PT-2026-72971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pinctrl devicetree component where the dt remember or free map function duplicates the dev name for each map entry. If the kstrdup const function fails, the dt fre...

PT-2026-72296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory access exists in the dm-era component. The era map function calculates the writeset block before applying the target offset, which allows tables with a non-zero...

PT-2026-72273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCSI target component where the core scsi3 decode spec i port and core scsi3 emulate register and move functions pass a raw PERSISTENT RESERVE OUT parameter buffer...

PT-2026-72700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net watchdog code due to a lack of synchronization between netdev watchdog up and dev watchdog. The introduction of dev-watchdog dev tracker to store...

PT-2026-72692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the bpf msg pop data function within the bpf sockmap component. The issue occurs because the variables start and len are defined as u32, causing the additio...

PT-2026-72753

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ixgbe driver where the netif set xps queue function is incorrectly called for XDP Tx queues, which are not exposed to the network device. On systems with 64 or mor...

PT-2026-72908

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the peak usb start function. When an RX URB transfer buffer is allocated using kmalloc and flagged with URB FREE BUFFER, the usb free urb function is design...

PT-2026-73001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nct6775-core driver where the nct6116 chip initialization sets data-pwm num to 5, while the associated register arrays including NCT6106 REG WEIGHT DUTY STEP,...

PT-2026-72937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the binfmt misc component of the Linux kernel. The issue occurs during the parsing of a registration string when a user-chosen delimiter is also one of th...

PT-2026-72824

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the ALSA OSS sequencer when handling events with embedded SysEx data. The OSS sequencer processes MIDI bytes into events via snd seq oss midi putc an...

PT-2026-72596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Geneve protocol implementation where the geneve gro complete function processes GRO hints unconditionally by calling the low-level geneve opt gro hint off function...

PT-2026-72581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the fbnic tx lso function. The function calls skb cow head, which can reallocate the socket buffer skb, including its shared...

PT-2026-73013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the nh rt cache flush function, which is inlined into rtm new nexthop. The problem occurs when nh rt cache flush traverses t...

PT-2026-72820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the nvme-multipath component. The struct nvme ns head contains a flexible array member current path that is indexed using the NUMA node ID via the...

PT-2026-72786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 filesystem where fast symlinks are not properly validated during inode read. When a zero-cluster symlink is processed via page get link and ocfs2 fast symlin...

PT-2026-72666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the run get highest vcn function within the NTFS3 file system driver. The function parses a packed NTFS mapping-pairs buffer without implementing length bounds, relyin...

PT-2026-72961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth subsystem. The function hci find adv instance returns an adv info pointer that is only valid while hdev-lock is held. However,...

PT-2026-72781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/siw component regarding endpoint and socket association handling. Disassociating a socket from an endpoint using the siw socket disassoc function may release...

PT-2026-72208

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.0 Description An issue exists in the macsec encrypt function where the Ethernet header is read via eth hdrskb to move source and destination MAC bytes forward for SecTAG placement. On the AF PACKET SOCK RAW + PACKET QDIS...

PT-2026-72525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth 6LoWPAN implementation. The function lowpan enable set allocates a temporary work item and schedules do enable set on the system workqueue system...