PT-2026-72875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the device pasid table teardown function zeroes a 128-bit scalable-mode context entry using context clear entry while the Present bit...

PT-2026-72612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the shared IRQ handler during the probe process of the msc313 RTC driver. The function msc313 rtc probe calls devm request irq using IRQF SHARED and...

PT-2026-72774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where sleepable BPF programs can be attached to the LSM cgroup. Because the cgroup shim operates under rcu read lock dont migrate, attaching sleepable BPF programs in thi...

PT-2026-72545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 uprobes implementation where the in uprobe trampoline function incorrectly uses current-mm for VMA Virtual Memory Area lookup during the unregister path. This...

PT-2026-73059

Name of the Vulnerable Software and Affected Versions Shescape versions prior to 2.1.15 Shescape versions 3.0.0 through 3.0.1 Description On Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox, the software fails to properly escape tilde characters ...

Linux Distros Unpatched Vulnerability : CVE-2026-74457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. Th...

CVE-2026-74468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

PT-2026-72897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the drm/vmwgfx component. The function vmw cmd dx bind query unconditionally dereferences sw context-dx ctx node-ctx. A user...

PT-2026-72750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where map update and delete paths call the bpf obj free fields function when a value is replaced or recycled. This causes field destruction to depend...

CVE-2026-74314: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

PT-2026-72576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the fence lock is not acquired using an IRQ-safe variant. Because dma fence objects can be shared with other subsystems, they may be...

PT-2026-72966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 PCI component regarding memory accounting for pinned and unpinned pages. The account mem and unaccount mem functions call get uid, which increments the...

PT-2026-72170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binder component where the binder transaction function incorrectly calculates the scatter-gather buffer area boundary. The function uses sg buf end offset to bound...

PT-2026-72679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the 9p network filesystem implementation within trans rdma.c. The rdma-state variable is modified without holding the req lock spinlock in the recv done and p9...

Linux Distros Unpatched Vulnerability : CVE-2026-72388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dmafence objects can be shared with other subsystems, they may be accessed from...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

CVE-2026-53708

creationtimestamp| type| source ---|---|--- 2026-08-14 20:35:03+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm...

CVE-2026-19909

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-19910

CVE-2026-19910 affects PAX Technology Q80, specifically the Application Installer. The flaw is a signature verification bypass in the installer, allowing a network-adjacent attacker (no authentication, high attack complexity) to execute arbitrary code with root privileges by installing a signed-b...

SUSE CVE-2026-68273

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...