PT-2026-61255

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV component when processing Page State Change PSC requests. The system fails to properly validate the PSC buffer against the effective size of the scratch...

PT-2026-61192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where the tlb flush function failed to properly invalidate the walk cache when unsharing PMD tables. Specifically, the function only checked...

PT-2026-61140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An overflow occurs in the keyctl pkey params get 2 function due to an incorrect calculation of the internal output buffer length. This issue manifests when a buffer that is too small is...

Linux Distros Unpatched Vulnerability : CVE-2026-63824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: fix overflow in keyctlpkeyparamsget2 The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffe...

Linux Distros Unpatched Vulnerability : CVE-2026-63857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: Do not read uninitialized fragment address in airohadevxmit The transmit loop in airohadevxmit reads fragment address and length during its final...

PT-2026-61418

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fwctl core where the pdsfc fw rpc function casts an RPC input buffer to struct fwctl rpc pds and calls pdsfc validate rpc without first verifying if the buffer siz...

PT-2026-61408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the batman-adv module. This occurs when generating the local TT based TVLV, where the system first calculates the number of...

PT-2026-61218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the digi acceleport USB serial driver due to missing sanity checks for bulk-out buffer sizes. A malicious device reporting smaller buffers than expected can...

PT-2026-61324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter synproxy component where the synproxy tstamp adjust function fails to refresh the TCP header pointer after calling skb ensure writable. When skb ensure...

PT-2026-61441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net devmem bind dmabuf function where the system trusts dmabuf-size and sg dma len to be multiples of PAGE SIZE without verification. This leads to two primary...

PT-2026-61287

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vsock/virtio component where virtio transport send pkt info allocates or reuses the zerocopy uarg before the send loop, but virtio transport alloc skb fills the sk...

PT-2026-61239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 extension header handling where the ip6 parse tlv function caches the network header pointer in nh while processing Type-Length-Value TLV structures. When ipv...

Linux Distros Unpatched Vulnerability : CVE-2026-63872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - esp: fix page frag reference leak on skbtosgvec failure In espoutputtail, when esp-inplace is false, the old skb page frags are replaced with a new page from th...

PT-2026-61249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhz19b receive buf function where serial data chunks are appended to the fixed MHZ19B CMD SIZE receive buffer without verifying if the chunk fits in the remaining...

PT-2026-61358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs fs210x component where a buffer overflow can occur within the fs210x effect scene info function. The flaw is caused by the incorrect use of the strscpy...

PT-2026-61264

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Bluetooth HIDP component. The hidp input report function processes keyboard and mouse payload data from an skb socket buffer without verifying if...

PT-2026-61254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV component where entries and indices are read from the guest-accessible Page State Change PSC buffer without proper synchronization. This lack of...

PT-2026-61246

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the iio buffer enqueue dmabuf function. The function allocates a iio dma fence structure via kmalloc obj and dma fence init, which sets an initial reference count...

PT-2026-61247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the err put buffers cleanup path of the iio hw consumer alloc function. The implementation used list for each entry to iterate through buffers while...

PT-2026-61204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overrun occurs in the iscsi encode text output function when concatenating records into the rsp buf buffer. The function uses sprintf to append key-value pairs without verifying t...