PT-2026-82158

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the amdgpu dm crtc set vblank function. This happens when vblank is enabled or queried via the 'DRM IOCTL MODE CRTC GET SEQUENCE' endpoint before a...

PT-2026-82143

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reader can experience an indefinite hang in the ceph get caps function when the client no longer holds FILE RD but the local capability state incorrectly indicates that the capability ...

PT-2026-82190

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array out-of-bounds issue exists in the Focaltech driver. The focaltech process rel packet function fails to properly handle the finger index in the packet. When the index is 0,...

PT-2026-82123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the macvlan module where devices inherit hard header len from the lower device during macvlan init but fail to inherit needed headroom and needed tailroom, leaving the...

PT-2026-82129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hard lockup can occur during a granted time slice extension. The function exit to user mode loop calls rseq grant timeslice extension while interrupts are enabled. If the extension is...

PT-2026-82125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the bnxt driver when canceling an IRQ affinity notifier. The issue arises because unregistering IRQ affinity notifiers waits for the callback synchronously, while th...

PT-2026-82131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...

PT-2026-82134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCSI core error handling EH process. The system checks the shost-eh noresume variable twice during a single error handling iteration: once before calling...

PT-2026-82122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the veth poll function where the index of the peer TX queue to wake is incorrectly derived from rq-xdp rxq.queue index. This field is only initialized when an XDP...

PT-2026-82176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the restore sigcontext function where the supervision register SR is copied from the signal frame without properly clearing privileged bits before returning to user...

PT-2026-82201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation regarding TCP Fast Open TFO. The function mptcp fastopen subflow synack set params incorrectly sets the is mptfo flag before...

PT-2026-82145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xlog recover dquot commit pass2 function fails to properly handle errors during dquot recovery verification. When xfs dqblk verify detect...

PT-2026-82149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug exists in the XFS file system during AGI Allocation Group Inode repair. The function xrep iunlink walk ondisk bucket attempts to use sc-sa.agi bp to rebuild unlinked inode lists...

PT-2026-82157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where AMDGPU GEM CREATE failed to validate domain combinations. While domain bits were checked against AMDGPU GEM DOMAIN MASK, userspace could...

PT-2026-82172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the atmel-mci driver due to a race condition in the atmci remove function. The &host-bh work variable is bound to the atmci work func function and can be...

PT-2026-82130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovpn module where key slots are released through a kref, and the release path frees AEAD Authenticated Encryption with Associated Data transforms from an RCU...

PT-2026-82167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the first Indirect Data Address Word IDAW in a list is read separately to calculate the buffer size for the full Indirect Data Addres...

PT-2026-82181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto qce component where the error path in the devm qce register algs function is handled incorrectly. If the ops-register algs function fails, the system...

PT-2026-82189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iforce process packet function where input packet lengths for joystick, wheel, and status packets are not validated before reading fixed fields. Specifically, a...

PT-2026-82198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...