PT-2026-116922

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wifi mac80211 minstrel ht component where the fixed rate idx debugfs file accepts any u32 value without validation. The minstrel ht update stats function copies th...

CVE-2026-98867: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cachekeydecode takes a key's logical off from the cache device and later indexes reqkeytree-subtrees by it in getsubtree. An off past the device forms a subtree point...

CVE-2026-98827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: bound TX aggregation to MAXTXBUFSIZE hifusbtx dequeues up to MAXTXAGGRNUM 20 frames into a single txbuf of MAXTXBUFSIZE 32768 bytes, limiting the batch by record count but never by cumulative byte length. With lar...

CVE-2026-98836: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized from the OUT endpoint, but the number of bytes written into that slice...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.9 contains a security vulnerability. This vulnerability arises from the ALSA line6 driver not verifying the size of playback data packets. As a result, the frame length originating from the IN endpoint is rescaled according to the playback frame size and then written in...

PT-2026-128435

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read unconf index list read unconf index list counts unconfigured controllers before allocating its response, then checks the device flags again while filling it. hci dev list lock stabilizes list...

PT-2026-116675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the read unconf index list function. The function counts unconfigured controllers to allocate a response and subsequently verifies device flags during the...

PT-2026-116643

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3 Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

CVE-2026-98621: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gueremcsum passes them to skbremcsumprocess, whose partial path stores offset - start in the u16...

PT-2026-117063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the system fails to erase the contents of a hole created after the End of File EOF during an ordinary write if dirty data was previously left...

PT-2026-117059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Linux kernel within the vcs write function. The problem occurs because the reload of the vc pointer is placed after an if ret block, allowing a...

PT-2026-116995

In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder add device binderfs binder device create publishes the new dentry with d make persistent and then calls simple done creating, which drops the parent directory lock and the creator's dentry...

Security update for mutt (important)

openSUSE security update: security update for mutt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22099-1 Rating: important References: bsc1284739 Cross-References: CVE-2026-107570 CVSS scores: CVE-2026-107570 SUSE : 7.5...

Security update for pgvector (important)

openSUSE security update: security update for pgvector ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22065-1 Rating: important References: bsc1284129 Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8...

Linux Distros Unpatched Vulnerability : CVE-2026-98819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1686585068)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1686585068 advisory. - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require tha...

Linux Distros Unpatched Vulnerability : CVE-2026-98493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...

Linux Distros Unpatched Vulnerability : CVE-2026-98456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix race in readunconfindexlist readunconfindexlist counts unconfigured controllers before allocating its response, then checks the device flag...

Linux Distros Unpatched Vulnerability : CVE-2026-98836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6ISOPACKETS maxpacketsizeout bytes, sized...

Linux Distros Unpatched Vulnerability : CVE-2026-98725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: fix out-of-bounds write in nvmetauthchallenge nvmetauthchallenge receives its output buffer as a void pointer. sizeofd therefore evaluates to one wi...