Linux Distros Unpatched Vulnerability : CVE-2026-98827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath9khtc: bound TX aggregation to MAXTXBUFSIZE hifusbtx dequeues up to MAXTXAGGRNUM 20 frames into a single txbuf of MAXTXBUFSIZE 32768 bytes, limiting th...

PT-2026-116634

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model name. Attackers can register a persisted custom model through POST /v1/model registrations/model type with...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.4:CLSA-2026:1784277735)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784277735 advisory. - In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK...

CVE-2026-98615: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AWFLUSHMODE alongside AWFLUSH when flushing the mailbox When tearing down the FW mailbox Rx ring, fbnicmbxresetdescring writes AWCFG with FLUSH set and everything else, BME included, cleared. Clearing BME halts th...

PT-2026-116789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 implementation where the dst dev overhead function does not allocate sufficient headroom for the MAC header. When using seg6, ioam6, and rpl lwtunnels, the...

PT-2026-117046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath9k htc wifi driver where the hif usb tx function fails to limit the cumulative byte length of aggregated frames. The function dequeues up to 20 frames into a...

VulnCheck KEV: CVE-2026-33309

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 External Control of File Name, leading to the root architectural issue within LocalStorageService remaining unresolved. Because the underlying...

PT-2026-116892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pac1934 ADC driver within the Industrial I/O IIO subsystem. A failure in checking for ACPI label duplication allows the process to reach a terminating-byte write,...

PT-2026-116974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vcc send ctl function where a stack-allocated struct vio vcc packet is partially initialized. This leaves the tag.stype env field uninitialized before it is...

PT-2026-128409

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k htc: bound TX aggregation to MAX TX BUF SIZE hif usb tx dequeues up to MAX TX AGGR NUM 20 frames into a single tx buf of MAX TX BUF SIZE 32768 bytes, limiting the batch by record count but never by cumulative byte...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1791971338)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1791971338 advisory. - rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destinatio...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.31 contains a security vulnerability. This vulnerability stems from the genericsetcmd and genericgetcmd functions in the usbgadget fuac1legacy module, which do not validate the bRequest index. They use the low half byte of ctrl-bRequest as the index for con-data, wher...

CVE-2026-98844: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

CVE-2026-98635: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zonescond out-of-bounds write on zone report blkrevalidatediskzones sizes the zonescond array from the disk capacity and zone size, but the index used by blkrevalidatezonecond comes from the device-driven...

CVE-2026-98673: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...

CVE-2026-98545: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: bound the ATA passthru sense descriptor writes When an ATA PASS-THROUGH command to an ATAPI device fails, the sense buffer holds the device's REQUEST SENSE reply, and atascsisetpassthrusensefields trusts its...

CVE-2026-112060: Out-of-bounds Write

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

CVE-2026-98588: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject maxentries INTMAX in sockmapalloc sockmapalloc only rejects maxentries == 0 and otherwise allows any u32 value. sockmapfree then walks the sks array with a signed int iterator: int i; for i = 0; i...

CVE-2026-98567: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class Only the entries below dev-numtc are valid in dev-tctotxq, and dev-priotcmap may only name classes below it. netdevsetnumtc lowers dev-numtc without touching either array...

PT-2026-128424

In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class Only the entries below dev-num tc are valid in dev-tc to txq, and dev-prio tc map may only name classes below it. netdev set num tc lowers dev-num tc without touching either array...