CVE-2026-68105 drm/amdgpu: Fix kernel panic during driver load failure

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

SUSE-SU-2026:23062-1 Security update for libarchive

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

CVE-2026-72582

A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTPEmail function in pkg/auth/local.go dereferences a pointer obtained from an unchecked error path without validating i...

CVE-2026-72582

A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTPEmail function in pkg/auth/local.go dereferences a pointer obtained from an unchecked error path without validating i...

CVE-2026-72582 fastschema - Unauthenticated NULL Pointer Dereference DoS in Account Recovery Endpoint

A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTPEmail function in pkg/auth/local.go dereferences a pointer obtained from an unchecked error path without validating i...

CVE-2026-72582

CVE-2026-72582 affects fastschema up to v0.15.1, where a NULL pointer dereference in the sendOTPEmail function (pkg/auth/local.go) dereferences an unchecked error pointer, causing a fatal panic and server crash on a single HTTP request to /api/auth/local/recover. Impact is unauthenticated DoS wit...

PT-2026-69762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ath11k hal srng access begin function. The issue occurs because ATH11K FLAG REGISTERED is set unconditionally during ATH11K QMI EVENT FW READY,...

PT-2026-69728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the nfp cpp resource find function allocates a CPP mutex handle for a matching resource-table entry and reports success even if the allocation fails. When nfp cpp...

CVE-2026-68305: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed after the device is unbound but while the DRM structure remains valid,...

PT-2026-69639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the ttm pool backup function fails to properly account for NULL values or backup handles. These entries cannot be passed to the set pages array ...

PT-2026-69682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the analogix dp component of the drm/rockchip driver where the platform get resource function lacks a proper return value check. This omission can lead to a NULL point...

CVE-2026-68282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: Add missing error check for platformgetresource Add missing error check for platformgetresource return value to prevent NULL pointer dereference when memory resource is not available...

CVE-2026-68310: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915mcubsshetlv and mt7915mcustabfertlv both run after checking HE support, then dereference the HE PHY capability returned by mt76connacgethephycap. That helper can return NULL...

CVE-2026-68291: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig buffers. This fixes possible crashes on reset or rmmod, following failed...

Linux Distros Unpatched Vulnerability : CVE-2026-68176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix mmiotrace possible NULL dereferencing of hiter-dev If the mmiopipeopen fails to find a PCI device, the hiter-dev will be assigned to NULL. The...

Linux Distros Unpatched Vulnerability : CVE-2026-68418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only attempt to populate iwqp-iwpbl if the user-provided...

PT-2026-69745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm mpam module where the destroy component cfg function adds each RIS mbwu state object to the MPAM garbage list during component configuration destruction. Becau...

PT-2026-69539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel during PCIe DPC Downstream Port Containment recovery. When the mlx5 driver reloads functions and replays multiport affiliation event...

CVE-2026-68235: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs e.g. Bonaire, the resource pool contains digital DIG stream encoders plus one analog DAC encoder. When assigning a stream encoder for a second...

CVE-2026-68195: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7615rxcheck and mt7615queuerxskb dispatch it to mt7615mactxfree on every bus. mt7615mactxfree cleans the DMA tx queues with...