CVE-2026-68185

CVE-2026-68185 (LoongArch, Linux kernel): A boot-time failure occurs when CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y because jump_label_init() is invoked after parse_early_param(), allowing early-param handlers to modify static keys. The fix moves jump_label_...

CVE-2026-68105

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

CVE-2026-68105 drm/amdgpu: Fix kernel panic during driver load failure

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

EUVD-2026-55486

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

PT-2026-69664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the function xe pt update ops init fails to reset the current op variable to 0. During the vm bind path, the ops execute function calls xe pt...

PT-2026-69817

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/siw component where the siw create qp function calls siw qp add before the queues, CQ pointers, state, completion, and device list entry are fully initialized...

PT-2026-69603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Cleanup bugs exist in the vivid init function. A reference leak occurs when platform device register fails because the failure path jumps to free output strings without dropping the devi...

PT-2026-69625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the alvium ctrl init function where several controls are created and the returned pointers are used without validation. This can lead to write access over a...

PT-2026-69714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mctp i3c mod init function where the I3C bus notifier is registered and existing buses are processed using i3c for each bus lockedmctp i3c bus add new, NULL before...

PT-2026-69617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel media component when start streaming fails. The pwc isoc init function submits isochronous URBs USB Request Blocks in a loop. If the first URB is...

PT-2026-69621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the nuvoton npcm-video driver. The npcm video probe function allocates the npcm video structure using kzalloc obj but fails to free it during probe error paths or...

PT-2026-69698

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xe vm create function where a failure in drm gpuvm resv object alloc leads to resource leaks. For non-fault-mode VMs, the xe svm init function succeeds, but xe svm...

PT-2026-69493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the jiffies clocksource is utilized during early boot before being registered. This sequence leaves the max delta raw field at zero, causing the read out to be...

CVE-2026-68105: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

PT-2026-69585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the jump label init function is called after parse early param. When CONFIG MEM ALLOC PROFILING=y and CONFIG MEM ALLOC PROFILING ENABL...

Linux Distros Unpatched Vulnerability : CVE-2026-68291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig...

CVE-2026-19339

CVE-2026-19339 affects the Alibaba Cloud/DataWorks MCP server (aliyun alibabacloud-dataworks-mcp-server) up to version 1.0.43. The vulnerability is in ReadResourceRequestSchema (src/resources/initResources.ts): manipulating the argument request.params.uri enables server-side request forgery (SSRF...

EUVD-2026-54908

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

CVE-2026-17603

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

CVE-2026-17603

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...