PT-2026-61256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation regarding the calculation of the maximum length of the in-GHCB scratch area. When the scratch area is located within the GHCB shared buffer,...

PT-2026-61308

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth 6lowpan component where the send mcast pkt function calls skb clone without verifying its return value. Because skb clone can return NULL during memory...

PT-2026-61090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the vcs write function. When the console lock is temporarily released to copy data from userspace, the vc data pointer obtained from vcs vc can become stale. I...

PT-2026-61108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the fb videomode to var function within the fbdev component. The issue arises when store modes replaces the modelist from userspace via fb new...

Linux Distros Unpatched Vulnerability : CVE-2026-63797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rpmsg: char: Fix use-after-free on probe error path rpmsgchrdevprobe stores the newly allocated eptdev in the default endpoint's priv pointer before calling...

PT-2026-61365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMC-D client where the system fails to properly validate the ism dev slot when processing a CHID-0 ACCEPT. Specifically, the smc v2 determine accepted chid functio...

Linux Distros Unpatched Vulnerability : CVE-2026-53403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in...

PT-2026-61424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the pcm512x chipset driver. The function pcm512x overclock xxx put is defined as a general mixer kcontrol rather than a DAPM Digital Audio Power...

PT-2026-61126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts ...

PT-2026-61433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when processing an IOAM Hop-by-Hop option. The function ipv6 hop ioam accesses in6 dev getskb-dev-cnf.ioam6 enabled without validati...

PT-2026-61321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/iucv component when recvmsg is called simultaneously with getsockoptSO MSGSIZE. An AF IUCV HIPER user can trigger a NULL pointer dereference because th...

PT-2026-61156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lwmi dev evaluate int function within the platform/x86: lenovo-wmi-helpers module. The issue arises when the retval variable is NULL, causing the output.point...

PT-2026-61174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the airoha dev xmit function where the transmit loop reads fragment address and length during its final iteration. This occurs when the loop index equals skb shinfoskb-n...

PT-2026-61199

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer bug exists in the svm range set attr function within the drm/amdkfd component. This occurs when a user calls kfd ioctl svm without first calling kfd ioctl acquire vm,...

PT-2026-61500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where ACPI PRM calls, which are delegated to a workqueue running in a kernel thread to detect and mitigate faulting memory accesses by firmware, may occur before the...

PT-2026-61449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipv6 hop ioam function where the hdr pointer is not updated after a call to skb ensure writable. If the socket buffer skb is cloned or lacks sufficient linear...

Linux Distros Unpatched Vulnerability : CVE-2026-53399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to...

PT-2026-61241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 extension headers handling where the ipv6 hop jumbo function calls pskb trim rcsum, which can lead to changes in the socket buffer skb pointers. This requires...

CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

...

Oracle Linux 10 : httpd (ELSA-2026-21433)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21433 advisory. - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers CVE-2026-34356 - Resolves: RHEL-186195 ...