CVE-2026-80646: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if the original physical device is unregistered. Found by Sashiko...

CVE-2026-80621: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...

Linux Distros Unpatched Vulnerability : CVE-2026-80678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandge...

Linux Distros Unpatched Vulnerability : CVE-2026-80631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspa...

PT-2026-82932

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996 init tx queues When MT76 NPU and CONFIG NET MEDIATEK SOC WED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996 init tx queues will dereference a NULL WED...

PT-2026-83001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vmwgfx component where the vmw cursor plane atomic check function fails to bound cursor width and height on the SVGA CAP2 CURSOR MOB path. When a requested siz...

PT-2026-86706

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo decompress bio validates each on-disk segment length seg len only against the workspace cbuf size, not against the compressed input size compressed len...

PT-2026-82921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the dwc pcie rasdes debugfs deinit function. This happens because dwc pcie rasdes debugfs init returns success even when the controller lacks RAS DES...

PT-2026-82936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter conntrack component where the ct extension genid infrastructure disables all ct extensions for unconfirmed conntracks. This occurs because the...

CVE-2026-80631: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80690: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe fails...

PT-2026-82997

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f path for page cache sharing Previously, backing files for page cache sharing were set up with f path left as NULL only f inode was valid. It worked, but a recent mincore fix relies on f path.mnt and crashes...

CVE-2026-80664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

CVE-2026-80704: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

PT-2026-82978

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition and error handling flaw exist in the i2c imx driver. In the i2c imx reg slave function, the slave pointer is assigned before the pm runtime resume and get function is...

PT-2026-82979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the dasd release space function. The issue arises because the function uses a logical AND operator when checking the implementation of the is ese...

PT-2026-82991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iblock execute pr out function where the PRO PREEMPT, PRO PREEMPT AND ABORT, and PRO RELEASE operations perform callback capability checks via ops-pr clear. An...

PT-2026-82984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the KVM s390 PCI component when the airq iv create function fails to allocate an AIBV Airq Interrupt Vector and returns NULL. Because the return value was no...

CVE-2026-80678: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-76650: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...