PT-2026-116655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/amdxdna component where device buffers were not explicitly prevented from being exported, although they were never intended for this purpose. Recommendations...

CVE-2026-98474: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

PT-2026-117026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 module where the mlx5 handle changeupper event and mlx5 handle changeinfodata event functions incorrectly call bonding-specific APIs when handling team...

Linux Distros Unpatched Vulnerability : CVE-2026-98710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlegacy: 3945: free EEPROM data on remove il3945pciprobe calls ileeprominit, which allocates memory for the EEPROM data. The probe failure paths release...

Linux Distros Unpatched Vulnerability : CVE-2026-98750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different...

PT-2026-116652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM PPC Book3S HV component where a secure device page is not released if the uv page in function fails after kvmppc uvmem get page has succeeded. In the kvmppc sv...

CVE-2026-98807: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...

CVE-2026-98436: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

PT-2026-117052

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call get device with the master MTD get mtd device calls the master's get device callback with mtd, which may be a partition. put mtd device passes the master. This breaks gluebi partitions because gluebi get device us...

Linux Distros Unpatched Vulnerability : CVE-2026-98779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix ACP MFD device leak on init failure acphwinit registers ACP child devices with mfdadddevices before attaching them to the ACP power domain and...

PT-2026-117001

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk drm probe creates an OVL adaptor platform device with platform device register data when the display pipeline requires the OVL adaptor. If a later initialization step fails,...

PT-2026-116695

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccw device get util str The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpid to chp can retu...

PT-2026-116768

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the TCP implementation where socket buffer skb collapsing can occur across boundaries in the retransmission rtx queue. When a switch to device encryption occurs, the t...

CVE-2026-98834: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...

Linux Distros Unpatched Vulnerability : CVE-2026-98749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.7 contain security vulnerabilities. These vulnerabilities stem from the lack of explicit disabling of device buffer export support, which may lead to the export of device buffers...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the EEPROM data allocated by calling ileeprominit after successful device detection is not released when the PCI device is removed. This leads to a memory leak...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.12 has a security vulnerability. This vulnerability arises from the failure to reset the saved termios state during device registration. Additionally, some TTY drivers do not ensure that the next device number is no longer used. When the TTY is closed and termios is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from trf7970astartup failing to undo the device power-on state when reading/writing from the RX gain register. As a result, VIN enable references become unbalanced during startup, and the system’s recovery...

lwIP Developers: lwIP buffer error vulnerability

lwIP Developers: Versions of lwIP 2.2.1 and earlier contain a buffer overflow vulnerability. This vulnerability stems from the mdnshandleresponse function, which allows stack-based out-of-bounds writes. Attackers can exploit this vulnerability by sending mDNS responses with invalid domain names...