CVE-2026-80608: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

Linux Distros Unpatched Vulnerability : CVE-2026-80654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox...

CVE-2026-78037: Improper Neutralization of Special Elements used in an OS Command

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

PT-2026-83010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/dasd component where the fmt buffer size variable in the dasd eckd check device format function is declared as an int. When calculating the buffer size using...

PT-2026-82908

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the accel/amdxdna component when force iova mode is enabled. The amdxdna remove function frees xdna-domain, but if amdxdna gem obj free is called after t...

PT-2026-82954

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use after free issue exists in the Linux kernel within the xilinx soc component. The problem occurs during the device removal process when the mbox request channel byname function is...

CVE-2026-80723: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

PT-2026-82990

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcd alloc host to prevent NULL pointer dereference in the device teardown path if ufs rpmb probe fails...

CVE-2026-80690: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe fails...

PT-2026-83023

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs during boot when the fdt scan reserved mem function processes dynamically-placed /reserved-memory subnodes. The function saves these subnodes into a local...

WS-2026-0037

The Oxidized integration URL in LibreNMS is admin-configurable. LibreNMS fetches device info and version history from that URL and renders the returned JSON fields name, ip, model, author and commit message into HTML without escaping in includes/html/pages/device/showconfig.inc.php, so an...

PT-2026-82986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the migrate vma collect pmd function, the pte pfn and pte dirty functions may be called on non-present Page Table Entries PTE, such as device-private entries. Because these functions...

PT-2026-86721

In the Linux kernel, the following vulnerability has been resolved: mm: migrate device: fix pte pfn/pte dirty called on non-present PTE pte pfn and pte dirty have undefined behaviour when called on a non-present PTE. In migrate vma collect pmd, these functions may be invoked on non-present entrie...

The vulnerability of the Windows Device Association Service on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the library for working with USB devices using libusb, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the library for working with USB devices using libusb is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-82953

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hisi sas SCSI driver where a WARNING is triggered when a link reset of a remote PHY and the removal of the SAS driver rmmod occur simultaneously. This happens...

CVE-2026-77977 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-77977

Ebyte NE2-D11 is an industrial gateway whose vendor configuration utility lacks authentication before permitting disruptive administrative actions (reboot or factory reset) when default credentials remain configured. An unauthenticated attacker on the adjacent network can trigger these actions, c...

CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

CVE-2026-78037 Xiiaozet LK100W OS Command Injection

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...