PT-2026-116683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the RISC-V KVM implementation during vCPU teardown. The non-Sstc hrtimer callback clears the next set variable before its final uses of the enclosing vCPU. If...

Linux Distros Unpatched Vulnerability : CVE-2026-98704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating...

PT-2026-116769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Transparent Inter-Process Communication TIPC protocol where the kernel fails to properly validate GRP ACK MSG messages. This can lead to an underflow of the bc...

PT-2026-116642

libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools...

PT-2026-116842

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkm clk ustate update If list for each entry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is...

PT-2026-117027

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcm sysport get stats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcm sysport get stats. The variable 'j' tracks the compacted index into the...

PT-2026-116840

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gue remcsum passes them to skb remcsum process, whose partial path stores offset - start in the u16 skb-csu...

PT-2026-116809

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf sock context code generation Currently, the ctx access code reads the rx queue mapping field with either a 4-byte or 2-byte load. The rest of the bits in the register are marked known zero by the verifier. However, t...

PT-2026-116803

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in em text dump em text dump allocates struct tcf em text on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...

PT-2026-116938

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Nullify have run cpus when freeing the mask, particularly in the error path of sev guest init, so that KVM doesn't have to subtly use sev-active to track whether or n...

PT-2026-116923

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits...

CVE-2026-98808: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcmsysportgetstats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcmsysportgetstats. The variable 'j' tracks the compacted index into the destinatio...

CVE-2026-98704: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits...

PT-2026-116870

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in dat cond set storage key Some callers pass NULL as oldkey. Calling page cond set storage key will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the...

CVE-2026-98466: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fixhostownership walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none. Wa...

Linux Distros Unpatched Vulnerability : CVE-2026-98466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fixhostownership walks only the linear-map alias of each memblock region, and the per-CPU hyp...

PT-2026-116724

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: avoid hw-driven pte updates during damon hugetlb mkold damon hugetlb mkold reads the page table entry into a local variable, unsets the accessed bit in the variable, and updates the page table entry with the updat...

PT-2026-116685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the fix host ownership function only processes the linear-map alias of each memblock region. Consequently, the per-CPU hyp stack, which i...

PT-2026-116662

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the xlog recover iunlink bucket function within the XFS file system of the Linux kernel. The flaw involves improper cursor and pointer handling during the recovery of...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22118-1 Rating: important References: bsc1285401 Cross-References: CVE-2026-110136 CVE-2026-110137 CVE-2026-110138 CVE-2026-110139 CVE-2026-110140...