drm/amdgpu/vce: fix integer overflow in image size

...

comedi: comedi_parport: deal with premature interrupt

...

drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

...

media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe

...

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

PT-2026-70523

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

CVE-2026-11894: Double Free

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

PT-2026-70476

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70698

Name of the Vulnerable Software and Affected Versions Windows Storage Port Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Storage Port Driver. This issue occurs due to an integer overflow, which allows an authorized attacker to elevate...

PT-2026-70454

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer overflow or wraparound occurs in Windows HTTP.sys, which is the kernel-mode driver that handles HTTP requests. This issue allows an authorized attacker to elevate privileg...

PT-2026-70496

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description A heap-based buffer overflow exists in the Windows HTTP.sys driver. This issue occurs due to an integer overflow, which can be exploited by an authorized attacker to elevate privileg...

PT-2026-70556

Name of the Vulnerable Software and Affected Versions Reliable Multicast Transport Driver RMCAST affected versions not specified Description A heap-based buffer overflow occurs in the Reliable Multicast Transport Driver RMCAST, which is a driver used for transmitting data to multiple recipients...

PT-2026-70791

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

Linux Distros Unpatched Vulnerability : CVE-2026-68346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from t...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

UBUNTU-CVE-2026-68180

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

UBUNTU-CVE-2026-68375

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

UBUNTU-CVE-2026-68423

In the Linux kernel, the following vulnerability has been resolved: mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroy mtdconcatdestroy frees item-concat so calling mtdvirtconcatputmtddevicesitem-concat after that leads to a use-after-free. Fix it by moving mtdvirtconcatputmtddevices...

UBUNTU-CVE-2026-68304

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, need to set up "usefwsup" with BRCMFPROFILEFWSUP1X. Or it will happen trace warning when call brcmfcfg80211setpmk. 4481.831101 ------------ cut...

UBUNTU-CVE-2026-68262

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvrsetuobjarray pvrsetuobjarray copies an array of kernel objects to a userspace array whose element size is described by out-stride. When out-stride is different from the kernel object...