PT-2026-94921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check kfunc args function fails to bound kfunc arguments named rdonly buf size or rdwr buf size. These values are stored in meta-r0 size a...

PT-2026-94559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem on s390 architecture where a Read-Modify-Write RMW atomic operation on an arena pointer fails to clear the destination register during a fault over a...

CVE-2026-90211: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

PT-2026-94448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ptp netc component where the max period bound in the net timer enable perout function is computed in a way that can exceed U32 MAX. This leads to a situation where...

PT-2026-94701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt7915 wireless driver. When mt7915 register ext phy succeeds but a subsequent failure occurs in mt7915 init debugfs or mt7915 coredump register, the...

PT-2026-94959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the hwrng registerrng function. When the function attempts to set the rng to current rng and fails, it returns an error without removing the rng from the...

PT-2026-94986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cros typec register partner pdos function where partner Power Delivery Objects PDOs are copied from the EC TYPEC STATUS response into a fixed-size array caps...

PT-2026-94684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial core where the uart register driver function fails to clear pointers when errors occur. Specifically, if tty alloc driver fails, drv-state continues to poin...

PT-2026-94799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi protocol table register function fails to properly roll back registrations. When a later entry in an ID table fails,...

PT-2026-94500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A session leak occurs in the ksmbd session register function. When the xa store function fails during the session registration process, the session is not properly removed from the...

PT-2026-94951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the register aes algs function where the AEAD algorithms are registered before the skcipher algorithms. If the skcipher registration fails, the function attempts to...

PT-2026-94750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhi register controller function where the controller device is added before the optional trigger edl sysfs file is created. If the sysfs create file function fail...

PT-2026-94770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An IO remapping leak occurs in the mtk clk register pllfhs function when it fails to register a PLL. While the function attempts to unregister all PLLs and perform cleanup in its error...

Exploit for CVE-2026-12793

CVE-2026-12793 — JetFormBuilder Unauthenticated Privilege Esca...

DEBIAN-CVE-2026-89903

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

DEBIAN-CVE-2026-89905

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...

AZL-101280 CVE-2026-89903 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

DEBIAN-CVE-2026-89869

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

EUVD-2026-80505

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...

CVE-2026-89905 LoongArch: BPF: Move arena register slot below TCC context

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...