The vulnerability of the driver/platform/x86/toshiba_haps.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the can/usb/mcba_usb.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the can/usb/mcbausb.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/pmdomain/imx/imx8m-blk-ctrl.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-14256

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash...

CVE-2026-14256

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash...

The vulnerability of the slaves/w1_therm.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the slaves/w1therm.c component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-68443

A flaw was found in the Linux kernel's gigabytewaterforce hwmon driver. A race condition exists because hidhwstop does not properly stop device I/O. This can occur during a driver probe failure after I/O has been initiated, leading to a Use-After-Free UAF vulnerability. An attacker could...

UBUNTU-CVE-2026-68450

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert addrelocroot allocates a mappingnode before inserting it into rc-relocroottree. If rbsimpleinsert finds an existing entry, it returns the existing rbnode and leaves the newl...

UBUNTU-CVE-2026-68447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without bounding it to the allocated BO region. If the HW field is larger than...

DEBIAN-CVE-2026-68446

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

UBUNTU-CVE-2026-68431

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...

UBUNTU-CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability

Summary An out-of-bounds read vulnerability exists in the IppQualifyAddresses function of the Microsoft Windows tcpip.sys driver. A specially crafted I/O request packet IRP can cause an arbitrary out-of-bounds read, potentially leading to information disclosure or a denial-of-service condition...

Linux Distros Unpatched Vulnerability : CVE-2026-68221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any prob...

Linux Distros Unpatched Vulnerability : CVE-2026-68380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mmstruct in job scheduler amdxdnacmdsubmit stores...

The vulnerability of the driver for the afd.sys auxiliary function in Windows Sockets operating systems allows a hacker to increase their privileges.

The vulnerability of the driver for the afd.sys auxiliary function in Windows Sockets operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with...