enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1223 CVEsRSS
CVE-2026-98791Medium· 4.4kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference (CVE-2026-98791)
A flaw was found in the Linux kernel's Mellanox network driver (mlx5e). A local user can exploit this vulnerability to cause a denial of service (DoS) through a system crash. During the teardown of an AF_XDP (eXpress Data Path) transmit qu…
CVE-2026-98793Medium· 4.4kernel: netfilter: bpf: reject invalid NAT manipulation types (CVE-2026-98793)
A flaw was found in the Linux kernel's netfilter subsystem. Missing validation of Network Address Translation (NAT) manipulation types in BPF connection tracking helpers allows a local user with permissions to run BPF programs to trigger a…
CVE-2026-98799Medium· 4.4kernel: bpf: Skip detached progs in trampoline images that are still in use (CVE-2026-98799)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. When a BPF program attached to a trampoline is detached while another task is paused in an active routine, the kernel can prematurely release the detached progr…
CVE-2026-98798Medium· 4.4kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open (CVE-2026-98798)
A flaw was found in the Linux kernel's Broadcom GENET network driver. A privileged local user could trigger a Denial of Service (DoS) by configuring receive coalescing settings on a network interface that has not yet been opened. This flaw…
CVE-2026-98797Medium· 5.5kernel: net: cap skb->queue_mapping when the tx queue is picked (CVE-2026-98797)
A flaw was found in the Linux kernel. A local user with network administration privileges in a network namespace can cause a Denial of Service (DoS) by triggering an out-of-bounds memory read. When redirecting packets between network inter…
CVE-2026-98802Low· 3.7kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA (CVE-2026-98802)
A flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer i…
CVE-2026-98800Medium· 4.7kernel: kernel: Denial of Service via use-after-free in BPF trampoline (CVE-2026-98800)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. When a BPF program attached to a trampoline is detached, the kernel may release the program's memory prematurely before preempted tasks have safely completed ex…
CVE-2026-98804Medium· 4.7kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() (CVE-2026-98804)
A flaw was found in the Linux kernel's networking subsystem. When page pool statistics are enabled, a race condition in the bulk recycling mechanism can allow a memory pool to be freed before statistical updates finish processing. An attac…
CVE-2026-98801Medium· 5.5kernel: kernel: Denial of Service via improper socket memory reservation handling (CVE-2026-98801)
A flaw was found in the Linux kernel. A local user can cause a Denial of Service (DoS) or kernel memory corruption by manipulating socket memory reservation settings. Due to a lack of upper-bound validation and missing locking mechanisms w…
CVE-2026-98807Medium· 4.4kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events (CVE-2026-98807)
A flaw was found in the Linux kernel's Mellanox ConnectX (mlx5) network driver. It allows a privileged local user to cause a Denial of Service (DoS) via an out-of-bounds memory read. When processing Link Aggregation (LAG) events, the drive…
CVE-2026-98806Medium· 4.4kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled (CVE-2026-98806)
A flaw was found in the Linux kernel's octeontx2-pf network driver. When Data Center Bridging (DCB) is enabled, the driver assumes traffic queue mapping structures are always initialized, which is not the case for System Data Path (SDP) vi…
CVE-2026-98805High· 7.4kernel: tipc: prevent GCM nonce reuse on peer key changes (CVE-2026-98805)
A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs…
CVE-2026-98810Medium· 6.1kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() (CVE-2026-98810)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory by transmitting specially crafted network packets. This issue occurs because …
CVE-2026-98811Low· 3.3kernel: net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)
A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during …
CVE-2026-98809Medium· 4.4kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (CVE-2026-98809)
A flaw was found in the Linux kernel's Bluetooth subsystem. When unregistering a Bluetooth device, pending synchronous commands are processed without reaching the controller, causing each queued request to wait for a full timeout. A local …
CVE-2026-98814Medium· 4.4kernel: nvme: fix command effects log lifetime for multipath heads (CVE-2026-98814)
A flaw was found in the Linux kernel's Non-Volatile Memory Express (NVMe) driver. A local attacker can cause a denial of service (DoS) or potentially escalate privileges by exploiting a use-after-free flaw. This issue occurs when an input/…
CVE-2026-98818Medium· 4.7kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() (CVE-2026-98818)
A flaw was found in the Linux kernel. When freeing memory through the slab allocator, the system may attempt to wake the kernel swap daemon while an internal scheduler lock is already held. This unsafe sequence can trigger a circular locki…
CVE-2026-98816Medium· 4.1kernel: bpf: Fix overflow of jump offset in constant blinding (CVE-2026-98816)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. An integer overflow occurs in the constant blinding mechanism when calculating backward jump offsets during BPF program hardening. A local attacker capable of l…
CVE-2026-98820Medium· 5.5kernel: blk-mq: set RQF_USE_SCHED when the operation is known (CVE-2026-98820)
A flaw was found in the Linux kernel's block multi-queue (blk-mq) subsystem. When cached input/output (I/O) requests originally allocated for passthrough commands are reused for standard read or write operations, scheduler flags are not pr…
CVE-2026-98822Medium· 4.3kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces (CVE-2026-98822)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point (AP) virtual local area networks (VLANs). Due to improp…
CVE-2026-98821Medium· 4.7kernel: block: reject polled dio with user integrity metadata (CVE-2026-98821)
A flaw was found in the Linux kernel's block layer. A local user could exploit this vulnerability to cause a denial of service (DoS) by initiating polled direct I/O operations combined with user integrity metadata. Because the kernel impro…
CVE-2026-98819Medium· 4.4kernel: Bluetooth: btintel: validate DDC record lengths (CVE-2026-98819)
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration (DDC) records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundarie…
CVE-2026-98824Medium· 5.3kernel: wifi: mac80211: validate TX status rate metadata (CVE-2026-98824)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission (TX) status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata …
CVE-2026-98823Medium· 5.3kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership (CVE-2026-98823)
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service (DoS) by crashing the system. During a channel switch, the kernel improperly mana…
CVE-2026-98828Medium· 6.2kernel: wifi: ath9k: reject short WMI command responses (CVE-2026-98828)
A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface (WMI) command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. …
CVE-2026-98827Medium· 5.3kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (CVE-2026-98827)
A flaw was found in the Linux kernel's ath9k_htc wireless network driver. An attacker transmitting large network packets can trigger a Denial of Service (DoS) or system crash through memory corruption. This issue occurs because the driver …
CVE-2026-98826Medium· 4.7kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver (CVE-2026-98826)
A flaw was found in the Linux kernel's AC100 Real-Time Clock (RTC) driver. If device initialization fails during driver probing, unmanaged clock provider references remain registered in global system lists while their underlying memory is …
CVE-2026-98831Low· 2.3kernel: of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service (DoS) through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fa…
CVE-2026-98829Medium· 6.5kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow (CVE-2026-98829)
A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service (DoS) by transmitting a sequence of over…
CVE-2026-98833Medium· 5.5kernel: mtd: core: call _get_device() with the master MTD (CVE-2026-98833)
A flaw was found in the Linux kernel's Memory Technology Device (MTD) subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A …