CVE-2026-98218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

PT-2026-106547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the i2c atr add adapter function. The function stores atr-adapterchan id before calling i2c add adapter to allow the I2C bus notifier to match child...

CVE-2026-104039: Expired Pointer Dereference

A flaw was found in SSSD. A local user can cause a denial of service DoS by disrupting system authentication services. When handling Generic Security Services Application Programming Interface GSSAPI authentication in the Pluggable Authentication Module PAM responder, cached connection state is...

PT-2026-106298

Name of the Vulnerable Software and Affected Versions sssd affected versions not specified Description A flaw in sssd allows a local attacker to cause a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request while passkey authentication is active. The iss...

CVE-2026-98270: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

PT-2026-106675

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A crash occurs in mac80211 when the cfg80211 calculate bi data function calls rdev get radio mask using the wdev-netdev variable while it is NULL. This happens specifically with wireless...

PT-2026-115747

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if init path errors, the callee tries to clean up with rtrs clt close conns. However, this can lead to calling the event tracing code with clt path-kobj-name being NULL and...

CVE-2026-98202: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers such as rmii2c and rmispi invoke rmidriversuspend and rmidriverresume on their child rmidev device during system power management events. Howeve...

PT-2026-106531

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Transport drivers like rmi i2c and rmi spi call the functions rmi driver suspend and rmi driver resume during system power management events. If the physical RMI driver failed to bind or...

PT-2026-115827

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers such as rmi i2c and rmi spi invoke rmi driver suspend and rmi driver resume on their child rmi dev device during system power management events...

ROS-20261006-73-0340

The vulnerability of the sigdsend function in Linux operating system kernels is related to unreliable pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0088

The vulnerability of the roseconnect function in the net/rose/afrose.c module, which implements networking functions for the Linux operating system’s kernel, is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2026-115984

Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...

ROS-20261006-73-0020

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-98220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

Linux Distros Unpatched Vulnerability : CVE-2026-98285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple...

Linux Distros Unpatched Vulnerability : CVE-2026-98314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer...

Linux Distros Unpatched Vulnerability : CVE-2026-98346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211calculatebidata calls...

ROS-20261006-73-0420

The vulnerability of the xfsaildpush function in the fs/xfs/xfstransail.c module of the Xfs file system in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261006-73-0368

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...