PT-2026-64628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the nxp recv fw req v3 function during v3 firmware downloads. The issue occurs because the function only verifies the lower bound of the offset provided i...

PT-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the scmi regulator probe function. This happens because the function calls of find node by name, which increments the reference count of the returned...

PT-2026-64681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds issue exists in the sriov restore vf rebar state function. The function utilizes the VF Resizable BAR Control register to determine the number of VF BARs to...

PT-2026-64571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the cdnsp alloc stream info function. The function allocates stream info-stream ctx array using cdnsp alloc stream ctx. If a subsequent stream ring allocation or...

PT-2026-64538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link SL records. The functions get symlink chunk and parse rock ridge inode internal process...

PT-2026-64518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...

PT-2026-64682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI mediatek component where an IRQ domain leak occurs when a port fails to enable. Specifically, when the function mtk pcie enable port fails, the mtk pcie port...

PT-2026-64668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipu7 media staging component where double-free and use-after-free conditions occur during error handling. In the functions ipu7 isys init and ipu7 psys init, the...

PT-2026-64715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the gp2ap002 read raw function. The function invokes pm runtime get sync to manage power before reading the lux value; however, if the gp2ap0...

PT-2026-64591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pid refcount leak occurs in the do cpu nanosleep function. The posix cpu timer create function acquires a pid reference using get pid and stores it in timer.it.cpu.pid. If the followin...

PT-2026-64757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool component where the tsconfig prepare data function calls ethnl ops begin but fails to call ethnl ops complete before returning an error. Recommendations At...

Linux Distros Unpatched Vulnerability : CVE-2026-55991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and...

Linux Distros Unpatched Vulnerability : CVE-2026-55973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream...

Linux Distros Unpatched Vulnerability : CVE-2026-11331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error conditio...

Linux Distros Unpatched Vulnerability : CVE-2026-64447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit...

Linux Distros Unpatched Vulnerability : CVE-2026-64486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value befo...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the defaultContentParameterDecoder function. An attacker can cause the application to crash or abort request processing by sending a crafted HTTP request that targets an OpenAPI operation with a content...

GO-2026-5463 Bettercap has an integer coercion error in modules/mysql_server/mysql_server.go in github.com/bettercap/bettercap

Bettercap has an integer coercion error in modules/mysqlserver/mysqlserver.go in github.com/bettercap/bettercap...

GO-2026-5327 Mongo-go-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling in go.mongodb.org/mongo-driver

Mongo-go-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling in go.mongodb.org/mongo-driver...

CVE-2026-66034 libssh2 Heap Out-of-Bounds Read via publickey subsystem

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...