PT-2026-97903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the vdec try fmt common function when VIDIOC TRY FMT is called with an unsupported pixel format on the OUTPUT queue. The system attempts to fall back...

PT-2026-97909

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla consume iocb function over-consumes the response queue. This occurs because qla24xx process response queue advances the ring ptr...

CVE-2026-97508: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

CVE-2026-93786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and...

PT-2026-97872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IR...

PT-2026-97876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where Bluetooth enablement fails intermittently with a timeout error. The problem occurs because the hci send cmd sync function uses skb clone ...

PT-2026-97897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of gigantic bootmem HugeTLB pages. These pages are initialized via hugetlb init, but page alloc init late executes earlier and examines pageblocks to...

PT-2026-97908

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory control group memcg where dying tasks can become stuck in the exit path for extended periods. This occurs when the oom reaper a kernel mechanism that attemp...

PT-2026-97935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where the kernel may be tainted due to an unexpected warning during driver unbind. When a device is wedged in mode 2 UPON ANY HANG NO RESET, a GSC...

PT-2026-97939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the OCFS2 file system within the ocfs2 init acl function. The issue occurs between the &oi-ip xattr sem and &journal-j trans barrier locks. A...

PT-2026-97944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fs-integrity component of the block layer where the system fails to properly check BIP CHECK flags before generating or verifying Protection Information PI. This...

PT-2026-97945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the make bad inode function is used within ocfs2 read inode block full. Because make bad inode resets the inode type to S IFREG, applying this t...

PT-2026-97951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/efa component during memory region MR registration. When creating an indirect Page Boundary List PBL, the system generates a chunk list to store PBL page...

PT-2026-97964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/bnxt re component where destroy callbacks zero the udata output after driver resources are torn down. If userspace access fails, uverbs preserves the uobject...

CVE-2026-93799

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93823

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

CVE-2026-93231

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93265

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-97425

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

CVE-2026-93782: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when commands are submitted. Target-core completes those commands asynchronously, so VHOSTSETMEMTABLE can replac...