PT-2026-97910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the secretmem component where locked pages are not properly accounted for. The system treats memory as if it were locked using mlock, which should be limited by the...

PT-2026-98097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the acrn virtual machine component. A race condition can occur between the acrn irqfd deassign function and the eventfd EPOLLHUP wakeup, leading to the...

PT-2026-95363

Name of the Vulnerable Software and Affected Versions ABB Freelance Controller DCP versions 2013 through 2019 SP1 ABB Freelance Controller AC700 versions 2013 through 2019 SP1 ABB Freelance Controller AC800 versions 2013 through 2019 SP1 ABB Freelance Controller AC900 versions 2013 through 2019 S...

PT-2026-94565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to properly compare iterator types during state pruning. Specifically, iterator stack slots can be...

PT-2026-94852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UIO Userspace I/O subsystem where a stale pointer is maintained during a failed registration path. After the device add function is called, the UIO device becomes...

PT-2026-94967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-unlock issue exists in the lp5860 device init function. If the lp5860 init dt function fails, a mutex that has already been unlocked is unlocked a second time. A double-unlock...

PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

PT-2026-94930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the printk component. During legacy printing, a handover to another printing context can occur, causing the console SRCU Sleepable Read Copy Update read...

PT-2026-93558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the KVM arm64 component between VNCR TLB invalidation and the vcpu put function during VNCR page unmapping. The issue arises because TLB invalidation occurs...

PT-2026-93456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/ttm component where the ttm pool restore and alloc function fails to drop tt-restore after a successful restore process completed via ttm pool restore commit...

PT-2026-93688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where the get flat ccs offset function incorrectly rounds up the base of the flat CCS Compression Cache Storage storage to 128K. This rounding...

PT-2026-93983

Name of the Vulnerable Software and Affected Versions Cisco Secure Adaptive Security Appliance Software affected versions not specified Cisco Secure Firewall Threat Defense Software affected versions not specified Cisco Secure Firewall Management Center Software affected versions not specified...

CVE-2026-90831

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the bfdelfstrtabdelref function. This could lead to unexpected behavior or system instability...

CVE-2026-89728

A flaw was found in the Linux kernel's I3C Renesas driver. When the I3C bus is empty and software initiates Dynamic Address Assignment DAA, an out-of-bounds access can occur. This is due to an incorrect calculation of the newly discovered devices bitmask, which can lead to system instability or...

CVE-2026-89731

A flaw was found in the Linux kernel. A vulnerability exists in the cxlrchgetaerinfo function, which is responsible for handling CXL/RAS Compute Express Link/Reliability, Availability, and Serviceability AER Advanced Error Reporting capabilities. Due to a mismatch between a software structure and...

CVE-2026-89764

A flaw was found in the Linux kernel's rust: devres component. A race condition exists when two processes attempt to revoke a Devres resource concurrently. This can lead to a use-after-free vulnerability, where one process might free resources that another process is still actively using. Such an...

CVE-2026-89455

A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request IRQ domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the domain's internal data is released before all associated IRQs a...

CVE-2026-89687

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The nfsdfiledoacquire function might attempt to use a file that has not been fully opened, as the -atomicopen operation could return success prematurely. While this scenario is considered highly improbable, it could lead to...

CVE-2026-80958

A flaw was found in the dm-pcache component of the Linux kernel. The tail-kset read operations, used by cachereplay, the writeback worker, and the garbage collection GC worker, incorrectly calculate the length of the data region. This error causes the system to read beyond the intended segment da...

CVE-2026-81006

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI component. During the registration of an IPMI system management interface, an error in the cleanup process can leave a system file sysfs attribute registered even after its associated memory has been released...