PT-2026-69672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference exists in the amdgpu driver. An unprivileged process in the render group can trigger this by submitting an AMDGPU CHUNK ID CP GFX SHADOW chunk with the length ...

CVE-2026-68254: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CVE-2026-68297: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minimum bound, not a maximum. When a user sets the MTU to a value exceedin...

PT-2026-69697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Transparent Inter-Process Communication TIPC implementation where the TIPC NL MEDIA SET and TIPC NL BEARER SET endpoints fail to enforce a maximum bound on...

PT-2026-69564

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the damon set regions function fails to validate that input ranges are sorted by address and do not overlap. This lack of validation can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-68254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through th...

Linux Distros Unpatched Vulnerability : CVE-2026-68297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minim...

PT-2026-69565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description DAMON core logic assumes that zero length regions do not exist. However, certain API callers, including DAMON SYSFS, DAMON RECLAIM, and DAMON LRU SORT, allow users to set empty monitorin...

PT-2026-69802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 is element inherited function where the first data octet of a candidate element is read to check an extension non-inheritance list without verifying if th...

PT-2026-69788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb3 simple fallocate range function where the system may skip holes when an allocated range returned by the server starts before the current fallocate offset. Thi...

CVE-2026-68145: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and len is 0, the unsigned subtraction underflows to SIZEMAX, producing a...

CVE-2026-68165: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damonsetregions DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMONSYSFS, DAMONRECLAIM and DAMONLRUSORT allow users to set empty monitoring...

PT-2026-69654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Variable Refresh Rate VRR implementation where the system fails to explicitly ensure that the minimum and maximum vertical frequencies vfreq provided by the Extend...

CVE-2026-68356: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdtfreq as a divisor directly in...

Linux Distros Unpatched Vulnerability : CVE-2026-68106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0...

Linux Distros Unpatched Vulnerability : CVE-2026-68388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip holes when an allocated range returned by the server starts befor...

PT-2026-69819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/irdma component where a user application can invoke the rereg mr function on special memory regions used during the creation of QP, CQ, or SRQ objects. These...

CVE-2026-68106: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264...

PT-2026-69506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the drm/amdgpu component during H264 and H264 Perf decode paths. This happens when the width or height of a frame is less than 16, causing the width in mb or...

PT-2026-69524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap write exists in the MCTP serial receive state machine. The issue occurs in the mctp serial push header function when a frame length byte of zero is processed. Becau...