PT-2026-72907

In the Linux kernel, the following vulnerability has been resolved: can: peak usb: validate uCAN receive record lengths pcan usb fd decode buf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

RockyLinux 8 : bind (RLSA-2026:54654)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54654 advisory. bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 bind: bind9: Potential memory usage beyond configured limits...

PT-2026-72786

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2 validate inode block already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the filesystem. Fast symlinks need the same...

PT-2026-72723

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctp verify asconf and sctp verify param only validate ADD IP, DEL IP, and SET PRIMARY parameters against a fixed minimum size of sizeofstruct sctp addip param + sizeofstruct sctp...

PT-2026-72603

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge put enum double ge put enum double passes the user-supplied enumeration index item0 to snd soc enum item to val without checking it against the number of items in the enum: ret = snd...

PT-2026-72538

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt u32: reject invalid shift counts u32 match it executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...

PT-2026-72539

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdr flags len, but guehdr priv flags len currently...

PT-2026-72605

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph-ihl in nf flow ip4 tunnel proto Add sanity check for iph-ihl field in nf flow ip4 tunnel proto before using it to compute the header size, avoiding out-of-bounds access with malformed IP headers...

PT-2026-72728

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210 ahub: Validate written enum value tegra ahub put value enum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an...

PT-2026-72903

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes iface fw to cpu addr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware...

PT-2026-72912

In the Linux kernel, the following vulnerability has been resolved: can: ems usb: validate CPC message lengths ems usb read bulk callback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover...

PT-2026-72254

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

PT-2026-72303

In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm rx setup for RTR replies bcm tx setup validates cf-len against the CAN/CAN FD DLC limits before installing frames for TX SETUP, but bcm rx setup never did the same for the RTR-reply frame...

PT-2026-72588

In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6 validate srh reads fixed SRH fields such as srh-type and srh-hdrlen before checking that the supplied length covers the fixed struct ipv6 sr hdr fields. The BPF SEG6 enca...

Linux Distros Unpatched Vulnerability : CVE-2026-74294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with sndsocenumitemtoval before...

SUSE CVE-2026-63300

An improper validation vulnerability in the instancePostMigration function in lxd/instancepost.go of LXD allows an authenticated attacker with cancreateinstances permissions on a restricted project to bypass project-level security restrictions. When migrating an instance between projects, LXD fai...

CVE-2026-74240

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

CVE-2026-74244

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the /webhooks/stripe endpoint without validating the Stripe-Signature header. Successful exploitation can lead to th...

CVE-2026-74244

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the /webhooks/stripe endpoint without validating the Stripe-Signature header. Successful exploitation can lead to th...