Linux Distros Unpatched Vulnerability : CVE-2026-64424

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly detected by KASAN. BUG: KASAN: slab-use-after-free ...

Linux Distros Unpatched Vulnerability : CVE-2026-64417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both count and scan debugfs files unconditionally. That assumes every shrinker...

Linux Distros Unpatched Vulnerability : CVE-2026-64391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS...

Linux Distros Unpatched Vulnerability : CVE-2026-64359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject CLEANSEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfstransactionbegin where multiple tasks performing chmod ...

Linux Distros Unpatched Vulnerability : CVE-2026-64252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other...

Linux Distros Unpatched Vulnerability : CVE-2026-64436

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the...

Linux Distros Unpatched Vulnerability : CVE-2026-64448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has a long-standing quirk that accepts a response whose calculated...

Linux Distros Unpatched Vulnerability : CVE-2026-64210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes and there's still XSK work to be done, we trigger an ICOSQ interrupt o...

Linux Distros Unpatched Vulnerability : CVE-2026-64423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroyed under RTNL, ipmcdestroydev iterates through the multicast li...

Linux Distros Unpatched Vulnerability : CVE-2026-64431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore...

Linux Distros Unpatched Vulnerability : CVE-2026-64421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in mediaentityremovelink during rmmod of imx8isi: BUG: KASAN:...

Linux Distros Unpatched Vulnerability : CVE-2026-64433

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not...

Linux Distros Unpatched Vulnerability : CVE-2026-64469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its transaction stack to clear the t-from and t-toproc that correspond wit...

openSUSE 16 Security Update : apache-ivy (openSUSE-SU-2026:21424-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21424-1 advisory. This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting...

PT-2026-64636

In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond resched in swap reclaim full clusters to prevent softlockup We hit a real softlockup in an internal stress test environment. The workload was LTP memory/swap stress on a large arm64 machine, with 320 CPUs, about...

PT-2026-64480

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse req on SQE commit only findable after memcpy Bad userspace might try to trick us and send commit SQEs request unique / commit-id of requests that are not even send to fuse-server io uring cmd done not call...

PT-2026-64592

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace may access with exec update lock part 1 Fix the easy cases where procfs currently calls ptrace may access without exec update lock protection, where the fix is to simply add the extra lock or use mm access: -...

PT-2026-64486

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr entry in fuse resend and fuse remove pending req When fuse resend moves a request from fpq-processing back to fiq-pending, it sets FR PENDING and clears FR SENT but does not remove the requests intr entry from...

PT-2026-64689

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder free transaction In binder free transaction, the t-to proc is read under the t-lock. However, once the t-lock is dropped, the to proc can die in parallel. This leads to a use-after-free error when we...

Linux Distros Unpatched Vulnerability : CVE-2026-64453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: misc: usbio: fix disconnect UAF in client teardown usbiodisconnect walks usbio-clilist in reverse and uninitializes each auxiliary device...