PT-2026-121883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the thunderx network component. The function cavium ptp get acquires a reference to the PTP PCI device using pci get device. If an initialization step fails...

PT-2026-121877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the btrfs component when the sb write pointer function reads the super block from the block device page cache using read cache page gfp. This issue occurs duri...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the Sparx5 driver fails to release allocated PSFP flow gates, flow meters, and flow filters when flower configuration fails; additionally, it fails to return the...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 4.4.159 up to and including 4.5, from 4.9.130 up to and including 4.10, from 4.14.73 up to and including 4.15, from 4.18.11 up to and including 4.19, and specifically in version 4.19. This vulnerability arises when xennetfillfrags fail...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because lbshardstartxmit fails to validate the length of short monitoring frames under monitor mode, potentially leading to an out-of-bounds rea...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.14. It arises when RISCVALTERNATIVEEARLY is not selected when ERRATATHEADGHOSTWRITE is enabled but ERRATATHEADMAE is not. As a result, the GHOSTWRITE vulnerability on T-head C9xx CPUs is not detected during the early boot phase. No...

PT-2026-121898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the stream-sink variable is optional and can be null. Failure to check this variable before dereferencing it can lead to system...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability arises from a missing code block that deactivates the battery upon subsequent registration failures during the refactoring of the HID Steam driver registration process; as ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.114, and 6.18.53. This vulnerability arises because a link is not first verified as being in beacon state when color changes are performed; this may result in the use of an invalid link to invoke a driver...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the fact that seg6makeflowlabel fails to use skbgethashnet to obtain a network pointer. When an skb lacks both skb-dev and skb-sk, skbflowdissect triggers a warning due to the absence of a network pointer; this may result in null...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from improper rejection of automatic mounts under mount points that are not owned by the caller. countmounts dereferences an invalid pointer within MNTNSINTERNAL, potentially leading to null pointer dereferencing and a kernel...

PT-2026-121959

In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount d alloc pseudo hands out dentries for pipes, sockets and other files that are never anyone's child or parent. They carry DCACHE NORCU and dentry free frees them righ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.2. It stems from a failure in pathsfrominode within scrubprintwarninginode, which fails to release references obtained via btrfsgetfsroot. This results in a localroot reference leak...

PT-2026-121968

In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mount notifications mnt notify add puts a mount on notify list. It doesn't check whether the mount is on the list already. That's fine as long as every mount is queued at most once per...

PT-2026-122010

In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packet rcv spkt packet rcv spkt restores the link layer header with skb pushskb, skb-data - skb mac headerskb; That subtraction is only meaningful when the device actually has a link layer...

PT-2026-121960

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switch task namespaces and copy namespaces and dropped...

PT-2026-121925

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlink rel reference leak when notify work is pending devlink rel nested in notify work schedule takes a reference on the devlink rel for the notify work and then queues the work, ignoring the return value of schedu...

PT-2026-122036

In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the identical response message, received twice. The first thread, A, runs. While it's running, the second one, B, gets partw...

PT-2026-121915

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind a lock...

PT-2026-121923

In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin user regset copyin only copies count bytes, so a PTRACE SETREGSET request with a short iov len leaves the rest of the stack buffer uninitialized. In riscv vr set that...