EUVD-2026-55089

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-21064: Improper Access Control

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2026-68084: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...

CVE-2025-30241: Improper Neutralization of Special Elements used in an OS Command

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system...

PT-2026-69392

Name of the Vulnerable Software and Affected Versions Weaver versions prior to SMR Aug-2026 Release 1 Description Improper access control allows local attackers to cause device inoperability. Recommendations Update to SMR Aug-2026 Release 1...

CVE-2026-21078: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

PT-2026-69775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt aux devices init function calls auxiliary device init before all fields required by bnxt aux dev release are initialized. If an...

PT-2026-69615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the radio-si476x media component where the si476x radio probe function registers radio-v4l2dev before allocating V4L2 controls and registering the video device. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-68375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-68374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously...

PT-2026-69607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the vpe probe function returns -ENODEV when the vpe top resource is missing, even after v4l2 device register has successfully completed. Because...

PT-2026-69580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the intel th component when handling MSC outputs. The function intel th output open uses bus find device by devt to look up an output device, which creates a...

PT-2026-69616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pwc media component when the start streaming function returns an error without returning queued buffers via vb2 buffer done. This happens during two specific...

CVE-2026-68163: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/pagevmamapped: fix device-private PMD handling Commit 65edfda6f3f2 "mm/rmap: extend rmap and migration support device-private entries" introduced the concept of device-private PMD entries, but did not correctly update the rmap...

CVE-2026-68180: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

PT-2026-69733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dpaa2-switch component. The fsl mc get endpoint function returns a MAC endpoint device with a reference acquired via device find child. This device is stored ...

PT-2026-69622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msi2500 driver where the msi2500 start streaming function fails to return queued buffers when an error occurs. The vb2 framework provides buffers via buf queue...