CVE-2026-13212: Improper Validation of Array Index

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtioisr drivers/virtio/virtiocommon.c, the device-written vq-used-ringidx.id is used directly as an index into vq-recvcbs and vq-desc, which are both allocated with exact...

CVE-2026-74515

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...

CVE-2026-74412

A flaw was found in the rtw88 Wi-Fi driver within the Linux kernel. This vulnerability arises from a type confusion during PCI Advanced Error Reporting AER handling, where a hardware-related pointer is mistakenly interpreted as a network device pointer. This misinterpretation causes the driver to...

CVE-2026-74407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. A race condition exists between the system's reboot or shutdown process and the WLAN firmware crash recovery SSR mechanism. This race condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial...

CVE-2026-74383

A flaw was found in the NVMe-PCI subsystem of the Linux kernel. An out-of-bounds access can occur in the nvmesetupdescriptorpools function when handling Non-Uniform Memory Access NUMA node values on systems configured without NUMA support. This incorrect indexing can lead to a page fault,...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

CVE-2026-74514

A flaw was found in the KVM Kernel-based Virtual Machine s390 PCI component. Incorrect memory accounting in the accountmem and unaccountmem functions, specifically related to the handling of pinned and unpinned pages, can lead to a resource leak. This occurs because the reference count for user...

SUSE CVE-2026-68226

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pciioremapbar in cx23885devsetup. If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, an...

CVE-2026-72290

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for s390 PCI. During the setup of guest interrupt forwarding, a reference count refcount to the Guest Interrupt Service Call GISC may not be properly released if subsequent setup steps fail. This resource leak can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-72270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: s3fb: fix potential memory leak in s3pciprobe In s3pciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in subsequent err...

Linux Distros Unpatched Vulnerability : CVE-2026-74413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pcigetdrvdata type in AER handlers rtw89 stores an ieee80211hw pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-74412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-72290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvms390giscregister registers the guest ISC before pinning the guest interrupt forwarding pages and...

Linux Distros Unpatched Vulnerability : CVE-2026-72272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: radeon: fix potential memory leak in radeonfbpciregister The function radeonfbpciregister allocates memory for modelist by calling radeoncheckmodes which...

Linux Distros Unpatched Vulnerability : CVE-2026-72283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd-producer if updating IRTE for bypass fails Nullify irqfd-producer if...

ANT-2026-PQ3CNCCK · firecracker-microvm/firecracker · Memory Safety / Out-of-Bounds Read+Write (unsafe Rust)

oob-read high CVE-2026-5747 GHSA-776c-mpj7-jm3r Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PQ3CNCCK: Virtio-PCI queue size writable after activation enables host OOB I...

The vulnerability in the drivers/pci/iov.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/pci/iov.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/pci/endpoint/pci-ep-cfs.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/pci/endpoint/pci-ep-cfs.c component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099780 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100331 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3arb A userspace program can trigger the RIVA NV3 arbitratio...