enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1223 CVEsRSS
CVE-2026-98739Medium· 4.4kernel: Bluetooth: RFCOMM: Fix initial port reference race (CVE-2026-98739)
A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. A local user could exploit this flaw to cause a Denial of Service (DoS) or potentially escalate privileges. A race condition between concurrent device installation and rele…
CVE-2026-98736Medium· 4.7kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (CVE-2026-98736)
A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs during enhanced Synchronous Connection-Oriented (SCO) link setup due to missing locking when accessing parent connection structures. A local user or adjace…
CVE-2026-98735Medium· 4.7kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (CVE-2026-98735)
A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when outgoing network packets are scheduled while the associated communication channel is concurrently closed and freed during connection teardown. A local…
CVE-2026-98741High· 7.8kernel: ALSA: ua101: reject mismatched capture/playback packet sizes (CVE-2026-98741)
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initiali…
CVE-2026-98747Medium· 4.4kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port() (CVE-2026-98747)
A flaw was found in the Linux kernel's serial core subsystem. This flaw allows a local user with administrative access to cause a Denial of Service (DoS) by crashing the system. The issue occurs during the unregistration of a serial port t…
CVE-2026-98745Medium· 5.5kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (CVE-2026-98745)
A flaw was found in the Linux kernel. A local user can exploit this vulnerability to cause a denial of service (DoS) through a kernel crash. On ARM64 systems that support the Scalable Matrix Extension (SME) but lack the Scalable Vector Ext…
CVE-2026-98744Medium· 5.5kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type (CVE-2026-98744)
A flaw was found in the Linux kernel's MAX98363 audio codec driver. A local user could trigger this vulnerability during audio stream configuration because internal stream parameters are left uninitialized in memory. This issue allows unin…
CVE-2026-98753Medium· 4.7kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)
A flaw was found in the Linux kernel's TTY subsystem. A local user can cause a Denial of Service (DoS) by triggering a race condition during terminal device activation and hangup operations. When device activation fails, the kernel fails t…
CVE-2026-98751Medium· 5.5kernel: tty: abort break signalling on hangup (CVE-2026-98751)
A flaw was found in the Linux kernel's terminal (tty) subsystem. A race condition can occur when a terminal hangup interrupts an active break signaling operation, causing the kernel to communicate with a device driver after the device has …
CVE-2026-98757Medium· 4.1kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit() (CVE-2026-98757)
A flaw was found in the Linux kernel's Cadence USB3 gadget driver. This vulnerability can lead to a Denial of Service (DoS) through a system crash or potentially allow privilege escalation. During device teardown, the driver releases memor…
CVE-2026-98752Medium· 4.7kernel: tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)
A flaw was found in the Linux kernel's TTY (terminal) subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) or potentially execute arbitrary code. A race condition during port disconnect and hangup routines a…
CVE-2026-98759Medium· 6.8kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() (CVE-2026-98759)
A flaw was found in the Linux kernel's USB Type-C TI Power Delivery (tipd) driver. The driver fails to initialize memory for descriptor structures when handling partner device connections. An attacker connecting a USB device can cause the …
CVE-2026-98756Medium· 4.1kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (CVE-2026-98756)
A flaw was found in the Linux kernel's Cadence USB3 driver. A local user could exploit this flaw to cause a Denial of Service (DoS) by crashing the system. During device discovery of a multi-function Cadence USBSS Peripheral Component Inte…
CVE-2026-98761Medium· 4.0kernel: usb: typec: tcpm: recover after failure to start the frs ams (CVE-2026-98761)
A flaw was found in the Linux kernel's USB Type-C Port Manager (TCPM). This issue may result in a denial of service (DoS) or unintended power delivery on the affected port. When a USB Type-C cable is disconnected while signaling a Fast Rol…
CVE-2026-98760Medium· 6.1kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (CVE-2026-98760)
A flaw was found in the Linux kernel's TPS6598x USB Type-C driver. When a partner device connects, the driver fails to properly initialize temporary memory structures allocated on the stack before registering the connection. An attacker co…
CVE-2026-98763Medium· 6.2kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)
A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service (DoS)…
CVE-2026-98767Medium· 5.1kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count (CVE-2026-98767)
A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leav…
CVE-2026-98772Medium· 4.7kernel: USB: serial: fix port tear down use-after-free (CVE-2026-98772)
A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service (DoS) due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion hand…
CVE-2026-98771Low· 3.3kernel: usb: storage: sierra_ms: reject short SWoC info transfers (CVE-2026-98771)
A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, le…
CVE-2026-98776Medium· 4.7kernel: kernel: Privilege escalation via binderfs use-after-free (CVE-2026-98776)
A flaw was found in the Linux kernel's Android Binder filesystem (binderfs). A local user can exploit a race condition during concurrent device creation and deletion to trigger a use-after-free (UAF) condition, which occurs when freed memo…
CVE-2026-98775Medium· 5.5kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure (CVE-2026-98775)
A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to ca…
CVE-2026-98773Medium· 4.7kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnected (CVE-2026-98773)
A flaw was found in the Linux kernel's CDC ACM (Communications Device Class Abstract Control Model) USB driver. A timing race condition during device disconnection and port closure can lead to a use-after-free vulnerability when communicat…
CVE-2026-98779Low· 1.9kernel: drm/amdgpu: fix ACP MFD device leak on init failure (CVE-2026-98779)
A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. During Audio CoProcessor (ACP) hardware initialization, child multi-function devices are not properly released if a power domain attachment fails or a hardware reset times out…
CVE-2026-98780Low· 1.9kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure (CVE-2026-98780)
A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs (system filesystem) interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpe…
CVE-2026-98785Medium· 4.7kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (CVE-2026-98785)
A flaw was found in the Linux kernel's AMD display driver. During power management suspend operations under low memory conditions, the driver fails to handle memory allocation failures and retains an invalid null state. When the system sub…
CVE-2026-98789Medium· 4.4kernel: bpf: Fix objects stuck in free_by_rcu_ttrace (CVE-2026-98789)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) memory allocator. When releasing memory, objects queued while a delayed cleanup cycle is already in progress can fail to be reclaimed. A local user can exploit this vulner…
CVE-2026-98786Medium· 4.7kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation (CVE-2026-98786)
A flaw was found in the Linux kernel's AMD GPU display driver. During DisplayPort Multi-Stream Transport (MST) display disconnection, a race condition can cause the driver to access display data structures without verifying that they remai…
CVE-2026-98790Medium· 4.7kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task() (CVE-2026-98790)
A flaw was found in the Linux kernel's performance monitoring subsystem. A race condition occurs during process execution when cleaning up performance events while a task event is still pending. A local user could exploit this flaw to trig…
CVE-2026-98794Medium· 6.5kernel: ipvs: filter some flags received in the backup server (CVE-2026-98794)
A flaw was found in the Linux kernel's IPVS (IP Virtual Server) subsystem. An attacker on the local network can send synchronization messages containing invalid connection flag combinations to an IPVS backup server. This lack of validation…
CVE-2026-98792Medium· 5.9kernel: netfilter: flowtable: generalize pending status bit (CVE-2026-98792)
A flaw was found in the Linux kernel's netfilter flowtable component. This flaw allows an attacker to cause a denial of service (DoS) by crashing the operating system. A race condition exists between the connection cleanup worker and hardw…