UBUNTU-CVE-2026-98913

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913

The Linux kernel contains a PTP device reference leak within the nicvf_probe() function of the thunderx driver. The issue occurs because cavium_ptp_get() acquires a reference to the PTP PCI device via pci_get_device(), but fails to release this reference if subsequent initialization steps fail. T...

CVE-2026-98913

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

EUVD-2026-108869

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98904 mailbox: imx: Use devm_pm_runtime_enable()

In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devmpmruntimeenable sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pmruntimeenable into the removal path instead doing it early. This ensure...

CVE-2026-98904 mailbox: imx: Use devm_pm_runtime_enable()

In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devmpmruntimeenable sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pmruntimeenable into the removal path instead doing it early. This ensure...

CVE-2026-98904

The Linux kernel contains a vulnerability in the mailbox: imx driver related to the premature usage of the device before the probe process is completed. The issue is addressed by switching to devm_pm_runtime_enable() and reordering the initialization sequence. Specifically, the pm_runtime_enable(...

CVE-2026-98782

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When device initialization fails or during driver removal, the driver fails to unregister an allocated overlay adaptor platform device. A local user could exploit this flaw to cause a resource leak, potentially...

CVE-2026-98771

A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated...

CVE-2026-111100

A flaw was found in the Kiloview E3 Open Network Video Interface Forum ONVIF device service. The service responds to specific informational requests without requiring authentication, resulting in information disclosure. A remote, unauthenticated attacker can exploit this issue to retrieve sensiti...

EUVD-2026-108548

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

EUVD-2026-108551

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the...

EUVD-2026-108544

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

PT-2026-122001

In the Linux kernel, the following vulnerability has been resolved: optee: register TEE devices only once fully initialized optee probe called tee device register on both the client and the supplicant device before the rest of struct optee had been initialized. tee device register calls cdev devi...

Linux Distros Unpatched Vulnerability : CVE-2026-99061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: fix P2P device removal race in brcmfdetach When the driver is removed while the user space process that created the P2P device e.g. wpasupplican...

One-Sided-DIQKD Using Any Pure Bipartite Entangled State Secure against All Attacks

Quantum Key Distribution QKD allows spatially separated parties to establish a secret key among themselves based on quantum principles. While QKD systems are being deployed worldwide, their reliance on trusted measurements makes them vulnerable. Moreover, existing protocols have largely focussed ...

PT-2026-122038

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P device removal race in brcmf detach When the driver is removed while the user space process that created the P2P device e.g. wpa supplicant is still exiting, the P2P device interface is removed twice and t...

PT-2026-121883

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf probe cavium ptp get acquires a reference to the PTP PCI device through pci get device. If any initialization step fails after cavium ptp get, the PTP PCI device reference is leaked...