PT-2026-61092

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the veml6075 it ms index. The veml6075 it ms array contains 5 elements, but the VEML6075 CONF IT register can return values ranging from 0 to 7. I...

PT-2026-61237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged slab-out-of-bounds read exists in the Linux kernel. The ip6 datagram recv specific ctl function trusts the on-wire hdrlen byte when computing the length for put cmsg, but...

PT-2026-61195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the kvcalloc function in amdgpu gem.c uses the user-supplied num entries variable without an upper bounds check. Because num entries is ...

PT-2026-61240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rvu mbox handler rep event notify function within the octeontx2-af driver. The function queues a sender-controlled REP EVENT NOTIFY request body without validation...

PT-2026-61226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the smb check perm dacl function within the ksmbd module. This issue occurs during ACE-walk loops when a transposed bounds check fails to properly validat...

PT-2026-61331

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the nexio read data function. The function retrieves data len and x len from a packed header in the device interrupt packet and iterates through the...

PT-2026-61302

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ethtool EEPROM Netlink fallback path within the fallback set params function. While the function validates that the offset is less than eeprom len, it fails to verif...

PT-2026-61317

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the handling of supervision frames within the High-availability Seamless Redundancy HSR network protocol. The problem occurs when a truncated fram...

PT-2026-61312

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write can occur in the CMIS firmware update code within the ethtool component. The issue arises because the system reads the start cmd payload size from the module's FW...

PT-2026-61091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the ti-ads1298 ADC driver. The ads1298 pga settings array contains 7 elements, but the ADS1298 MASK CH PGA mask can produce values from 0 to 7. Wh...

PT-2026-61353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The css rstat updated function, exposed as a BPF kfunc, fails to validate the cpu argument provided by the caller before using it for per-cpu rstat lookups. A BPF iter/cgroup program wit...

PT-2026-61401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and write issue exists in the adm1266 gpio get multiple function. The function incorrectly uses the PMBus command code ADM1266 PDIO STATUS as an upper bound for...

Linux Distros Unpatched Vulnerability : CVE-2026-53386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = ...

Linux Distros Unpatched Vulnerability : CVE-2026-53387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: veml6075: add bounds check to veml6075itms index veml6075itms has 5 elements but VEML6075CONFIT can yield values 0-7. If it returns a value = 5, thi...

PT-2026-61264

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Bluetooth HIDP component. The hidp input report function processes keyboard and mouse payload data from an skb socket buffer without verifying if...

PT-2026-61220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the belkin sa read int callback function within the USB serial driver for Belkin devices. The interrupt callback processes interrupt data as a four-byte status report,...

PT-2026-61218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the digi acceleport USB serial driver due to missing sanity checks for bulk-out buffer sizes. A malicious device reporting smaller buffers than expected can...

PT-2026-61232

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap read occurs during HCP header parsing. The functions nfc hci recv from llc and nci hci data received cb access packet-header from skb-data without verifying that th...

PT-2026-61233

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function. The issue occurs because the function assumes the HID DG INPUTMODE usage is always located in the first field...

PT-2026-61219

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cypress read int callback function where the system fails to validate interrupt packet headers before reading them. The function parses the interrupt-in buffer bas...