PT-2026-98540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ieee802154 driver for the cc2520 device. The FIFOP interrupt handler queues cc2520 fifop irqwork, but during the removal process, the cc2520 remove...

PT-2026-98621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow occurs in the hinic driver due to improper validation of mailbox segments. The function check mbox seq id and seg len allows the last segment, identified by the se...

PT-2026-98799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs dio zero range function fails to correctly handle errors from blkdev issue zeroout. Because the failure check in ntfs attr fallocate did...

PT-2026-98800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs sync fs function unconditionally clears the dirty bit of a volume. This behavior differs from ntfs put super and the remount-read-only...

PT-2026-98803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the update reparse data function ignores the return value of set reparse index. If the index insertion fails, the system removes the recently...

PT-2026-98833

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the rtl8723bs driver within the staging area of the Linux kernel. The functions issue beacon, issue probersp, and issue asocrsp use alloc mgtxmitframe to obtain a...

PT-2026-98798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS driver. The function ntfs attr find in attrdef iterates through the in-memory $AttrDef table, but the loop condition only validates the start of...

PT-2026-98801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs cluster free from rl nolock function incorrectly increments the nr freed counter even when ntfs bitmap clear run fails. This occurs...

PT-2026-98472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla2x00 mem alloc function fails to nullify pointers after freeing them during an error path. When qla2x00 probe one encounters a...

PT-2026-98475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb function calculates a map index using the vp index variable and writes to the vp idx map array without...

PT-2026-98476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver during queue teardown. The response queue MSI-X handler qla2xxx msix rsp q schedules the qla do work function via queue workha-wq...

PT-2026-98479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xusbatm USB driver where the code relies on pointer arithmetic for the usb device id parameter during the probe process. When dynamic IDs are involved, this...

PT-2026-98510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr-rx tpa array. When th...

PT-2026-98543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the idpf driver where Tx/Rx DIM works are not drained before the memory they reside in is freed. The tx dim and rx dim works are embedded in the idpf q vector...

PT-2026-98821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7921 wifi driver where the loader trusts the region count and record length of the CLC Common Location Configuration region supplied by firmware. A malformed ima...

PT-2026-98802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the NTFS driver when the write mft record nolock function maps the MFT record folio using kmap local folio. If the pre write mst fixup or bio add folio functions...

SUSE CVE-2026-93217

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...

SUSE CVE-2026-93218

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

SUSE CVE-2026-93281

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

SUSE CVE-2026-97479

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 devicelinksnodriver+0xcc/0xfc ... Cal...