Linux Distros Unpatched Vulnerability : CVE-2026-98406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: avoid WARN in setbitratemask when sdata not in driver ieee80211setbitratemask checks if the interface is running via ieee80211sdatarunning, but ...

PT-2026-114385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wireless subsystem where the ieee80211 set bitrate mask function fails to verify if the interface is present in the driver by checking the IEEE80211 SDATA...

PT-2026-106657

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wifi module where the HE 6 GHz Band Capability element is included in the probe request for every band when 6 GHz is supported. Failure to include the size o...

PT-2026-106607

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A routing loop can be configured by a user with CAP NET ADMIN privileges. When ipip fill forward path or ip6 tnl fill forward path look up the route to a tunnel's remote endpoint and the...

PT-2026-115711

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel that already has a BSS entry, cfg80211 update assoc bss entry removes that entry before rehashing the real one, since the...

PT-2026-106669

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the cfg80211 module where the cfg80211 bss update function incorrectly groups a probe response for an unknown Basic Service Set BSS with an existing entry that lacks beac...

PT-2026-106668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 module where the system filters by BSS type when removing stale entries. When an associated Access Point AP switches to a channel that already contains a...

PT-2026-115822

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scan ies len. Otherwise, building probe request...

PT-2026-115737

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211 bss update looks for an existing entry with the same BSSID and a hidden zero-length or NUL-filled SSID, and i...

SUSE CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

DEBIAN-CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

UBUNTU-CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

UBUNTU-CVE-2026-97984

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IP6MAXMTU for UDP sockets to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockop...

CVE-2026-98061 bpf: Reject tail calls directly from callback frames

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

CVE-2026-98061

The Linux kernel contains a vulnerability in the BPF verifier where tail calls made directly from synchronous callback frames trigger a verifier bug. The root cause is that prepare_func_exit() marks register R0 as precise for callbacks, but the tail-call path synthesizes R0 instead of deriving it...

PT-2026-98648

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.21 Description An issue exists in the IPv6 implementation where a UDP length overflow can occur when using Path MTU PMTU discovery with an unusually large Maximum Transmission Unit MTU. When the setsockopt IP...

Linux Distros Unpatched Vulnerability : CVE-2026-98061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is...

CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

CVE-2026-97984: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IP6MAXMTU for UDP sockets to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockop...

PT-2026-98614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the configfs component where the create link function reads the target's configfs dirent from item-ci dentry-d fsdata. This process relies on an item reference taken b...