CVE-2026-57842: Double Free

NetBSD contains a use-after-free and double-free vulnerability in msgrecvcopyin within the COMPATNETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary on a 64-bit NetBSD system can trigger a kern...

PT-2026-90227

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The qede driver contains an issue where it encounters NULL pointer dereferences when processing TPA continuation fragments under memory pressure. This occurs because the assignment of tp...

PT-2026-90462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tracing component when two histogram triggers on different events are registered using the same name= parameter. The system incorrectly reuses the...

CVE-2026-81005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-89581: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

PT-2026-96339

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add build skb...

CVE-2026-89511: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

CVE-2026-89746: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107284 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmisysfsregisterhandle KASAN reported a null-ptr-deref...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107313)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107313 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix tree mod log mishandling of reallocated nodes We have been seeing the following panic...

PT-2026-96440

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. s num entries stores the number of entries in that array, not the highest valid index. The...

PT-2026-90176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 CPUMF facility where the kernel can crash when CPUs are hotplug added during the execution of a command such as perf stat -e cycles -- . The root cause is the...

PT-2026-90297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A per-CPU address resolution flaw exists in the x86 BPF JIT compiler. The issue occurs when the destination of a per-CPU address MOV is an extended register R5 through R9. Due to an...

CVE-2026-89525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

PT-2026-90193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the SCTP implementation of the Linux kernel. The issue occurs when completing a pending stream reconfiguration request that has been published in...

CVE-2026-80989: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

CVE-2026-89477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctpprocessstrresetoutreq, sctpprocessstrresetaddstrmout and sctpprocessstrresetresp complete a pending stream reconfiguration request by stopping the reconf timer on the...

PT-2026-90241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF 1.50 virtual partition mapping where the VAT Virtual Allocation Table is used as an array of physical block mappings. The s num entries variable stores the tot...

PT-2026-96490

In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...

CVE-2026-89460: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpucfevents at first event...