CVE-2026-63805

In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nxcryptoctxexit argument nxcryptoctxshashexit calls nxcryptoctxexit with cryptoshashctx... but cryptoshashctx gives a nxcryptoctx , not a cryptotfm . Fix the type in nxcryptoctxexit and drop the bogus cryptotfmct...

CVE-2026-63805 crypto: nx - fix nx_crypto_ctx_exit argument

In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nxcryptoctxexit argument nxcryptoctxshashexit calls nxcryptoctxexit with cryptoshashctx... but cryptoshashctx gives a nxcryptoctx , not a cryptotfm . Fix the type in nxcryptoctxexit and drop the bogus cryptotfmct...

CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

CVE-2026-53382

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

EUVD-2026-45504

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

CVE-2026-53382

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

CVE-2026-63989: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the introduction of the netlink configuration path for bridge ports in commit 25c71c75ac87 "bridge: bridge port parameters over netlink", brsetport was always called with...

CVE-2026-63988: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs path Since the start of the git history, brportstore always acquired the bridge lock. Back then this decision made sense: The bridge lock protects the STP state of the bridge and its...

PT-2026-61305

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge component where the brport store function acquires the bridge lock for all attributes. This causes a problem when certain bridge port flags change, as the...

PT-2026-61435

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the qed cxt tables alloc function. When a PF or VF CID bitmap allocation fails, qed cid map alloc triggers a jump to cid map fail and frees previously allocated C...

PT-2026-61272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the mm/vmalloc component where the get vm area node function incorrectly triggers a BUG a kernel panic when bottom halves BH are disabled. This occurs because the in...

PT-2026-61306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge netlink configuration path where the br setport function is called while holding the bridge lock. Because br setport can trigger dev set promiscuity, which ...

PT-2026-61399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where uninitialized stack data is written into a target task's register state during error conditions. In the compat riscv gpr set function, cregs to regs is called...

PT-2026-61121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel crypto NX driver where a type mismatch occurs in context exit functions. Specifically, the function nx crypto ctx shash exit calls nx crypto ctx exit...

PT-2026-61087

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the vidtv component. The function vidtv mux get pid ctx can return NULL, which vidtv mux push si fails to check before dereferencing the pointer to...

MINI-3MXW-VPW8-2P4G

Bulletin has no description...

MINI-VMQ8-88RW-F3Q8

Bulletin has no description...

CVE-2026-16085

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has be...

CVE-2026-16085

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has be...