CVE-2026-98178: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

ROS-20261006-73-0354

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0220

The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0409

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106684

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the RDMA/rtrs client. When the init path function returns an error, the system attempts cleanup via the rtrs clt close conns function. This process can...

CVE-2026-98355: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...

PT-2026-106511

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless subsystem where a monitor interface may be activated without a transmit queue TXQ. This occurs because setting the active flag on a down interface i...

PT-2026-106614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge vlan component where errors during switchdev deletion in the vlan del function can lead to an inconsistent state, memory leaks during flushing, or a NULL...

CVE-2026-98346: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211calculatebidata calls rdevgetradiomask with wdev-netdev, which can be NULL and then crashes in mac80211. To avoid that, invert the order of checks since...

CVE-2026-98285: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

PT-2026-106599

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description In the drm/amdgpu component, the function nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without verifying if they are NULL. Because amdgpu ras get context and...

Security Advisory 0194

Security Advisory 0194 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description Two security vulnerabilities have been identified in Arista access point firmware affecting the Captive Portal feature. Both vulnerabilities allow an...

ROS-20261006-73-0116

The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered...

Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

Linux Distros Unpatched Vulnerability : CVE-2026-98202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers such as rmii2c and rmispi invoke rmidriversuspend and rmidriverresume on...

Linux Distros Unpatched Vulnerability : CVE-2026-98302

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_20095)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202520095 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of...

Linux Distros Unpatched Vulnerability : CVE-2026-98218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match chil...

PT-2026-115786

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later. Setting the flag on a down interface is still allowed, so the driver i...