PT-2026-61145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip gre component where the changelink operation does not properly verify the CAP NET ADMIN capability within the tunnel link network namespace t-net. Because the...

PT-2026-61450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB array access occurs in the asihpi component of the ALSA Advanced Linux Sound Architecture subsystem. The find control function retrieves cached information by...

PT-2026-61128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system within the destroy extent node function. When the FI NO EXTENT inode flag is set, the system fails to reset the length of the largest extent to 0...

PT-2026-61135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the F2FS file system where a missing sanity check in the f2fs get node folio ra function can lead to a system panic. In cases involving a corrupted inode, a direct nod...

PT-2026-61070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An inconsistency in the f2fs file system occurs during fsck operations due to the incorrect usage of nat entry flags. The function f2fs need dentry mark reads these flags without mutual...

PT-2026-61248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the kernel when a user writes a zero fractional part to the sampling frequency sysfs attribute. This happens within the write raw function of the scd30...

PT-2026-61071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the udf read tagged function where CRC verification is skipped if the descCRCLength plus the size of the tag structure exceeds the block size. A specially crafted UDF...

PT-2026-61288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the sctp wait for connect function and the peeloff process. The sctp wait for connect function releases and subsequently re-acquires the socket lock while...

PT-2026-61335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana hwc rx event handler function where the rx req idx variable, derived from sge-address in DMA-coherent memory, is used to index the reqs array without a bounds...

PT-2026-61154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the ena phc gettimex64 function. The function sets the output parameter without verifying if ena com phc get timestamp succeeded. If ena com phc get timesta...

PT-2026-61276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb typec tcpm/tcpci maxim component where the system fails to validate the header NDO against RX BYTE CNT. A malicious or malfunctioning port can send a CRC-valid...

PT-2026-61277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wcove read rx buffer function where the PD RX FIFO is copied into the struct pd message. This process is susceptible to a buffer overflow due to two factors. First...

PT-2026-61195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the kvcalloc function in amdgpu gem.c uses the user-supplied num entries variable without an upper bounds check. Because num entries is ...

PT-2026-61226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the smb check perm dacl function within the ksmbd module. This issue occurs during ACE-walk loops when a transposed bounds check fails to properly validat...

PT-2026-61091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the ti-ads1298 ADC driver. The ads1298 pga settings array contains 7 elements, but the ADS1298 MASK CH PGA mask can produce values from 0 to 7. Wh...

PT-2026-61148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel wifi mt76 driver where the mt76 sta add function fails to check if a wireless client identifier WCID has already been published. When using mt7925, th...

Linux Distros Unpatched Vulnerability : CVE-2026-53386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = ...

CVE-2026-16196

Affected product: Sipeed PicoClaw

CVE-2026-16124

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

CVE-2026-16124 nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...