PT-2026-94628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm runtime...

PT-2026-94716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver within the mt76 wifi subsystem. When the mt76 wcid alloc function fails, the mt7915 add interface function returns without clearing the vif mask and...

PT-2026-94576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the nvmet execute identify ns zns function. This happens when a host sends an Identify command with CNS 05h and CSI 02h ZNS targeting a file-backed...

CVE-2026-90228: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynszns When a host issues an Identify command with CNS 05h I/O Command Set specific Identify Namespace and CSI 02h ZNS targeting a file-backed namespace,...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

PT-2026-94450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4/pnfs component where the nfs4 pnfs ds add function keys the per-net data server cache solely on the multipath address set, and the nfs4 pnfs ds structure doe...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

PT-2026-94976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the panthor driver during the split of GPU mapping caused by a partial unmap of an evicted Buffer Object BO. The issue arises because the logic...

PT-2026-94577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-apple driver where the admin queue, allocated via blk mq alloc queue, is not properly destroyed during removal. When the controller fails to initialize and is...

PT-2026-94920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the asus-wireless platform driver where the asus wireless probe function returns success even when acpi match acpi device finds no match. This occurs because platform...

PT-2026-94408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA control LED state layer where the system assumes all associated kcontrol elements are readable. If a write-only element is created without a get callback, it...

PT-2026-94366

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description A flaw in the XML catalog parsing process allows a local user or an attacker to trigger a NULL pointer dereference by providing a specially crafted XML catalog. This occurs when a nextCatalog...

PT-2026-94630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb-legacy component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm...

PT-2026-94598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the bpf and cgroup components when replacing a program. This happens when an empty program attached to a cgroup is replaced by a new program that...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the NFSv4/flexfiles component when interacting with NFSv4.0 data servers. The system incorrectly assumes that the data server client has a session, whi...

CVE-2026-90148: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4deletelease in nfs4addlease When nfs4addlease races with a delegation return, it calls nfs4deletelease to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a...

CVE-2026-90149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 data servers, but two NFSv4 code paths assume the data server client has a session. Unlike NFSv4.1+, an NFSv4.0 client has no session...

CVE-2026-90374: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX bandidx before dereferencing phys bandidx comes from a 2-bit descriptor field 0-3 and was used directly to index dev-mt76.phys size MTMAXBAND == 3 and dereference the result. A corrupt or reserved...

PT-2026-94439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth L2CAP implementation. For L2CAP sockets that do not own sk-sk socket, a lockless read of l2cap pisk-chan within the l2cap sock cleanup listen...