Linux Distros Unpatched Vulnerability : CVE-2026-74456

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and t...

Linux Distros Unpatched Vulnerability : CVE-2026-74500

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix stack info leak in RME Digiface status sndrmedigifacereadstatus reads a four- word status block from the device into an uninitialised...

PT-2026-72634

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle uaudio stream req resolves an interface index with info idx from ifnum, which returns -EINVAL when no interface matches. The enable branch and the...

PT-2026-72952

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digiface status snd rme digiface read status reads a four-word status block from the device into an uninitialised on-stack le32 buf4 and, whenever the vendor control-IN transfer does no...

PT-2026-72633

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set before the service interval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged ...

PT-2026-72268

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims pcu disconnect only intended to perform cleanup when the primary control interface is unbound. However, it currently relies on the interface class to distingui...

PT-2026-72953

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in ump to endpoint create midi2 ump registers a card-owned snd ump endpoint and stores a back-pointer to its per-interface snd usb midi2 ump object in ump-private data, but it never installs an...

PT-2026-72591

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcp find fc interface currently selects the first vendor-specific...

PT-2026-72737

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc mtk intr urb error path When btmtk isopkt pad fails, the previously allocated URB is not freed, leaking the urb structure. Add usb free urb before returning the error...

PT-2026-72954

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out cvts on rawmidi error snd ump attach legacy rawmidi allocates the legacy conversion array ump-out cvts and, on the snd rawmidi new error path, frees it with kfree but leaves ump-out cvts pointing...

Linux Distros Unpatched Vulnerability : CVE-2026-74441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work...

PT-2026-72957

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ALSA 6fire driver. The driver fails to handle a pending USB Request Block URB—a data structure used to manage USB communication—during the error...

Linux Distros Unpatched Vulnerability : CVE-2026-74499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write in sndusbmidiakaioutput sndusbmidiakaioutput computes its fill- loop bound bufend = ep-maxtransfer - MAXAKAISYSEXLEN - 1; as a...

Linux Distros Unpatched Vulnerability : CVE-2026-74458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: etases58x: es58xreadbulkcallback: fix RX buffer leak on URB resubmit failure es58xreadbulkcallback resubmits the RX URB after processing a received packet...

SUSE CVE-2026-68368

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...

SUSE CVE-2026-68369

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to user space. copytouser returns the number of bytes not copied, so wh...

SUSE CVE-2026-68372

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

SUSE CVE-2026-68373

In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...

Vulnerability of the can/usb/ems_usb.c component in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability in the can/usb/emsusb.c component of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...