PT-2026-72664

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma release channel, check chan-device-privatecnt after call dma chan put. However, dma chan put call dma device put which could release the last reference of the device if the DMA provid...

PT-2026-72254

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

PT-2026-72651

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transport finish. However, xfrm rcv cb may modify skb-dev to tunnel dev without taking device reference, such as vti rcv...

PT-2026-72448

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm runtime get sync without checking the return value...

PT-2026-72279

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna drm sync bo ioctl looks up args-handle in the ioctl caller's drm file. For SYNC DIRECT FROM DEVICE, it then calls amdxdna hwctx sync debug bo, but passes abo-client...

PT-2026-72359

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register device links a new slram mtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtd device register fails, the...

PT-2026-72268

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims pcu disconnect only intended to perform cleanup when the primary control interface is unbound. However, it currently relies on the interface class to distingui...

PT-2026-72672

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp register videodev allocates a video device with video device alloc and releases it if video register device fails. This can double free the video device when...

Linux Distros Unpatched Vulnerability : CVE-2026-74499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write in sndusbmidiakaioutput sndusbmidiakaioutput computes its fill- loop bound bufend = ep-maxtransfer - MAXAKAISYSEXLEN - 1; as a...

PT-2026-72361

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task mmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

MINI-RG49-H5RP-JFGR

Bulletin has no description...

GHSA-3X6R-WXXG-53VV vulnerabilities

Vulnerabilities for packages: telegraf...

MINI-RGPR-299R-V6RF

Bulletin has no description...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

EUVD-2026-58675

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-13196

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib, configmap-reload-fips, smarter-device-manager-fips...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grafana-alloy, neuvector-scanner-fips, cluster-autoscaler-fips, eks-distro, k3s, gosu, opentelemetry-collector-contrib-fips, neuvector, ctop, grype, cadvisor, cluster-autoscaler, eks-distro-fips, runc, grafana-alloy-fips, podman, docker,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: sops, minio, spicedb, terraform-provider-google, grafana-mimir, k8sgpt, pulumi-language-dotnet, dbmate, k3s, gomplate, restic, k3d, guac, dagger, opentelemetry-collector-contrib, osv-scanner, conftest, kots, zot, hubble-ui, terragrunt, grpc-health-probe,...