Linux Distros Unpatched Vulnerability : CVE-2026-68374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously...

PT-2026-69767

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB gadget f tcm module where the set alt path defers endpoint setup to a work item. This delayed work utilizes f tcm private state and may attempt to complete the...

PT-2026-69749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the carl9170 rx stream function within the wifi carl9170 driver. The issue occurs during the failover continuation process when the system copies the full tle...

PT-2026-69631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the airspy media component where queued buffers leak if the airspy start streaming function returns an error. This occurs when the USB device is disconnected s-udev ==...

CVE-2026-68374: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

CVE-2026-68366: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: clamp SENDRESPONSE length to the response buffer uvcsendresponse builds the UVC control response from a user-supplied struct uvcrequestdata: req-length = mintunsigned int, uvc-eventlength, data-length;...

CVE-2026-68365: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: cap received transmit credits The interrupt-status packet reports transmit credits returned by the device. edgeinterruptcallback adds the 16-bit value to txCredits without checking maxTxCredits. edgewrite...

PT-2026-69622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msi2500 driver where the msi2500 start streaming function fails to return queued buffers when an error occurs. The vb2 framework provides buffers via buf queue...

Linux Distros Unpatched Vulnerability : CVE-2026-68368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not...

PT-2026-69770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dummy hcd component of the USB gadget subsystem where a shared usb request dum-fifo req can be reused prematurely during the giveback process. The dummy queue...

CVE-2026-68368: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...

PT-2026-69768

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f ncm USB gadget driver where the ncm unwrap ntb function fails to properly validate datagram bounds when unpacking host-supplied Network Control Model NCM packets...

CVE-2026-68344: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect ueaprobe distinguishes a pre-firmware device from a post-firmware one using the USB id UEAISPREFIRM, and stores a different object as the interface data i...

CVE-2026-68367: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response from process context. The delayed work uses ftcm private state and ma...

PT-2026-69489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the USB gadget RNDIS function where the rndis query response function fails to perform adequate length checks on the BufLength and BufOffset variables. This lack of...

PT-2026-69627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cx231xx media driver where device managed resources are tied to the parent USB device instead of the USB interface. This can lead to memory leaks when drivers are...

PT-2026-69774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the USB core sysfs implementation. The function bos descriptors read accesses the udev-bos variable without proper synchronization. This variable can be...

PT-2026-69744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ueagle-atm driver where the uea probe and uea disconnect functions use inconsistent criteria to distinguish between pre-firmware and post-firmware devices. While u...

CVE-2026-68410: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helperfirmwarecb helperfirmwarecb neglects to free the single-stage firmware image after a successful async load, leading to a memory leak in the USB firmware-download path. Fix this memory leak...

CVE-2026-68193: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...