PT-2026-85786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Alpha architecture implementation of the Linux kernel, the pci mmap resource function fails to verify security locked downLOCKDOWN PCI ACCESS before permitting userspace to map PC...

PT-2026-85618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the private futex implementation during the exec process. The check to verify if the waiter's memory management mm is the same as the owner's mm is insufficien...

netfilter Module Heap Buffer Overflow DoS

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

Linux kernel decode_choose_args Heap Buffer Overflow DoS

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the networking functions of the Linux kernel, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a malicious acto...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

PT-2026-85487

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

PT-2026-85705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab out-of-bounds read exists in the interrupt URB callback of the USB serial option driver. The issue occurs when a USB device declares wMaxPacketSize as 8 on its interrupt IN...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

PT-2026-86195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/tls component where the tls sw splice read function fails to check for errors after a failed asynchronous decryption. While tls sw recvmsg and tls sw read sock...

Linux Distros Unpatched Vulnerability : CVE-2026-80772

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses...

PT-2026-85455

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

PT-2026-85610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID rapoo driver where the to usb interface function is called without first verifying if the device is actually a USB device using the hid is usb check. This is...

PT-2026-85622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the HID core. The hid set field function passes field-usage + offset to hid dump input before verifying if the offset is within the allowed bounds of...

CVE-2026-80814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the USB data buffer...

PT-2026-91369

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm kasprintf Add a check to see if devm kasprintf is not NULL in mchp ipc get cluster aggr irq, returning -ENOMEM if the function failed...

PT-2026-85646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs attr3 leaf verify entry function accesses lentry/rentry fields, specifically namelen and valuelen, before verifying if the entry...

Linux Distros Unpatched Vulnerability : CVE-2026-80814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the...

Linux Distros Unpatched Vulnerability : CVE-2026-80825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the...