CVE-2026-74355: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...

CVE-2026-74505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtd: mchp23k256 driver where chip capacity information is stored in both the Open Firmware OF match table and the SPI id table. The probe process uses the of devic...

PT-2026-72459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the i740fb probe function. The memory allocated for modelist within the fb videomode to modelist function is not properly released during error paths...

PT-2026-72454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the vesafb probe function within the fbdev: vesafb component. The issue arises because the string returned by the fb get options function is not properly freed by...

PT-2026-73005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nct6775-core hardware monitoring hwmon component. The code incorrectly used the register array size of the NCT6106 for the NCT6116, which only possesses three...

PT-2026-72447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC mediatek mt8192 driver where the AFE probe calls of reserved mem device init. While the driver correctly falls back to preallocated buffers if no reserved...

PT-2026-72194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rt2x00lib probe dev function where the full rt2x00lib remove dev teardown process is triggered for all probe failures. This occurs even if drv data allocation or...

CVE-2026-72167: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe, the devmioremap is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x devi...

PT-2026-72612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the shared IRQ handler during the probe process of the msc313 RTC driver. The function msc313 rtc probe calls devm request irq using IRQF SHARED and...

Linux Distros Unpatched Vulnerability : CVE-2026-74505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it...

SUSE CVE-2026-68360

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

SUSE CVE-2026-68371

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...

SUSE CVE-2026-68373

In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3s, terraform-docs, opentelemetry-collector, vcluster, hubble-ui, minio, step-ca, cloudnative-pg, rqlite, zot, kubernetes-csi-external-provisioner, temporal, terraform-provider-google, spicedb, sops, falcosidekick, spire-server, sigstore-scaffolding, osv-scanner,...

Malicious code in @khaznatech/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6d321090b3f66b7766ca73a5cebf1a2d3ab2908d8d31f8423616c8094ec0a8 The package declares a preinstall script install-report.js that runs on npm install. It reads os.hostname and the current working directory basename...

SUSE CVE-2026-68207

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

SUSE CVE-2026-68210

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

SUSE CVE-2026-68215

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...