ROS-20260828-73-0017

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-82998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the dmaengine idxd component. The release callbacks idxd conf wq release, idxd conf engine release, and idxd conf group release call kfree on the enclosing...

PT-2026-82943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igen6 edac driver where unloading the driver triggers a call trace. This occurs because the memory controller devices lack a release function, leading to a warning...

CVE-2026-80643: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

PT-2026-86908

This update for rekor rebuilds it against the current go security release...

PT-2026-86910

This update for podman rebuilds it against the current go security release...

PT-2026-82991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iblock execute pr out function where the PRO PREEMPT, PRO PREEMPT AND ABORT, and PRO RELEASE operations perform callback capability checks via ops-pr clear. An...

The vulnerability of the lasso_node_init_from_message_with_format function in the Lasso library, which stems from improper memory release before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the lassonodeinitfrommessagewithformat function in the Lasso library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mtk-smi component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the ext4 kernel component in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the net/tls/tls_sw.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the net/tls/tlssw.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-80698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease,...

Linux Distros Unpatched Vulnerability : CVE-2026-80643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it...

SUSE CVE-2026-72356

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifsissueread Fix missing release of credits in the failure path in cifsissueread lest retrying the subreq just overwrites the credits value...

CVE-2026-80519

A flaw was found in the Linux kernel. Specifically, within the OpenVPN OVPN module's crypto completion callback mechanism, a timing issue exists. This vulnerability arises when peer references are released prematurely, before the associated cleanup operations are complete. An attacker could...

EUVD-2026-66468

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

ROS-20260827-73-0013

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260827-73-0018

The vulnerability of the rs9regmapi2cread function in the drivers/clk/clk-renesas-pcie.c file of the Linux operating system control chip for Samsung Exynos processors is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20260827-73-0001

The vulnerability of the diUnmount function in the fs/jfs/jfsimap.c module of the Linux file system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

net-p2p/c-lightning -- unknown vulnerability

Core Lightning team reports: This point release includes fixes for vulnerabilities responsibly reported by a number of sources. It also comes at a time when increasingly capable AI models are being used to identify potential vulnerabilities in open-source code, significantly increasing the volume...