enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1149 CVEsRSS
CVE-2026-98589Medium· 6.7kernel: bpf: Reject pkt arguments in mutating subprogs (CVE-2026-98589)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) verifier. When packet pointers are passed into subprograms that mutate packet data, the verifier incorrectly assumes the underlying memory remains valid across calls, fail…
CVE-2026-98592Medium· 4.7kernel: net: spacemit: clear TX descriptor on fragment mapping failure (CVE-2026-98592)
A flaw was found in the Linux kernel's SpacemiT Ethernet driver. During network packet transmission, a failure to map packet fragments causes the driver to release memory buffers without properly clearing the corresponding hardware descrip…
CVE-2026-98600Medium· 6.5kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (CVE-2026-98600)
A flaw was found in the Linux kernel's Bluetooth RFCOMM (Radio Frequency Communication) subsystem. This vulnerability allows an adjacent attacker within Bluetooth range to cause a Denial of Service (DoS) by transmitting a specially crafted…
CVE-2026-98594Low· 1.9kernel: tg3: clean up PHYLIB resources on probe failure (CVE-2026-98594)
A flaw was found in the Linux kernel's Broadcom Tigon3 (tg3) ethernet driver. When the driver encounters an error during device initialization, it fails to properly release and unregister associated networking hardware resources. A local u…
CVE-2026-98593Medium· 4.1kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy() (CVE-2026-98593)
A flaw was found in the Linux kernel's s390 debug subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) through a kernel crash. When static debug registration encounters an error, internal memory pointers are…
CVE-2026-98603Low· 2.5kernel: kernel: Denial of service via race condition in ovpn (CVE-2026-98603)
A flaw was found in the Linux kernel's OpenVPN (ovpn) module. A local user can cause a Denial of Service (DoS) or network disruption during concurrent network traffic when an outdated local source address is cleared. Because the address is…
CVE-2026-98595Low· 3.3kernel: udp: remove a disconnected socket from the 4-tuple hash table (CVE-2026-98595)
A flaw was found in the Linux kernel's UDP networking subsystem. When a connected User Datagram Protocol (UDP) socket bound to a specific address is disconnected, the kernel fails to remove the socket entry from its internal connection loo…
CVE-2026-98597Medium· 6.5kernel: net: usb: sr9700: include receive overhead in the length check (CVE-2026-98597)
A flaw was found in the Linux kernel's sr9700 USB Ethernet driver. When processing incoming packets, the driver fails to properly account for packet header overhead during buffer length validation. An attacker capable of sending crafted pa…
CVE-2026-98596Medium· 5.5kernel: ipv6: Fix dst leak for uncached routes (CVE-2026-98596)
A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition during network device unregistration can lead to improper reference counting of uncached routes. A local attacker could exploit this flaw to cause an intern…
CVE-2026-98598Medium· 4.7kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_info (CVE-2026-98598)
A flaw was found in the Linux kernel's IPv6 networking subsystem. A local attacker or network traffic triggering route exceptions while an IPv6 route is being removed can cause a circular reference leak. This failure to release resources p…
CVE-2026-98599Medium· 6.7kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi() (CVE-2026-98599)
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) verifier. A local attacker can exploit this flaw to cause kernel memory corruption and potentially achieve privilege escalation or a denial of service (system crash). This…
CVE-2026-98612Medium· 6.8kernel: net: usb: catc: bound the RX packet length in catc_rx_done() (CVE-2026-98612)
A flaw was found in the Linux kernel's CATC USB Ethernet driver. The driver fails to properly validate packet length boundaries when processing incoming multi-packet network transfers. An attacker could exploit this flaw by providing craft…
CVE-2026-98610Medium· 5.5kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget (CVE-2026-98610)
A flaw was found in the Linux kernel's Hierarchical Fair Service Curve (HFSC) network packet scheduler. A local user with network administration privileges, such as within a user namespace, can exploit this flaw to cause a Denial of Servic…
CVE-2026-98611Medium· 4.4kernel: bpf: Check params size before reading reserved fields (CVE-2026-98611)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. The bpf_crypto_ctx_create() function attempts to read reserved fields from a parameter structure prior to verifying that the supplied buffer is sufficiently lar…
CVE-2026-98614High· 7.5kernel: sctp: avoid livelock while updating retransmit path (CVE-2026-98614)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) subsystem. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by triggering an infinite loop during retransmission path selecti…
CVE-2026-98613Medium· 4.4kernel: bpf: Bound ownership depth through local kptrs and graph roots (CVE-2026-98613)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. A local user with permissions to load BPF programs can trigger a Denial of Service (DoS) by creating deeply nested or cyclical object references using local ker…
CVE-2026-98639Medium· 5.8kernel: kernel: Incorrect TLB flushing in RISC-V KVM via improper nested acceleration update order (CVE-2026-98639)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for the RISC-V architecture. During nested virtualization acceleration, control flags are written before the target page parameters are properly committed …
CVE-2026-98642Medium· 4.7kernel: kernel: Denial of Service via race condition in BPF memory allocator (CVE-2026-98642)
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) memory allocator. A race condition occurs when bulk memory allocation and memory cleanup run concurrently without adequate synchronization. A local attacker could exploit …
CVE-2026-98650Medium· 4.7kernel: kernel: Denial of Service via race condition in s390 KVM storage key handling (CVE-2026-98650)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for the s390 architecture. A race condition occurs when storage key management functions process large memory pages that are simultaneously split by anothe…
CVE-2026-68498High· 7.5com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON propert…
A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit …
CVE-2026-111581Low· 3.3A flaw was found in libblockdev
A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or …
CVE-2026-85985Medium· 5.4mariadb: MariaDB: Unauthorized file access via CONNECT engine functions (CVE-2026-85985)
A flaw was found in MariaDB. Certain file-access User-Defined Functions (UDFs) within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privi…
CVE-2026-85746High· 8.8mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections (CVE-2026-85746)
A flaw was found in MariaDB. An authenticated remote attacker with low privileges can cause memory corruption and potentially achieve arbitrary code execution by submitting specially crafted Geographic Information System (GIS) objects. Thi…
CVE-2026-86047High· 7.7mariadb: mariadb: SQL injection via improper identifier quoting (CVE-2026-86047)
A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing…
CVE-2026-92262High· 8.8PoCmariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. (CVE-2026-92262)
A flaw was found in MariaDB. An authenticated remote attacker can supply a crafted table name with the #mysql50# prefix, which bypasses normal filesystem encoding for table names. By accessing files under unencoded legacy names, the attack…
CVE-2026-46471Medium· 5.5PoCAn issue was discovered in GStreamer gst-plugins-good before 1.28.2
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memor…
CVE-2026-46472High· 7.5⚖ disputedAn issue was discovered in GStreamer gst-plugins-good before 1.28.2
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure.
CVE-2026-100229Medium· 6.5A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers)
A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write b…
CVE-2026-86476High· 8.4PoCA flaw was found in gst-plugins-base
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The met…
CVE-2026-109971Medium· 4.7PoCA flaw was found in the clevis PKCS#11 pin
A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem.