Linux Distros Unpatched Vulnerability : CVE-2026-68370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared usbrequest dum-fiforeq that the emulated single-request FIFO...

Linux Distros Unpatched Vulnerability : CVE-2026-68344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect ueaprobe...

Linux Distros Unpatched Vulnerability : CVE-2026-68194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only even...

CVE-2025-30240: Improper Link Resolution Before File Access

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...

Linux Distros Unpatched Vulnerability : CVE-2026-68374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously...

Linux Distros Unpatched Vulnerability : CVE-2026-68349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: fix buffer overflow in rxstream failover path The failover continuation in carl9170rxstream copies the full tlen from the second USB transfer...

CVE-2026-68193: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

CVE-2026-68369: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to user space. copytouser returns the number of bytes not copied, so wh...

CVE-2026-68088: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndisqueryresponse, and perform a length check on them. This is identical to how rndissetresponse handle...

Linux Distros Unpatched Vulnerability : CVE-2026-68368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not...

PT-2026-69594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the RX worker when handling PKT TYPE TXRX NOTIFY events on non-mmio buses, such as USB and SDIO. The functions mt7921 rx check and mt7921 queue rx sk...

PT-2026-69616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pwc media component when the start streaming function returns an error without returning queued buffers via vb2 buffer done. This happens during two specific...

PT-2026-69769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb gadget printer component where the printer read function uses a single variable to track both the requested copy size and the actual bytes copied to user space...

PT-2026-69772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB core port handling where the connector unbind function fails to call typec deattach, creating an asymmetry with the connector bind function. When a Thunderbolt...

Linux Distros Unpatched Vulnerability : CVE-2026-68410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertas: fix memory leak in helperfirmwarecb helperfirmwarecb neglects to free the single- stage firmware image after a successful async load, leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-68231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

Linux Distros Unpatched Vulnerability : CVE-2026-68373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before...

Linux Distros Unpatched Vulnerability : CVE-2026-68367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response...

Linux Distros Unpatched Vulnerability : CVE-2026-68371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe...

PT-2026-69749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the carl9170 rx stream function within the wifi carl9170 driver. The issue occurs during the failover continuation process when the system copies the full tle...