Linux Distros Unpatched Vulnerability : CVE-2026-93121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint- disabled ESHUTDOWN and request-allocation failure ENOMEM in...

Linux Distros Unpatched Vulnerability : CVE-2026-90101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Fix call to hardware monitoring event handler The first parameter of hwmonnotifyevent is supposed to be the hardware monitoring device. The bnxt driver...

CVE-2026-61714: Heap-based Buffer Overflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

Linux Distros Unpatched Vulnerability : CVE-2026-92505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is...

PT-2026-96070

Name of the Vulnerable Software and Affected Versions Eclipse iceoryx2 versions greater than v0.8.0 Description The StaticString component exposes its contents as mutable bytes through safe APIs. The String::as str function converts these bytes into a Rust string slice without validating UTF-8...

Linux Distros Unpatched Vulnerability : CVE-2026-93048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in...

DEBIAN-CVE-2026-93121

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM in ffsdmabuftransfer jump to errfenceput which calls dmafenceput on the...

CVE-2026-93121

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM in ffsdmabuftransfer jump to errfenceput which calls dmafenceput on the...

AZL-102063 CVE-2026-93048 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in addmtddevice when called through the BLKPG ioctl on NAND devices. The...

DEBIAN-CVE-2026-92505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is not NULL but points to an invalid memory location the list head...

CVE-2026-92505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is not NULL but points to an invalid memory location the list head...

DEBIAN-CVE-2026-90101

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix call to hardware monitoring event handler The first parameter of hwmonnotifyevent is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This AP...

AZL-102525 CVE-2026-90055 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

SUSE CVE-2026-89806

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fbsize calculation The framebuffer size calculation fbsize = linebytes height can overflow when both values are large e.g., 46341 46341 INTMAX. Since linebytes and height are both int...

SUSE CVE-2026-89876

In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefined behavior...

SUSE CVE-2026-89943

In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongsoncardparseacpi, the return value of devicepropertyreadstring for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitializ...

CVE-2026-93121

CVE-2026-93121 affects the Linux kernel in the USB gadget f_fs subsystem. The flaw is in ffs_dmabuf_transfer(): the error paths for endpoint-disabled (ESHUTDOWN ) and request-allocation failure (ENOMEM ) call dma_fence_put() on a fence object that has only been kmalloc'd but not yet initialized w...

CVE-2026-93121 usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM in ffsdmabuftransfer jump to errfenceput which calls dmafenceput on the...

EUVD-2026-82229

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix fence cleanup in ffsdmabuftransfer error paths The error paths for endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM in ffsdmabuftransfer jump to errfenceput which calls dmafenceput on the...

CVE-2026-93048

CVE-2026-93048 affects the Linux kernel MTD partition subsystem. The function mtd_add_partition() fails to reject the special offset value MTDPART_OFS_RETAIN (-3) , which was originally added only for the static partition table path. When passed via the BLKPG ioctl on NAND devices, the RETAIN siz...