PT-2026-72360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management initialization where section activate reuses the unoptimized boot memmap when DAX memory is hotplugged into an unoccupied subsection of an early...

PT-2026-72751

In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc lookup file file hash digests the first LOCKD FH HASH SIZE bytes of nfs fh.data when bucketing nlm files, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR...

PT-2026-72365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Error paths within the damon sysfs access pattern add dirs and damon sysfs scheme add dirs functions release directory references in the incorrect order. Specifically, in access pattern...

PT-2026-72209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip vs conn new function where ip vs conn objects allocated via kmem cache alloc do not have their init seq and previous delta fields within the ip vs seq structure...

PT-2026-72635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCTP DIAG endpoint dumping process. The system traverses endpoint address lists without holding the lock sock lock, while these lists can be modified...

PT-2026-72971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pinctrl devicetree component where the dt remember or free map function duplicates the dev name for each map entry. If the kstrdup const function fails, the dt fre...

PT-2026-72338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the xprt create args structure is allocated on the stack without initialization within the rpc sysfs xprt switch add xprt store function. Although some fields are...

PT-2026-73029

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak occurs in the Linux kernel when processing MPLS routes. The mpls getroute function constructs an RTM NEWROUTE reply for an RTM GETROUTE request using a struct rtmsg...

CVE-2026-72447: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...

PT-2026-72584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the adm1275 probe function where an out-of-bounds stack read can occur during device-name comparison. The function i2c smbus read block data reads up to 32 bytes into...

CVE-2026-74577: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtmtos in mplsgetroute mplsgetroute builds the RTMNEWROUTE reply to an RTMGETROUTE request by filling a struct rtmsg allocated from an skb whose data area is not zeroed allocskbNLMSGGOODSIZE, .... It sets...

Linux Distros Unpatched Vulnerability : CVE-2026-74507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: HIDP: validate numbered report payloads When hidpgetrawreport waits for a numbered report, hidpprocessdata compares the expected report number with...

Linux Distros Unpatched Vulnerability : CVE-2026-72444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested...

PT-2026-72364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An internal error exists in the damon sysfs scheme add dirs function. The function sets up the tried regions directory after the stats directory setup is complete. If the tried regions...

Linux Distros Unpatched Vulnerability : CVE-2026-72150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in...

MINI-49VV-9WP2-2X8G

Bulletin has no description...

MINI-357R-6HF8-FVJ3

Bulletin has no description...

CVE-2026-21279

creationtimestamp| type| source ---|---|--- 2026-08-14 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mt2xip67xd23...

CVE-2026-70629

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability exists in the native RSCC decoder. An attacker can supply a crafted video file with a compressed tile that decompresses fewer bytes than required. This leads to the unwritten portion of an intermediate buffer being copied...

CVE-2026-70630

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...