PT-2026-61289

In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana per port queue reset work handler runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc-tx qp and apc-rxqs...

PT-2026-61369

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio integrity map user pin user pages fast can partially succeed and return the number of pages that were actually pinned. However, the bio integrity map user does not handle this parti...

PT-2026-61437

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy reply size In phy prepare data, several strings such as 'name', 'drvname', 'upstream sfp name', and 'downstream sfp name' are allocated using kstrdup. However, these allocations...

PT-2026-61411

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl lock held, a hardif might be retrieved as primary interface of a meshif, but then while operating on this interface getting decoupled from the mes...

PT-2026-61451

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov iter for silencing At transition to the iov iter for PCM data transfer, we blindly applied the iov iter setup also for silencing i.e. data = NULL, and it leads to a calculation of bogus iov iter...

PT-2026-61105

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c get adapter which takes a reference to the embedded struct device. Make sure that the adapter including its struct device has been...

PT-2026-61177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/core component where certain attributes are evaluated as C-strings using strcmp. The use of NLA STRING fails to verify the presence of a null terminator 0,...

PT-2026-61108

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb new modelist to prevent null-ptr-deref in fb videomode to var info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. var to display relies on this and treats a failed fb match...

PT-2026-61126

In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace cannot even attempt to mount it...

PT-2026-61088

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module during the handling of SMB2 compound requests. The smb2 check user session function fails to verify if a session is in the SMB2 SESSION VALID state fo...

PT-2026-61090

In the Linux kernel, the following vulnerability has been resolved: vc screen: fix null-ptr-deref in vcs notifier during concurrent vcs write A KASAN null-ptr-deref was observed in vcs notifier: BUG: KASAN: null-ptr-deref in vcs notifier+0x98/0x130 Read of size 2 at addr qmp cmd name: qmp...

PT-2026-61500

In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 "acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers" ACPI PRM calls are delegated to a workqueue which runs in a kernel thread, making it easier to...

PT-2026-61096

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r addr in nfs4 decode mp ds addr nfs4 decode mp ds addr decodes the r netid and r addr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchrbuf, '.' to locate...

PT-2026-61262

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: serialize iso sock clear timer with socket lock iso sock close calls iso sock clear timer before acquiring lock socksk. iso sock clear timer reads iso pisk-conn twice without the socket lock held: if !iso pisk-con...

PT-2026-61416

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label calls kvfree on cpu job's timestamp and performance query arrays after v3d job cleanup, which drops the job's last reference and fre...

Linux Distros Unpatched Vulnerability : CVE-2026-53382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can retur...

Linux Distros Unpatched Vulnerability : CVE-2026-53385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vcscreen: fix null-ptr-deref in vcsnotifier during concurrent vcswrite A KASAN null-ptr-deref was observed in vcsnotifier: BUG: KASAN: null-ptr-deref in...

Linux Distros Unpatched Vulnerability : CVE-2026-53392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle- version array count from the flexfiles layout body. The value is...

PT-2026-61433

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6 hop ioam Reported by Sashiko: The function ipv6 hop ioam accesses in6 dev getskb-dev-cnf.ioam6 enabled without validating the returned idev pointer. Because addrconf ifdown can...

Linux Distros Unpatched Vulnerability : CVE-2026-63810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not...