Linux Distros Unpatched Vulnerability : CVE-2026-74456

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and t...

PT-2026-72265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the debug logging of the ims pcu irq function. The issue occurs because the function unconditionally prints data from pcu-urb in buf, even when the...

Linux Distros Unpatched Vulnerability : CVE-2026-74498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fillmax is set When a USB audio endpoint requests full packet transfers via the fillmax descriptor flag...

PT-2026-72950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the ALSA usb-audio component when the fill max descriptor flag is set. The data ep set params function promotes ep-curpacksize to ep-maxpacksize, but the...

CVE-2026-74502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew error path, frees it with kfree but leaves ump-outcvts pointing at the...

PT-2026-72912

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ems usb read bulk callback function where CPC CAN Protocol Control messages packed in a USB receive buffer are not properly validated. The function fails to verify...

PT-2026-72952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the ALSA usb-audio component specifically affecting RME Digiface status. The function snd rme digiface read status reads a status block into an uninitialize...

Linux Distros Unpatched Vulnerability : CVE-2026-74501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...

CVE-2026-74501: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...

Linux Distros Unpatched Vulnerability : CVE-2026-74500

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix stack info leak in RME Digiface status sndrmedigifacereadstatus reads a four- word status block from the device into an uninitialised...

CVE-2026-74500: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digiface status sndrmedigifacereadstatus reads a four-word status block from the device into an uninitialised on-stack le32 buf4 and, whenever the vendor control-IN transfer does not...

Linux Distros Unpatched Vulnerability : CVE-2026-74460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in t...

PT-2026-72953

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA usb-audio component. The create midi2 ump function registers a snd ump endpoint and stores a back-pointer to a snd usb midi2 ump object in the...

SUSE CVE-2026-68367

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response from process context. The delayed work uses ftcm private state and ma...

SUSE CVE-2026-68368

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...

SUSE CVE-2026-68369

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to user space. copytouser returns the number of bytes not copied, so wh...

SUSE CVE-2026-68372

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

SUSE CVE-2026-68373

In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...

The vulnerability of the can/usb/esd_usb.c component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability in the can/usb/esdusb.c component of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the can/usb/ems_usb.c component in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability in the can/usb/emsusb.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...