PT-2026-98268

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

ROS-20260924-73-0048

The vulnerability of the logreplay function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-104886

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfs io -f -c "pwrite -b 3m -S 0x61 0 3m" -c "fpunch 1m 1m" -c "seek -h 0" -...

PT-2026-97725

Name of the Vulnerable Software and Affected Versions GPM LIGHT affected versions not specified Description Unauthenticated remote attackers can directly access system logs, leading to sensitive data exposure. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-97411

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

ROS-20260924-73-0025

The vulnerability of the sndcardymfpciprobe function in the sound/pci/ymfpci/ymfpci.c module of the Linux kernel’s audio subsystem is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-104936

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

CVE-2026-93814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

PT-2026-98097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the acrn virtual machine component. A race condition can occur between the acrn irqfd deassign function and the eventfd EPOLLHUP wakeup, leading to the...

PT-2026-97809

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

PT-2026-97721

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read issue exists in the graphics module. This occurs when the software reads data outside the intended boundary of a buffer, which may lead to ...

PT-2026-104881

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal remove napi disable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI STATE SCH...

ROS-20260924-73-0001

The vulnerability in Dracut is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-104926

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMIT MEMLOCK limit. However the folios are unevictable and remain so until the inode is...

PT-2026-98045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential system hang occurs during module removal in the IBM EMAC MAL driver. The mal remove function calls napi disable unconditionally. Because napi disable is not idempotent, calli...

Moby Container Isolation Uncontrolled Resource Consumption DoS

The vulnerability of the Moby container isolation system creation software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-97411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will...

Linux Distros Unpatched Vulnerability : CVE-2026-93814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system...

CVE-2026-93243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

Linux Distros Unpatched Vulnerability : CVE-2026-97498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evict...