PT-2026-98025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the spi get device match data function when spi get device id returns NULL. This situation can arise when using driver override without a matching SP...

ROS-20260924-73-0002

The vulnerability of the peakusbupdatetsnow function in the drivers/net/can/usb/peakusb/pcanusbcore.c file of the Linux network device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260924-73-0006

The vulnerability of the mvsfree function in the drivers/scsi/mvsas/mvinit.c file of the Linux operating system’s SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97645

Name of the Vulnerable Software and Affected Versions SPON Communications IP Network Audio Device XC-9603 version 1.2.3 20181106 Build 107 Description A remote information disclosure issue exists within the Configuration File Download component. The flaw is located in the loadCfg function when...

ROS-20260924-73-0033

The vulnerability of the qedfallocglobalqueues function in the drivers/scsi/qedf/qedfmain.c file of the Linux operating system’s SCSI device driver kernel module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-98118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the coresight component during device registration and unregistration. ETM perf callbacks rely on the per-CPU csdev src pointer, which can lead to inconsistent...

ROS-20260924-73-0082

The vulnerability of the usbgmaketpg function in the drivers/usb/gadget/function/ftcm.c file of the Linux USB device driver module is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

PT-2026-98307

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

ROS-20260924-73-0060

The vulnerability of the v4l2fwnodeparselink function in the drivers/media/v4l2-core/v4l2-fwnode.c file of the Linux kernel’s multimedia device driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260924-73-0024

The vulnerability of the vtpmmoduleinit function in the drivers/char/tpm/tpmvtpmproxy.c driver for Linux’s alphanumeric device drivers is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20260924-73-0050

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-97872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IR...

CVE-2026-97432

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the following scenario, as observed by our testing: - a station interface is connected on some channel - the P2P-Device does a...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

How device code phishing gives scammers access to your account

You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts. The message claims the code will let you open the document or join the meeting. In fact, it approv...

CVE-2026-93136

A flaw was found in the Linux kernel's Mobile Host Interface MHI endpoint driver. An issue in the error handling path during MHI device creation can lead to a resource leak. Specifically, if certain device setup operations fail, not all allocated device references are properly released. This can...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

CVE-2026-96257

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

EUVD-2026-85014

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

CVE-2026-96257 Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...