PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

CVE-2026-13043: Missing Authentication for Critical Function

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

PT-2026-103906

The SMBus driver API exposed smbus smbalert remove cb and smbus host notify remove cb as Zephyr syscalls. Their verifiers in drivers/smbus/smbus handlers.c validated only the dev argument with K SYSCALL OBJdev, K OBJ DRIVER SMBUS and forwarded the caller-supplied struct smbus callback cb pointer...

Rocky Linux 9 [CIQ] Security Update: dpdk / dpdk-debuginfo / dpdk-debugsource / dpdk-devel / dpdk-doc / etc Multiple Vulnerabilities (crlsa-2022_8263)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228263 advisory. dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs CVE-2022-2132 DPDK: out-of-bounds read/write in vhostusersetinflight...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_27354)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202627354 advisory. kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-31419 kernel: drm/amd/display: Do not skip unrelated mode chang...

Rocky Linux 8 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (crlsa-2026_27353)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202627353 advisory. kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-31419 kernel: drm/amd/display: Do not skip unrelated mode chang...

CVE-2026-47512

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an out-of-bounds read within the kernel mode layer to access sensitive kernel memory. This flaw may allow an attacker to escalate privileges, execute arbitrary code, cause a Denial of Service DoS, or tamper with system da...

CVE-2026-47511

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local user with basic privileges to write data beyond allocated memory boundaries. Successful exploitation could allow an attacker to achieve arbitrary code execution, escalat...

CVE-2026-47510

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an integer overflow in the kernel mode layer, leading to an out-of-bounds write to graphics processing unit GPU memory. A successful exploit could allow an attacker to execute arbitrary code, escalate privileges, cause a...

CVE-2026-47508

A flaw was found in the NVIDIA GPU Display Driver. An issue in the kernel mode layer allows a local user to cause an incorrect conversion between numeric types. A successful exploit can allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS, or disclose...

CVE-2026-47507

A flaw was found in nvidia-driver. A local user can trigger an out-of-bounds array access in the driver's kernel mode layer. This vulnerability could allow an attacker to escalate privileges, execute arbitrary code, cause a denial of service DoS, or access and modify sensitive system data...

CVE-2026-47504

A flaw was found in nvidia-driver. The driver's NGX updater relies on an outdated embedded cryptographic library that is susceptible to type confusion, an issue where data of one type is incorrectly treated as another. A local attacker with low privileges can exploit this vulnerability to achieve...

CVE-2026-47500

A flaw was found in nvidia-driver. The kernel mode layer fails to properly clean up memory reference counts during error recovery paths, leading to a use-after-free condition where memory is accessed after it has been released. A local attacker with standard user privileges could exploit this fla...

CVE-2026-47494

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can exploit this vulnerability by providing crafted input that triggers a format string flaw. Successful exploitation may lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or unauthorized...

CVE-2026-90361

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. During the ath11kservicereadyextevent processing, a memory allocation for svcrdyext.macphycaps is not released if an error occurs during TLV Type-Length-Value parsing. This can lead to a memory leak, potentially causing resource exhausti...

CVE-2026-47505

A flaw was found in nvidia-driver. A local user can exploit a use-after-free condition in the kernel mode layer, which occurs when memory is improperly accessed after it has been released. A successful exploit could allow an attacker to achieve arbitrary code execution, privilege escalation, Deni...

CVE-2026-47501

A flaw was found in the NVIDIA GPU Display Driver. A local user can exploit an out-of-bounds write vulnerability in the kernel mode layer by supplying mismatched memory buffers during event buffer setup. Successful exploitation could lead to privilege escalation, arbitrary code execution, denial ...

CVE-2026-47491

A flaw was found in nvidia-driver. A local unprivileged attacker can trigger the improper release of memory resources in the kernel mode layer, leaving a memory mapping accessible after the underlying memory is reused. A successful exploit could allow an attacker to achieve privilege escalation,...

CVE-2026-47489

A flaw was found in the NVIDIA GPU display driver. The driver's kernel mode layer does not properly preserve permissions on read-only memory. A local user can exploit this vulnerability to achieve privilege escalation or arbitrary code execution. Successful exploitation may also lead to data...

CVE-2026-47598

A flaw was found in the NVIDIA GPU Display Driver for Linux. A race condition between asynchronous event delivery and file close operations in the open-source kernel module can lead to a use-after-free condition, where memory is accessed after it has already been released. A local unprivileged...