Linux Distros Unpatched Vulnerability : CVE-2026-64325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at...

Linux Distros Unpatched Vulnerability : CVE-2026-64258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: remove request-less entries from entwreqqueue to fix NULL deref If a copy into the userspace ring buffer fails, a request will be terminated and...

Linux Distros Unpatched Vulnerability : CVE-2026-64484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before...

PT-2026-64552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the vep dequeue function within the usbip vudc component. The issue occurs because vep alloc request fails to initialize the vrequest-udc variable...

PT-2026-64707

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd cmipci spdif controls does not check the return value before dereferencing kctl-id.device, which can lead to a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-64295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: pageext: add count limit to pageextiternext to prevent invalid PFN access The pageext iteration API does not validate if the PFN still belongs to a valid...

Linux Distros Unpatched Vulnerability : CVE-2026-64457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NU...

Linux Distros Unpatched Vulnerability : CVE-2026-64412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to requestmodule...

PT-2026-64546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mt76 WiFi driver when processing a channel-switch announcement CSA beacon. When cfg80211 queues a wiphy work item that calls the functions mt7921...

PT-2026-64626

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci conn: Fix null ptr deref in hci abort conn hci abort conn read hci skb eventhdev-sent cmd when a connection was pending, but hdev-sent cmd can be NULL while req status is still HCI REQ PEND, leading to a NULL point...

PT-2026-64701

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. The ice1712 driver calls snd ctl new1 without checking the return value before dereferencing the pointer in multiple places...

PT-2026-64638

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker debugfs add creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both count objects and scan objects, which is not...

PT-2026-64516

In the Linux kernel, the following vulnerability has been resolved: mm: page ext: add count limit to page ext iter next to prevent invalid PFN access The page ext iteration API does not validate if the PFN still belongs to a valid section while advancing the iterator. When dynamically adding memo...

PT-2026-64479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the fuse-uring component. When a copy into the userspace ring buffer fails, the fuse uring req end function sets ent-fuse req to NULL but leaves the...

PT-2026-64637

In the Linux kernel, the following vulnerability has been resolved: mm: swap cgroup: fix NULL deref in lookup swap cgroup id on swapless host lookup swap cgroup id passes swap cgroup ctrltype.map to swap cgroup id lookup without checking that the type was ever registered via swap cgroup swapon. O...

PT-2026-64648

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORT ID DJ SHORT related user initiated OOB write" added validation for the DJ short output report, but the error...

PT-2026-64633

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request module...

Linux Distros Unpatched Vulnerability : CVE-2026-64417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both count and scan debugfs files unconditionally. That assumes every shrinker...

Linux Distros Unpatched Vulnerability : CVE-2026-64227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device ID...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return valu...