Linux Distros Unpatched Vulnerability : CVE-2026-47143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling...

Linux Distros Unpatched Vulnerability : CVE-2026-64373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal...

Linux Distros Unpatched Vulnerability : CVE-2026-66034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length...

Linux Distros Unpatched Vulnerability : CVE-2026-64480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the...

Linux Distros Unpatched Vulnerability : CVE-2026-64216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compare...

PT-2026-64643

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid net.ipv4.tcp reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp-reordering field for ne...

PT-2026-64594

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq suspend is called via the kernel restart - device shutdown path. Unlike the normal system suspend path, the reboot path does not call freeze processes,...

PT-2026-64518

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module extend max pages module extend max pages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...

PT-2026-64736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...

PT-2026-64625

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in iso conn big sync iso conn big sync drops the socket lock to call hci get route and then re-acquires it, but dereferences iso pisk-conn-hcon afterwards without re-checking that conn is...

PT-2026-64624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap get conf opt function reads the opt-len field, which is controlled by an attacker, and dereferences opt-val before...

PT-2026-64514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd veventq fops read function where a bound-check for the normal vEVENT path incorrectly uses sizeofhdr instead of sizeofhdr. Because hdr is a pointer,...

Linux Distros Unpatched Vulnerability : CVE-2026-64488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value befo...

Linux Distros Unpatched Vulnerability : CVE-2026-64486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value befo...

Linux Distros Unpatched Vulnerability : CVE-2026-64511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ACPI: NFIT: Install Notify handler before getting NFIT table, acpinfitprobe...

GHSA-JPCW-4WR7-C3VQ kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

| Field | Value | |---|---| | Ecosystem | Go | | Package | github.com/getkin/kin-openapi | | Affected versions | = 0.143.0 introduced in v0.2.0, PR 90, 2019-05-07; reproduced on HEAD 30e2923 | | Patched versions | 0.144.0 | --- Summary openapi3filter.ValidateRequest contains a...

GO-2026-5525 GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

GoBGP has a panic in AdjRib.Update via malformed BGP Update message Nil Pointer Dereference in github.com/osrg/gobgp...

DEBIAN-CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

DEBIAN-CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...

CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...