enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1222 CVEsRSS
CVE-2026-98832Medium· 4.7kernel: blk-cgroup: save IRQ state in blkg_tryget_closest() (CVE-2026-98832)
A flaw was found in the Linux kernel's block control group (blk-cgroup) subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can …
CVE-2026-98837Medium· 5.5kernel: ALSA: caiaq: unregister the input device when probe fails (CVE-2026-98837)
A flaw was found in the Linux kernel's ALSA caiaq USB audio driver. This flaw allows a local attacker to cause a Denial of Service (DoS) or potentially escalate privileges. When device initialization fails during the probing process, the d…
CVE-2026-98834Medium· 4.1kernel: mtd: core: avoid double-free of OTP NVMEM device (CVE-2026-98834)
A flaw was found in the Linux kernel's Memory Technology Device (MTD) subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service (DoS) via a kernel crash. During the setup of One-Time Programmab…
CVE-2026-98838Medium· 4.4kernel: vt: skip screen update for DEC alignment test on backgroup consoles (CVE-2026-98838)
A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A loca…
CVE-2026-98836Medium· 6.2kernel: ALSA: line6: reject oversized playback packets (CVE-2026-98836)
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) Line 6 USB audio driver. The driver fails to validate the size of playback packets against the allocated memory buffer slice when handling asymmetrical audio c…
CVE-2026-98842Medium· 4.4kernel: module: fix lost error code from codetag_load_module() (CVE-2026-98842)
A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cl…
CVE-2026-98839Medium· 6.1kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() (CVE-2026-98839)
A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation…
CVE-2026-98845Medium· 4.5kernel: tpm: Disable TPM on null key name mismatch (CVE-2026-98845)
A flaw was found in the Linux kernel's Trusted Platform Module (TPM) subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Con…
CVE-2026-98843Medium· 4.4kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale data (CVE-2026-98843)
A flaw was found in the Linux kernel's Network Filesystem (netfs) subsystem. When reading data gaps around modified memory regions during streaming write operations, truncated or incomplete read responses from a remote server fail to clear…
CVE-2026-98841Medium· 4.1kernel: virt: vmgenid: set driver_data before registering notification handlers (CVE-2026-98841)
A flaw was found in the Linux kernel's Virtual Machine Generation ID (vmgenid) driver. The driver registers interrupt and notification handlers before fully initializing driver data during startup. If an interrupt or notification is receiv…
CVE-2026-98846Medium· 5.5kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait (CVE-2026-98846)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) subsystem. A race condition can occur when an SCTP socket is shut down concurrently while waiting for a connection, causing an association structure to be f…
CVE-2026-98844Low· 3.3kernel: netfs: clear post-EOF pagecache when extending a file via write (CVE-2026-98844)
A flaw was found in the Linux kernel's network filesystem (netfs) subsystem. When a file is extended through write operations after previous writes were performed via memory mapping, the system fails to clear stale cache data located beyon…
CVE-2026-98850Medium· 5.5kernel: net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)
A flaw was found in the Linux kernel's packet socket implementation. An integer overflow occurs in the transmission ring buffer when calculating the total byte count of transmitted frames during a send operation. A local user with raw netw…
CVE-2026-98852Medium· 5.9kernel: net: extend IPv6 exthdr detection of tunneled packets (CVE-2026-98852)
A flaw was found in the Linux kernel's networking subsystem. An attacker could exploit this vulnerability by sending specially crafted encapsulated IPv6 network traffic, leading to a Denial of Service (DoS). This issue stems from improper …
CVE-2026-98851Low· 3.3kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)
A flaw was found in the Linux kernel's netfilter subsystem. In the flow offload component, an error handling failure during rule initialization fails to release an incremented flow table reference count. A local user with network administr…
CVE-2026-98856Medium· 4.4kernel: kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)
A flaw was found in the Linux kernel's kernel probes (kprobes) tracing subsystem. When arming an optimized probe near an inactive probe, the overlap detection check fails to identify an active jump instruction. A privileged local user can …
CVE-2026-98855Medium· 4.4kernel: of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a s…
CVE-2026-98853High· 7.5kernel: net: gso: limit recursive IP-in-IP segmentation (CVE-2026-98853)
A flaw was found in the Linux kernel's Generic Segmentation Offload (GSO) implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote at…
CVE-2026-98858Medium· 5.5kernel: io_uring: fix task_work add use-after-free with SQPOLL (CVE-2026-98858)
A flaw was found in the Linux kernel's io_uring subsystem. When submission queue polling (SQPOLL) is enabled, a race condition can cause the polling thread to free the ring context while another operation is still accessing it. A local use…
CVE-2026-98857High· 7.5kernel: ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) module. The load-balancing cache fails to enforce strict bounds on table growth when entries remain continuously active. A remote attacker can exploit this vulnerability by tr…
CVE-2026-98854Medium· 4.1kernel: of/overlay: only treat a positive changeset id as registered (CVE-2026-98854)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could t…
CVE-2026-98861Medium· 4.7kernel: kernel: Denial of Service via fprobe use-after-free (CVE-2026-98861)
A flaw was found in the Linux kernel's function probe (fprobe) tracing mechanism. When handlers execute during inactive Read-Copy Update (RCU, a kernel synchronization mechanism) states, unregistration routines fail to wait for active hand…
CVE-2026-98860Low· 1.9kernel: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (CVE-2026-98860)
A flaw was found in the Linux kernel's Human Interface Device (HID) subsystem. This flaw can lead to information disclosure when hardware communication errors occur. Due to an improper integer comparison in the Berkeley Packet Filter (BPF)…
CVE-2026-98866Medium· 4.7kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF (CVE-2026-98866)
A flaw was found in the Linux kernel. A use-after-free vulnerability, where memory is accessed after being released, occurs in the process scheduler cache component during task memory switches. A local user could exploit this flaw to cause…
CVE-2026-98863Medium· 5.6kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem. When running nested virtual machines, the hypervisor fails to properly re-queue a memory page request if retrieving state pages for a nested guest fails d…
CVE-2026-98862Medium· 4.1kernel: audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)
A flaw was found in the Linux kernel's audit subsystem. A race condition can occur when an audit directory tree is removed while another process evaluates executable audit rules, causing the kernel to access memory after it has been releas…
CVE-2026-98433Low· 2.5kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure (CVE-2026-98433)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for PowerPC architectures. When handling secure virtual machines, a failure during secure memory paging fails to release allocated device memory and intern…
CVE-2026-98441Medium· 4.7⚖ disputedkernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry (CVE-2026-98441)
A flaw was found in the Linux kernel's traffic control conntrack action module (act_ct). An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service (DoS) or kernel memory corruption. Th…
CVE-2026-98442High· 7.5kernel: net/sched: act_ct: fix helper UAF due to extensions realloc (CVE-2026-98442)
A flaw was found in the Linux kernel's traffic control connection tracking action (act_ct). An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service (DoS) or kernel memory corruption throu…
CVE-2026-98440Medium· 5.6kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction (CVE-2026-98440)
A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while…