Linux Distros Unpatched Vulnerability : CVE-2026-89622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcpi2csmbusread stores the caller- supplied buffer pointer in mcp-rxbuf for the duration of a...

Linux Distros Unpatched Vulnerability : CVE-2026-89509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj requires...

Linux Distros Unpatched Vulnerability : CVE-2026-89750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/userevents: Clear copied tracing state before fork duplication duptaskstruct copies usereventmm from the parent into the child, without grabbing a...

Linux Distros Unpatched Vulnerability : CVE-2026-89711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: remove flawed WARNONONCE from nfsdmodecheck The header for commit e75b23f9e323 nfsd: check dcanlookup in fhverify of directories details the assumption th...

Linux Distros Unpatched Vulnerability : CVE-2026-89528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sendi...

Linux Distros Unpatched Vulnerability : CVE-2026-89672

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: gate nfs2 setacl by argp-mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 sibling: nfsaclsvcdecodesetaclargs fills in...

Linux Distros Unpatched Vulnerability : CVE-2026-89534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Clear sccmid when ADDRCHANGE replacement fails When svcrdmalistenhandler handles RDMACMEVENTADDRCHANGE, it creates a replacement listener cmid and...

Linux Distros Unpatched Vulnerability : CVE-2026-89637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set,...

Linux Distros Unpatched Vulnerability : CVE-2026-89671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: gate nfs3 setacl by argp-mask nfsd3procsetacl calls setposixacl unconditionally for both ACLTYPEACCESS and ACLTYPEDEFAULT, passing argp-aclaccess and...

Linux Distros Unpatched Vulnerability : CVE-2026-89733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlre...

Linux Distros Unpatched Vulnerability : CVE-2026-89552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous...

Linux Distros Unpatched Vulnerability : CVE-2026-81001

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slip: fix use-after-free in slsync slipdevs stores bare netdevice pointers and takes no reference on them. slsync and slalloc walk that table from slipopen und...

Linux Distros Unpatched Vulnerability : CVE-2026-89708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per- session teardown path can free a session while rpciod...

Linux Distros Unpatched Vulnerability : CVE-2026-89563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6tunnel: use skbcowhead in ip6tnlxmit ip6tnlxmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does...

Linux Distros Unpatched Vulnerability : CVE-2026-89561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled...

Linux Distros Unpatched Vulnerability : CVE-2026-89460

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run...

Linux Distros Unpatched Vulnerability : CVE-2026-89717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: set default primary compressor in zramdestroycomps Patch series zram: fix zram issues reported by sashiko. Sashiko drove by and reported 1 a couple of zra...

Linux Distros Unpatched Vulnerability : CVE-2026-89547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: Check svc pool percpu counter allocation svccreate initializes three per-pool percpucounter stats and ignores every return value. On SMP,...

Linux Distros Unpatched Vulnerability : CVE-2026-89676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix stale s2scpstateids IDR entry for async COPY For an async COPY, nfsd4copy called nfs4initcopystate before dupcopyfields, so the s2scpstateids IDR was...

Linux Distros Unpatched Vulnerability : CVE-2026-89734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer...