Linux Distros Unpatched Vulnerability : CVE-2026-64577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's...

Linux Distros Unpatched Vulnerability : CVE-2026-64566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFLSHAREDFRAG in iptfsskbaddfrags When iptfsskbaddfrags copies frag...

Linux Distros Unpatched Vulnerability : CVE-2026-64575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batc...

PT-2026-68078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The gtp1u send echo resp function fails to check the return value of skb pull data. When processing an echo request between 16 and 19 bytes, the pull request for 20 bytes fails and retur...

PT-2026-81367

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description A denial of service issue exists in the WebDAV TUS creation handler. The problem occurs when the system dereferences a nil response before verifying transport errors. A malicious or compromised...

PT-2026-75922

Summary A transport failure during the initial Infinite Scale TUS creation POST can return nil response, non-nil error. Rclone dereferences the nil response before processing the error and panics. The production CreateUploader path reproduced the crash against a closed endpoint. The security...

CVE-2026-64575: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

PT-2026-68076

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF TCP implementation where a double socket release can occur during batch reallocation. The function bpf iter tcp batch releases the current batch using bpf iter...

CVE-2026-64575: Use After Free

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

PT-2026-81366

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The RC API includes full Go stack traces in error responses when panics occur. This allows attackers to trigger panics to leak sensitive information, including internal file paths, module versions,...

CVE-2026-70378: Improper Validation of Specified Quantity in Input

imagecli's pipeline operation Carve::apply in src/imageops.rs only asserts , never validating that the ratio is positive. A negative ratio e.g. -5 causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to imageproc::seamcarving::shrinkwidth —...

CVE-2026-64576: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

PT-2026-68077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nh res bucket migrate function passes an uninitialized netlink ext ack to call nexthop res bucket notifiers. If nh notifier res bucket info init fails, such as when kzalloc returns...

PT-2026-68038

Name of the Vulnerable Software and Affected Versions imagecli affected versions not specified Description The carve pipeline operation fails to validate that the ratio variable is positive. When a negative value is provided, the computed target width saturates to 0 during a float-to-uint cast...

PT-2026-68080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm policy component where the xfrm hash rebuild function fails to correctly preallocate bins and chains for inexact policies. Due to an inverted guard, the...

CVE-2026-64566: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFLSHAREDFRAG in iptfsskbaddfrags When iptfsskbaddfrags copies frag references from the source frag walk into a new SKB, it increments the page reference count via skbfragref but does not propagate...

CVE-2026-64577: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

PT-2026-75971

Summary When an RC API call triggers a panic recovered by the job runner, the full Go stack trace is included in the JSON error response. This leaks internal file paths, Go module versions, goroutine state, and memory addresses to the API caller. Details The panic recovery in...

Linux Distros Unpatched Vulnerability : CVE-2026-64576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized...

RUSTSEC-2026-0274 Double free / use-after-free in `ReadChunk::commit` when an element's `Drop` panics

ReadChunk::commit and ReadChunk::commitall drop the committed elements before advancing the consumer head. If an element's Drop panics during the drop loop, head is never advanced, so the ring buffer still treats those slots as holding live elements. When the RingBuffer is later dropped it walks...