CVE-2026-80469 CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

PT-2026-90435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the zram module. The read block state function calculates the nr pages variable before acquiring the dev lock. If the device is reset and...

PT-2026-96445

In the Linux kernel, the following vulnerability has been resolved: mm/migrate device: clear stale mapping after freeing swapcache migrate device pages reads the folio mapping before calling folio free swap. When folio free swap succeeds, the folio is removed from the swap cache, but the saved...

Xen: x86 DMs May Cause Mem Leak by IRQ Binding (XSA-509)

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

PT-2026-90125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel within the MCTP Management Component Transport Protocol implementation. The mctp route lookup function accesses the rt-dev device withou...

PT-2026-90153

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A memory leak exists in the sar probe function. This occurs because memory allocated for device mode info within the parse package function, which is called by sar get data, is not properly...

PT-2026-90092

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-pcache component where geometry fields from on-disk cache info are not properly validated. The cache segs init function iterates based on the n segs value to...

PT-2026-90228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference leak occurs in the remoteproc scp component. The issue arises when attempting to look up driver data for the SCP device before the driver has been bound, as the...

PT-2026-90082

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak and use-after-free UAF issue exists in the i3c master device unregister path. The function i3c master unregister i3c devs clears the i3cdev-dev-desc before calling...

PT-2026-90471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the migrate device pages function where the folio mapping is read before calling folio free swap. If folio free swap succeeds, the folio is removed from the swap cache...

PT-2026-90226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/cxgb4 component. The c4iw remove function can free the ctx-dev object while registration work is still pending or running. This allows the c4iw...

PT-2026-90490

TRC analysis reveals attackers exploiting MikroTik RouterOS vulnerabilities to compromise network infrastructure and pivot across segments. Missing authentication flaws CVE-2024-67277 and command injection CVE-2024-86060 enable total device control. Runtime segmentation helps contain...

PT-2026-89809

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

PT-2026-90171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the PCI plda driver during the teardown of event IRQs. The function plda pcie irq domain deinit removes the pcie-event domain using irq domain remove, bu...

PT-2026-90165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the IOMMU subsystem when the device add function fails within the iommu mock device add function. The process begins with iommu fwspec init, which allocates both...

PT-2026-96506

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

CVE-2026-89758: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

CVE-2026-89512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

CVE-2026-17176: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized...

PT-2026-90339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID mcp2221 driver. The problem occurs because incoming HID reports can race with hardware teardown during device removal or probe failure. This is...