CVE-2026-82250: Integer Underflow (Wrap or Wraparound)

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

PT-2026-82939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime assertion issue exists in the setup xor mapping function. The system triggers a fortify panic due to a false positive report of a potential buffer overflow in the xormaps array...

Linux Distros Unpatched Vulnerability : CVE-2026-80669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but...

CVE-2026-80590: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

Linux Distros Unpatched Vulnerability : CVE-2026-80590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO;...

PT-2026-82890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a virtio net hdr used in tun/tap or AF PACKET with PACKET VNET HDR can incorrectly mark IPv4 or IPv6 fragments as Generic Segmentation Offload GSO. The functions in...

PT-2026-86711

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio net hdr tun/tap, or AF PACKET with PACKET VNET HDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso type to frag off. inet frag reasm prepare/ine...

CVE-2026-80590: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

PT-2026-82995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sht3x update client function where 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16 to cpup. Because the pointers...

PT-2026-82969

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description BPF LSM programs can attach to the xfrm decode session hook. Because security skb classify flow calls this hook from a void path, any error returned by the hook triggers a BUG ON...

CVE-2026-55484: Uncaught Exception

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

PT-2026-83242

Name of the Vulnerable Software and Affected Versions ALOS HTTP versions prior to 0.0.0-20260617230736-314b6783e196 Description An unauthenticated client can cause a denial of service by sending a malformed HTTP request with a path consisting only of a question mark. The sanitizeRequestPath...

CVE-2026-80638: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2removerefcountextent BUG Unlinking a refcounted file whose refcount tree has leaf blocks triggers a fortify panic due to an out-of-bounds write. CAUSE When the last leaf block is removed fro...

CVE-2026-80695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16tocpup. The pointers passed to this function are...

PT-2026-86697

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3x update client, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16 to cpup. The pointers passed to this function are...

PT-2026-83102

Name of the Vulnerable Software and Affected Versions gitoxide gix-packetline versions prior to 0.21.5 Description A panic occurs in the TextRef implementation when processing side-band packet lines that contain empty payloads. A malicious Git server can send a specially crafted side-band packet ...

PT-2026-82904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the HID core when a caller passes a size of 0 to the hid report raw event function for a numbered report. The system calls the hid get report function...

CVE-2026-80604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

SUSE CVE-2026-72036

In the Linux kernel, the following vulnerability has been resolved: net/sched: schmultiq: Replace direct dequeue call with peek and qdiscdequeuepeeked multiqdequeue takes a packet from a band's child with a direct -dequeue call after multiqpeek peeked it. When the child is non-work-conserving the...

Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)

Three removal and replacement paths destroy an initialized value before committing the metadata change that removes it. Destruction runs T::drop, which is user code and may panic. If it does, the commit is skipped and the container still claims ownership of the already-destroyed value, so its own...