CVE-2026-98491

A vulnerability in the Linux kernel (net: openvswitch: conntrack) allows for a Use-After-Free (UAF) condition. The issue occurs when a socket buffer (skb) with an unconfirmed conntrack (ct) entry is cloned. If both clones attempt to commit while possessing different sets of extensions, the second...

CVE-2026-98491 net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

CVE-2026-98441 net/sched: act_ct: avoid modifying shared unconfirmed ct entry

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

EUVD-2026-103681

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

opace6-cve-2026-64560

OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...

CVE-2026-98507: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anonvma init and vma-anonvma publish On arm64 server, we find that a task trying to grab the anonvma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds. Tainted:...

PT-2026-116710

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

PT-2026-116660

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

PT-2026-116778

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr port err smcr port err traverses smc lgr list.list without holding smc lgr list.lock, allowing a concurrent smc lgr terminate sched to free an lgr while it is still being dereference...

PT-2026-116861

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc bulk Syzkaller repeatedly triggered UAF splats related to nodes in waiting for gp ttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in llist del...

CVE-2026-98441: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

PT-2026-116995

In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder add device binderfs binder device create publishes the new dentry with d make persistent and then calls simple done creating, which drops the parent directory lock and the creator's dentry...

PT-2026-116726

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon vma init and vma-anon vma publish On arm64 server, we find that a task trying to grab the anon vma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1738663576)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1738663576 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic...

Linux Distros Unpatched Vulnerability : CVE-2026-98507

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/rmap: fix missing barrier between anonvma init and vma-anonvma publish On arm64 server, we find that a task trying to grab the anonvma lock triggers hungtas...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131761 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500395)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500395 advisory. - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157515 CVE-2026-98260 - eventpoll: fix epremove struct eventpoll / struct file UAF...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed a potential UAF Uninitialized Address Fault in bpfnetnslinkupdateprog In bpfnetnslinkupdateprog, the checks for oldprog and the type of prog are currently performed without locking before acquiring the netnsbpfmutex...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fixed a UAF Uninitialized Address Fault in the pending keyuptimer routine in remove. The appleirremove function runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Avoid a UAF situation during the teardown of a network namespace when authenable is set to true. The procsctpdoauth function updates the SCTP control socket after changing net.sctp.authenable. This function retrieves the...