CVE-2026-80993

CVE-2026-80993 affects the Linux kernel in the net: phylink subsystem. In the function phylink_inband_caps() , the PCS returned by mac_select_pcs() was only validated against NULL , but the function can also return an error pointer . This causes a kernel panic because phylink_pcs_inband_caps() di...

CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

PT-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the phylink inband caps function where the PCS returned by mac select pcs is only checked for NULL values. Because mac select pcs can also return an error pointer, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053213 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kernmount fails and returns an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073355 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DM...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053279 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stigdpatomiccheck The return value of...

CVE-2026-68224

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...

EUVD-2026-53785

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2aeadreqalloc The "numsgs" variable is a u32 so "ERRPTRnumsgs" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler ...

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

CVE-2026-64314

A flaw was found in the Linux kernel's chacha20poly1305 cryptographic module. This vulnerability occurs because the chachapolycreate function does not properly validate a poly1305 template argument. When this argument is missing, an error pointer is incorrectly passed to a string comparison...

SUSE CVE-2026-64314

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...

CVE-2026-64447

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit and ipu7psysinit, pdata is allocated and then passed to ipu7businitializedevice, which stores it in adev-pdata. The ipu7busrelease...

CVE-2026-64314

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...

UBUNTU-CVE-2026-64447

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit and ipu7psysinit, pdata is allocated and then passed to ipu7businitializedevice, which stores it in adev-pdata. The ipu7busrelease...

CVE-2026-64447

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit and ipu7psysinit, pdata is allocated and then passed to ipu7businitializedevice, which stores it in adev-pdata. The ipu7busrelease...

CVE-2026-64314

This vulnerability affects the Linux kernel 's chacha20poly1305 cryptographic module. The root cause is in chachapoly_create(), which assumes the poly1305 template argument is always present and passes the result of crypto_attr_alg_name() directly to strcmp(). When the argument is missing, an err...

CVE-2026-64314 crypto: chacha20poly1305 - validate poly1305 template argument

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...

PT-2026-64535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the chachapoly create function where it fails to validate the second template argument when the compatibility poly1305 parameter is used in the template name. The...

PT-2026-64668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipu7 media staging component where double-free and use-after-free conditions occur during error handling. In the functions ipu7 isys init and ipu7 psys init, the...