PT-2026-116921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where the HT/VHT channel definition validator fails to properly handle a 320 MHz bandwidth indication from a received Channel Switch...

PT-2026-116623

Name of the Vulnerable Software and Affected Versions cgltf versions prior to 1.16 Description A heap out-of-bounds read occurs in the cgltf accessor unpack floats function when the sparse values cursor is advanced by the base bufferView byteStride. An attacker can provide a specially crafted glT...

CVE-2026-98499: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract, resulting in memory reads at incorrect addresses -- possibly beyond the end...

PT-2026-117006

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in rhtab map lookup and delete batch bpf mem cache free rcu uses this cpu ptr which requires migration to be disabled. All callers of rhtab delete elem disable migration except rhtab map look...

PT-2026-116613

smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashe...

PT-2026-128523

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read dts node of clk get returns a clock with its reference count incremented, but read dts node only uses it to read the rate and never calls clk put. The clock is not stored anywhere, so the...

PT-2026-116718

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.105 Description An out-of-bounds read exists in the wacom wac pen serial enforce function. The issue occurs when a field in the HID descriptor lists more usages than the Report Count reserves space for,...

PT-2026-116616

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta decoder process stream and tta decoder process frame because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 wi...

PT-2026-116823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovpn component where struct ovpn bind is published through peer-bind using RCU Read-Copy-Update, but local endpoint learning updates bind-local in place while...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from the function rtmt6check, which allows the configuration of rtinfo-addrnr to 0 when the request address matches certain conditions. This bypasses the loop termination condition in the IP6TRTFSTNSTRICT path...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability stems from wfxhifreadmib, which does not verify the MIB read length before copying the firmware response into the caller’s buffer. It also does not check whether reply-length exceeds vallen. This could lead to a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises from the thunderbolt driver not restricting the length of XDomain response data. Malicious peers can set the length field to 63, causing the driver to process data in 48-byte chunks and exceeding the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 has a security vulnerability. This vulnerability arises from the fact that the function ipv6findhdr does not verify whether the length of the extended header exceeds the end of the packet. As a result, the offset may point outside the packet’s end. In this case,...

PT-2026-116641

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with tit...

PT-2026-128351

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with tit...

Security update for libX11 (moderate)

openSUSE security update: security update for libx11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22055-1 Rating: moderate References: bsc1281653 bsc1281657 bsc1281661 Cross-References: CVE-2026-94283 CVE-2026-94284 CVE-2026-94285 CVSS scores:...

PT-2026-128367

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix underflow in ANA log bounds checks The number of ANA groups advertised through Identify Controller sizes the ANA log buffer. The ANA log header and group descriptors independently supply the number of groups a...

Linux Distros Unpatched Vulnerability : CVE-2024-58392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in PHYSFSutf8codepoint that allows attackers to read past name buffers via an off-by-one...

Linux Distros Unpatched Vulnerability : CVE-2026-98828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting...

PT-2026-116801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the st21nfca hci i2c repack function where received frames are trimmed at the EOF marker before byte stuffing is removed. The function assumes the truncated frame...