PT-2026-67786

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-67785

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-67780

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA ymfpci component. The function snd ymfpci create spdif controls fails to verify the return value of snd ctl new1, which can return NULL duri...

PT-2026-64709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA aoa component, the snd ctl new1 function can return NULL during memory allocation failures. In layout.c, the system fails to verify this return value before dereferencing...

CVE-2026-64489: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64482: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

PT-2026-64701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ice1712 driver in the Advanced Linux Sound Architecture ALSA fails to verify the return value of the snd ctl new1 function. When memory allocation fails, snd ctl new1 returns NULL;...

PT-2026-64705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es1938 component, the function snd es1938 mixer fails to verify the return value of snd ctl new1. If memory allocation fails, snd ctl new1 returns NULL, and the subsequent...

PT-2026-64513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iommufd component, memory allocation for veventq occurs inside a spinlock. Because the queue depth is determined by user space, a user can allocate excessively large queues to...

PT-2026-64703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA gus component. The function snd gf1 pcm volume control fails to verify the return value of snd ctl new1, which can return NULL during memory...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

PT-2026-64518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...

CVE-2026-64486: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...

PT-2026-64719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Industrial I/O IIO buffer hardware consumer where the scan mask is not properly freed during buffer release. This occurred because the scan mask storage was moved ...

PT-2026-67784

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs exchmaps estimate overhead function incorrectly performs a UINT MAX check. The function adds bmbt and rmapbt overhead to a local...

PT-2026-64660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's crypto krb5 implementation. The functions krb5 aead encrypt, krb5 aead decrypt, rfc8009 encrypt, and rfc8009 decrypt set a NULL...

PT-2026-64509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nv component where a NULL VNCR pseudo-TLB may be dereferenced. This occurs during VNCR TLB invalidation triggered by MMU notifiers or TLBI instructions,...

PT-2026-64685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the xhci sideband component. The function xhci ring to sgtable allocates a temporary pages array to construct an sg table using sg alloc table from pages. While...