PT-2026-61402

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon subsystem where the adm1266 pmbus block xfer function copies a device-supplied block payload into a caller-provided buffer using a length specified by the...

PT-2026-61352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igc fpe init smd frame function where it fails to set the buffer type when initializing igc tx buffer fields for an SMD skb. Because igc tx buffer entries are...

PT-2026-61343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc module where in-place decryption of a DATA packet transmitted locally via the splice function can lead to pagecache corruption. This occurs due to packet...

PT-2026-61079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the AMD GPU driver, the GART Graphics Address Remapping Table table is not zero-initialized during allocation in the amdgpu bo create kernel function. Because the GART TLB Translation...

PT-2026-61271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the hpfs module when the hpfs map dnode bitmap function fails. In this scenario, the system attempts to call hpfs brelse4 using an uninitialized quad buffer head, leadi...

PT-2026-61107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the err out label of the fbcon do set font function within the fbdev component. When fbcon do set font fails, such as during a memory allocation failure i...

PT-2026-61125

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc5 Description Memory corruption can occur in the BPF sysctl handler. The proc sys call handler function allocates a temporary sysctl buffer using kvzalloc, which may use vmalloc for large allocations...

PT-2026-61274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial safe mode when a malicious device reports a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption,...

PT-2026-61300

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A packet loop occurs in the netem Network Emulator module when the duplicate feature is enabled. When netem duplicates a packet, it re-enqueues the copy at the root qdisc Queueing...

PT-2026-61192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where the tlb flush function failed to properly invalidate the walk cache when unsharing PMD tables. Specifically, the function only checked...

Linux Distros Unpatched Vulnerability : CVE-2026-63831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform...

PT-2026-61405

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the tt buff len field in batadv orig node is declared as a signed 16-bit integer s16. Because this field should not hold negative values,...

PT-2026-61452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow exists in the adm1266 nvmem read blackbox function within the hwmon module. The function uses a 5-byte stack buffer when calling i2c smbus read block data to...

PT-2026-61462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wilc wlan firmware download function when a bus acquire failure happens. The function allocates a dma buffer using kmalloc, but an early error path uses a...

PT-2026-61251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the itg3200 read all channels function where an incorrect memory address is used during an I2C read operation. The function incorrectly uses the address of the local...

PT-2026-61256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation regarding the calculation of the maximum length of the in-GHCB scratch area. When the scratch area is located within the GHCB shared buffer,...

PT-2026-61255

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV component when processing Page State Change PSC requests. The system fails to properly validate the PSC buffer against the effective size of the scratch...

PT-2026-61403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically within the adm1266 pmbus block xfer function. The function configures a read transaction with a length that can exceed the allocated...

PT-2026-61140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An overflow occurs in the keyctl pkey params get 2 function due to an incorrect calculation of the internal output buffer length. This issue manifests when a buffer that is too small is...

PT-2026-61441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net devmem bind dmabuf function where the system trusts dmabuf-size and sg dma len to be multiples of PAGE SIZE without verification. This leads to two primary...