SUSE CVE-2026-64242

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

SUSE CVE-2026-64244

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem-altmap after successful device registration If addmemoryblock fails at xastore under memory pressure for example, deviceunregister is called, which eventually triggers memoryblockrelease with mem-altm...

SUSE CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

Linux Distros Unpatched Vulnerability : CVE-2026-64476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio/pci: Latch disableidled3 per device When disableidled3 was introduced in vfio-pci, it directly manipulated the device power state with pcisetpowerstate...

PT-2026-64657

In the Linux kernel, the following vulnerability has been resolved: net: af key: initialize alg key len for IPComp states pfkey msg2xfrm state handles the IPComp SADB X SATYPE IPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmalloc objx-calg; if !x-calg err = -ENOME...

PT-2026-64503

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm translate vncr races MMU notifier In the case that kvm translate vncr races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to k...

PT-2026-64724

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write raw error kxsd9 write raw takes a runtime PM reference with pm runtime get sync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping th...

PT-2026-64623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the smb sync perf buffer function within the coresight ultrasoc-smb component. When the SMB sink operates as a perf AUX sink, the smb update buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-64494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it...

Linux Distros Unpatched Vulnerability : CVE-2026-64493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure ...

Linux Distros Unpatched Vulnerability : CVE-2026-64499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119triggeredbufferpreenable resumes the device with pmruntimeresumeandget before starting a...

Linux Distros Unpatched Vulnerability : CVE-2026-64301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. O...

PT-2026-64715

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002 read raw calls pm runtime get sync before reading the lux value, but if gp2ap002 get lux fails, it returns directly. This skips the pm runtime put autosuspend call ...

PT-2026-64608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. A response-bearing attempt may return a replayable error and free its response buffer. If the SMB2 query directory init function fails befor...

PT-2026-64583

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lg g15 data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lg g15 event and lg g15 v2 event do i...

Linux Distros Unpatched Vulnerability : CVE-2026-64402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: ultrasoc-smb: Fix OOB write in smbsyncperfbuffer When the SMB sink is used as a perf AUX sink, smbupdatebuffer calls smbsyncperfbuffer to copy hardwa...

CVE-2026-55985

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...

CVE-2026-60135 Weintek cMT3092X Incorrect User Management

An attacker can modify data that should be restricted to read‑only access...

CVE-2026-60135

No technical details are publicly available in the provided documents. Monitor for updates.

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes RHACM and multicluster-engine MCE. The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke...