CVE-2026-97686

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-97686

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory resource leak. Specific system call arguments can cause the IPNET subsystem to fail to release allocated kernel memory and system file descriptors before the calling application terminates. This issue can lead to a high impact ...

CVE-2026-97686 VxWorks 7 Memory Resource leak

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-97686 VxWorks 7 Memory Resource leak

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

EUVD-2026-88440

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-93823

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user with access to the GPU device interface can trigger excessive kernel memory allocation by providing an abnormally large buffer size parameter during an input/output control ioctl request. This issue can exhaust system memo...

CVE-2026-93812

A flaw was found in the Linux kernel's ksmbd Server Message Block server. A remote attacker could cause a denial of service DoS by triggering a kernel memory leak during security attribute operations. When an error occurs while encoding security descriptors, dynamically allocated memory is not...

CVE-2026-93805

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. The kernel fails to properly validate the length of wireless management frames before accessing subtype-specific data fields. An attacker within wireless range could exploit this flaw by transmitting malformed, truncated manageme...

CVE-2026-93791

A flaw was found in the Linux kernel's iwlwifi wireless driver. This vulnerability can lead to a Denial of Service DoS or kernel memory corruption due to an out-of-bounds memory access. When handling block acknowledgment notifications, the driver directly uses a traffic identifier TID provided by...

PT-2026-102326

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and system file descriptors before the calling application is terminated...

CVE-2026-16513: Out-of-bounds Write

The userspace verifier zvrfyrtiosqecopyingethandles in subsys/rtio/rtiosyscalls.c subsys/rtio/rtiohandlers.c before v4.3.0 validated the RTIO object handle and the sqes input array, but not the handle out-parameter. On the first loop iteration it executed handle = sqe, storing the kernel address ...

CVE-2026-97905 cpufreq: zero-initialize policy cpumask before sysfs publication

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

CVE-2026-97496 drm/amdkfd: Fix OOB memory exposure in get_wave_state()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-93230

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Gigantic bootmem HugeTLB pages are currently initialized from hugetlbinit, but pageallocinitlate runs earlier and walks pageblocks to determine zone contiguity...

PT-2026-98115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory exposure exists in the get wave state function for v9. The function trusts cp hqd cntl stack size and cp hqd cntl stack offset values read from the MQD, which can...

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

Linux Distros Unpatched Vulnerability : CVE-2026-97496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly fro...

Linux Distros Unpatched Vulnerability : CVE-2026-89776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares the GROUP/GROUP6 address attributes as NLABINARY wi...

CVE-2026-17052 Missing user-pointer validation in tgpio_pin_read_ts_ec syscall handler allows arbitrary supervisor-memory write from userspace

The Time-aware GPIO syscall verification handler zvrfytgpiopinreadtsec in drivers/timeawaregpio/timeawaregpiohandlers.c validated only the port device object and passed the caller-supplied timestamp and eventcount output pointers to the driver without a KSYSCALLMEMORYWRITE check. The other handle...