PT-2026-64701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ice1712 driver in the Advanced Linux Sound Architecture ALSA fails to verify the return value of the snd ctl new1 function. When memory allocation fails, snd ctl new1 returns NULL;...

PT-2026-64518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...

PT-2026-67780

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-67786

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's crypto krb5 implementation. The functions krb5 aead encrypt, krb5 aead decrypt, rfc8009 encrypt, and rfc8009 decrypt set a NULL...

PT-2026-64719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Industrial I/O IIO buffer hardware consumer where the scan mask is not properly freed during buffer release. This occurred because the scan mask storage was moved ...

PT-2026-64703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA gus component. The function snd gf1 pcm volume control fails to verify the return value of snd ctl new1, which can return NULL during memory...

PT-2026-64578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs exchmaps estimate overhead function incorrectly performs a UINT MAX check. The function adds bmbt and rmapbt overhead to a local...

PT-2026-64513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iommufd component, memory allocation for veventq occurs inside a spinlock. Because the queue depth is determined by user space, a user can allocate excessively large queues to...

PT-2026-67784

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-64710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA ymfpci component. The function snd ymfpci create spdif controls fails to verify the return value of snd ctl new1, which can return NULL duri...

Linux Distros Unpatched Vulnerability : CVE-2026-64350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo...

Linux Distros Unpatched Vulnerability : CVE-2026-64357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmap...

Linux Distros Unpatched Vulnerability : CVE-2026-64292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happen...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocatio...

PT-2026-64509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nv component where a NULL VNCR pseudo-TLB may be dereferenced. This occurs during VNCR TLB invalidation triggered by MMU notifiers or TLBI instructions,...

PT-2026-64571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the cdnsp alloc stream info function. The function allocates stream info-stream ctx array using cdnsp alloc stream ctx. If a subsequent stream ring allocation or...

CVE-2026-64489: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64482: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

CVE-2026-64486: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...