PT-2026-84925

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5 Description An issue exists in the x86 Machine Check Exception MCE implementation where the CMCI storm detection attempts to modify a polling timer before it has been properly initialized. This sequence...

Linux kernel fs/quota/dquot.c Heap Buffer Overflow DoS

The vulnerability of the invalidatedquots function in the fs/quota/dquot.c file of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

Intel DG MTD Probe Data Compromise

The vulnerability of the inteldgmtdprobe function in the driver/mtd/devices/mtdinteldg.c file of the MTD memory driver for the Linux operating system is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel serial8250_init_port function Data Compromise

The vulnerability of the serial8250initport function in the drivers/tty/serial/8250/8250port.c file of the console TTY driver in the Linux kernel is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux SCSI Driver Heap Buffer Overflow DoS

The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

GPU Component Access Sensitive Data

The vulnerability in the GPU components of Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploiting this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

XR Component Vulnerability Google Chrome Microsoft Edge

The XR component vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Media component Sensitive Data Access

The Media component vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

NLTK Library Insecure Initialization

The vulnerability of the NLTK library package for symbolic and statistical processing of natural language is related to insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

WebNN Component Sensitive Data Access

The WebNN component vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

GamepadAPI Component Sensitive Data Access

The vulnerability in the GamepadAPI component of Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Dawn Component Sensitive Data Access

The vulnerability in the Dawn component of Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

V8 JavaScript DoS

The V8 JavaScript script handler vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

V8 JavaScript DoS

The V8 JavaScript script handler vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

Skia Graphic Library Exposed Information

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

Skia Graphic Library Information Disclosure

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105457 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...