PT-2026-121998

In the Linux kernel, the following vulnerability has been resolved: regulator: of: fill in supply names in of regulator bulk get all of regulator bulk get all returns an array it allocated itself, and fills in only the consumer of each entry. Every other way of getting a bulk array has the supply...

PT-2026-122000

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of regulator bulk get all of regulator bulk get all allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c...

PT-2026-121933

In the Linux kernel, the following vulnerability has been resolved: btrfs: unlock inode and extent in caller when io uring read extent fails btrfs uring read extent runs only after btrfs encoded read has taken the inode shared lock and the extent lock. On failure it used to unlock in out fail, an...

PT-2026-121840

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free write occurs in the ksmbd module during connection teardown. The ksmbd sessions deregister function only removes channels from other sessions if the conn-binding flag is...

PT-2026-121948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gpio exar component where the gpio exar probe function stores the allocated ID in exar gpio only after registering a cleanup action. Because devm add action or res...

PT-2026-121988

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: serialise sco conn lifetime against sco recv scodata sco recv scodata upgrades the weak hcon-sco data back-pointer to a strong reference under hdev-lock: hci dev lockhdev; hcon = hci conn hash lookup handlehdev,...

PT-2026-122049

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c "net: ipv4: Emit notification when fib hardware flags are changed" added an RCU-only fib nlmsg size call for asynchronous hardware flag...

PT-2026-122037

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7603: initialize global station WCID mt7603 uses a driver-private global station WCID for frames that have neither a station nor a vif, including frames injected through a monitor interface. Unlike the core global...

PT-2026-121924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PFCP Packet Forwarding Control Protocol implementation where pfcp encap recv fails to ensure that the 8-byte Session Endpoint Identifier SEID is in the linear area...

PT-2026-121985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the rfcomm dev shutdown function when an RFCOMM tty is closed. This happens because rfcomm dev add adds a new device to the rfcomm dev list before...

PT-2026-121967

In the Linux kernel, the following vulnerability has been resolved: namespace: check a submount for references right before unmounting it shrink submounts and mark mounts for expiry first collect all the mounts they are allowed to unmount and then unmount them. Whether a mount is busy is decided ...

PT-2026-121905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists on AMD platforms where holding a USB3 hub Power Management PM runtime reference for 200ms during hub resume causes system crashes. This has been observed by users running...

PT-2026-121852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 driver where invalid data within dec output info can lead to the driver writing to invalid memory. This occurs due to a buffer overflow in the wave5 vpu dec...

PT-2026-122030

In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipc node find by name returns a node after dropping its RCU read lock without taking a reference. The LINK SET, LINK GET and LINK RESET STATS handlers then lock and access the...

PT-2026-122044

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix local root reference leak in scrub print warning inode When paths from inode fails, scrub print warning inode jumps to err without dropping the reference taken by btrfs get fs root, leaking a reference to the ro...

PT-2026-121956

In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace It's possible to add autmounts even when the parent mount isn't in the mount namespace of the caller. The only requirement we have is that the parent mount...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792749577)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792749577 advisory. - In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because after caviumptpget obtains a reference to a PTP PCI device via pcigetdevice, if subsequent initialization steps fail, it fails to release that reference,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because setqueuepropertiesfromcriu fails to call kfdqueueacquirebuffers to populate the buffer fields of queueproperties during CRIU recovery. Subsequent code assumes these...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.1. It arises from the failure to properly halt V3D interrupt handling during runtime suspension; as a result, synchronizeirq cannot wait for interrupts on ARMCTRL that have not yet reached handlelevelirq. This allows vc4irq to execute afte...