PT-2026-98018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when stopping and removing a root bus in the PCI plda component. This occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan or hotpl...

PT-2026-97782

Name of the Vulnerable Software and Affected Versions Evope Collector versions prior to 1.1.7.13 Description An unchecked search path element allows a local attacker without privileges to perform local privilege escalation. By placing a malicious wtsapi32.dll file in the C:ProgramDataEvope...

PT-2026-104936

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

ROS-20260924-73-0022

The vulnerability of the bpfbasertt function in the samples/bpf/tcpbaserttkern.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-97181: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

PT-2026-97721

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read issue exists in the graphics module. This occurs when the software reads data outside the intended boundary of a buffer, which may lead to ...

ROS-20260924-73-0010

The vulnerability of the mt7615mcuwtblstaadd function in the Linux operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260924-73-0001

The vulnerability in Dracut is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-98010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double fput occurs during error handling within the cachefiles create tmpfile function. A double fput is a condition where the reference...

ROS-20260924-73-0032

The vulnerability of the raid10run function in the drivers/md/raid10.c module of the Linux kernel affects several device-related functions such as RAID and LVM. This vulnerability is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker ...

PT-2026-98268

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

ROS-20260924-73-0048

The vulnerability of the logreplay function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-98103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the usbip module within the vhci hcd component. The function status show vhci fails to verify if the hcd pointer returned by platform get drvdata is...

PT-2026-104886

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfs io -f -c "pwrite -b 3m -S 0x61 0 3m" -c "fpunch 1m 1m" -c "seek -h 0" -...

CVE-2026-97411

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

CVE-2026-93814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

PT-2026-98097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the acrn virtual machine component. A race condition can occur between the acrn irqfd deassign function and the eventfd EPOLLHUP wakeup, leading to the...

PT-2026-97809

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

PT-2026-104881

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal remove napi disable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI STATE SCH...

PT-2026-98045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential system hang occurs during module removal in the IBM EMAC MAL driver. The mal remove function calls napi disable unconditionally. Because napi disable is not idempotent, calli...