CVE-2026-72031

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM-less drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link...

CVE-2026-72031 ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM-less drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link...

CVE-2026-72031 ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM-less drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link...

CVE-2026-68467 mtd: mchp23k256: use SPI match data for chip caps

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

CVE-2026-68467 mtd: mchp23k256: use SPI match data for chip caps

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

CVE-2026-68463 mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...

CVE-2026-68461 device property: initialize the remaining fields of fwnode_handle in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

CVE-2026-68456 usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; so, if the device is unplugged...

FMD Android v0.16.2

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

PT-2026-72361

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pagemap pmd range thp function where the system triggers a warning if a non-present Page Middle Directory PMD is not a migration entry. This assertion became...

CVE-2026-72031: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM-less drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link...

CVE-2026-72403: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcpfindfcinterface currently selects the first vendor-specific interface...

CVE-2026-72245: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

PT-2026-72470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lifetime issue exists in the KVM component where the kvm io bus get dev function returns a device matched only by address. If the matched device is not of the expected type, the object...

PT-2026-72848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 wifi driver, an issue exists where an ieee80211 hw pointer is stored via pci set drvdata during probe time, but the io error detected and io resume functions retrieve it as ...

CVE-2026-72180: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

PT-2026-72286

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the dm-verity component. This occurs within the dm verity loadpin is bdev trusted function when a device does not have a table. Recommendations At th...

PT-2026-72360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management initialization where section activate reuses the unoptimized boot memmap when DAX memory is hotplugged into an unoccupied subsection of an early...

PT-2026-72664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the dmaengine component. In the dma release channel function, the system checks chan-device-privatecnt after calling dma chan put. Because dma chan put...

PT-2026-72739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qca dmp hdr function when handling hci uart attached via non-serdev paths. The issue arises because the function unconditionally attempts to acce...