CVE-2026-68122

CVE-2026-68122: Linux kernel ovpn code has a race in TCP error paths where ovpn_peer_hold() refs can be leaked if schedule_work() is already pending. The fix is to check schedule_work() return value on both RX/TX error paths and drop the extra reference with ovpn_peer_put() when the work is alrea...

CVE-2026-68098

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

CVE-2026-68098

CVE-2026-68098 affects ksmbd in the Linux kernel. The root cause is in set_ntacl_dacl(), which can stop copying ACEs when DACL size accounting overflows. As a result, the dedup walk may inspect a tail beyond the copied ACEs, potentially enabling an out-of-bounds read with possible denial of servi...

CVE-2026-68098 ksmbd: bound DACL dedup walk to copied ACEs

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

EUVD-2026-54975

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

The CVE-2026-19380 affects Mullvad wireguard.sys 0.10.1, specifically the AdapterState function within the IOCTL Handler. The vulnerability is described as a manipulation that leads to an improper update of the reference count, requiring local access to exploit. Public exploitation material is no...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

PT-2026-69606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description HEVC slice parameters are shared stateless V4L2 controls. The common validation path fails to verify the active L0/L1 reference counts before they are consumed by driver-specific code...

PT-2026-69634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu bo create reserved function where the system unconditionally reserves, pins, gart allocates, and maps the Buffer Object BO even if the bo ptr input paramete...

CVE-2026-68205: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev, which is a macro that expands to v4l2asyncregistersubdevsd,THISMODULE...

CVE-2026-68371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...

Linux Distros Unpatched Vulnerability : CVE-2026-68234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix bo-pin leaking in amdgpubocreatereserved amdgpubocreatereserved only allocates a new BO when boptr struct amdgpubo boptr as input parameter is...

CVE-2026-19380: Improper Update of Reference Count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

PT-2026-69324

Name of the Vulnerable Software and Affected Versions Mullvad wireguard.sys version 0.10.1 Description An issue exists in the IOCTL Handler component where the AdapterState function fails to properly update the reference count. This flaw requires local access to be exploited. Recommendations At t...

PT-2026-69771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the omap2430 probe function where it stores pdev-dev.of node in a local np variable. Because this is a borrowed pointer and the function does not take a reference to i...

PT-2026-69786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF sockmap component where unbound UDP sockets are accepted during sockmap updates. Because UDP sockets have their SOCK RCU FREE status changed when they are boun...