CVE-2026-89805: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Fix folio allocation fallback and use-after-put drmpagemapmigratepopulaterampfn had two issues when populating RAM PFNs with higher-order folios: 1. The higher-order vmaallocfolio/folioalloc calls did not pass...

PT-2026-93927

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...

PT-2026-93908

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the MP4Box component within the gf node deactivate ex function located in the src/scenegraph/base scenegraph.c file. This flaw allows a local attacker to execute a manipulatio...

PT-2026-93380

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Bluetooth SCO implementation. The problem occurs because the socket sk is dereferenced in the sco conn ready function without holding the conn-lo...

ALSA-2026:67909 Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

PT-2026-93395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the GPRS Tunneling Protocol GTP implementation. The gtp newlink function error path frees tid hash and addr hash without waiting for a Read-Copy-Update R...

RockyLinux 10 : kernel (RLSA-2026:67471)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67471 advisory. kernel: tls: Use skdstget and dstdevrcu in getnetdevforsock CVE-2025-40149 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improp...

CVE-2026-89938: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

ROS-20260916-73-0062

The vulnerability of the rt9455charger.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-93592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where fragment reassembly reuses the socket buffer skb from the highest-numbered buffered fragment as the merged packet. If that fragment was...

PT-2026-93638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when the resume ioctl and remove ioctl are issued simultaneously. This can lead to a device being resumed after it has been suspended in the dm destroy function,...

CVE-2026-89890: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

CVE-2026-89848: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxxdeleteqpair deletes the request queue before the response queue. qla25xxdeletereqque frees the request queue memory kfreereq in qla25xxfreereqque, but the...

PT-2026-93502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver. In the format 1 path, the virtual port is located on ha-vp list while holding vport slock, but the lock is released before the...

PT-2026-93615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the nvme-fc module of the Linux kernel. The problem occurs when the nvme add ctrl function fails, which can happen under memory pressure or during fault...

PT-2026-93629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the within kprobe blacklist function traverses the kprobe blacklist without holding the kprobe mutex. When a module is unloaded, the kprobe remove area blacklist...

CVE-2026-89789: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronizenet in gtpnewlink error path to prevent use-after-free gtpnewlink's error path frees tidhash and addrhash without waiting for an RCU grace period after clearing skuserdata. A concurrent gtpencaprecv in softirq...

CVE-2026-89801: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-89988: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobeblacklist with RCU withinkprobeblacklist traverses kprobeblacklist without holding kprobemutex. When a module is unloaded, kproberemoveareablacklist removes blacklist entries and immediately frees them with...

PT-2026-93393

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ext4 file system when handling casefolded encrypted directories. The ext4 search dir function performs a pre-check that only verifies if the directory...