Linux Distros Unpatched Vulnerability : CVE-2026-64292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happen...

PT-2026-67786

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-67785

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-67780

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA ymfpci component. The function snd ymfpci create spdif controls fails to verify the return value of snd ctl new1, which can return NULL duri...

PT-2026-64709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA aoa component, the snd ctl new1 function can return NULL during memory allocation failures. In layout.c, the system fails to verify this return value before dereferencing...

CVE-2026-64489: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64482: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

PT-2026-64701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ice1712 driver in the Advanced Linux Sound Architecture ALSA fails to verify the return value of the snd ctl new1 function. When memory allocation fails, snd ctl new1 returns NULL;...

PT-2026-64705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es1938 component, the function snd es1938 mixer fails to verify the return value of snd ctl new1. If memory allocation fails, snd ctl new1 returns NULL, and the subsequent...

PT-2026-64513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iommufd component, memory allocation for veventq occurs inside a spinlock. Because the queue depth is determined by user space, a user can allocate excessively large queues to...

PT-2026-64703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA gus component. The function snd gf1 pcm volume control fails to verify the return value of snd ctl new1, which can return NULL during memory...

PT-2026-64707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA cmipci component, the snd cmipci spdif controls function fails to verify the return value of snd ctl new1. When memory allocation fails, snd ctl new1 can return NULL, and the...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

PT-2026-64518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...

PT-2026-64571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the cdnsp alloc stream info function. The function allocates stream info-stream ctx array using cdnsp alloc stream ctx. If a subsequent stream ring allocation or...

CVE-2026-64486: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...

PT-2026-67784

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs exchmaps estimate overhead function incorrectly performs a UINT MAX check. The function adds bmbt and rmapbt overhead to a local...

PT-2026-64660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's crypto krb5 implementation. The functions krb5 aead encrypt, krb5 aead decrypt, rfc8009 encrypt, and rfc8009 decrypt set a NULL...