PT-2026-106572

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: Fix potential NULL pointer dereference" changed the check to test for the ops pointer instead of the signaled bit to avo...

PT-2026-106631

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfp ctl set mac address calls ResetAdapter unconditionally, without checking netif running. ResetAdapter first calls card stop, which sets smc-hw.hw state t...

PT-2026-106849

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

PT-2026-106675

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211 calculate bi data calls rdev get radio mask with wdev-netdev, which can be NULL and then crashes in mac80211. To avoid that, invert the order of checks since...

PT-2026-106298

A flaw was found in sssd. A local attacker can trigger a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request when passkey authentication is enabled. Due to a missing state validation check in passkey Kerberos handling, the PAM responder dereferences an...

ROS-20261006-73-0082

The vulnerability of the udpsockcreate6 function in the include/net/udptunnel.h module of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0409

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0140

The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PT-2026-106614

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlan del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

ROS-20261006-73-0420

The vulnerability of the xfsaildpush function in the fs/xfs/xfstransail.c module of the Xfs file system in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261006-73-0220

The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0368

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

ROS-20261006-73-0340

The vulnerability of the sigdsend function in Linux operating system kernels is related to unreliable pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-106547

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2c atr add adapter stores atr-adapterchan id before i2c add adapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed...

ROS-20261006-73-0261

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer...

Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

Linux Distros Unpatched Vulnerability : CVE-2026-98218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match chil...

PT-2026-106664

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitch when leaving a mesh The code in ieee80211 stop mesh leaves CSA active, but leaving the mesh released the channel context, so the CSA finalize work crashes: Oops: general protection fault, probably...

ROS-20261006-73-0364

The vulnerability of the rdsibgetmr function in the net/rds/ibrdma.c module, which implements kernel networking functions in the Linux operating system, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...