PT-2026-97970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i3c master component where the error path for device register is handled incorrectly within the i3c master register new i3c devs function. When device register...

CVE-2026-97424: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-97508

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

ROS-20260924-73-0060

The vulnerability of the v4l2fwnodeparselink function in the drivers/media/v4l2-core/v4l2-fwnode.c file of the Linux kernel’s multimedia device driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-98128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the XDomain reference is not maintained during the lifetime of a service. This occurs because the service ID is released in the tb...

Linux Distros Unpatched Vulnerability : CVE-2026-93276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount ...

Linux Distros Unpatched Vulnerability : CVE-2026-97424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put...

CVE-2026-93231: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

ROS-20260924-73-0044

The vulnerability of the m920xi2cxfer function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260924-73-0043

The vulnerability of the svcdefer function in the net/sunrpc/svcxprt.c module of the Linux operating system’s RPC protocol implementation is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2026-88390

An out-of-bounds write vulnerability in jslGetTokenValueAsString in Espruino 2v29 commit bffc6d0 allows crafted JavaScript input containing an overlong token to trigger a one-byte write beyond the JsLex.token buffer in RELEASE/NOASSERT builds. The out-of-bounds write corrupts the adjacent...

PT-2026-98058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/ras component where cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini. This mismatch requires the release site t...

ROS-20260924-73-0064

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

CLSA-2026-1790173926 TuxCare security update for org.springframework (22 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 22 CVEs. Fixed in 5.2.25.RELEASE-tuxcare.1...

UBUNTU-CVE-2026-79677

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...