Linux Distros Unpatched Vulnerability : CVE-2026-98725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: fix out-of-bounds write in nvmetauthchallenge nvmetauthchallenge receives its output buffer as a void pointer. sizeofd therefore evaluates to one wi...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1722977984)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1722977984 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure on...

Linux Distros Unpatched Vulnerability : CVE-2026-98819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory...

PT-2026-116643

librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3 Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA...

CVE-2026-98621: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gueremcsum passes them to skbremcsumprocess, whose partial path stores offset - start in the u16...

PT-2026-117063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the system fails to erase the contents of a hole created after the End of File EOF during an ordinary write if dirty data was previously left...

PT-2026-116995

In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder add device binderfs binder device create publishes the new dentry with d make persistent and then calls simple done creating, which drops the parent directory lock and the creator's dentry...

Linux Distros Unpatched Vulnerability : CVE-2026-98493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the...

Linux Distros Unpatched Vulnerability : CVE-2026-98456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix race in readunconfindexlist readunconfindexlist counts unconfigured controllers before allocating its response, then checks the device flag...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1686585068)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1686585068 advisory. - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require tha...

CVE-2026-112007: Out-of-bounds Write

Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...

CVE-2026-112005: Improper Limitation of a Pathname to a Restricted Directory

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use readtext, readblob, COPY ... ...

Security update for mutt (important)

openSUSE security update: security update for mutt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22099-1 Rating: important References: bsc1284739 Cross-References: CVE-2026-107570 CVSS scores: CVE-2026-107570 SUSE : 7.5...

Security update for pgvector (important)

openSUSE security update: security update for pgvector ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22065-1 Rating: important References: bsc1284129 Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8...

CVE-2026-98827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: bound TX aggregation to MAXTXBUFSIZE hifusbtx dequeues up to MAXTXAGGRNUM 20 frames into a single txbuf of MAXTXBUFSIZE 32768 bytes, limiting the batch by record count but never by cumulative byte length. With lar...

CVE-2026-112018: Out-of-bounds Write

cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltfaccessorunpackfloats that allows attackers to write outside the output buffer via unchecked sparse accessor indices. Attackers can supply a crafted glTF or GLB file with large sparse indices to corrupt heap memory, crash...

PT-2026-116675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the read unconf index list function. The function counts unconfigured controllers to allocate a response and subsequently verifies device flags during the...

Exploit for CVE-2026-53995

CVE-2026-53995: MLflow starttracev3 - TraceInfo.from...

yova_ps5

YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...

CVE-2026-111918

Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that allows authenticated users with zero accessible projects to write taskpositions rows for all tasks instance-wide. Attackers can delete their Inbox after repointing defaultprojecti...