CVE-2026-97574

The Linux kernel contains a vulnerability in the bnxt_en driver where the bnxt_queue_mem_alloc() function performs a shallow copy of the live RX ring into a clone. Because the rx_tpa and rx_tpa_idx_map pointers are not cleared during this copy, they continue to point to the memory of the live rin...

EUVD-2026-86882

In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...

EUVD-2026-86877

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

CVE-2026-97569 bnxt_en: Prevent queue stop with deferred completions

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

CVE-2026-97569 bnxt_en: Prevent queue stop with deferred completions

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

CVE-2026-97569

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

CVE-2026-97569

The Linux kernel contains a vulnerability in the bnxt_en driver where a burst of packets can cause the queue to stop permanently. This occurs because the driver may defer completions for all packets in a small ring (

CVE-2026-97536

The Linux kernel contains a use-after-free vulnerability in the scsi: qla2xxx driver during queue teardown. The issue occurs because the qla2xxx_delete_qpair() function calls free_irq(), which does not cancel work already placed on the ha->wq workqueue. Consequently, a still-pending q_work may...

CVE-2026-97536 scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97536 scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

EUVD-2026-86844

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97536

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97569

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

CVE-2026-97536

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-100075: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters When srptallocrwctxs fails partway through a multi-buffer indirect descriptor, the unwind path destroys RDMA contexts but leaves stale nrwctx and nrdma values and a dangling rwctxs...

Linux Distros Unpatched Vulnerability : CVE-2026-98152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlog limit, the connect path only drops the device...

Linux Distros Unpatched Vulnerability : CVE-2026-97536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq,...

CVE-2026-98004

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-98004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the...

PT-2026-98816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-rdma module where the queue rq function handles -EIO errors in the wrong order. When a host path error is reported, the system continues to clean up the comma...