PT-2026-64547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the block layer where the bdev mark dead function fails to check the surprise variable when handling bare block devices. When surprise is set to true, it indicates the...

PT-2026-64586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the HID letsketch driver. The letsketch probe function initializes a per-device timer inrange timer using timer setup, which is subsequently re-armed...

PT-2026-64584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the appleir driver. The appleir remove function executes hid hw stop before timer delete sync, which can lead to the input dev being freed while a...

PT-2026-64598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the qcom-cpufreq-hw component. The qcom cpufreq.data is allocated using devm kzalloc in the probe function as an array of per-domain data, and qcom cpufreq ...

PT-2026-64583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID lg-g15 driver. The lg g15 data structure is allocated using devm and contains a work item scheduled by report handlers from device input,...

PT-2026-64491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the mms114 interrupt function. The function reads touch data from a device into a fixed-size on-stack buffer touch that holds 80 bytes. Because the...

PT-2026-64529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the system improperly initializes SNP for the ioctlSNP VLEK LOAD function. A userspace process could potentially trigger this code path...

PT-2026-64597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the firmware loader. In the firmware upload register function, if alloc lookup fw priv fails after fw create instance has successfully executed, the system cal...

PT-2026-64668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipu7 media staging component where double-free and use-after-free conditions occur during error handling. In the functions ipu7 isys init and ipu7 psys init, the...

PT-2026-64644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IPv4 IGMP implementation during device destruction under RTNL. The function ip mc destroy dev iterates through the multicast list and calls ip ma put...

Linux Distros Unpatched Vulnerability : CVE-2026-64376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: fix device reference leak in firmwareuploadregister firmwareuploadregister -...

Linux Distros Unpatched Vulnerability : CVE-2026-64273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: iforce - bound the device-reported force-feedback effect index iforceprocesspacket handles a status report packet id 0x02 by taking a force-feedback effe...

PT-2026-64494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read-modify-write issue exists in the iforce process packet function when handling status reports packet id 0x02. The function uses a force-feedback effect index obtaine...

CVE-2026-61884

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

CVE-2026-61884 Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

CVE-2026-61884

The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side validation of credentials during the login process. By submitting empty values for both credential fields, an unauthenticated remote attacker can bypass the authentication check and establish a valid...

CVE-2026-61884 Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

radmin-vpn-linux v1.0.0-rc9

Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...

super v1.2.0

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

DEBIAN-CVE-2026-64246

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...