PT-2026-116825

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM object on virtio gpu vram create errors virtio gpu vram create frees the object with a bare kfreevram on both error paths after drm gem private object init has run, and on the second one after drm gem...

PT-2026-116739

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-container gap in kfd dev mapping kfd dev mapping caches the address space of the first /dev/kfd opener so that the GPU reset path can call unmap mapping range to zap all userspace mappings...

PT-2026-116851

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: Dequeue pending mesh send sync entries on cancel In send cancel, pending mesh tx objects are removed from the hdev-mesh pending list and freed via mesh send complete. However, if a mesh transmission was already...

PT-2026-116782

In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylink bringup phy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phy eee rx clock stop can fail with a real MDIO...

CVE-2026-98663: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

PT-2026-116967

In the Linux kernel, the following vulnerability has been resolved: serial: 8250 bcm7271: fix use-after-free in brcmuart remove brcmuart handle irq starts priv-hrt to work around a receive-timeout quirk of the 8250 core when hardware flow control is enabled; the timer callback brcmuart hrtimer fu...

CVE-2026-98748: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250bcm7271: fix use-after-free in brcmuartremove brcmuarthandleirq starts priv-hrt to work around a receive-timeout quirk of the 8250 core when hardware flow control is enabled; the timer callback brcmuarthrtimerfunc...

PT-2026-116953

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Serialize SCO and ISO scheduling with teardown hci low sent selects a connection under RCU but drops the read lock before calculating its quota and returning it to the scheduler. The connection is then used...

PT-2026-116682

In the Linux kernel, the following vulnerability has been resolved: sched ext: Derive SCX RQ IN WAKEUP from the core enqueue flags schedule deferred locked skips scheduling a deferred action while SCX RQ IN WAKEUP is set and relies on the task woken scx call that follows a wakeup enqueue to run i...

CVE-2026-98496: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: airoha: npu: cancel wdtwork after releasing the WDT IRQ airohanpuremove calls cancelworksync on each core's wdtwork, but the watchdog IRQ that queues it is requested with devmrequestirq and is freed only after .remove return...

CVE-2026-98846: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: check RCVSHUTDOWN after the sendmsg connect wait sctpwaitforconnect drops the socket lock while it sleeps. An out-of-the-blue ABORT can then be processed from the socket backlog and unlink the association. If a concurrent...

Linux Distros Unpatched Vulnerability : CVE-2026-98752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: port: fix ttyportttyvhangup race Drivers rely on ttyportttyvhangup to synchronously hang up their ports before tearing down resources as part of...

Linux Distros Unpatched Vulnerability : CVE-2026-98707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA session can leave the session timer queued on a freed tidrx. Later timer-wheel...

Linux Distros Unpatched Vulnerability : CVE-2026-98740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDAC/altera: Drop init from ECC setup paths for re-probe safety Sashiko reports: Does suppressing sysfs unbinding fully prevent the execution of freed init...

Linux Distros Unpatched Vulnerability : CVE-2026-98749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is...

Linux Distros Unpatched Vulnerability : CVE-2026-98737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix inquiry cache use-after-free The sync command worker holds hdev-reqlock, but inquiry-cache updates and flushes use hdev-lock. Both...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1738592614)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1738592614 advisory. - In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In...

Linux Distros Unpatched Vulnerability : CVE-2026-98694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free duri...

Linux Distros Unpatched Vulnerability : CVE-2026-98773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: cdc-acm: skip URB restart in portshutdown if disconnected acmportshutdown is called from the tty-port machinery whenever the last user closes the port...

Linux Distros Unpatched Vulnerability : CVE-2026-98757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: fix use-after-free in cdns3gadgetexit cdns3gadgetstart arms two works on systemfreezablewq: pendingstatuswq for the deferred ep0 status stage and...