CVE-2026-68239

CVE-2026-68239 affects the Linux kernel DRM TTM code, specifically the ttm_pool_backup path. The issue arises because ttm_pool_backup could encounter NULL or backup handle entries (ttm_backup_page_ptr_is_handle()) which were not safely guarded for set_pages_array_wb() and could be freed erroneous...

EUVD-2026-55333

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

CVE-2026-68232

CVE-2026-68232 affects the Linux kernel DRM/GPU virtualization path (drm_gpusvm). The issue is a MM reference leak in drm_gpusvm_range_evict when kvmalloc_array() fails, leaving a previously acquired MM reference unreleased. The documented remediation is to drop the MM reference on the kvmalloc_a...

CVE-2026-68232 drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

CVE-2026-68154 libceph: reject zero bucket types in crush_decode

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

CVE-2026-68147 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the filesystem's list of block devices, then iterates over them and calls...

CVE-2026-68147

Summary: CVE-2026-68147 affects the Linux kernel fscrypt subsystem. When a blk_crypto_key is evicted, the code previously allocated a list of block devices on the heap; allocation failures could lead to premature key free and a use-after-free. The fix switches to an on-stack array to enumerate bl...

EUVD-2026-55532

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the filesystem's list of block devices, then iterates over them and calls...

PT-2026-69644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915/gem component where a memory leak occurs during proto context error handling. Specifically, after a successful BALANCE/PARALLEL SUBMIT extension during...

CVE-2026-68244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

PT-2026-69499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the set ntacl dacl function may stop copying Access Control Entries ACEs before processing the entire input Discretionary Access Control List DA...

PT-2026-69662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pvr set uobj array function where kernel objects are copied to a userspace array. When the out-stride variable differs from the kernel object size, the slow path...

PT-2026-69776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP implementation where the auth hmacs array within struct sctp cookie is incorrectly sized. The array is intended to store a complete SCTP AUTH HMAC ALGO...

PT-2026-69554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libceph component where the crush decode function fails to reject zero bucket types. Since CRUSH bucket type 0 is reserved for devices, a malformed CRUSH map can...

PT-2026-69629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Cedrus driver where it processes H.264 ref pic list0 and ref pic list1 entries from stateless slice control. The driver uses these indices to perform lookups in th...

PT-2026-69632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the drm gpusvm range evict function. This happens when the kvmalloc array function fails, causing the previously acquired MM Memory Management reference to...

Linux Distros Unpatched Vulnerability : CVE-2026-68154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify le...

JLSEC-2026-1226

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

CVE-2026-47249

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connected peer can send a compressed RequestDataTypeHashArrayType direct request that is only 442 bytes on the wire but expan...

EUVD-2026-54713

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connected peer can send a compressed RequestDataTypeHashArrayType direct request that is only 442 bytes on the wire but expan...