

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

DEBIAN-CVE-2026-93792

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

AZL-103574 CVE-2026-93792 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

CVE-2026-93792

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

UBUNTU-CVE-2026-93792

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

CVE-2026-93792

The Linux kernel contains a vulnerability within the wifi: iwlwifi: mvm component. The root cause is a possible underflow occurring because the system fails to properly validate the length of the wowlan packet provided by the firmware. The issue has been addressed in recent kernel commits, which ...

CVE-2026-93792 wifi: iwlwifi: mvm: fix a possible underflow

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

CVE-2026-93792 wifi: iwlwifi: mvm: fix a possible underflow

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan packet...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

kernel: netfilter: nf_queue: hold bridge skb->dev while queued

A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because a queued bridge packet can retain a freed bridge master in its skb-dev field until it is reinjected. When the packet is later reinjected, the system attempts to use the freed bridge master, leading to a...

PT-2026-104909

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...