CVE-2026-68215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

PT-2026-69744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ueagle-atm driver where the uea probe and uea disconnect functions use inconsistent criteria to distinguish between pre-firmware and post-firmware devices. While u...

PT-2026-69761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the corsair-psu hardware monitoring driver. The issue occurs when the corsairpsu probe function fails after device IO has been started. Because hid hw stop doe...

PT-2026-69621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the nuvoton npcm-video driver. The npcm video probe function allocates the npcm video structure using kzalloc obj but fails to free it during probe error paths or...

PT-2026-69771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the omap2430 probe function where it stores pdev-dev.of node in a local np variable. Because this is a borrowed pointer and the function does not take a reference to i...

PT-2026-69756

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the airoha watchdog driver when the clock frequency is zero. This happens because the clk get rate function can return 0 if the clock provider is unmanaged o...

PT-2026-69949

Name of the Vulnerable Software and Affected Versions UpdateHub OTA client affected versions not specified Description An out-of-bounds and uninitialized-memory read exists in the z impl updatehub probe function within subsys/mgmt/updatehub/updatehub.c. The issue occurs when a probe response from...

PT-2026-69608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vip probe slice function where the error check for devm kzalloc incorrectly utilizes PTR ERR OR ZERO. This results in the function returning 0 when a NULL pointer ...

PT-2026-69607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the vpe probe function returns -ENODEV when the vpe top resource is missing, even after v4l2 device register has successfully completed. Because...

PT-2026-69727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wanxl pci init one function where the allocated card is stored in driver data before the PLX BAR Base Address Register, a mechanism used by PCI devices to request...

PT-2026-69759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the nzxt-smart2 hardware monitoring hwmon component. The problem occurs because calling hid hw stop does not stop device IO, creating a race conditio...

CVE-2026-11810: NULL Pointer Dereference

The UpdateHub firmware-update agent's probe handler zimplupdatehubprobe in subsys/mgmt/updatehub/updatehub.c parses the JSON metadata returned by the update server into a fixed two-level nested-array struct. After parsing it validates only the outer array length objectslen != 2 and then...

PT-2026-69947

Name of the Vulnerable Software and Affected Versions UpdateHub affected versions not specified Description The UpdateHub firmware-update agent contains a flaw in its probe handler z impl updatehub probe within subsys/mgmt/updatehub/updatehub.c. The handler parses JSON metadata from an update...

Linux Distros Unpatched Vulnerability : CVE-2026-68215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering...

Linux Distros Unpatched Vulnerability : CVE-2026-68210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolasse...

Linux Distros Unpatched Vulnerability : CVE-2026-68207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...

CVE-2026-68210: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

SLAC: Access-Driven CPU-To-GPU Side-Channel Attacks Via System-Level Cache on Apple Silicon

Modern heterogeneous System-on-Chip designs integrate CPU cores and a GPU that share a last-level cache LLC or system-level cache SLC. This sharing exposes a new cross-domain attack surface, and existing attacks on integrated platforms either exploit coarse-grained cache-occupancy contention or...

WebSocket / SSE Auth Probe

Tests Socket.io polling transports, SSE streams, and realtime paths for unauthenticated access, open CORS, and missing Origin enforcement. !/usr/bin/env python3 -- coding: utf-8 -- """Probe WebSocket Socket.io and SSE endpoints for weak auth and Origin checks.""" from kittysploit import from...

EUVD-2026-54769

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...