PT-2026-61444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP component within the l2cap ecred reconfigure function. Due to an incorrect conversion of a request PDU to use DEFINE RAW FLEX, the l2cap send cmd...

PT-2026-61369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the bio integrity map user function. This occurs because pin user pages fast may only partially succeed in pinning pages, and the bio integrity map...

PT-2026-61357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where the system fails to correctly extract the error code when the vfs mkdir function fails. This results in the mkdir error logic being trigger...

PT-2026-61430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ixgbevf driver during VEPA multicast source pruning. The function ixgbevf clean rx irq frees a socket buffer skb and continues to the next descriptor...

PT-2026-61325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the rocket ioctl create bo function. The function inserts a GEM handle into the file's IDR using drm gem handle create before completing several...

PT-2026-61411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs in the batman-adv module when a hard interface is retrieved as the primary interface of a mesh interface but becomes decoupled from it before the rtnl...

PT-2026-61101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfsd4 create file function contains two issues related to Access Control List ACL handling. First, the return value of the nfsd4 acl to attr function is ignored. If the conversion fr...

PT-2026-61265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the L2CAP Bluetooth subsystem within the l2cap chan timeout function. The set chan timer function acquires a reference to the channel using l2cap chan hold...

PT-2026-61351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU double-fetch issue exists in the mana hwc rx event handler function. The hwc msg id is read from DMA-coherent memory and bounds-checked, but is...

PT-2026-61262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth ISO implementation where iso sock close calls iso sock clear timer before acquiring the socket lock. This allows iso sock clear timer to read the...

PT-2026-61475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs perform write function where write streaming—the process of caching dirty data in dirty but !uptodate folios to avoid reading data that will be immediately...

kbfs-6.6.3-3.1 on GA media (moderate)

kbfs-6.6.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11306-1 Rating: moderate Cross-References: CVE-2026-39824 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the kbfs-6.6.3-3.1 packag...

PT-2026-61346

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer where seq ump process event accesses client-out rfile.output without proper synchronization during the transition between the first-open and...

PT-2026-61442

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bcmgenet network driver where setting RBUF EEE EN and RBUF PM EN in the RBUF ENERGY CTRL register disrupts the receive RX path on GENET hardware when MAC Energy...

PT-2026-61453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking issue exists in the SMB client where the tc count increment within the smb2 find smb sess tcon unlocked function is not properly protected. This occurs because the code failed ...

PT-2026-61324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter synproxy component where the synproxy tstamp adjust function fails to refresh the TCP header pointer after calling skb ensure writable. When skb ensure...

PT-2026-61234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vti6 changelink function where the kernel fails to correctly handle network namespace changes for vti6 devices. When a vti6 tunnel is moved to a different network...

PT-2026-61301

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the ipv6 rpl srh decompress function when processing Routing Header SRH decompression. The hdrlen variable, defined as u8, fails to hold values when n is 12...

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

PT-2026-61116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pNFS component. When the NFS LAYOUT RETURN branch is triggered within the pnfs update layout function, the system calls pnfs prepare to retry...