SUSE SLES15 Security Update : kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4497-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4497-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed:...

PT-2026-106688

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib get eth speed ib device get netdev intentionally returns a referenced net device even when it is unregistering, so matching and cleanup callers can still find the association. The...

PT-2026-106694

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr check range leading to OOB access mr check range validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

AlmaLinux 8 : kernel-rt (ALSA-2026:75746)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

RockyLinux 8 : kernel-rt (RLSA-2026:75746)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

RockyLinux 8 : kernel (RLSA-2026:75747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75747 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

PT-2026-106689

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg tree only after rxe mcast add succeeds rxe get mcg publishes a newly allocated multicast group in rxe-mcg tree before programming the backing Ethernet multicast address with rxe mcast add, which runs...

PT-2026-106682

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa lock, the...

PT-2026-106683

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib mad complete recv initializes mad recv wc-rmpp list and then runs ib mad enforce security before linking recv buf onto that list. On failure it calls ib free recv...

PT-2026-106696

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw qp modify fails in siw accept We need to clear cep before release state lock as siw qp llp close and siw qp modify-siw qp llp close did. Otherwise if siw qp modify fails in siw accept...

Linux Distros Unpatched Vulnerability : CVE-2026-98323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: Bound fragmented header copies by the remaining length siwgethdr can receive an extended DDP/RDMAP header across more than one TCP callback. The first...

Linux Distros Unpatched Vulnerability : CVE-2026-98365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using...

Linux Distros Unpatched Vulnerability : CVE-2026-98353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an...

Linux Distros Unpatched Vulnerability : CVE-2026-98252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another...

Oracle Linux 8 : kernel (ELSA-2026-72468)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72468 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

AlmaLinux 9 : kernel (ALSA-2026:74438)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74438 advisory. kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT...

PT-2026-106684

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if init path errors, the callee tries to clean up with rtrs clt close conns. However, this can lead to calling the event tracing code with clt path-kobj-name being NULL and...

Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

PT-2026-106581

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm get nlmsg request iwpm get nlmsg request initializes refcount after list add tail making it accessible to global list where another CPU can kref get on nlmsg request causing a refcount "additio...

PT-2026-106652

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the remaining length siw get hdr can receive an extended DDP/RDMAP header across more than one TCP callback. The first callback may receive most of the header, while the next one still...