PT-2026-32343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An overflow occurs when accumulating packets in the net/x25 component. The issue is caused by a lack of validation to ensure that the x25 sock.fraglen variable does not overflow...

PT-2026-43889

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description An out-of-bounds MMIO Memory Mapped I/O read exists in the ibmasm handle mouse interrupt function. This occurs when the queue reader or writer index from the hardware exceeds REMOTE QUEUE...

PT-2026-30238

Name of the Vulnerable Software and Affected Versions CUPS versions 2.4.16 and prior Description A flaw exists in the CUPS printing system's cupsd daemon due to insufficient input validation when processing the textWithoutLanguage parameter. Successful exploitation allows a remote attacker to...

Linux kernel Watch Queue Set Size Buffer Overflow DoS

The vulnerability of the watchqueuesetsize function in the kernel/watchqueue.c module of the Linux operating system is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the freewatch function in the kernel/watchqueue.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel sched core Heap Buffer Overflow DoS

The vulnerability of the ttwuqueuecond function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, involves an unvalidated error condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nfqnlbuildpacketmessage function in the net/netfilter/nfnetlinkqueue.c module of the netfilter component of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the airohatcgethtbgetleafqueue function in the drivers/net/ethernet/airoha/airohaeth.c file of the Linux kernel’s Ethernet driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-32351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Reliable Delivery Service RDS implementation for InfiniBand IB. The function rds ib get mr allows FRMR memory registration to proceed before an IB connection is full...

PT-2026-36441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where immediate NF QUEUE verdicts could be emitted. While nft queue is intended for userspace nftables to deliver verdicts, immediate...

PT-2026-40509

Уязвимость функции nft queue ядра операционных систем Linux связана с неправильной обработкой входных данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2026-32696

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.httpauth HTTP authentication, when a client connects to the broker using MQTT CONNECT without providing username/password, and the configuration params uses the placeholders %u / %P...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vdecmsgqueueinit function in the drivers/media/platform/mediatek/vcodec/vdecmsgqueue.c file of the Linux kernel-based multimedia device driver leads to unlimited resource allocation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

PT-2026-36446

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.19.0-rc8 Description A soft lockup can occur in the mptcp recvmsg function. When receiving data with MSG PEEK and MSG WAITALL flags, the socket buffer skb is not removed from the sk receive queue. This causes the sk wait...

PT-2026-40507

Уязвимость функции hci cmd sync queue once ядра операционных систем Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Linux Distros Unpatched Vulnerability : CVE-2026-23294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpdevbulkqueue bq ca...

Linux Distros Unpatched Vulnerability : CVE-2026-23342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpbulkqueue bq can b...

Linux Distros Unpatched Vulnerability : CVE-2026-23355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in...

Linux Distros Unpatched Vulnerability : CVE-2026-23350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have a...

CVE-2026-27828

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118chargerImpl::handlesessionsetup uses v2gctx after it has been freed when ISO15118 initialization fails e.g., no IPv6 link-local address. The EVSE process can be crashed remotely by an attacker with MQTT access who issue...