PT-2026-69616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pwc media component when the start streaming function returns an error without returning queued buffers via vb2 buffer done. This happens during two specific...

PT-2026-69730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the airoha npu send msg function where the mailbox buffer is always mapped using DMA TO DEVICE. However, certain callers, such as airoha npu wlan msg get NPU OP GET an...

Linux Distros Unpatched Vulnerability : CVE-2026-68382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy...

PT-2026-69717

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the pds core component when adding or deleting auxiliary devices in the slot pf-vfsvf id.padev. This occurs between the pdsc reset done function of a Virtual...

CVE-2026-68084: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...

PT-2026-69640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device mapping leak occurs in the drm/gpusvm component. The drm gpusvm get pages function only stores the local dpagemap into svm pages-dpagemap upon successful completion. If a...

Linux Distros Unpatched Vulnerability : CVE-2026-68147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the...

Linux Distros Unpatched Vulnerability : CVE-2026-68175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be...

CVE-2026-68163: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/pagevmamapped: fix device-private PMD handling Commit 65edfda6f3f2 "mm/rmap: extend rmap and migration support device-private entries" introduced the concept of device-private PMD entries, but did not correctly update the rmap...

CVE-2026-68180: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

Linux Distros Unpatched Vulnerability : CVE-2026-68180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference...

Linux Distros Unpatched Vulnerability : CVE-2026-68374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously...

PT-2026-69775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt aux devices init function calls auxiliary device init before all fields required by bnxt aux dev release are initialized. If an...

PT-2026-69578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NSM misc device where nsm dev fops.owner is left unset. When misc open is called, it uses fops get to pin the file operations::owner, but because the owner is unse...

PT-2026-69816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free and a WARN ON condition exist in the add mtd device error paths. When device register or mtd nvmem add fails, the error handling triggers mtd release via put device or devi...

Linux Distros Unpatched Vulnerability : CVE-2026-68207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...

Linux Distros Unpatched Vulnerability : CVE-2026-68333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch...

PT-2026-69655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the virtio get edid block function. The function validates the read offset against the resp-size field provided by the device but fails to validate it...

PT-2026-69532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the emergency thaw worker can deadlock when handling frozen block devices. This occurs because the function do thaw all callback calls bdev thaw while holding the...

PT-2026-69607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the vpe probe function returns -ENODEV when the vpe top resource is missing, even after v4l2 device register has successfully completed. Because...