Linux Distros Unpatched Vulnerability : CVE-2026-98972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup/cpuset: Don't access cpusetcgrpsubsys.root in isinv2mode After seeing the patch 1 to guard isinv2mode with RCU, it makes me realize that isinv2mode may b...

Security Advisory 0200

Security Advisory 0200 . CSAF PDF Date: October 23, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 23, 2026 | Initial release 1.1 | October 26, 2026 | Added CloudVision Portal to platforms not affected and added CSAF file to advisory. Description Arista Networks is providing this securi...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792750763)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792750763 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxequeuecleanup On error handling...

PT-2026-121968

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the mnt notify add function fails to check if a mount is already present on the notify list before adding it. Under specific conditions involvin...

PT-2026-121959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the namespace handling where a pseudo dentry can become the root of a mount. The function d alloc pseudo provides dentries for pipes, sockets, and other files that are...

PT-2026-121976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where a stale pinned link entry can remain in the xe-pinned.late.external list. This occurs when a backup object bo is pinned both externally and ...

PT-2026-121991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth component during PA sync scan setup. The function hci le set ext scan param sync retrieves an address for PA LINK lookup via hci sent...

PT-2026-122087

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1792759740)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1792759740 advisory. - In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.9. It arises when binding mount/proc/self/fd/ allows pseudo-dentries to become the mount root. During mount traversal, before checking mountlock, the code reads the dseq and dflags of released dentry, potentially leading to use-after-free...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from fsveritygetinfo in fsverity calling rhashtablelookupfast under rcureadlock, without direct synchronization with fsverityremoveinfo. This can lead to use-after-free issues when handling multiple inodes concurrently...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because ovldomkdir uses %pd to print the input dentry after calling vfsmkdir. When CONFIGOVERLAYFSDEBUG is enabled, this may lead to reuse of freed dentries...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.12. This vulnerability arises because icedeallocdynamicport releases VSI before reading an index to clear dynamic ports, resulting in post-release reuse...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It stems from mntnotifyadd failing to verify whether a mount is already listed in notifylist; as a result, the same mount may be queued multiple times, leading to subsequent operations accessing memory that has already been...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the vb2videounregisterdevice function is not utilized when removing the video-i2c driver; as a result, the vb2 queue may fail to disconnect properly before...

PT-2026-121840

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free write occurs in the ksmbd module during connection teardown. The ksmbd sessions deregister function only removes channels from other sessions if the conn-binding flag is...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability arises because a lock is not held when calling dmtablegetmodenewmap via doresume; concurrent ioctl operations on the same device may swap tables after dmswaptable but befor...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.11. It arises because tipctopsrvstop closes subscriber connections while the send and receive work queues of the topology server are still active, potentially leading to use-after-free conditions, execution of queuework on already-destroye...

ALSA-2026:A013 Important: php:8.0 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading to use-after-free CVE-2026-109619 For more...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.19.299 through 4.20 and 5.1. It arises because smcgetname dereferences smc-clcsock without holding a clcsockreleaselock; this allows the link group to asynchronously release CLC sockets, potentially leading to use-after-free conditions or...