PT-2026-93597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking issue exists in the s390/vfio-ap component when accessing the matrix dev-mdev list of ap matrix mdev objects. The vfio ap mdev probe function and the vfio ap mdev for queue...

PT-2026-93654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the tracing component. This occurs because options files do not take a trace array reference for the options they represent. If one task opens one of...

CVE-2026-90001: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in structops destroy path hidbpfopsdestroydevice and hidbpfunreg can race on the same registration reference, double-putting struct hiddevice and freeing it while hiddestroydevice stil...

ROS-20260916-73-0010

The vulnerability of the hfscenqueue function in the net/sched/schhfsc.c component of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2026-19666: Use After Free

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

ROS-20260916-73-0032

The vulnerability of the l2capconnect function in the net/bluetooth/l2capcore.c module of the Linux operating system’s Bluetooth kernel implementation is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an...

CVE-2026-19666: Use After Free

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

PT-2026-93831

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 1.14.2 Description A heap-use-after-free issue exists in the H5T conv f f function within src/H5Tconv.c. This occurs during the conversion of a compound datatype containing floating-point members during a dataset read,...

CVE-2026-90041: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

PT-2026-93446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm pagemap migrate populate ram pfn function when populating RAM PFNs with higher-order folios. The problem consists of two main parts: first, higher-order vma...

PT-2026-93682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID sony driver where the sony input configured function adds controllers to the sony device list before the HID core registers the input devices. If the input...

RHEL 9 : libevent (RHSA-2026:67910)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67910 advisory. The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service vi...

PT-2026-93611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the nvmet-auth component during the teardown of a Submission Queue SQ. The function nvmet auth sq free uses cancel delayed work to cancel auth expired work, bu...

PT-2026-93673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbtv media component where an open PCM file can remain active after a USB disconnect. This occurs because usbtv audio free utilizes snd card free when closed,...

PT-2026-93582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IIO buffer implementation. The iio dma fence implementation used kfree for its custom release process, which violates the dma fence requirement that...

CVE-2026-90006: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

The vulnerability of the `ip_vs_bind_dest` function in the `ipvs` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ipvsbinddest function in the ipvs component of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the fib6_rule_suppress() function in the net/ipv6/fib6_rules.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fib6rulesuppress function in the net/ipv6/fib6rules.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...

The vulnerability of the br_multicast_leave_group() function in the net/bridge/br_multicast.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the brmulticastleavegroup function in the net/bridge/brmulticast.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the ioctl component in the kernel of the FreeBSD operating system, which allows a hacker to increase their privileges

The vulnerability of the ioctl component in the FreeBSD operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...