CVE-2026-98588: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject maxentries INTMAX in sockmapalloc sockmapalloc only rejects maxentries == 0 and otherwise allows any u32 value. sockmapfree then walks the sks array with a signed int iterator: int i; for i = 0; i...

Linux Distros Unpatched Vulnerability : CVE-2026-98568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom...

Linux Distros Unpatched Vulnerability : CVE-2026-98493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...

Linux Distros Unpatched Vulnerability : CVE-2026-98456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix race in readunconfindexlist readunconfindexlist counts unconfigured controllers before allocating its response, then checks the device flag...

CVE-2026-98615: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AWFLUSHMODE alongside AWFLUSH when flushing the mailbox When tearing down the FW mailbox Rx ring, fbnicmbxresetdescring writes AWCFG with FLUSH set and everything else, BME included, cleared. Clearing BME halts th...

Linux Distros Unpatched Vulnerability : CVE-2026-98827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath9khtc: bound TX aggregation to MAXTXBUFSIZE hifusbtx dequeues up to MAXTXAGGRNUM 20 frames into a single txbuf of MAXTXBUFSIZE 32768 bytes, limiting th...

Linux Distros Unpatched Vulnerability : CVE-2026-98703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: minstrelht: validate fixed rate index The fixedrateidx debugfs file is a plain u32 attribute, so any value can be written to it...

CVE-2026-98673: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...

CVE-2026-98567: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class Only the entries below dev-numtc are valid in dev-tctotxq, and dev-priotcmap may only name classes below it. netdevsetnumtc lowers dev-numtc without touching either array...

PT-2026-116840

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gue remcsum passes them to skb remcsum process, whose partial path stores offset - start in the u16 skb-csu...

PT-2026-116657

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mptcp module where the mptcp write data fin function fails to initialize certain values when sending a DATA FIN without data. Because a DATA FIN occupies one octet...

PT-2026-116634

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model name. Attackers can register a persisted custom model through POST /v1/model registrations/model type with...

PT-2026-116611

Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt ult load song in fmt/ult.c that fails to clamp the one-byte sample count to MAX SAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csf destroy to free...

PT-2026-116995

In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder add device binderfs binder device create publishes the new dentry with d make persistent and then calls simple done creating, which drops the parent directory lock and the creator's dentry...

PT-2026-116854

In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zones cond out-of-bounds write on zone report blk revalidate disk zones sizes the zones cond array from the disk capacity and zone size, but the index used by blk revalidate zone cond comes from the device-driven...

PT-2026-116892

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...

PT-2026-116609

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use read text, read blob, COPY...

CVE-2026-112016: Missing Authentication for Critical Function

Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into...

CVE-2026-98867: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cachekeydecode takes a key's logical off from the cache device and later indexes reqkeytree-subtrees by it in getsubtree. An off past the device forms a subtree point...

CVE-2026-98836: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...